{ "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247513636&idx=1&sn=66bc5f0cac446268cb859e38faa2b841": "四个关键漏洞使 HPE Aruba 设备面临 RCE 攻击", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486384&idx=1&sn=6cded6c301c425146633b7c8e92b9ae2": "用友crm客户关系管理pub∕downloadfile.php接口存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247490163&idx=1&sn=0af69d90d567c84ea23336cde986f7a8": "代码审计-某产品高清智能录播系统漏洞分析附未公开POC", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494519&idx=1&sn=cd24e7e546ec5cd027e8ca018f499bf4": "漏洞挖掘之众测厂商 第三方登录RedirectUrl劫持漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488062&idx=1&sn=5e3f1e901718ee760c9271676d075758": "【漏洞预警】Apache ActiveMQ Jolokia 和 REST API 未授权访问漏洞CVE-2024-32114", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458553432&idx=1&sn=93377c71147ef00b8e58571093d5ab55": "CVE-2023-4427：ReduceJSLoadPropertyWithEnumeratedKey 中的越界访问", "https://mp.weixin.qq.com/s?__biz=Mzg4OTkwMDc1Mg==&mid=2247484729&idx=1&sn=b2920455891f256e016b74122977490b": "YzmCMS pay_callback.html RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwNTE4Mzc2Mg==&mid=2247485256&idx=2&sn=44579672e179f0268bd6daac499832e2": "【漏洞复现】CVE-2024-1512", "https://mp.weixin.qq.com/s?__biz=MzkwNTE4Mzc2Mg==&mid=2247485256&idx=1&sn=5a1e8635a4c0a68a5c58662d47a08f36": "【漏洞复现】CVE-2024-1698", "https://mp.weixin.qq.com/s?__biz=Mzg2OTYzNTExNQ==&mid=2247484965&idx=1&sn=396cceb9cd98393868c20c1876aa8957": "[漏洞复现] CVE-2024-33786 中城科信票务管理平台 任意文件上传", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649791059&idx=1&sn=82bf570f4c7002b524bb4eacc1f7fb0d": "俄罗斯 APT28 利用 Microsoft Outlook 漏洞攻击捷克、德国实体", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494519&idx=1&sn=cd24e7e546ec5cd027e8ca018f499bf4&chksm=e8a5e114dfd268025b28a508644eff19bd5ccf522b270bc7a6e545a340e65e4eb88e83aef43e&scene=58&subscene=0": "漏洞挖掘之众测厂商 第三方登录RedirectUrl劫持漏洞", "https://mp.weixin.qq.com/s?__biz=MzUxMjc0MTE3Mw==&mid=2247494678&idx=1&sn=4cdffd80c296f3df40b773da5943d796": "两个Google Vertex AI平台漏洞曝光：可能导致权限提升与敏感数据外泄", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247492614&idx=1&sn=40f082284e0b14fd77c82d95bbeb9185": "用友漏洞一键探测利用", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487497&idx=1&sn=4a47b98c0b29cd4d3e7c4f30685e1247": "【漏洞预警】 用友BIP 数据库配置信息泄露", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487497&idx=2&sn=adb385b0fccd4af9d9ad9d439bce5640": "【漏洞预警】D-Link-DNS 多款产品未公开接口∕sc_mgr.cgi 存在远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487497&idx=3&sn=1cdbe6f7a8137e5e2626d4e358c1ef93": "【漏洞预警】 易宝OA-GetProductInv SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487497&idx=4&sn=e2d16220eb00621420899460b1a95941": "【漏洞预警】易思智能物流无人值守系统SQL注入", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247496792&idx=1&sn=561979247dfc36401fe9815413c3f88a": "CVE-2024-25600：WordPress Bricks Builder RCE", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065974&idx=1&sn=d6789e893634a0f2fb9c34b2bfb0a8f9": "【安全圈】打补丁要快！0Day漏洞正在被黑客广泛利用", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664229682&idx=1&sn=06d6932fae0b8e2e54feda32c9c169ab": "2024年网络安全漏洞研究人才培养交流活动成功举办", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664229682&idx=4&sn=4f4906e3ee86b96a4d323bf891efdae0": "CNNVD ∣ 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzU0NDI5NTY4OQ==&mid=2247486145&idx=1&sn=06229e2205d5dd9e99716999b4f1aa2e": "LLM大模型安全（4）- 供应链漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzI2NzIyMw==&mid=2247488304&idx=1&sn=c0db143fcd6865fdd3482b955dd94abd": "BlockSec和OKX Explorer达成合作，携手提升链上数据安全与合规等级", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247484677&idx=1&sn=bb89036b82c59a0e1e8b06227a9e9768": "【漏洞分享】edu通杀 新中小学智慧校园信息管理系统 Upload 任意文件上传", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485712&idx=1&sn=e15d7dda1a02527db2c340f56df4f3ea": "【漏洞复现】某平台-testdb-info-leak信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133388&idx=2&sn=8fe7297f29148fa035db128b29e8dc99": "远程代码执行风险威胁用户安全，Zoom紧急修复多个安全漏洞；颠覆传统安全架构，Zscaler创新发布新型零信任分段方案 ∣ 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133388&idx=2&sn=8fe7297f29148fa035db128b29e8dc99&chksm=bd15a51f8a622c096ef4441d0b5acb3ee39ef865e5650f4df483a8648b528a3509fe57972cd1&scene=58&subscene=0": "远程代码执行风险威胁用户安全，Zoom紧急修复多个安全漏洞；颠覆传统安全架构，Zscaler创新发布新型零信任分段方案 ∣ 牛览", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502432&idx=1&sn=d3405bf69adda60e3be13962d038b6aa&chksm=fe79eef8c90e67eead814333282edff4d7e247d6ba9e9ba1895fff6354e808e4fa84048a0cd1&scene=58&subscene=0": "【已复现】Fortinet FortiManager 身份认证绕过漏洞(CVE-2024-47575)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664229682&idx=1&sn=06d6932fae0b8e2e54feda32c9c169ab&chksm=8b59e9cbbc2e60dd8d6dc37797f6608494298f22b5250c7326cf864063e039f776f4d7dc0847&scene=58&subscene=0": "2024年网络安全漏洞研究人才培养交流活动成功举办", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664229682&idx=4&sn=4f4906e3ee86b96a4d323bf891efdae0&chksm=8b59e9cbbc2e60dda8a2633578ff2e76d88a3a00e52dba1a54ee0b2b9f554066431871d24cd8&scene=58&subscene=0": "CNNVD ∣ 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg4NTY0MDg1Mg==&mid=2247485595&idx=1&sn=b4c87d04e1659f11fad8f2f125985751&chksm=cfa49360f8d31a76e5d3880e51cd8f9b0ab1df47e86729adf04ea6d1f1202fac72fae5903fbe&scene=58&subscene=0": "大语言语言模型安全攻击以及AI供应链漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521498&idx=1&sn=f0af27f6b0e814c92846ea129bcee155&chksm=ea94a5b0dde32ca62dddf91f42a9fa2b36402ffb856469973f83a6a88e24d6910dcc53072ef4&scene=58&subscene=0": "PostgreSQL 高危漏洞可导致环境变量被利用", "https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651388483&idx=1&sn=070fb6976ee52108d263858115ea9bfd&chksm=8d398bcbba4e02ddbe0183f79c2682bbf1cab54e4ba6bb0697fdc56e297e7303aa9eb938b9e6&scene=58&subscene=0": "2024年网络安全漏洞研究人才培养交流活动成功举办", "https://mp.weixin.qq.com/s/O2Ohp_ceYrTo8hppX09fkw": "(0day)微信公众号商家收银台小程序系统存在前台任意文件上传漏洞", "https://mp.weixin.qq.com/s/tbEXIAPT-Vumch-WyoGZHQ": "代码审计-某oa任意文件读取(1day)", "https://mp.weixin.qq.com/s/73CXvF4ejvgS40OetzXr8A": "(0day)全新优客API接口管理系统代码审计", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487335&idx=1&sn=c2800f225873a4a1b38711bacba10316": "AI代码审计和POC编写", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664712071&idx=1&sn=98356c1f6829546d47af1e4d43f89ace": "Fckeditor编辑器漏洞汇集", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517203&idx=2&sn=3074826837ddd653a7d1ae03a600a0b4": "建了个SRC专项漏洞知识库", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487499&idx=1&sn=4ad7e59489c09ab80bee906e929b311a": "【漏洞预警】 用友BIP 数据库配置信息泄露", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487499&idx=3&sn=b3cf1540ab72404aab438e963c5e761d": "【漏洞预警】 易宝OA-GetProductInv SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492449&idx=2&sn=ded00a05c99093340d9c413be00b1a5a": "PostgreSQL数据库存在高危漏洞CVE-2024-10979（8.8）", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247523915&idx=1&sn=0522e35aa0afa2167e0dfd9d5a6954d7": "CVE-2024-28888：福昕阅读器中使用释放后导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486133&idx=1&sn=a795a853e80c985de5fceca4309365ce": "(0day)某全新UI自助打印微信小程序系统SQL+RCE漏洞代码审计", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247545126&idx=1&sn=b2f2e3d1dba89c587651768a66070b2d": "攻防演练 | 一次近源渗透", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492730&idx=1&sn=4830f7a0e4dfa7e50b8fb0ccc7e0e0b9": "一款java漏洞集合工具", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307299&idx=1&sn=467809755fdcc647cdde9f67ad9a27a2": "打补丁要快！0Day漏洞正在被黑客广泛利用", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307299&idx=4&sn=faa8ef20c4f618771d92d2e34863625b": "Velociraptor：一款终端节点可视化与数据收集工具", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793147&idx=3&sn=c17de8d66d7e37e8209eab45ef7f5654": "Palo Alto Networks 确认存在新的防火墙0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650603612&idx=4&sn=1ca7d7d27c71f41ef3992ddac7cda038": "Vcenter图形化漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247488171&idx=1&sn=dbbce680730d50271fcb4e886e029f36": "VulToolsKit一把梭漏洞Exploit合集", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491421&idx=1&sn=653b49f157760ea962f45f3e9471858c": "漏洞预警 | Apache ZooKeeper身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491421&idx=2&sn=89f3fc90da6871059bb0ea398e1ffb26": "漏洞预警 | XStream栈溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491421&idx=3&sn=eabce5e15b6befff94c2407acd4a5aa9": "漏洞预警 | HPE Aruba Networking Access Points命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488371&idx=2&sn=3ad1f97fe2651cfd09c4aa8767ee6a6d": "【漏洞复现】用友YonBIP高级版存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486789&idx=1&sn=9e271a3346eed986ecc5b7a4aece7f88": "compiler explorer 轻松从汇编角度理解代码", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486789&idx=2&sn=f8617e893d02f1eaca70fb0f9661a3e3": "网太CMS漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247497601&idx=1&sn=1b31fff83d5276667f7ead2ae5de2a6b": "微软2024年11月份于周二补丁日针对90漏洞发布安全补丁", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247497601&idx=2&sn=413b3330c9fde967c520582aefbd4bd6": "2023年最易被利用的漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247657&idx=1&sn=b0600f03ef9bbffbcaa4fbf1fe0d87f7": "CVE-2024-25600：WordPress Bricks Builder RCE", "https://mp.weixin.qq.com/s?__biz=Mzk0MzI2NzQ5MA==&mid=2247486636&idx=1&sn=5d9cfbe6b8393b15c60b04ca9c2c9588": "phpstudy_2016-2018_rce 漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487499&idx=4&sn=69d6613ba3812956a0388203252d7a8f": "【漏洞预警】易思智能物流无人值守系统SQL注入", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247484847&idx=1&sn=ab525f7b54b1842379879fcb44279dfe": "记录日常挖掘漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066024&idx=4&sn=46592438737abae8701b9ba1b7160d86": "【安全圈】俄罗斯黑客利用文件拖放、删除操作触发 Windows 0day 漏洞攻击乌克兰目标", "https://mp.weixin.qq.com/s?__biz=Mzk0MzI2NzQ5MA==&mid=2247486684&idx=1&sn=b88c209774a7a72edb5ffd3d8185da12": "VSFTPD 2.3.4 笑脸漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650603615&idx=3&sn=445a8a9089db3200dfb6c7fcbbe83e1b": "某系统因属性污染导致的RCE漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486126&idx=1&sn=f95aeac1e9863e39388748be5f93f44f": "ViewState反序列化复现踩坑记录", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486146&idx=1&sn=66ebbdd861f6fdcee3f8928dc63a85be": "某全新H5购物商城系统存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486054&idx=1&sn=29c2f89072a7f181739354113076ea74": "「漏洞复现」金华迪加 现场大屏互动系统 mobile.do.php 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307300&idx=3&sn=c4876146dad8da82db2e3decbfc57648": "国家密码管理局发布《关键信息基础设施商用密码使用管理规定（征求意见稿）》", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247502886&idx=1&sn=17c6c12516bf55bc03a700f8a47dee89": "应用程序系统中的 SQL 注入 （CVE-2024-50766）", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488389&idx=2&sn=2bea1165ad80d38c1329593ca08c6e55": "【漏洞复现】九思OA dl存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066024&idx=4&sn=46592438737abae8701b9ba1b7160d86&chksm=f36e7ca8c419f5be0b5de8218474b566a05a2871e02c5f1b86f0a13769a0651d6087bd35a84d&scene=58&subscene=0": "【安全圈】俄罗斯黑客利用文件拖放、删除操作触发 Windows 0day 漏洞攻击乌克兰目标", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517100&idx=1&sn=f63f4fb28dd9f98701307759287886e3": "原创 | 一文看懂服务器请求伪造漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492480&idx=2&sn=35313ec934a5220db4c34962af10b1b4": "Apache Airflow 漏洞暴露日志中的敏感数据CVE-2024-45784（7.5）", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247485439&idx=1&sn=3fd7e4cef57edca8e73104f8af38fc05": "分享SRC中后台登录处站点的漏洞挖掘技巧", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524319&idx=2&sn=7e837ef59037b7c182b95ffc6089cb20": "CVE-2024-45784：Apache Airflow 漏洞暴露日志中的敏感数据", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524319&idx=4&sn=f564c214e9b878af89b788239034bd2e": "BrazenBamboo APT利用 FortiClient 漏洞通过 DEEPDATA 窃取 VPN 凭证", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066040&idx=2&sn=cf11d094cb7fc2770df2100227dc34db": "【安全圈】安全公司曝光黑客利用 Office 已知漏洞散播 Remcos RAT 木马程序", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524319&idx=3&sn=44ca66db05ada0b23d2a24e112e09e93": "Mozilla Firefox 0-day：URL 协议处理程序泄漏 [CVE-2024-9398、CVE-2024-5690]", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492733&idx=1&sn=d41a5ddfe26f0a9dfaa02fedafee911a": "JavaSecLab 一款综合Java漏洞平台", "https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651147826&idx=1&sn=82db846319ddae363d8ac74312d12f8b": "【资料】美军对我军合成作战旅的认知总结", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066040&idx=3&sn=628c0be39463e5a5db076252eae42974": "【安全圈】物联网云平台 OvrC 曝一系列漏洞，黑客可远程执行恶意代码", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260164&idx=1&sn=dee2d2d3315798ae2ee404f11f452d9f": "如何将低危的 SSRF 盲注升级为严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489038&idx=1&sn=38d1bc56bfc8d56f1a6522b3081164f1": "记一次某SRC的漏洞挖掘过程|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247504511&idx=2&sn=02a617bd236ecf22b9f4b7d6b25c7f9a": "严重的身份验证绕过漏洞影响 400 万个网站", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492738&idx=1&sn=e1471dab8f567dbf0f4e83c999b1527b": "masscan全端口扫描==>httpx探测WEB服务==>nuclei&xray漏洞扫描 | 解放双手", "https://mp.weixin.qq.com/s?__biz=MzkxMzIwNTY1OA==&mid=2247509142&idx=1&sn=7a9bf881915c113f53359c76b2c10c49": "密码破解的尽头是 “哥 ，来根……”", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491444&idx=1&sn=14608727477b5a267d3f75284547dcc7": "漏洞预警 | RabbitMQ权限验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491444&idx=2&sn=871000243b3a84ba1157944f0f8fdbee": "漏洞预警 | 宏景HCM任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491444&idx=3&sn=2d1c03adab2dcae92301e0c62550c2c9": "漏洞预警 | 蓝凌OA SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247509326&idx=1&sn=570638ea0ce6a3b289d77d2247e5d57c": "BrazenBamboo APT 利用 FortiClient 零日漏洞窃取用户凭证 |China APT", "https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247489498&idx=1&sn=49ceb0446f31d62653ef7dd2505388c0": "[渗透工具]XXL-JOB漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247489498&idx=2&sn=433215d4f66547bb871b6d516c154124": "【必刷靶场】JavaSecLab-Java漏洞平台", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488410&idx=1&sn=00d2155ead01651c376774f463157bf3": "【未公开】某公司SRM智联云采系统inquiry存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066040&idx=2&sn=cf11d094cb7fc2770df2100227dc34db&chksm=f36e7cb8c419f5ae9268e1d2eb9675ef94bccbcfe66627cb209b0883944215f205a8d17b7028&scene=58&subscene=0": "【安全圈】安全公司曝光黑客利用 Office 已知漏洞散播 Remcos RAT 木马程序", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066040&idx=3&sn=628c0be39463e5a5db076252eae42974&chksm=f36e7cb8c419f5ae9694e18d60dde2a26e6a3cdec1633acf1fe266e96be9e59868eaad6f37a5&scene=58&subscene=0": "【安全圈】物联网云平台 OvrC 曝一系列漏洞，黑客可远程执行恶意代码", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486157&idx=1&sn=0eb5b289e5d313ff2f2ad3df252a5d5f": "某全新H5购物商城系统存在前台任意文件上传漏洞(RCE)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492765&idx=1&sn=e18518b6eba34c7864e6d957cd37ff5f": "僵尸网络利用GeoVision零日漏洞入侵已停产设备", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492765&idx=2&sn=e224f07a4c556302ed2013bcdf25a5f1": "Palo Alto Networks确认近期披露的零日漏洞正在被积极利用", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492765&idx=3&sn=01d577e47672144123dfd3940c1da101": "NSO 集团在 Meta 所有公司起诉后仍然使用 WhatsApp 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247519321&idx=2&sn=dc8716f9fcab81c2277f69ca05988f6b": "工具 | 集成高危漏洞exp的实用性渗透工具", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499683&idx=1&sn=23b5001cd5e4272d908cf85c0d71263d": "一键检测 17 个蓝凌 OA 历史漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489220&idx=1&sn=e2a2c434a0097ee0fb4fb89b17b1fc15": "ArcGIS 地理信息系统 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMDQ0NzQwNA==&mid=2247485612&idx=1&sn=b87343f522578525738b25e651a30307": "CVE-2016-2183 windows漏洞修复指南", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247490413&idx=1&sn=6ca7f49ea787ea876726f5c8f4be6c46": "ViewState反序列化复现踩坑记录", "https://mp.weixin.qq.com/s?__biz=Mzk0MDQzNzY5NQ==&mid=2247493031&idx=1&sn=21ad65e6ba6fa690057bf1b717d89cab": "【OSCP-Medium】adria", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484315&idx=1&sn=f4aa02a7e95ecbc0b1052e97591654d0": "【漏洞复现】英飞达医学影像存档与通信系统webservices接口存在信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517121&idx=1&sn=d93187139204f6dd92101f34c4cb0981": "aiohttp路径遍历漏洞分析(XCE-2024-1472)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507405&idx=1&sn=724c4f04b89e17186e10643a70168151": "速修！宝兰德BES中间件远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247534105&idx=2&sn=b8ad0236e78d31c7e936fa98d5b2f0db": "打补丁要快！0Day漏洞正在被黑客广泛利用", "https://mp.weixin.qq.com/s?__biz=MzkyNDUxNTQ2Mw==&mid=2247485556&idx=1&sn=eaa0ff13c10fad4d5418731121ca9ca2": "安全公司曝光黑客利用 Office 已知漏洞散播 Remcos RAT 木马程序", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484440&idx=1&sn=f7f42cf480466e7eb9a5349ff68579a9": "大华智慧园区综合管理平台hasSubsystem接口处存在文件上传漏洞【漏洞复现|附nuclei-POC】", "https://mp.weixin.qq.com/s/-BgJHt-dDT-u28TM90Mz8w": "Linux 反弹shell", "https://mp.weixin.qq.com/s/1CKfcUXNkkVjEPiXFxSqHw": "vulnhub之Escalate的实践", "https://mp.weixin.qq.com/s/vzUt1EO-EnR5ywMz2PjQuQ": "通达OA前台任意用户登录漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495506&idx=1&sn=368d74c4f6e7a4f2639d84ec46bf77c7": "CNVD漏洞周报2024年第46期", "https://mp.weixin.qq.com/s?__biz=MzIwOTc4MTE4Nw==&mid=2247500623&idx=1&sn=8ed503a44a8900cf66d4714383856900": "鼎信安全 | 网络安全一周资讯", "https://mp.weixin.qq.com/s?__biz=MzI5MzU4ODE5Mw==&mid=2247485533&idx=1&sn=38dacc8d7d5dbb5e91a43eaccbd37140": "【漏洞预警】东胜物流软件-certupload-任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486063&idx=1&sn=87764d2ed6eef32705e262f8515eda5b": "「漏洞复现」九思OA dl.jsp 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247545196&idx=1&sn=e5148186ab9f420c71d23cdca8da92f7": "Edusrc | 某证书站漏洞挖掘-绕过验证机制", "https://mp.weixin.qq.com/s?__biz=Mzg3ODkzNjU4NA==&mid=2247485564&idx=1&sn=f6351c3df7a5ddd3f073a0a0e52ff363": "2024年20 大网络钓鱼工具", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650603664&idx=4&sn=ad840681e2c7bc6414397ec84b0c5741": "一款集成高危漏洞exp的实用性工具", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485716&idx=1&sn=e8a0ad47c5069485e9f60071d1e43025": "【漏洞复现】某平台-down-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MzI2NzQ5MA==&mid=2247486685&idx=1&sn=d196cb28fb4aaa74c58a8614abf54875": "通达OA前台任意用户登录漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzU1OTUxNTI1NA==&mid=2247591507&idx=1&sn=4613e1c63793b9eee694aa3d5296ab43": "中国信通院胡坚波：以链式转型加快推进中小企业数字化赋能", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307356&idx=1&sn=42438d895a7baec5b6656688cca7431d": "Palo Alto Networks确认0Day漏洞正在被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247540683&idx=1&sn=986bdc0a543ecda7828e984aa6189af2": "物联网云平台 OvrC 曝一系列漏洞，黑客可远程执行恶意代码", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291855&idx=1&sn=2416adb9a530214ddc5b1cf128c156f8": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502439&idx=1&sn=89c13a88c1429733d4d3372418dda64d": "安全热点周报：俄罗斯黑客利用 Windows 零日漏洞乌克兰实体进行持续攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458583194&idx=1&sn=f14c98ad2f40cba90ed7a487cb12384e": "“看雪漏洞小组”集结！组团挖洞，一起冲击华为漏洞更高奖励", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458583194&idx=3&sn=045ec214a07d23eaaaf909f9ee0f186f": "WordPress安全插件“Really Simple Security”惊现严重漏洞，数百万网站面临风险", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487501&idx=1&sn=39d247b0248d6134a3936531fc0ee647": "【漏洞预警】东胜物流软件-certupload-任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521513&idx=1&sn=b60ee79ea2fbcfeaae560373faa7a2cf": "12年来最严重的 WordPress 漏洞，可大规模接管管理员权限", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521513&idx=2&sn=667b6f9c61b6f2d2077659cd4d4cdc70": "僵尸网络利用 GeoVision 0day 安装 Mirai 恶意软件", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247567418&idx=2&sn=19577506ffdc9228b4214d195638595a": "有关漏洞挖掘的一些总结", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500244&idx=2&sn=2c043ef6f5f2a73220f5442c0a23ba95": "【漏洞通告】Apache OFBiz远程代码执行漏洞（CVE-2024-47208）", "https://mp.weixin.qq.com/s?__biz=MjM5MTAwNzUzNQ==&mid=2650510921&idx=1&sn=e4934351ec2c8cb6dbc0aeca15104b40": "倒计时2天！“智效融合，安全护航”·深圳站 第七期「度安讲」 技术沙龙开放报名", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492528&idx=2&sn=12ed7293c2d58a8ff8af2eee52151e30": "【poc】Fortinet FortiManager 中0day CVE-2024-47575 的 PoC 发布", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492528&idx=3&sn=ca32f8d2a6f6e69a0d8f6cb1c3cc86ed": "【poc】TP-Link 中的 DHCP 漏洞可让攻击者远程接管路由器 - PoC 发布", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495506&idx=2&sn=4f47a0a0b8cf7c2347c48af444867c9c": "上周关注度较高的产品安全漏洞(20241111-20241117)", "https://mp.weixin.qq.com/s?__biz=Mzg4MzU3MTcwNg==&mid=2247486025&idx=1&sn=57b3564d52b3979909e7c4ce558cb424": "简单逻辑漏洞学习", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489173&idx=1&sn=38cddcc7195393081437dda1b20e81f5": "【漏洞预警】Apache OFBiz远程代码执行漏洞CVE-2024-47208", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489173&idx=2&sn=8b54bc7f5eac3e68aa9c1b50d0bfe0f0": "【漏洞预警】Apache HertzBeat < 1.6.1 消息通知模版注入漏洞CVE-2024-41151", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247632327&idx=4&sn=48bfb50af682460d968c919e508846b6": "Palo Alto Networks确认0Day漏洞正在被黑客利用", "https://mp.weixin.qq.com/s?__biz=Mzg4MDY1MzUzNw==&mid=2247497926&idx=1&sn=26eb4132f92f9aed012a93735a6b3879": "fastjson < 1.2.66 正则表达式拒绝服务漏洞REDOS", "https://mp.weixin.qq.com/s?__biz=MzkxNTc1MzQyNw==&mid=2247488223&idx=1&sn=179f23ace36083dd36a1f5052b4c6018": "红日靶场（七）WHOAMI Penetration（一）", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524352&idx=2&sn=840f79721a30962446402beb9e179f45": "Redis CVE-2024-31449：如何重现和缓解漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNTYwOTU1Mw==&mid=2650092449&idx=1&sn=ccafc6e2e300c5176b01f01455f66820": "远程代码执行风险威胁用户安全，Zoom紧急修复多个安全漏洞；颠覆传统安全架构，Zscaler创新发布新型零信任分段方案 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517127&idx=1&sn=61549ef4ef11bf847690be40502fd256": "紧急：关键 WordPress 插件漏洞暴露了超过 400 万个网站", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787425&idx=1&sn=6f9cdcc47fe2971c8f27491559a54cb3": "WordPress安全警报：400万网站面临严重认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247502147&idx=1&sn=6d2c1227899943ee29dc7f1a17b1cf53": "12年来最严重的 WordPress 漏洞，可大规模接管管理员权限", "https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247487438&idx=1&sn=57b059b3e23609293878846b57fd3d2d": "网络安全认知科普（五）：业务本身也可能就是漏洞，就是风险", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247485505&idx=1&sn=13147a3d93fed1ed458e589239c7dc56": "EDUSRC漏洞挖掘技巧汇总+信息收集各种姿势", "https://mp.weixin.qq.com/s?__biz=Mzg4MDYwNDc5Nw==&mid=2247486363&idx=1&sn=85f3185c117796238c0285ce1443bbea": "Water Barghest组织利用IoT设备漏洞迅速变现的策略", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491445&idx=1&sn=3b3bf547593b9c83bd8067fa2f85da0b": "漏洞预警 | Laravel环境变量注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491445&idx=2&sn=ba14df01b2e491cc6546173a72e6c2dc": "漏洞预警 | D-Link NAS设备远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491445&idx=3&sn=9a49aa4947b71d328766002dc7f115d0": "漏洞预警 | 海信智能公交企业管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODY2ODA0OA==&mid=2247485900&idx=1&sn=4a1c0f14751627a29534c3c7f13a1354": "【未公开】百择唯供应链存在RankingGoodsList2 SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488426&idx=1&sn=8ca95cf35ca24bc8ba0c40172f5dacb5": "【0day 漏洞预警】某统一通信平台存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499683&idx=1&sn=23b5001cd5e4272d908cf85c0d71263d&chksm=ec1dcf8bdb6a469da30be3bb9de87a5e11415411c58b37eb85060e943ea7b097ccecc2f9f16e&scene=58&subscene=0": "一键检测 17 个蓝凌 OA 历史漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495506&idx=1&sn=368d74c4f6e7a4f2639d84ec46bf77c7&chksm=fd74df9bca03568d70f915369a15335bfc87733f37f2443259f039b6d3f497061fb698fe7a2b&scene=58&subscene=0": "CNVD漏洞周报2024年第46期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495506&idx=2&sn=4f47a0a0b8cf7c2347c48af444867c9c&chksm=fd74df9bca03568d4907affed4138435656b4dbb7b298e4dea297fd24796880708c0ffec6763&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241111-20241117)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521513&idx=1&sn=b60ee79ea2fbcfeaae560373faa7a2cf&chksm=ea94a583dde32c95779d3ac2afec31953b99e514551aec14bfc515de9ced953efb77c5563092&scene=58&subscene=0": "12年来最严重的 WordPress 漏洞，可大规模接管管理员权限", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521513&idx=2&sn=667b6f9c61b6f2d2077659cd4d4cdc70&chksm=ea94a583dde32c95f18dabad1da69d1c1444aebf79a867a8ada6e4d24e51a03b28c8eb27076a&scene=58&subscene=0": "僵尸网络利用 GeoVision 0day 安装 Mirai 恶意软件", "https://mp.weixin.qq.com/s?__biz=MzA5OTI3MTE5MQ==&mid=2247485409&idx=1&sn=17c225d46e6c41ea0b6cf9459af70bee": "【Exp】- CVE-2024-10924 WordPress插件Really Simple Security认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502450&idx=1&sn=a1fc8665dfbb9c1703fef3c40ff25310": "【在野利用】Palo Alto Networks PAN-OS 身份认证绕过漏洞(CVE-2024-0012)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492559&idx=3&sn=bd55e8894a88011691ba63e3f45929e2": "Apache Kafka 漏洞将用户数据暴露给潜在攻击者", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492559&idx=4&sn=fc31cfbd66ffb7b1e4867fca91821f2e": "VMware 漏洞（CVE-2024-38812 和 CVE-2024-38813）被广泛利用", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5NzkwNw==&mid=2247485563&idx=1&sn=6403f9b8b5403d8a7a696a8e0e17a046": "CVE-2024-45216 Authentication bypass in Apache Solr", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247502473&idx=3&sn=fc0115150597e30c84b5c8ecb1d968ba": "Palo Alto警告，防火墙管理界面RCE漏洞被攻击者利用", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489264&idx=1&sn=2375259ae986fae83ca35293b7b7dc21": "易思智能物流无人值守系统 PhoneLogin SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485720&idx=1&sn=3bd82b6a8f0001ce306efba3c499f6bf": "【漏洞复现】某平台-Sc-TaskMonitoring-search-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496762&idx=1&sn=835c3bf727a87fe1aad3ea5806d22f61": "【漏洞通告】Apache OFBiz多个远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI4MjA1MzkyNA==&mid=2655348005&idx=1&sn=4c930728fafc77e04d44557a763f493e": "Palo Alto警告，防火墙管理界面RCE漏洞被攻击者利用", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491091&idx=1&sn=d0c7ebe7f059cc62b3719c8bfb99d69d": "记录日常挖掘漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247492453&idx=1&sn=4edaf9b04b271a1782f16bcf085d3e2c": "黑盒乱锤某专属SRC到0day代码分析", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484473&idx=1&sn=6a7b9607e939dfc9b833e01adfc8571f": "灵当CRM系统multipleUpload.php接口处存在文件上传漏洞【漏洞复现|附nuclei-POC】", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507405&idx=1&sn=724c4f04b89e17186e10643a70168151&chksm=cfcabed9f8bd37cf08699147911e05b802a7367ecb0fd5122c5c60647403f1c7ad261c992be5&scene=58&subscene=0": "速修！宝兰德BES中间件远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxODI4NDg3Nw==&mid=2247484718&idx=1&sn=8502b1cb852caa8ce0e23e3847b944b6": "Cuppa CMS-任意文件读取CVE-2022-25401", "https://mp.weixin.qq.com/s?__biz=Mzk0NTY5Nzc1OA==&mid=2247484111&idx=1&sn=1d68bc0bb4221a6de04c1b1dc818eafa": "一文读懂SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500250&idx=2&sn=23d9e2dfb43ea4293d20489c3cbccb9e": "【漏洞通告】Palo Alto Networks PAN-OS身份验证绕过漏洞（CVE-2024-0012）", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499470&idx=2&sn=d9bbe418f8309153c86b2c38bdb82f17": "上周关注度较高的产品安全漏洞(20241111-20241117)", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486183&idx=1&sn=b38113b15e2fada33cf26c95c9c07714": "【0day】某微信万能门店小程序系统存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MzE1MTQzNw==&mid=2247491024&idx=1&sn=00be4948643b40e24a2b0cca5c99edfc": "专题解读 | 图基础模型最新研究进展", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614168&idx=1&sn=ca9f354a96fac70ba3dfb1e6840380db": "Bypass Cloudflare实现账户接管：密码重置投毒漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793181&idx=1&sn=bcfe157d05c93fa6fc18591227dae4da": "DeepData 恶意软件框架被发现利用尚未修补的 Windows 0day漏洞、Fortinet VPN 客户端", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247488361&idx=1&sn=e560e27ced52b442b1d41ac709a876ff": "黑盒乱锤某专属SRC到0day代码分析", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489988&idx=1&sn=86427522d5972cadf175076db1b99d71": "防火墙管理界面RCE漏洞被攻击者利用，Palo Alto发出警告", "https://mp.weixin.qq.com/s?__biz=MzkxMzczNTA4MQ==&mid=2247483895&idx=1&sn=3da0b8ac30f8d6f1da127c9216651fe0": "一个很强的漏洞库", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307419&idx=1&sn=99e73003e60b59000267419ee4068108": "美国饮用水系统存在300多个漏洞，影响1.1亿人", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307419&idx=2&sn=1ccab95bd62ccdb6da0bf494f77e858d": "VMware vCenter Server远程代码执行漏洞正被黑客广泛利用", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524360&idx=2&sn=b5804cee2025c7d7c53030217988d02b": "Java（Script）Drive-By，无需0day攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066082&idx=3&sn=45c8dff3a066a1615c872523d972e645": "【安全圈】美国饮用水系统存在300多个漏洞，影响1.1亿人", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066082&idx=4&sn=c7244d3c2cda936e8c968cf0a2ade6d0": "【安全圈】VMware vCenter Server远程代码执行漏洞正被黑客广泛利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521523&idx=1&sn=286f99df03f25ebd1cb1fb497f991b21": "补丁不给力，VMware vCenter 严重RCE漏洞遭利用", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458583218&idx=1&sn=f5b184e32e1592dc41e78b9934e7c670": "SDC2024 议题回顾 | ExpAttack:大语言模型越狱风险持续追踪框架", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513105&idx=1&sn=db4c2c400bfc1b8ac9c2e39ffcc2d0f8": "美全国水务系统存在大量漏洞，可致使上亿人供水中断", "https://mp.weixin.qq.com/s?__biz=MzU3OTAyODk4MQ==&mid=2247490987&idx=1&sn=aa4712f028a5b83328bf471fc49512b2": "顺丰安全漏洞评分规则更新公告", "https://mp.weixin.qq.com/s?__biz=MzU3MzU4NjI4OQ==&mid=2247515427&idx=1&sn=fb8b05f7d8f4fef283c82153244d0dca": "【漏洞复现】D-Link NAS设备 sc_mgr.cgi 未授权RCE漏洞复现", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650619819&idx=2&sn=e0594a7fbc40c3e7038dfb867b72a41b": "高危！Laravel参数注入漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247495150&idx=1&sn=7dbdf94f68382feb66892595971d54dc": "【论文速读】| 通过良性数据镜像对大语言模型进行隐蔽越狱攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523853&idx=1&sn=09a7e2c49e4d18c988053c13b775aa17": "【漏洞通告】Palo Alto Networks PAN-OS 身份验证绕过漏洞(CVE-2024-0012)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523853&idx=2&sn=44f939a81178afad27dca90a02dfbfc6": "【漏洞通告】Apache OFBiz远程代码执行漏洞(CVE-2024-47208)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523853&idx=3&sn=fab3ee466334a0022b2df23ab6a23217": "上周关注度较高的产品安全漏洞(20241111-20241117)", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490175&idx=1&sn=8a88f13080b38ee937638a6ab1a1a319": "【风险通告】Palo Alto Networks PAN-OS存在身份验证绕过漏洞（CVE-2024-0012）", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507416&idx=1&sn=6eb8217321fbe1a5361675058bc55882": "已知漏洞！宝兰德最新漏洞绕过补丁黑名单，速修", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247498607&idx=2&sn=2e4002dc2db4869990ee4fa3d38f1f43": "渗透测试 -- 漏洞百解", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247632338&idx=3&sn=287c0b4f0cfbdbc1d11e7f8b67787249": "美国饮用水系统存在300多个漏洞，影响1.1亿人", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247508728&idx=1&sn=50e200ae59cd278b496fa675d916a377": "微软2024年11月补丁日重点漏洞安全预警", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489184&idx=1&sn=04ec9cf838fb1a5cf5cc4c8c93a8bf30": "【漏洞预警】Apache Kafka Clients权限管理不当漏洞可致信息泄露", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489184&idx=2&sn=6674f470ab506ed8239b4103f4d11218": "【漏洞预警】Palo Alto Networks PAN-OS Web管理界面身份验证缺陷漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489184&idx=3&sn=22ce05bbdff66ec1bf477e37c429c327": "【漏洞预警】Apache Tomcat资源控制不当漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247488403&idx=3&sn=9914510e560c5eec5ad6282278ab6577": "「人脑替代计划-6」LLM是什么？", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517233&idx=1&sn=af475bf0f3de0493fd24dcdc37463e5a": "漏洞挖掘|电子商城类漏洞挖掘案例灵感复现", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486072&idx=1&sn=7558c8a2becda935fa6b7237363f864e": "「漏洞复现」D-Link NAS设备 sc_mgr.cgi 未授权漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247515356&idx=1&sn=202c8573e3a77824edf45e865b30e051": "漏洞预警｜Apache OFBiz远程代码执行漏洞(CVE-2024-47208)", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247515356&idx=2&sn=d677b50ea4f958d207cd6a3c772fe0b8": "漏洞预警｜Palo Alto Networks PAN-OSS身份验证绕过等多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMzI1MDg2Mg==&mid=2649945063&idx=1&sn=e933d8e9d2243641c8f007c652caad48": "YAK 亮相2024年世界互联网大会！携手中国联通共塑网络安全新生态", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307419&idx=3&sn=9f3e2546a68551118a2b2bc765b70ab3": "关键的WordPress插件漏洞导致超400万网站暴露", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484334&idx=1&sn=bfd4f94e969ee9f8e7ec653c0feae32a": "【漏洞复现】D-Link NAS 远程命令执行漏洞(CVE-2024-3273)", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484641&idx=1&sn=b4b8e81e772df11b17f49e37240bea65": "【漏洞复现】CVE-2024-0012 Palo Alto Networks PAN-OS 身份验证绕过漏洞可RCE", "https://mp.weixin.qq.com/s?__biz=MzkyODYwODkyMA==&mid=2247484615&idx=1&sn=5f905a5474a575224e1695ec62eaa221": "从CVE 到 PoC：Windows提权漏洞全景地图", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489063&idx=1&sn=d9af33b3a2502288bbb423a8844b6fee": "一款越权漏洞检测的 Burp 插件 内置AI模块辅助分析大幅降低误报率效|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247514847&idx=2&sn=048d05a026fb7fb199b8242894eea7b9": "渗透测试 -- Python3编写常见exp", "https://mp.weixin.qq.com/s?__biz=MzkzODY2ODA0OA==&mid=2247485914&idx=1&sn=f8cec8e3728f84d34ca028e8af00bb3b": "【未公开】百择唯供应链存在SearchOrderByParams SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491464&idx=2&sn=0d4045776a636e09c6c243c1be42ec18": "漏洞预警 | 金蝶EAS任意文件写入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491464&idx=3&sn=ac7cc21a14507ada677b925d8c2f9060": "漏洞预警 | 顺景ERP管理系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492775&idx=1&sn=93a3a6836cb68f8168e9655508828d18": "漏洞利用、shell反弹 | 一键利用工具", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486175&idx=1&sn=fa6fd7a401164cbcb62a25a9ecc5f8ac": "SpringSecurity权限绕过漏洞-好玩", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513105&idx=1&sn=db4c2c400bfc1b8ac9c2e39ffcc2d0f8&chksm=ebfaf331dc8d7a273b6268ba76b25e4bbec7d9c0e5d64cf4fdb0a7c8cb0ac781e6c8671e1848&scene=58&subscene=0": "美全国水务系统存在大量漏洞，可致使上亿人供水中断", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507416&idx=1&sn=6eb8217321fbe1a5361675058bc55882&chksm=cfcabeccf8bd37dabd939a20bc64440bf305ffe94e1ee391c8b758d1eba8cec1ca2099880c09&scene=58&subscene=0": "已知漏洞！宝兰德最新漏洞绕过补丁黑名单，速修", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066082&idx=3&sn=45c8dff3a066a1615c872523d972e645&chksm=f36e7d62c419f474a8053972dd9c71ee6170c6482642d86218c62a4788ba6c3240875f3d16fb&scene=58&subscene=0": "【安全圈】美国饮用水系统存在300多个漏洞，影响1.1亿人", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066082&idx=4&sn=c7244d3c2cda936e8c968cf0a2ade6d0&chksm=f36e7d62c419f474201413fc6e1edcc5c024cfb6fa12a9adf16b49526e98689324bb9aa57fd0&scene=58&subscene=0": "【安全圈】VMware vCenter Server远程代码执行漏洞正被黑客广泛利用", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523853&idx=1&sn=09a7e2c49e4d18c988053c13b775aa17&chksm=ce46151df9319c0b5e3101ae19289c72f2bde1df88b14593ff9d674aef5cea0434014a7f2615&scene=58&subscene=0": "【漏洞通告】Palo Alto Networks PAN-OS 身份验证绕过漏洞(CVE-2024-0012)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523853&idx=2&sn=44f939a81178afad27dca90a02dfbfc6&chksm=ce46151df9319c0b1559eee9e9bf40c82367612f10de3b61f2f666f2558bea2f5f10938518ef&scene=58&subscene=0": "【漏洞通告】Apache OFBiz远程代码执行漏洞(CVE-2024-47208)", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499470&idx=1&sn=122371c064b4a5b04d3f673d1a172d6e&chksm=973acdaca04d44ba3d0421968e02c6666f2064e33000519c729c6423ce5c41367a1ccdcf4833&scene=58&subscene=0": "CNVD漏洞周报2024年第46期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499470&idx=2&sn=d9bbe418f8309153c86b2c38bdb82f17&chksm=973acdaca04d44bab50e7dd62b73186be71557b6394c3c63dc18ec7ef4c20bae0c517a0aa368&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241111-20241117)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247485415&idx=1&sn=541476a2be6c2a7837e6dd6b2b173171": "国家级黑客利用三大 Ivanti CSA 零日漏洞展开攻击，企业需警惕！", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247509929&idx=1&sn=8e56d271814d4694e976b6fdf261784e": "24年10月必修安全漏洞清单｜腾讯安全威胁情报中心", "https://mp.weixin.qq.com/s?__biz=MzU5NTEwMTMxMw==&mid=2247485379&idx=1&sn=b13eaf7a0ae232fd4ec54d414aa2f506": "【渗透工具】Swagger API 信息泄露漏洞 工具篇", "https://mp.weixin.qq.com/s?__biz=Mzg3ODkzNjU4NA==&mid=2247485578&idx=1&sn=01f25a92b61057e789d1dc89c9d0cf58": "Apache Tomcat最新高版本身份验证绕过漏洞，POC价格接近3000", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489282&idx=1&sn=db4d0926ef072190c0b575b85b7f53a2": "易思智能物流无人值守系统 ExportReport SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507413&idx=1&sn=a43f7ec33d899e45aa9b77f5005fd056": "X漏洞奖励计划收录扩大！提供本地环境再享额外20%奖金加成！", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496771&idx=1&sn=1841c42f1b7592fc316ee23a3dae8be0": "【漏洞通告】Palo Alto Networks PAN-OS多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485007&idx=1&sn=f43a33dcb7b9278a231606867d08db8e": "腾讯安全威胁情报中心推出2024年10月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487503&idx=1&sn=142cc21e2bc7576e1660e7eafa64b96d": "【漏洞预警 】SRM智联云采系统存在多处SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487503&idx=2&sn=818021e6e5c7bbfef6a642e2f7f8fd75": "【漏洞预警】东胜物流软件-certupload-任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485045&idx=1&sn=e2aef89feda4402f8f5baa7ea01684ed": "400万网站受影响！WordPress Really Simple Security 插件漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485045&idx=2&sn=a92234b4814af7a59f703f23bbed96c3": "深入解析 CVE-2024-51567：CyberPanel 命令注入漏洞及 PoC 复现", "https://mp.weixin.qq.com/s?__biz=MzkxMzIwNTY1OA==&mid=2247509168&idx=1&sn=f2df0d7acfbf06066aa1fb37a3da6f2b": "Linux网络流量监控工具", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793188&idx=2&sn=4a4f1209a4a33af5ff2cb6681e83d52e": "Apple 确认 macOS 系统遭受0day漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793188&idx=3&sn=985eaa11c8319087deda24624c9bda68": "VMware vCenter 和 Kemp LoadMaster 漏洞正受到积极利用", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491464&idx=1&sn=dddb959fc1bb2fdc915c3c0b79b376cc": "漏洞预警 | 全程云OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488439&idx=1&sn=3f053aa65cd1e0edc84e4e7baf0d87be": "【0day】资产管理运营系统（资管云）存在前台文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502450&idx=1&sn=a1fc8665dfbb9c1703fef3c40ff25310&chksm=fe79eeeac90e67fcbf34eede7835db3aa9916a7a50c559be8c34d0446433f0f4d41189eb8b1a&scene=58&subscene=0": "【在野利用】Palo Alto Networks PAN-OS 身份认证绕过漏洞(CVE-2024-0012)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523853&idx=3&sn=fab3ee466334a0022b2df23ab6a23217&chksm=ce46151df9319c0b47c29456be191ccb1e9aa5c9d308c5e785ba7c175b75b7a3f6afe84ca4d6&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241111-20241117)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521523&idx=1&sn=286f99df03f25ebd1cb1fb497f991b21&chksm=ea94a599dde32c8fb84c9a7247de810f5f23bf5c0c99f55a79ff59780dc42aa54f886a151327&scene=58&subscene=0": "补丁不给力，VMware vCenter 严重RCE漏洞遭利用", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489994&idx=1&sn=7814bfad57686190c7bac0bc2903102f": "Apple 发布紧急更新以修补被积极利用的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649166849&idx=3&sn=7d17b619580e9f94e8465b600d569241": "苹果确认针对 macOS 系统的零日漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307561&idx=4&sn=4bfa46d48f4a7ec2bcdeb281d95354f8": "vulnhuntr：基于大语言模型和静态代码分析的漏洞扫描与分析工具", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247487940&idx=1&sn=77723ded4c817fa7df978074334ee981": "紫光档案管理系统 mergeFile SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066097&idx=3&sn=0e0cc754f2cdc596b5f8419a8fa6f7a5": "【安全圈】苹果发布紧急安全更新修复WebKit引擎中的漏洞 黑客已经利用漏洞展开攻击", "https://mp.weixin.qq.com/s?__biz=Mzk0NTY5Nzc1OA==&mid=2247484133&idx=1&sn=52effc09cdcd03efa6380224aa30ad9c": "一文读懂SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5Njg1NzMyNw==&mid=2247488664&idx=2&sn=3e7b7e7edab1dffabf0816e27d18da3b": "DataCon晚自习 | 浅谈大模型辅助漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524380&idx=3&sn=f9182149d88336b1242adda5aef422d1": "CVE-2024-20767 和 CVE-2024-21216 的补救措施：保护自己免受最近两个可在野外利用的严重漏洞的侵害", "https://mp.weixin.qq.com/s?__biz=Mzg4MDY1MzUzNw==&mid=2247497938&idx=2&sn=8d13015033c4c8514aac0c0c5375b9df": "命令执行漏洞基础", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502616&idx=1&sn=58bb44c2b1e5b68a5db14bccb1baca21": "【成功复现】D-Link NAS远程命令执行漏洞（Cookie）", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664230091&idx=4&sn=263ea32ebfc468c8a503fd8a7d847988": "CNNVD | 关于Palo Alto Networks PAN-OS安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664230091&idx=5&sn=9950f25047c9a9cdb95f448751bcd9de": "CNNVD | 关于Apache OFBiz安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247522987&idx=1&sn=563d193cf4b9a511831b8769974d8266": "中间件常见漏洞总结", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458583542&idx=2&sn=5be0221a6d9dac5a2b8d75ede77e159b": "苹果紧急发布安全更新，修复影响英特尔Mac的两个零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247622153&idx=1&sn=bdaf7d21183b302a2b5c4dcc98808c26": "奇安信集团获2024年世界互联网大会杰出贡献奖", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484351&idx=1&sn=f9ffabcc9b25602a911778f2121e66fa": "第十三期 · 安钥®「漏洞处置标准作业程序（SOP）」征文启示", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247631812&idx=1&sn=cb58ca9f66ae638242515b34d3fee572": "一名优秀CISO的自述：是什么成就了我?", "https://mp.weixin.qq.com/s?__biz=MzkzODUzMjA1MQ==&mid=2247484575&idx=1&sn=abd69fc656d121c2d04f7988fa8a2bee": "几个常见的越权漏洞挖掘案例", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492658&idx=1&sn=57ec9a56c1b1cde21b51a26712d252a8": "【已复现】宝兰德BES应用服务器反序列化致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651461349&idx=1&sn=c2d1b09182648cd2ba67f4f305a63865": "CNNVD关于Palo Alto Networks PAN-OS 安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651461349&idx=2&sn=28601f77d7e3146b42cd9e063a788509": "CNNVD关于Apache OFBiz安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651461349&idx=3&sn=dd3fcba72938894feeccabe050dc7c05": "信息安全漏洞周报（2024年第47期）", "https://mp.weixin.qq.com/s?__biz=MzA3NTIyNzgwNA==&mid=2650259511&idx=1&sn=209eedf6288443cf581e203cfc45284c": "Palo Alto Networks零日防火墙漏洞是由开发人员的基本错误导致的", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500258&idx=2&sn=45c5ee1cc7cae505fcdfb13d0c6b1050": "【漏洞通告】Oracle Agile PLM Framework文件泄露漏洞（CVE-2024-21287）", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500258&idx=3&sn=2a266e4509b9d0fb089ce92749c6f7ca": "【漏洞通告】Wget服务器端请求伪造漏洞（CVE-2024-10524）", "https://mp.weixin.qq.com/s?__biz=MzkxODI4NDg3Nw==&mid=2247484726&idx=1&sn=591227dcdebf57686a3a4c2f953505eb": "taocms 3.0.1 本地文件泄露漏洞（CVE-2021-44983）", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492578&idx=2&sn=fa464eb54666d60dabd0a65ccbaeac63": "平板锅(Palo Alto)防火墙0day 漏洞分析及Exp", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650603759&idx=2&sn=986d8ed76f6fd390e46b43c2cec2df92": "美国饮用水系统存在300多个漏洞，影响1.1亿人", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650989812&idx=1&sn=fd1211672ea7e1d7357c9909c7600faa": "【知道创宇404实验室】警惕Palo Alto PAN-OS漏洞（CVE-2024-0012 和 CVE-2024-9474）", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486083&idx=1&sn=eb8dc60a736b80cc2bcd90bc76f825b3": "一次黑盒转变白盒前台漏洞审计过程", "https://mp.weixin.qq.com/s?__biz=MzA3ODE0NDA4MA==&mid=2649400795&idx=1&sn=99b65e43e266182fd962e758b293c138": "全球数据跨境流动合作倡议", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133464&idx=2&sn=16e48bc09bde1b9e2e0b383257d60d2a": "美国国会图书馆邮件系统遭攻击，近9个月通信内容或泄露；ChatGPT沙箱环境存多个严重安全隐患，仅20%漏洞被修复 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489192&idx=1&sn=663db3924b11641b7c1e483016b43aa4": "【漏洞预警】Oracle Agile PLM框架未授权 可致敏感信息泄露CVE-2024-21287", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489192&idx=2&sn=dbb1fec7e9b1b1be32e557c7e7e93fa4": "【漏洞预警】Wget服务器端请求伪造漏洞（CVE-2024-10524）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517235&idx=1&sn=15beae174630b436d0b4b755c3b8f7df": "第105篇：方程式工具包图形界面版V0.42，更新永恒浪漫exp对Vista、Win7系统的利用", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247512533&idx=1&sn=508123790f0103c1e0b80a86546ebbd6": "网安瞭望台第 2期：零日漏洞密集爆发、2024年常见网络安全漏洞类型及分析", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247576922&idx=1&sn=936ee428e8066709dbf21f8ca640454e": "周鸿祎世界互联网大会谈中国大模型发展：应扬长避短 选择自己的道路", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486082&idx=1&sn=eb2064a0626c65f33ab73a11a0d5ae30": "「漏洞复现」ArcGIS 地理信息系统 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521533&idx=1&sn=1ab7c5da3e583e48ee67d6f50fd4d97e": "苹果紧急修复已遭利用的两个0day", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492578&idx=3&sn=a13cb4917d5870bf3ac1e32ce46bc962": "wget 存在SSRF 0day漏洞 CVE-2024-10524", "https://mp.weixin.qq.com/s?__biz=MzkxMjYxODcyNA==&mid=2247485131&idx=1&sn=9eaffa9133ef0eff7875ac3fe1fd4fc1": "事关个人，5G基带存在重大安全漏洞！黑客可直接监控手机。", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489065&idx=1&sn=a1eea859e97da404d223f838ee2c8bea": "最新Invicti-Professional-V24.11 WEB漏洞扫描器更新|近期漏洞合集更新", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247498627&idx=1&sn=96c957b13032e647fdbb2e2a2db89a94": "oss存储桶遍历漏洞利用脚本（11月18日更新）", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484489&idx=1&sn=5cafab2af07393b94237c5aea17cc224": "用友畅捷通-TPlus系统FileUploadHandler.ashx接口处存在文件上传漏洞【漏洞复现|附nuclei-POC】", "https://mp.weixin.qq.com/s?__biz=MzkzODY2ODA0OA==&mid=2247485938&idx=1&sn=5f75f6c29311eff2fcba5158a4bfc5db": "【未公开】百择唯供应链存在ReadAfterSaleList SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491472&idx=1&sn=68e3d9143979d6909f6c3be8e0147446": "漏洞预警 | GitLab未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491472&idx=2&sn=e842b5299786254b299991d8fabf4824": "漏洞预警 | JeecgBoot表达式注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491472&idx=3&sn=eea1d851655a59d5074eb716aebdf4e3": "漏洞预警 | 用友YonBIP R5旗舰版任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247509402&idx=1&sn=fd513ef1bfe094d6bfc52a0238d8efe2": "Palo Alto 防火墙0day漏洞 CVE-2024-0012 和 CVE-2024-9474 检测POC&EXP", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488456&idx=2&sn=6e22a329b754d049d04588b03129884b": "【吃瓜】入门即巅峰", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507413&idx=1&sn=a43f7ec33d899e45aa9b77f5005fd056&chksm=cfcabec1f8bd37d76f04ee59ebadde132d049c4f729c1023d5a64b026d0f975f1dd3cc2e8fa9&scene=58&subscene=0": "X漏洞奖励计划收录扩大！提供本地环境再享额外20%奖金加成！", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458583542&idx=2&sn=5be0221a6d9dac5a2b8d75ede77e159b&chksm=b18c317c86fbb86a4f217c32fd5ad1f8bc8a5c2b53963d8962766c3e8cee07c5d83251cfeb87&scene=58&subscene=0": "苹果紧急发布安全更新，修复影响英特尔Mac的两个零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247509929&idx=1&sn=8e56d271814d4694e976b6fdf261784e&chksm=ec9f7edadbe8f7cc832cc505d146955131c30af0abb345247fcd170fff37f98c73fcc2174938&scene=58&subscene=0": "24年10月必修安全漏洞清单｜腾讯安全威胁情报中心", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502473&idx=1&sn=996d4946cf07c672aed821bfd621c228&chksm=fe79ee11c90e67073edd9159e6dc7a11bb693970335a9bdd2815ae0532da91d5bb7c8a534df9&scene=58&subscene=0": "【已复现】Palo Alto Networks PAN-OS身份认证绕过漏洞(CVE-2024-0012)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502473&idx=2&sn=e5d76f1cef13f032535065aae0924b0a&chksm=fe79ee11c90e67077b61dd29c7571b5fa2c8d1a5ac9c4dc5629276ded403c4e0495fdeba1feb&scene=58&subscene=0": "【在野利用】Apple 多个在野高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521533&idx=1&sn=1ab7c5da3e583e48ee67d6f50fd4d97e&chksm=ea94a597dde32c81770e878aff36d9ad42bc41cce9cf029d893185f50ed1e403b8d3fe8a808f&scene=58&subscene=0": "苹果紧急修复已遭利用的两个0day", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664230091&idx=5&sn=9950f25047c9a9cdb95f448751bcd9de&chksm=8b59ee32bc2e6724148267ee2381f2c8eb7cbce86d470cd00dc98942c246dde4f28c288844ba&scene=58&subscene=0": "CNNVD | 关于Apache OFBiz安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492658&idx=1&sn=57ec9a56c1b1cde21b51a26712d252a8&chksm=96f7fb5fa180724999fcc536896ea9b1741b01baafc636da1f215426e10ae028780e9a9e2fd6&scene=58&subscene=0": "【已复现】宝兰德BES应用服务器反序列化致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066097&idx=3&sn=0e0cc754f2cdc596b5f8419a8fa6f7a5&chksm=f36e7d71c419f467daf3ea8cddb360e80ba1bf2d4166d38a18b9e3f18237b4be22f6661fe72a&scene=58&subscene=0": "【安全圈】苹果发布紧急安全更新修复WebKit引擎中的漏洞 黑客已经利用漏洞展开攻击", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650989812&idx=1&sn=fd1211672ea7e1d7357c9909c7600faa&chksm=8079a6c6b70e2fd045b21a2f00871280e36fbd5f01e9f15770861ea0ae01f84753f29689e2eb&scene=58&subscene=0": "【知道创宇404实验室】警惕Palo Alto PAN-OS漏洞（CVE-2024-0012 和 CVE-2024-9474）", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485007&idx=1&sn=f43a33dcb7b9278a231606867d08db8e&chksm=c2b10439f5c68d2f9f2b0ad51534e1ed75af9471e716e49d263560a16ccb61d298cc34fc5e41&scene=58&subscene=0": "腾讯安全威胁情报中心推出2024年10月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzkwMjQyMDA5Nw==&mid=2247485897&idx=1&sn=0cc6ed1d8063057b53534e97ba7e7991": "玄穹——开源漏洞库平台", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486423&idx=1&sn=36562677738a2067cef9d5e659179311": "【漏洞通告】Palo Alto Networks PAN-OS 身份验证绕过漏洞(CVE-2024-0012)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486423&idx=2&sn=5363ab83755be11e1d17be94fc80db88": "【漏洞通告】Ivanti Endpoint Manager SQL注入漏洞(CVE-2024-50330)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486423&idx=3&sn=03b3193f3f3978b89e47a38c66bf3bbe": "【漏洞通告】Apache OFBiz远程代码执行漏洞(CVE-2024-47208)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486423&idx=4&sn=526b9ddff455eae074c42cb543c916b3": "【漏洞通告】Windows 任务计划程序特权提升漏洞 （CVE-2024-49039）", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486423&idx=5&sn=da19e19671d3a290f1abbf650f06f6ef": "【漏洞通告】Google Chrome Serial释放重引用漏洞(CVE-2024-10827)", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499693&idx=1&sn=9c2f1ead8fecc4980715053945851041": "金蝶软件旗下产品历史漏洞合集", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487823&idx=1&sn=b199f8958061b41143c57569ecbb7973": "宏景HCM uploadLogo.do接口存在任意文件上传漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513122&idx=1&sn=2328bb653dc07fdeeef3cf0c73e59668": "苹果官方警告：零日漏洞攻击瞄准Mac电脑用户", "https://mp.weixin.qq.com/s?__biz=MzUxNTQxMzUxMw==&mid=2247524305&idx=1&sn=715d043e0e1a4aa038e9217fee6f6b3b": "安全通告丨网络安全漏洞通告（2024年11月）", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485728&idx=1&sn=ae7b0efb76dde69f1e883bf552e939aa": "【漏洞复现】某平台-Download-GetFile-readfile任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502647&idx=1&sn=4ea2ed367e87b0fb0578b4bc559214cc": "【成功复现】英雄联盟手游狼人被动超级加速漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496794&idx=1&sn=98d1e09af421f9b48733bef20e034c70": "【漏洞通告】Apple多个在野高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496794&idx=2&sn=2f75e539f5d1214305f1b20815000390": "【漏洞通告】Oracle Agile PLM Framework文件泄露漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486127&idx=1&sn=a9a554e0836be4997bbae01428c35ea7": "某次代码审计从0day变Nday的路程（漏洞分析）", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503207&idx=1&sn=6497f0f064f7e89a8020f5e647a74b9c": "雷神众测漏洞周报2024.11.11-2024.11.17", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492779&idx=1&sn=38e8978c0c2582e26755b6f45716289f": "苹果公司解决了两个正在被活跃利用的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484368&idx=1&sn=49f5c63e530ff4a5360f1bde3b2f324f": "【漏洞复现】数字通云平台智慧政务cookie登录绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659211159&idx=1&sn=eaa9344e08031742daa733646b4c96b4": "【深度复现】D-Link NAS设备 sc_mgr.cgi 未授权RCE漏洞(CVE-2024-10914)", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793202&idx=1&sn=6442286840d79041b5d59c24cea27af5": "Ubuntu Needrestart 软件包中发现存在十年之久的安全漏洞，可以获得Root权限", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247503892&idx=2&sn=f96cf857db7e67591108af162474c402": "网安趋势？谷歌宣布AI首次发现内存安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664230091&idx=4&sn=263ea32ebfc468c8a503fd8a7d847988&chksm=8b59ee32bc2e6724be3ab1971189ed723ff0bd517816391938514eab40b4d64e00bfeb630a69&scene=58&subscene=0": "CNNVD | 关于Palo Alto Networks PAN-OS安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247529561&idx=1&sn=21097e9ac986115991718b87150558bb": "安全巨头惊爆0day漏洞危机：2023年最频繁攻击源揭秘！", "https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649870121&idx=1&sn=61e16fb282d8d940147e14b24462c3f1": "TOP 1！知道创宇再获CNVD漏洞平台14星最高荣誉", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247579721&idx=1&sn=971afc08efdeab4cd0d06a7f9e64bfc3": "Helldown 勒索软件利用 Zyxel 漏洞破坏企业网络", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492420&idx=1&sn=983ff5f33ddc1bf11baeca0a42b1516d": "关键的 Windows漏洞使数百万台服务器面临攻击", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486091&idx=1&sn=91833410d26dea9ad568703fcb83c398": "「漏洞复现」Altenergy电力系统控制软件 status_zigbee SQL注入漏洞复现(CVE-2024-11305)", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496794&idx=3&sn=0529c7467c6aa61ad31786c53e0b140d": "【漏洞通告】Wget服务器端请求伪造漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMjg0MjM5OQ==&mid=2247487863&idx=1&sn=a856bb4a7707eac0bcafb0d7450947c6": "几个常见的越权漏洞挖掘案例", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507450&idx=1&sn=baba096592ba4c2ce7f2849d12b10277": "Palo Alto Networks PAN-OS身份认证绕过+远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490002&idx=1&sn=fcfb62255fd7a622d4d4d49929ce9a97": "Ubuntu系统软件中的5个漏洞潜藏了10年才被发现", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307635&idx=2&sn=87c3bf9433bce52470c6600460f833ed": "Ubuntu系统软件中的5个漏洞潜藏了10年才被发现", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066112&idx=1&sn=00fc32fb2126236a289beba3ec9b7b29": "【安全圈】Ubuntu系统软件中的5个漏洞潜藏了10年才被发现", "https://mp.weixin.qq.com/s?__biz=MzI5NDg0ODkwMQ==&mid=2247486093&idx=1&sn=f875b24e5431597f8279e5526d265f8d": "第105篇：方程式工具包图形界面版V0.42，更新永恒浪漫exp对Vista、Win7系统的利用", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458583634&idx=1&sn=c8830e31a595e1d7bc0c7c16de61a754": "惊喜开班！系统0day安全-IOT设备漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458583634&idx=3&sn=53aa35b505b9bfdfb18d41e18d667703": "竟长达10年未发现？Ubuntu系统“needrestart”工具曝5个本地提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492586&idx=1&sn=f45bee7349e1db3147eb26c8843c7adf": "PoC,AnyDesk 漏洞暴露用户 IP 地址，CVE-2024-52940", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521546&idx=1&sn=deaef16f3522dccfad4051c26652ad09": "这个 root 漏洞已存在10+年之久，影响Ubuntu Linux", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247489903&idx=1&sn=15bf8bcba0aaf185a4c968af8fcd06a4": "创宇安全智脑 | D-Link ShareCenter sc_mgr.cgi 远程命令执行等81个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzAxNTYwOTU1Mw==&mid=2650092516&idx=1&sn=2f6258182135b9ae40a75b504ef2e7ee": "跨国抓捕：俄罗斯勒索软件头目被引渡至美国", "https://mp.weixin.qq.com/s?__biz=MzkyODYwODkyMA==&mid=2247484628&idx=1&sn=7adaa47dc8dce500ba919e958221bc7a": "Ubuntu 默认工具 needrestart 曝出五个严重提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247487727&idx=1&sn=ce66fae6488e73be86204199cd8fc8fa": "模糊测试：发现软件隐患和漏洞的秘密武器", "https://mp.weixin.qq.com/s?__biz=MzU1OTc2MzE2Mg==&mid=2247489131&idx=1&sn=0b8639eded86673aa72ca1f9916befad": "零时科技 || BTB 攻击事件分析", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500266&idx=2&sn=a7cda971e34b7f49ac887ba14aa975d6": "【漏洞通告】Ubuntu needrestart权限提升漏洞（CVE-2024-48990）", "https://mp.weixin.qq.com/s?__biz=MzkxODY0NjE5MA==&mid=2247484990&idx=1&sn=1608484b01b1e75343a7e04c80323eb2": "明天，咱们直播间不见不散！学习SRC业务逻辑漏洞的你，怎么能错过！！！", "https://mp.weixin.qq.com/s?__biz=MzkxNTY4NTQwMg==&mid=2247484025&idx=1&sn=6b51b64fa3cc038bef66def279a3d37e": "知识 | 网安圈常说的暗网是什么？", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247632372&idx=4&sn=4065e4a51577c5e4f66942495ea2535c": "苹果官方警告：零日漏洞攻击瞄准Mac电脑用户", "https://mp.weixin.qq.com/s?__biz=MzkzNzU5MDMxOA==&mid=2247484152&idx=1&sn=66b4340b9ba29175e40f1a6f00cf288c": "实战分享：对某个985大学证书站的越权漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247502149&idx=1&sn=ee01e77e7d3727aaeb827ef5d41f4467": "几个常见的越权漏洞挖掘案例", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489201&idx=1&sn=6578dcd1cc22537528eb840b065e2d00": "【漏洞预警】Ubuntu needrestart权限提升漏洞CVE-2024-48990", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727839224&idx=1&sn=aa590911abd0b582370a5b2a7706520e": "【活动】双十一回血活动开启，单个漏洞奖励可达4万+！", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521546&idx=2&sn=c7f1dbf820ea6f896c4235e2f649c13e": "Oracle 修复已遭利用的 Agile PLM 0day", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650619867&idx=1&sn=ac69c9870bae8e64b7c510f2e9422924": "获国家权威机构认可！亚信安全荣获CNVD技术组支撑单位认证", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247497653&idx=1&sn=886fb9df563d731ad0b28c309d97a698": "迫切需要优先考虑移动安全", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247514876&idx=1&sn=dc8a114bf1be8a2ada9a420acfb15894": "漏洞管理工具 -- miscan（11月22日更新）", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491554&idx=1&sn=dc6a072d64b137434c5be22d725e9452": "Ollama AI 框架中的严重漏洞可能导致 DoS、模型盗窃和模型中毒", "https://mp.weixin.qq.com/s?__biz=MzkzMjQ0MTk1OQ==&mid=2247484041&idx=1&sn=300cec84cfc3ed1db1d2a894eb37f925": "manOS核弹级漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484532&idx=1&sn=ed5e450b30304a3352ada6fd71b5e32d": "唯徳知识产权管理系统WSFM.asmx接口处存在任意文件上传漏洞【漏洞复现|附nuclei-POC】", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247496835&idx=3&sn=fa9a0186121dfa64695dfa00b19d5c63": "46套.NET系统漏洞威胁情报(11.22更新)", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247485477&idx=1&sn=74afe3ed5ffcf53ac41c650caca11a8c": "渗透测试案例 | 证书站学校漏洞挖掘（二）", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491493&idx=1&sn=56900827d378769e852f6e8156d11723": "漏洞预警 | 用友U8CRM SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491493&idx=2&sn=eec065507b8e7d33941479b5993c6549": "漏洞预警 | 东胜物流软件SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492777&idx=1&sn=ef4ff5dc13310669908290adea738af0": "oss存储桶遍历漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655259678&idx=1&sn=ea20f839d02e7018fcce1cce35a79cbf": "2023年最常被利用的漏洞（文末附下载）", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486827&idx=2&sn=d13fe2d0facfb9fb05228edda6e07f55": "几个常见的越权漏洞挖掘案例", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488468&idx=1&sn=1d5a120fbf79f5f20c40c15928afde6b": "【未公开】安科瑞企业用电监控预警系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247493600&idx=2&sn=ae16e555ab943ff32aba1b355d5b1204": "【漏洞扫描】Spring框架的漏洞扫描​", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503207&idx=1&sn=6497f0f064f7e89a8020f5e647a74b9c&chksm=f2585f14c52fd6021bdf5f22b41936aad6b5effd57bb959dec7fd2d15b24bcb07748fa1e68b5&scene=58&subscene=0": "雷神众测漏洞周报2024.11.11-2024.11.17", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507450&idx=1&sn=baba096592ba4c2ce7f2849d12b10277&chksm=cfcabeeef8bd37f89467ead114de2ac0cf01ef8fcabc14a2993ad364fd7dbb510b9ab01a82b5&scene=58&subscene=0": "Palo Alto Networks PAN-OS身份认证绕过+远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513122&idx=1&sn=2328bb653dc07fdeeef3cf0c73e59668&chksm=ebfaf302dc8d7a14e755064d7f2b337f6b7ef7a3cb78656a85c0593e14ef07032b3e1dfe7757&scene=58&subscene=0": "苹果官方警告：零日漏洞攻击瞄准Mac电脑用户", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521546&idx=1&sn=deaef16f3522dccfad4051c26652ad09&chksm=ea94a460dde32d76e798dae949a23f4b13024861b106b442b888ab5bd8453b2bb70146379673&scene=58&subscene=0": "这个 root 漏洞已存在10+年之久，影响Ubuntu Linux", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521546&idx=2&sn=c7f1dbf820ea6f896c4235e2f649c13e&chksm=ea94a460dde32d763ef2289b00707d46b02a3ffe5816f4bc782e01b00eee02ceee26ca614b09&scene=58&subscene=0": "Oracle 修复已遭利用的 Agile PLM 0day", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458583634&idx=1&sn=c8830e31a595e1d7bc0c7c16de61a754&chksm=b18c32d886fbbbce924459608b5b0d0264fbc63ab75170ac5be406d2a83685632e819f8c4466&scene=58&subscene=0": "惊喜开班！系统0day安全-IOT设备漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458583634&idx=3&sn=53aa35b505b9bfdfb18d41e18d667703&chksm=b18c32d886fbbbcec2d582409e43ce8f26477a7d97ca397baab16e65b2b303e18496e0e72982&scene=58&subscene=0": "竟长达10年未发现？Ubuntu系统“needrestart”工具曝5个本地提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247529561&idx=1&sn=21097e9ac986115991718b87150558bb&chksm=c14406e4f6338ff244058573e27f16743b6bd43e1a6b57b38f6562338048e20fd086bcf79693&scene=58&subscene=0": "安全巨头惊爆0day漏洞危机：2023年最频繁攻击源揭秘！", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247579721&idx=1&sn=971afc08efdeab4cd0d06a7f9e64bfc3&chksm=e9146873de63e165a30c8430200b8a313541ca00ca678b55d91b9e43a6280c5d142be91a12ed&scene=58&subscene=0": "Helldown 勒索软件利用 Zyxel 漏洞破坏企业网络", "https://mp.weixin.qq.com/s?__biz=MzAwMTg3MDQzOA==&mid=2247510755&idx=1&sn=14cf462f720d108293d240449c17235c": "Windows Kerberos严重漏洞，数百万台服务器遭攻击", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486226&idx=1&sn=5a897675064a978552c301075803bafb": "某微信万能门店小程序系统存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNTM4NDY2MQ==&mid=2247514240&idx=1&sn=4b7f5438cd7c4199916b3120df33bb8d": "从 OSWE 视角看 Web 安全：超越常规，直击代码核心漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486144&idx=1&sn=166219654da105c33fce42c96b6bd656": "某CMS权限绕过漏洞（0Day）", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485732&idx=1&sn=611f82127aceffbb7bcf356e47631a5f": "【漏洞复现】某平台-AdjustWorkHours-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247490422&idx=1&sn=242137d8101352a7fe3a2e724a79e4e1": "【成功复现】英雄联盟手游狼人被动超级加速漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247501504&idx=2&sn=741da5d8dcc2e08936f21c432a3b1f0e": "MITRE公布最危险软件漏洞TOP25榜单", "https://mp.weixin.qq.com/s?__biz=Mzg3NTY0MjIwNg==&mid=2247484932&idx=1&sn=6ddda5c745c0669df5de46b2f6090778": "谷歌 AI Fuzz 工具 OSS-Fuzz 发现 26 个零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMDY3MzQyNQ==&mid=2247484674&idx=1&sn=c7061b7925b3a04237b9bcb4ec86a05f": "SD-WebUI未公开的0Day漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247531402&idx=3&sn=4c9e525c1e8f6faa6231f6fbb165f96e": "上周关注度较高的产品安全漏洞(20241111-20241117)", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484387&idx=1&sn=f887c236bdc1cfcc3e1bc2e90e4ff8e8": "【漏洞复现】九思OA dl任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MjA1MzkyNA==&mid=2655348017&idx=1&sn=ed23e17b16da97060a91c526f6607af2": "Windows Kerberos严重漏洞，数百万台服务器遭攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793215&idx=1&sn=6db9a7f8f3c64ba37acdf0c6b6d0b0ba": "与俄罗斯有关的 TAG-110 组织利用 HATVIBE 和 CHERRYSPY 瞄准亚洲和欧洲", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793215&idx=2&sn=2a8dfb1cbf0b19d2714915b126ddfeff": "谷歌人工智能模糊测试工具AI OSS-Fuzz在开源项目中发现 26 个漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NzE5MzkzNA==&mid=2650366781&idx=1&sn=c92a382681b96823fd363f0d56f48609": "兰州财经大学携手迪普科技，重塑高校Web应用安全管理体系", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247534532&idx=2&sn=a261f488c8598728930e0597a67f9231": "关键的 Windows漏洞使数百万台服务器面临攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247534532&idx=3&sn=dba8388dc8479ac9e8dd44d1d4b25f79": "苹果官方警告：零日漏洞攻击瞄准Mac电脑用户", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247534532&idx=4&sn=b4e11427bfc55900266ecb28c1dc4a23": "安全巨头惊爆0day漏洞危机：2023年最频繁攻击源揭秘！", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491493&idx=3&sn=3907edfc3af9175a4bb7dbb1c2f3cd1f": "漏洞预警 | 电信网关配置管理系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066112&idx=1&sn=00fc32fb2126236a289beba3ec9b7b29&chksm=f36e7d00c419f41616a3b529fd231f5c9cb584fc1c962df2286ebe434d3081d23b39cd91ade2&scene=58&subscene=0": "【安全圈】Ubuntu系统软件中的5个漏洞潜藏了10年才被发现", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247579734&idx=2&sn=08bec6e590889361f84b38ec45c91f6c": "苹果修复了在英特尔 Mac 攻击中使用的两个零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxODIzNzgwMw==&mid=2654070649&idx=1&sn=7374a071aef6011b09c9d30955d225ff": "漏洞盒子特供服务：组建“白帽全明星红队”，企业攻防演练定向“星”选择", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492792&idx=1&sn=37ced8b16b6ca6eb7b9ba0f4c520478d": "十年前的本地提权漏洞影响Ubuntu的needrestart软件", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485055&idx=2&sn=e02f20581acf9d97fc394cada0cf09f0": "CVE-2024-47575 Fortinet FortiManager RCE exp(FortiJump)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496396&idx=1&sn=a2ebb375c7eea2c903770171d6399018": "一个挖掘权限类漏洞的神器", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247502156&idx=1&sn=cc30c475e09a2575e9491af256657f77": "通达OA前台任意用户登录漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489210&idx=1&sn=e6a9c64d5086c776516c1156211848f8": "【漏洞预警】Spring Security大小写敏感校验鉴权绕过风险CVE-2024-38827", "https://mp.weixin.qq.com/s?__biz=MzkzNTQwNjQ4OA==&mid=2247484002&idx=1&sn=ba34798eb0896654775ddedeaae0b242": "一次JS接口到通用信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307839&idx=1&sn=df6784db9ec499ec160ae27590b75fb2": "漏洞盒子特供服务：组建“白帽全明星红队”，企业攻防演练定向“星”选择", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307839&idx=2&sn=f3ba82a2116d70290ed846695c0fd3d0": "AI自动挖洞不是梦，谷歌AI工具OSS-FASZ发现26个开源漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307839&idx=3&sn=1ac2e988e3cf81193aa1fae2f956a1d0": "麻省理工发布2024年最危险的漏洞TOP 25", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066127&idx=1&sn=54cc25bc1157b1fcde3352264a6e6737": "【安全圈】AI自动挖洞不是梦，谷歌AI工具OSS-FASZ又发现26个开源漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MjQ4MjM4OA==&mid=2247521681&idx=1&sn=51efa515b14c56d1eaaf8c64eeaa48b8": "网安周讯 | 间谍利用监控系统漏洞，试图窃取我国国家秘密（十一月第4期）", "https://mp.weixin.qq.com/s?__biz=MzkwNjY1Mzc0Nw==&mid=2247486468&idx=1&sn=86051d4ce2ed3ebd7b3e40c346699628": "漏洞就是黄金", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247487950&idx=1&sn=32c9207fd0007458094dc29cbb18b191": "九思OA dl.jsp 任意文件读取漏洞复现及POC", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489336&idx=1&sn=751a6198afda40267aabb99699f930d2": "宏景eHR uploadLogo.do 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247498660&idx=1&sn=2ae1b79058ee95e417df3e8431156bfb": "Nacos Derby命令执行漏洞利用脚本（11月22日更新）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066127&idx=4&sn=1c50f0f483942910d6d8ae2633bccc0b": "【安全圈】麻省理工发布2024年最危险的漏洞TOP 25", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247523053&idx=1&sn=dd5d54765d1a5481c3116c6d66a97fed": "命令执行漏洞绕过方法总结", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247551673&idx=1&sn=8abf20688cefbe86bf1f6b3c7174d82e": "“赏金猎人”自述，漏洞挖掘错误示范", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517238&idx=1&sn=fae22190772c451f5618b4e3c8d0ca5a": "Src漏洞挖掘-拼出来的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500272&idx=2&sn=ea13352d874cc569065c249b3d247830": "【漏洞通告】NVIDIA Base Command Manager身份验证缺失漏洞（CVE-2024-0138）", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247487737&idx=1&sn=4f638de3392347a0fcee5155e547abab": "躺平预告！漏洞挖掘的赚钱姿势", "https://mp.weixin.qq.com/s?__biz=MzI4ODQzMzk3MA==&mid=2247489331&idx=1&sn=300968c94c2ac2b251996282239a53c8": "美国陆军网络司令部采取措施提高网络部队战备水平", "https://mp.weixin.qq.com/s?__biz=MzU4NjY3OTAzMg==&mid=2247513955&idx=1&sn=923da021debec235889db519f754c173": "真正的高情商，是懂得换位思考", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491510&idx=2&sn=0f84fae523fa2e5f79aee11f50aae80c": "漏洞预警 | PostgreSQL代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491510&idx=3&sn=c9e45826a8f893b0ce9b8e8076a791d7": "漏洞预警 | D-Link NAS设备远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247495915&idx=1&sn=020b2f604f3c234afc5e660021041671": "ATK&CK红日靶场二，Weblogic漏洞利用，域渗透攻略", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488491&idx=1&sn=6a3cb2f9ea810a751d4367d0156e0c71": "【未公开】HertzBeat(赫兹跳动) 开源实时监控系统存在默认口令漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NTA3MTk5Ng==&mid=2247489645&idx=1&sn=dc385caabf6e354e8b3f586013cfed8e&chksm=fe76defec90157e835ae85c463b0ae6e799306276e550ac85a8dd802a1a61e56d88d976294ee&scene=58&subscene=0": "7zip 远程代码执行漏洞预警，需手动更新", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247496835&idx=3&sn=fa9a0186121dfa64695dfa00b19d5c63&chksm=fa595a6ecd2ed378686b50cd0be5ad9e5ba403bf2be74e926f03ad72cc6d7b6821aced2b44ee&scene=58&subscene=0": "46套.NET系统漏洞威胁情报(11.22更新)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066127&idx=1&sn=54cc25bc1157b1fcde3352264a6e6737&chksm=f36e7d0fc419f419eba06e5a96d15df8e4c6984457ffe2caa95bdb960aa38174100f2f438f01&scene=58&subscene=0": "【安全圈】AI自动挖洞不是梦，谷歌AI工具OSS-FASZ又发现26个开源漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066127&idx=4&sn=1c50f0f483942910d6d8ae2633bccc0b&chksm=f36e7d0fc419f41947fb8dfdbb8302260500102916778a3058e716cddad6866b03c80673964d&scene=58&subscene=0": "【安全圈】麻省理工发布2024年最危险的漏洞TOP 25", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247579734&idx=2&sn=08bec6e590889361f84b38ec45c91f6c&chksm=e914686cde63e17a3e9d0fe369c64911ea3359b0b369da29c48c61b965559c58d45770f9318a&scene=58&subscene=0": "苹果修复了在英特尔 Mac 攻击中使用的两个零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496396&idx=1&sn=a2ebb375c7eea2c903770171d6399018&chksm=e8a5f8afdfd271b9e72e65707f45a371988542d91fcd771ee4c4a9b669ceb49a7ffae1b358f8&scene=58&subscene=0": "一个挖掘权限类漏洞的神器", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489348&idx=1&sn=57152c749e1fa98e23c06d16f56b0aca": "D-Link NAS设备 account_mgr.cgi 未授权RCE漏洞(CVE-2024-10914)", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487350&idx=1&sn=5f3311767fe864aef3c68c094f461aa3": "国外黑五安全系列证书折扣信息情报", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247485312&idx=1&sn=f3b84766e32e10f553afbde753d0b3de": "理解 Kubernetes 初始访问向量的意义 第 1 部分 – 控制平面", "https://mp.weixin.qq.com/s?__biz=MzU0MzgzNTU0Mw==&mid=2247485711&idx=2&sn=61cb6de4818db882ccd7eeb25f2e8699": "网络安全顶刊——TIFS 2024 论文清单与摘要（2）", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307976&idx=2&sn=8e3bbfdc4054ea7b03a154d585876797": "FreeBuf周报 | 越来越多的国家正为黑客“松绑”；WordPress插件漏洞暴露数百万网站", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307976&idx=4&sn=9362fa49f92401856aa73558f94629a0": "msiscan：一款针对msi文件的漏洞检测与识别工具", "https://mp.weixin.qq.com/s?__biz=MzkxNjU2NjY5MQ==&mid=2247507863&idx=1&sn=1b1c0e424abdccbd8e79df82c9cc585c": "2024科创西安·SSC网络安全大会全议程公布", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247505413&idx=3&sn=4eba1176824ef0e726e217c9b3836c8c": "5th域安全微讯早报【20241123】282期", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650603953&idx=1&sn=1c59068543e3af0da779dc17e1d431de": "Ubuntu发行版修复5个本地提权漏洞，已潜伏10年；AI自动挖洞不是梦，谷歌AI工具OSS-FASZ又发现26个开源漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650603953&idx=3&sn=660716c4fb5acb0699dc9973bab536a5": "比较有意思的几个漏洞挖掘记录", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793228&idx=2&sn=e53354ae3aa95065b3653b45faa3f9e8": "AnyDesk 存在严重漏洞，攻击者可获知用户 IP 地址", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491510&idx=1&sn=8889365d909baddbf466c1382f618cae": "漏洞预警 | Palo Alto Networks Expedition命令注入、SQL注入和明文存储漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492627&idx=2&sn=b1c52bcb9dfa346416b2c2d7097795ac": "winzip、7z 压缩软件存在漏洞需警惕以及一条不可信的 Linux 0day 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247506234&idx=1&sn=35d8397e1d12dd97caafd000e386e08e": "全新发布！通用2.0漏洞奖励计划及第五期活动", "https://mp.weixin.qq.com/s?__biz=MzkxMTIyMjg0NQ==&mid=2247495369&idx=1&sn=2f4dca5df80b47c58fa0364fd6167d50": "发现Web API漏洞居然能赚到400w刀，看懂这本书你也可以！", "https://mp.weixin.qq.com/s?__biz=Mzg2NDg2MDIxNQ==&mid=2247485168&idx=1&sn=e2f04e624add36a9d609048e6db7267c": "某CMS权限绕过漏洞（0Day）", "https://mp.weixin.qq.com/s?__biz=MzU0MzgzNTU0Mw==&mid=2247485711&idx=4&sn=13a141bc92101e550c51705ac5abc93a": "网络安全顶刊——TIFS 2024 论文清单与摘要（4）", "https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650557639&idx=1&sn=69f571bf32068c46aa71a5ab4226af8f": "秘密监视：步行跟踪策略战术", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486829&idx=2&sn=7cf00cc43f75e4a7074ebbb9e74ff118": "中间件常见漏洞总结", "https://mp.weixin.qq.com/s?__biz=MzkzNjQwOTc4MQ==&mid=2247489857&idx=1&sn=397e54275d6e4ef14b7af11b370c9b6c": "SBSCAN Spring框架渗透，这一个工具就够了|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066187&idx=4&sn=c4be9926d771d2293619bbe2dcc12b29": "【安全圈】D-Link忽视旧款VPN路由器补丁更新，关键漏洞未修复", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517184&idx=1&sn=15c853eb8c0706dd914700d4f9767b34": "某一cms后台代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485696&idx=1&sn=d90cc63a8343e76984f47b6e6bbdda53": "CVE-2024-0012｜Palo Alto Networks PAN-OS身份验证绕过漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485696&idx=2&sn=8e325ace3beff8fb6bb77abdf6aef414": "CVE-2024-52301｜Laravel注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NzUyNzMzMQ==&mid=2247485420&idx=1&sn=6ced63536d257eb9a51206fdf47729f2": "MQ有什么作用？三大主流MQ产品简介", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496402&idx=1&sn=422c6ca4f7b1746667036bd4bf365772": "如何将低危的 SSRF 盲注升级为严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517242&idx=2&sn=d73884228963ae7309105e3271efd5bc": "建了个SRC专项漏洞知识库", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485967&idx=1&sn=5db816f99e67288e249ffd001c782213": "Java漏洞平台 - JavaSecLab", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247497668&idx=2&sn=5d070cb9d29875dc8b46f874c089b1cc": "2024年最危险的25个软件漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517193&idx=1&sn=dc920188162b0391540fa94f4df48e1f": "JeecgBoot小于3.6.0版本存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247504672&idx=3&sn=ed9021232258b0b0f82fe649895293c9": "7-Zip 文件压缩工具中的漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650603968&idx=1&sn=f3fb57764ff573556885d19380bb807f": "2024年10月涉国内数据泄露事件汇总", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650603968&idx=4&sn=b16df9e7b17203b94b8d4bb276ef6a31": "masscan全端口扫描==>httpx探测WEB服务==>nuclei&xray漏洞扫描 | 解放双手", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486831&idx=2&sn=dfa1ce1292893eeb735c75b1616a0d00": "蓝队研判技巧（一）-- 基础篇&WireShark篇", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488502&idx=1&sn=49a37de4ad390d82ad780bff943a670f": "【漏洞复现】通达OA submenu存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247506234&idx=1&sn=35d8397e1d12dd97caafd000e386e08e&chksm=eaf99176dd8e1860091a84caca1efee71b5e8045d02839778d7ffedf0c3aaa73f4cafba1c0ef&scene=58&subscene=0": "全新发布！通用2.0漏洞奖励计划及第五期活动", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066187&idx=4&sn=c4be9926d771d2293619bbe2dcc12b29&chksm=f36e7dcbc419f4ddb491db67e4fc6ec1515f6d7f688561be3515419ed7095a39ba6fc3b91bf9&scene=58&subscene=0": "【安全圈】D-Link忽视旧款VPN路由器补丁更新，关键漏洞未修复", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486119&idx=1&sn=f27289aad01150f8ee6f13c36a077d40": "「漏洞复现」爱数 AnyShare智能内容管理平台 Usrm_GetAllUsers 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486235&idx=1&sn=cc005d242a63cc3483b2e12fb4951f2a": "某短视频系统视频知识付费系统存在前台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650619094&idx=1&sn=8fb0a01132a587bf37499a93e34978b1": "安恒信息CTO刘博：三大措施护航数据跨境流动", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524448&idx=1&sn=522dbb27a7195dd88f717fdcdc6412df": "CVE-2024-8811：WinZip 缺陷允许恶意代码执行", "https://mp.weixin.qq.com/s?__biz=MzkxNTY3MTE5MA==&mid=2247485530&idx=1&sn=b84e14ab32e6680977a4cf8306e0387e": "使用未知技术发现多个 XSS 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614242&idx=1&sn=e30b1710946dd50ec45296d7c2a8ecff": "通过 API 配置错误和逻辑漏洞实现账户接管", "https://mp.weixin.qq.com/s?__biz=MzU2MDE2MjU1Mw==&mid=2247485970&idx=1&sn=8448a8df8be78c94494b298d878c2e8a": "团队首个系列课程开班！系统0day安全-IOT设备漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzUyMTE0MDQ0OA==&mid=2247493842&idx=1&sn=56b5e7020601e1445bf2b6b280657435": "发现Web API漏洞居然能赚到400w刀，看懂这本书你也可以！", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247495953&idx=1&sn=ea2dfd3fc4c7933ad3e1aa98c2c541e9": "Goby2024红队版工具分享，附2024年漏洞POC下载", "https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247491674&idx=1&sn=62545629199e7669f3555330c6303e65": "威胁情报的尴尬：是个好能力，但不是个好生意！", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247490042&idx=1&sn=04e5e7e89b24ef9eb1888ccf83229af0": "2024年wordpress、d-link等相关的多个cve漏洞poc", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484717&idx=1&sn=e1d048f5109ecfba86cb97c5063b24dc": "【漏洞复现】CVE-2024-24809", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066203&idx=3&sn=98b7c0046c725ff8299a89a706c8ee43": "【安全圈】苹果解决了两个被积极利用的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247516991&idx=1&sn=caeac624646b0fcb5fb20a73d33bc685": "师傅们，一个超稳的程序员私活渠道！", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491521&idx=2&sn=aefd1e87e73cf6bb535e2f91d40b296f": "漏洞预警 | 安克医疗急救办公管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486833&idx=1&sn=74a9507725011aa5968303d7c1fd8d66": "SpringSecurity权限绕过漏洞-好玩", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247502670&idx=2&sn=bdbc685d6f5bb170dfe02972cd4c253b": "Windows Kerberos严重漏洞，数百万台服务器遭攻击", "https://mp.weixin.qq.com/s?__biz=MzU5OTMxNjkxMA==&mid=2247487727&idx=1&sn=7156e54f2ac19f75b82ed23dda677f5d": "【文末送书】发现Web API漏洞居然能赚到400w刀，看懂这本书你也可以！", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485736&idx=1&sn=114a83c2221cd4da61acf679026002b8": "【漏洞复现】某平台-cwsfiledown-DownFileBytes-任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484388&idx=1&sn=ef6fed2e7d12fc7b14b6f661f7a3390e": "【漏洞复现】明源云ERP报表 GetErpConfig.aspx存在信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwNjY1NjI2Mg==&mid=2247487351&idx=1&sn=8e73398873f8ff68deb9f1569edbc0ba": "漏洞挖掘-小白编写人生中第一个漏洞利用脚本", "https://mp.weixin.qq.com/s?__biz=MzIzMzE2OTQyNA==&mid=2648958230&idx=1&sn=437f3c5bb26667570286aa98bf84e96f": "静水深流 | 第2届BUGPWN TSCM黑盒挑战赛 • 顺利闭幕", "https://mp.weixin.qq.com/s?__biz=MzA4NzU1Mjk4Mw==&mid=2247492091&idx=1&sn=5f68436b2b04ad659f177f8cc67ddb87": "某FE平台一键漏洞综合利用工具", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488519&idx=1&sn=9089dcb5fc0277a2d59afdaa0b75e81c": "【0Day】《黄药师》药业管理软件SetMedia_Picture_info存在SQL注入漏洞导致RCE", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066203&idx=3&sn=98b7c0046c725ff8299a89a706c8ee43&chksm=f36e7ddbc419f4cdfd1a5b1325eeaa6a76fad3e86c3a04d39a3c93255a412bb3e8ee77745d9d&scene=58&subscene=0": "【安全圈】苹果解决了两个被积极利用的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787467&idx=1&sn=a415a569eadfb841c7db9ab18a3b9dee": "致命漏洞与暴露API：财富1000强企业面临的30000个暴露API和10万漏洞挑战", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503214&idx=1&sn=419458f95fb9a47435385dd26d072abf": "雷神众测漏洞周报2024.11.18-2024.11.24", "https://mp.weixin.qq.com/s?__biz=MzkyMTY1NDc2OA==&mid=2247487197&idx=1&sn=7d93cc6c308fb83bd7d7013fa924e5b6": "【SQL注入】用友NC process SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247488369&idx=1&sn=6cd730f5c98d9fdf6cdb6a9073c0370e": "API攻防 | Web API 安全漏洞挖掘指南！", "https://mp.weixin.qq.com/s?__biz=Mzk0NTY5Nzc1OA==&mid=2247484135&idx=1&sn=cbb43d16d8b8a261b1b7a85fc0ebdcc8": "一文读懂CSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133534&idx=1&sn=4d8595e4bea300bb4866eb3150c9415e": "违反《网络安全法》相关规定，快手被依法处罚；警惕基于已知漏洞的链式攻击，超2000台Palo Alto防火墙或被攻陷 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524518&idx=3&sn=2fd0a6c6bfc0e72a2a2a26b4c44bc48c": "CVE-2024-11612 7z 24.07 中的无限循环拒绝服务漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247545415&idx=1&sn=3263c9c7028760229121597d480ea8de": "某大学图书管理系统刷积分逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614256&idx=1&sn=08a44a39bc09b3418b09f2b8d5b58ce4": "研究217篇子域接管漏洞报告后的总结", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492807&idx=2&sn=3512827d10788f7e4f010e0049490225": "超过2000台Palo Alto Networks防火墙遭到黑客攻击，攻击者利用了最近才修补的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484559&idx=1&sn=cd577a9a506f9849a954661ecb56bb8b": "科荣AIO系统UtilServlet接口处存在代码执行漏【漏洞复现|附nuclei-POC】洞", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247487937&idx=1&sn=163591ce7da4e37e1e72bd1e0038cdf9": "破解命令注入漏洞：详解原理、绕过技巧与防护策略", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486128&idx=1&sn=ac548c4ae7d280103751b6bf9942e20b": "「漏洞复现」万能门店小程序管理系统 doPageGetFormList SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzI2OTExNA==&mid=2247517446&idx=1&sn=18ecc069c3990680cc3255f3b5a23c23": "MiSRC 年末漏洞冲刺活动来啦~", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489358&idx=1&sn=7231e758676223aad81806ee8dcf9166": "海信智能公交企业管理系统 OrgInfoMng.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyNzc3OTMzNw==&mid=2247485585&idx=1&sn=f41a6231836188c432550043679f719a": "文件解析常见漏洞总结", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg1MTA5MQ==&mid=2247484499&idx=1&sn=a28feef48d1c9886d8ddce271345ab85": "Redis未授权主从复制RCE复现", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486155&idx=1&sn=1b1603ee917c845b68ffba4b8eb781ab": "2024年wordpress、d-link等相关的多个cve漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491521&idx=1&sn=368be5edbb0ac65b9c3b5406ab701311": "漏洞预警 | 九思OA任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491521&idx=3&sn=24b3cda574e362b3dbbc7af3c9b155ae": "漏洞预警 | 点企来客服系统硬编码未授权漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664230517&idx=2&sn=103a03cb82a9041a72826663501442ca": "行业 | 360发布全球首份《大模型安全漏洞报告》，曝光近40个大模型相关安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyODYwODkyMA==&mid=2247484671&idx=1&sn=cd35e6350147a8c6d15120f17e7b92b9": "漏洞赏金技巧：初学者指南（2024）#1", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308150&idx=1&sn=25041361b6aca54e30775e0d66a4fa73": "第一次听说漏洞复现也能赚钱", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485133&idx=1&sn=013e17107262c7137b40f35a47048274": "漏洞推送|智互联(深圳)科技有限公司SRM智联云采系统receiptDetail存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247577005&idx=1&sn=45569d8a6f70fa7ab394d043381adb81": "360发布全球首份《大模型安全漏洞报告》，曝光近40个大模型相关安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMDE5MDI5Mg==&mid=2247508083&idx=1&sn=48f1c664f56d8eb5ef2212804aad2556": "360发布《大模型安全漏洞报告》，曝光近40个大模型相关安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247523110&idx=1&sn=5b2e35f317b48b868138162c94b3bdd7": "Funbox 2靶场复现", "https://mp.weixin.qq.com/s?__biz=MzkxMDU5MzY0NQ==&mid=2247484372&idx=1&sn=374fa600bcd042cb385cec46878818c0": "发现Web API漏洞居然能赚到400w刀，看懂这本书你也可以！", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458583804&idx=1&sn=318890b03d7a568f25f59d831941f5c2": "【即将开课】系统0day安全-二进制漏洞攻防（第4期）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521578&idx=1&sn=0f7082c24d8e05dca215004ae796d61e": "Fuzzing 升级：谷歌通过AI找到更多漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247551685&idx=2&sn=77d41a70b217346e4762a74c23babafb": "【免费领】网安从业必备：Web漏洞检测及修复方案大全", "https://mp.weixin.qq.com/s?__biz=MzkyMDY5OTg5OA==&mid=2247490891&idx=1&sn=f7433f293512678a138b61f93c55fdae": "发现Web API漏洞居然能赚到400w刀，看懂这本书你也可以！", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486250&idx=1&sn=8b305d21f87a1e736024abb557ee63ed": "【工具分享】Goby最新红队专版下载(1400+POC)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502478&idx=1&sn=d1a9a4086615e34a4a8201b45e7437ab": "安全热点周报：黑客利用两个零日漏洞攻破 Palo Alto Networks 的数千个防火墙", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495521&idx=1&sn=6649ccb65cd3e433867839f03da0a51a": "CNVD漏洞周报2024年第47期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495521&idx=2&sn=4069536b30f554d918f90e57ea5cc152": "上周关注度较高的产品安全漏洞(20241118-20241124)", "https://mp.weixin.qq.com/s?__biz=MzkxNTU5NTI1Ng==&mid=2247486373&idx=1&sn=442fc8ebf2bf840b6ec293d62c61d6c4": "发现Web API漏洞居然能赚到400w刀，看懂这本书你也可以！", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500278&idx=2&sn=f1125d68609aab5df300a355bc040f5e": "【漏洞通告】7-Zip代码执行漏洞（CVE-2024-11477）", "https://mp.weixin.qq.com/s?__biz=MjM5MTAzNjYyMA==&mid=2650594538&idx=1&sn=3586252dfce4cb97f754b3330c526052": "深信服科技与深城交达成战略合作，共绘智慧交通新蓝图", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyMDE4OA==&mid=2247483918&idx=1&sn=f8c05c481a43f7a6f237fef034ec65cb": "国有企业采购效率提升策略与实践探索", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492648&idx=2&sn=d03f904c8980359f172c2444b3c3426d": "财富 1000 强企业中发现3万个API 暴露 和 10 万个 API 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247484683&idx=1&sn=f9b5725f7b10c518772104c7027a91d9": "【漏洞分享】泛微OA漏洞 任意文件读取 OA E-Cology ln.FileDownload 任意文件读取", "https://mp.weixin.qq.com/s?__biz=MzkxODUxMzE1Ng==&mid=2247484040&idx=1&sn=f773f544e7432083f3e181e671a5a0e9": "NDSS 2025新作 | 靠谱的第三方库？VULTURE破解1-Day漏洞难题！", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489215&idx=1&sn=2751e48cc12fef96b1ec3c01e4b5231d": "【漏洞预警】7-Zip代码执行漏洞CVE-2024-11477", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517314&idx=1&sn=fc0ab6144bd8ce810365c8ba8257f554": "比较有意思的几个漏洞挖掘记录", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247518395&idx=1&sn=6c2bed06566ca93bc1536d78e19029a0": "漏洞挖掘｜遇到APP数据加密如何解密测试", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247496018&idx=1&sn=956febb67d5ca7bf7a5fcfc7081882fc": "HTB-Chemistry靶机渗透，CVE-2024-23334系统目录遍历，导致权限提升", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490016&idx=1&sn=06f0f108f0e7392bcfc6fe22c487fc23": "IaC 和 PaC 工具中的网络安全缺陷使云平台面临新的攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308150&idx=4&sn=aa3e8e9a372353b8edcbdd2ebc74f5e3": "EmbedPayloadInPng：一款图片文件Payload嵌入工具", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247487959&idx=1&sn=981fb1ea9387be08c67c81aaa2c81503": "SRM智联云采系统receiptDetail SQL注入漏洞复现及POC", "https://mp.weixin.qq.com/s?__biz=MzkxODUxMzE1Ng==&mid=2247484045&idx=1&sn=824549aef0519d9de2e444832a901154": "NDSS 2025新作 | 靠谱的第三方库？VULTURE破解1-Day漏洞难题！", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517265&idx=1&sn=12f3ccf4ea4997016ef704f9c957f4c6": "JAVA代码审计-悟空crm客户管理系统fastjson漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247498679&idx=1&sn=8ba88739d244d4773cd4ad10d7aa2c5f": "Spring Cloud Data Flow高危漏洞（CVE-2024-37084）", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491522&idx=1&sn=753a850a133fa83a1764a999a4f9e9d0": "漏洞预警 | Apache Ofbiz表达式注入和模板注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491522&idx=3&sn=48ccdcd946e23b1b3570ee45a58afa87": "漏洞预警 | 赛普EAP企业适配管理平台任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655260023&idx=2&sn=47fb2b5e1ab8fd68800dc6142c1a1b0e": "大模型安全漏洞报告（2024）", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488553&idx=2&sn=c69ecd36534694ac5dc71eccfbce4476": "【1Day】北京亚控科技发展有限公司KingH5Stream系统存在逻辑缺陷漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247514932&idx=1&sn=e430e5f4c10c0abdc15e9b3a88d5bcda": "远程未授权访问漏洞（CVE-2024-23692）", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291892&idx=1&sn=16232968dc31a684908bfce05cb873a9": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521578&idx=1&sn=0f7082c24d8e05dca215004ae796d61e&chksm=ea94a440dde32d56ec3122aaba3a62cee4ca60aa29749436b95da39412ef8c8c80b43a0fc000&scene=58&subscene=0": "Fuzzing 升级：谷歌通过AI找到更多漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458583804&idx=1&sn=318890b03d7a568f25f59d831941f5c2&chksm=b18c327686fbbb60e21ce64ca42b1fc691b7ac609b8f2b2de36b06547fc0b2bc58a1014e0449&scene=58&subscene=0": "【即将开课】系统0day安全-二进制漏洞攻防（第4期）", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503214&idx=1&sn=419458f95fb9a47435385dd26d072abf&chksm=f2585f1dc52fd60bfa726ed2b9c2ffce6536e21abfdad69a34aea5eca4347e8ba90ddec3f595&scene=58&subscene=0": "雷神众测漏洞周报2024.11.18-2024.11.24", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664230517&idx=2&sn=103a03cb82a9041a72826663501442ca&chksm=8b59ec8cbc2e659a3b99b5bf2b64c1a7d5055f8168d08a4416dd330d7996fac026c27f63becf&scene=58&subscene=0": "行业 | 360发布全球首份《大模型安全漏洞报告》，曝光近40个大模型相关安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502478&idx=1&sn=d1a9a4086615e34a4a8201b45e7437ab&chksm=fe79ee16c90e6700e34fd8339084f26d1309f53c4329210e4a2357249459e4a6bc5889c2201e&scene=58&subscene=0": "安全热点周报：黑客利用两个零日漏洞攻破 Palo Alto Networks 的数千个防火墙", "https://mp.weixin.qq.com/s?__biz=MzI2NzI2OTExNA==&mid=2247517446&idx=1&sn=18ecc069c3990680cc3255f3b5a23c23&chksm=ea83a393ddf42a85de6009bcd55d708d0343a534015d3991cf6e61f907adeed1fdd31902b7ec&scene=58&subscene=0": "MiSRC 年末漏洞冲刺活动来啦~", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495521&idx=1&sn=6649ccb65cd3e433867839f03da0a51a&chksm=fd74dfa8ca0356bef0e7c826f36a22f140a18ec4cfd87ac4b086e70dc1628f916421e0b5a073&scene=58&subscene=0": "CNVD漏洞周报2024年第47期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495521&idx=2&sn=4069536b30f554d918f90e57ea5cc152&chksm=fd74dfa8ca0356bed98817494ed18b727fe3235c8b8ff77f0cab76eac3e5308c9b48f05e150a&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241118-20241124)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496424&idx=1&sn=9edd1b8c5ee4cd0f5995cccd9e27ed60": "如何通过发现 API漏洞赚到百万美刀", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485740&idx=1&sn=70d618368ff0c6d944851ff490e15f2c": "【漏洞复现】某平台-quickReceiptDetail-mysql-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489386&idx=1&sn=3c24e2c2b38b5df8b3e850eb205aead7": "企望制造ERP系统 drawGrid.action SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650604116&idx=1&sn=136a27f092c3f30997dcb2076cd82772": "千万别点！微信群里的这种通知或为木马病毒；|苹果手机Apple ID出现异常将被锁定 当心有诈", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650604116&idx=4&sn=ceb9ab3ac68656923acac319802e4014": "oss存储桶遍历漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzUzMDQ1MTY0MQ==&mid=2247506274&idx=1&sn=ccd7afe62e4048dec6c81ca274ada35a": "某乔ERP系统存在RCE漏洞，附POC脚本！", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247485526&idx=1&sn=83c86c7622aa056c3fb05b3350da67c1": "第一次听说漏洞复现也能赚钱", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260178&idx=1&sn=098908c02bb95ced851c66a9c0c40ed6": "通过 PDF 打印功能利用SSRF访问内部数据", "https://mp.weixin.qq.com/s?__biz=MzkwNTE4Mzc2Mg==&mid=2247486457&idx=1&sn=0b986375dbe83c422290a4c996b1f89e": "【漏洞复现】致翔OA接口open_juese.aspx存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484389&idx=1&sn=e3cac6c2d8f4b76f14984ceda7aba4a9": "【漏洞复现】ArcGIS地理空间平台manager任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247496912&idx=3&sn=d99b8b1741aab3fe4bd98179f0eebe8d": "47套.NET系统漏洞威胁情报(11.26更新)", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247493634&idx=1&sn=91faff1eb1edaa51d5d24af57bc275f5": "【神兵利器】Spring-Boot漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787467&idx=1&sn=a415a569eadfb841c7db9ab18a3b9dee&chksm=8893bc24bfe43532392925113583d6bbcea38b01befd64f366890a21434cf7ffee6ad2e10535&scene=58&subscene=0": "致命漏洞与暴露API：财富1000强企业面临的30000个暴露API和10万漏洞挑战", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247577005&idx=1&sn=45569d8a6f70fa7ab394d043381adb81&chksm=9f8d3da5a8fab4b330598d784f6807b7a95c24777142828bee09e616609e718c2da49868b04a&scene=58&subscene=0": "360发布全球首份《大模型安全漏洞报告》，曝光近40个大模型相关安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0OTIwMjE2NA==&mid=2247485878&idx=1&sn=41c526462222e613d6b8a46a258fc7b1": "媒资安全×漏洞马拉松，多重福利等你来！", "https://mp.weixin.qq.com/s?__biz=MzA3MTUxNzQxMQ==&mid=2453885640&idx=1&sn=3e1ceccffe2678ec0472652487d4ac43": "文件暗码，外发文件溯源的绝佳手段", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247490096&idx=2&sn=d925e859b0508219fd163edb4e9ef899": "著名压缩工具7-Zip 存在远程代码执行漏洞——CVE-2024-11477", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614283&idx=1&sn=43cf42404e86e428a63f065ac7c7d18c": "漏洞挖掘 | 绕过 Mozilla 的邮箱验证", "https://mp.weixin.qq.com/s?__biz=Mzg5NTY3NTMxMQ==&mid=2247484513&idx=1&sn=6620bd18c90e154db5afbba6371d9f05": "突破clade-3.5的AI 限制，实现POC利用", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484560&idx=1&sn=690e025ba9f4b065f60beac01efbced1": "Nacos未授权下载配置信息【漏洞复现|附nuclei-POC】", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486281&idx=1&sn=e5c9ba6462797f393b09d5cf7ed0ec40": "记一次小程序渗透测试到通杀RCE(0day)", "https://mp.weixin.qq.com/s?__biz=Mzk0MzY1NDc2MA==&mid=2247484196&idx=2&sn=7908876fe839978c7098227a1c40ccf2": "如何识别注入漏洞？", "https://mp.weixin.qq.com/s?__biz=Mzg2NDc0MjUxMw==&mid=2247485999&idx=1&sn=b66589de46fcaf731909c886a644b92a": "Microsoft 11 月 CVE 漏洞预警", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492819&idx=2&sn=57c085aa5c2d43f592f7a4fd79265fcf": "恶意软件campaign利用Avast Anti-Rootkit驱动程序的漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQ0Mjc5NA==&mid=2649766163&idx=1&sn=c4a6fc892c0cda56d40ffe8e86afb2e3": "2024漏洞马拉松启动 | 白帽群雄角逐下一个冠军！", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247551698&idx=1&sn=86a6698544ff900cd850608cfa23afd8": "kernel heap exploit（三）", "https://mp.weixin.qq.com/s?__biz=MzkyODYwODkyMA==&mid=2247484677&idx=1&sn=f9c76215185fdf633008ba959541c780": "2024 漏洞赏金猎人手记：100条建议", "https://mp.weixin.qq.com/s?__biz=Mzk0ODU4MjIyNQ==&mid=2247484028&idx=1&sn=9856b8e5c7979e3376ee7dcf2e8bc56f": "【逻辑漏洞】并发漏洞——经典案例", "https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659211186&idx=1&sn=cfd66bc5142c59bc6a545bfde59d87a3": "圣乔ERP系统 login.action Struts2远程代码执行漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486138&idx=1&sn=b6054453c30e7c173804294105f13c55": "「漏洞复现」海信智能公交企业管理系统 AdjustWorkHours.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650209204&idx=1&sn=be4c88610fe1af349e023660bf415d25": "从一条威胁告警发现隐蔽的“毒蛇”", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247529673&idx=2&sn=4be9b199d8cdefa9826eccfe333fb5fc": "360发布《大模型安全漏洞报告》，曝光近40个大模型相关安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NTY5Nzc1OA==&mid=2247484146&idx=1&sn=f23706c715c5c04c0c6b1426a7652919": "log4j2漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499503&idx=2&sn=2dd6b3cf1b47ac7226dad142622fa875": "CNVD漏洞周报2024年第47期", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489223&idx=1&sn=205f609c84baae1ebb2d95de24b1d1d6": "【漏洞预警】ProjectSend身份认证绕过漏洞(CVE-2024-11680)", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247513144&idx=1&sn=6a175e131cf78cf6c45b6124b96693e1": "网安瞭望台第5期 ：7zip出现严重漏洞、识别网络钓鱼诈骗的方法分享", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247622787&idx=3&sn=3013db7374fa46c5082b496c870e7e7a": "网安巨头Palo Alto全球数千防火墙被攻陷：因开发低级错误造成零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487845&idx=1&sn=74f2e12a7ee52cc1c5b172b92996f7de": "用友NC process接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzU3OTAyODk4MQ==&mid=2247491032&idx=1&sn=3278fce857c70113b46fabacea552745": "2024漏洞马拉松-顺丰站", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247484817&idx=1&sn=25d5bcb234940ebd9375f2b0e4c6b875": "Sitecore 8.x - 10.x存在命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094118&idx=2&sn=10e10c3cc36bd2eff3732e38beb4eb93": "网安巨头Palo Alto全球数千防火墙被攻陷：因开发低级错误造成零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664230673&idx=2&sn=6b7f7b55158483f87608d00cc4d2ea5d": "360发布大模型安全警报：近40个漏洞易被利用，60美元即可投毒", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308240&idx=2&sn=e6acef1171ac52d2e1162e1539b675bf": "低成本就能给大模型投毒？360发布全球首份大模型漏洞报告", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247514955&idx=1&sn=a3cbc42a77d14a37a48849100d56e651": "漏洞及指纹库图形化工具 -- James_synthesis_tooL（11月25日更新）", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652112824&idx=2&sn=ba8da830bfc3dd407d24615dc877f83e": "IBM 修补数据虚拟化管理器、安全 SOAR 中的 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247498696&idx=1&sn=9c603a5712d1a1ba5d3bde85205229f7": "远程代码执行（RCE）漏洞（CVE-2024-21534）", "https://mp.weixin.qq.com/s?__biz=Mzg4Njc1MTIzMw==&mid=2247485743&idx=1&sn=9652ab072c993e40c94de41663922053": "CVE-2024-52940 AnyDesk信息泄露漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247502158&idx=1&sn=b7dea73e6af39dee17845a15008c708c": "【SRC】未授权访问漏洞引发的惨案.......", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490022&idx=1&sn=37f02ae85e0d9bd765b907537eb5f3ba": "RomCom 利用零日漏洞进行复杂的网络攻击 Firefox 和 Windows", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066233&idx=2&sn=778f80b7b5c35162dd41acacfbd17148": "【安全圈】慎用，知名压缩工具7-Zip存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308240&idx=1&sn=96d32c8e6fa90561c84164ed75f4dca0": "慎用，知名压缩工具7-Zip存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521595&idx=1&sn=d9644a20742d498ecf898b968d561b3f": "QNAP修复NAS、路由器软件中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458584063&idx=3&sn=5bf1818d9d0e1dff3711c115252597a1": "惊喜开班！系统0day安全-IOT设备漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzNzU5MDMxOA==&mid=2247484175&idx=1&sn=429aa490070bfae233ef01e059063fc5": "Feroxbuster-高效发现隐藏路径和漏洞（详细教程）", "https://mp.weixin.qq.com/s?__biz=MzkxODI4NDg3Nw==&mid=2247484737&idx=1&sn=7f597cca81f70fbe397aa00b2c746432": "BoidCMSv.2.0.0 后台文件上传漏洞（CVE-2023-38836）", "https://mp.weixin.qq.com/s?__biz=MzIzMjg0MjM5OQ==&mid=2247487888&idx=1&sn=8f0a8c385bc396bff3cd45c9fabe601b": "semcms存在多处漏洞(水一篇文章)", "https://mp.weixin.qq.com/s?__biz=MzkyNDUyNzU1MQ==&mid=2247486315&idx=1&sn=ad071ba60323b8d34da7086295e30a18": "国家安全部：警惕深度伪造技术带来的安全风险", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513156&idx=1&sn=4ff7c148a1693c0de1be122e65851155": "网安巨头Palo Alto全球数千防火墙被攻陷：因开发低级错误造成零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499503&idx=3&sn=6528a919840c2d4021fa17a6d8572c60": "上周关注度较高的产品安全漏洞(20241118-20241124)", "https://mp.weixin.qq.com/s?__biz=MzU3MDg2NDI4OA==&mid=2247490834&idx=1&sn=eb50a16630b057d2df3d95a093a1641c": "某众测记录｜细心 = or ≠ 漏洞 ？", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521595&idx=1&sn=d9644a20742d498ecf898b968d561b3f&chksm=ea94a451dde32d47c4907aed77bba2cbf43c39f0253c14d24cc227b451f2489e1c88d3ba779a&scene=58&subscene=0": "QNAP修复NAS、路由器软件中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458584063&idx=3&sn=5bf1818d9d0e1dff3711c115252597a1&chksm=b18c337586fbba630100a046b4198faa50cc2da258b8f6dc2574578343be3bd62a44663a82d9&scene=58&subscene=0": "惊喜开班！系统0day安全-IOT设备漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513156&idx=1&sn=4ff7c148a1693c0de1be122e65851155&chksm=ebfaf364dc8d7a72e4199fef7d1a048e052562562dd75a8711db2223934a3508ee05a939365b&scene=58&subscene=0": "网安巨头Palo Alto全球数千防火墙被攻陷：因开发低级错误造成零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651129272&idx=2&sn=55ee9db36adfa0de3888d657ac768e87&chksm=80e71f08b790961eca60cedb47205df6b547a3447a094e4c3d257d73c0efd3dd917861183254&scene=58&subscene=0": "重点防范！官方最新通报一批恶意网址和高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247529673&idx=2&sn=4be9b199d8cdefa9826eccfe333fb5fc&chksm=c1440674f6338f624cbb9a346ec458c87850f89924b736be06e1c3b8abe23a78cdbe3673bc77&scene=58&subscene=0": "360发布《大模型安全漏洞报告》，曝光近40个大模型相关安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066233&idx=2&sn=778f80b7b5c35162dd41acacfbd17148&chksm=f36e7df9c419f4ef78b0e4c4c5239cf58d221196e79aed7de570774b6e0864cb19c061984fca&scene=58&subscene=0": "【安全圈】慎用，知名压缩工具7-Zip存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247496912&idx=3&sn=d99b8b1741aab3fe4bd98179f0eebe8d&chksm=fa595a3dcd2ed32b501f82a6b0f30c4deb8936ceee44ea708009fefea4f0357746e91bc9c4b3&scene=58&subscene=0": "47套.NET系统漏洞威胁情报(11.26更新)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664230673&idx=2&sn=6b7f7b55158483f87608d00cc4d2ea5d&chksm=8b59ede8bc2e64fe7beb33b985b55b643633ced83b057b63edb6a882dc9c69bc256d70364877&scene=58&subscene=0": "360发布大模型安全警报：近40个漏洞易被利用，60美元即可投毒", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499503&idx=2&sn=2dd6b3cf1b47ac7226dad142622fa875&chksm=973acd8da04d449b2f515b675ac7c0e030eb1ded893ae2e95669aa0d4f1905626fd05b61322f&scene=58&subscene=0": "CNVD漏洞周报2024年第47期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499503&idx=3&sn=6528a919840c2d4021fa17a6d8572c60&chksm=973acd8da04d449bc6abed7f799a0e407df2db60c6ae96f7d4de508087fc78f88cf1bced3566&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241118-20241124)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496424&idx=1&sn=9edd1b8c5ee4cd0f5995cccd9e27ed60&chksm=e8a5f88bdfd2719d344867eb15fe930b7a378a539366eb7e9b8f557407c80bd31c77ef93e70c&scene=58&subscene=0": "如何通过发现 API漏洞赚到百万美刀", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517331&idx=1&sn=67b0bb66494eddc76b7c8c5f4a9a0a68": "几个常见的越权漏洞挖掘案例", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492698&idx=4&sn=67c0713461563b2da2c6432c360df08c": "无需用户交互即可利用 Firefox CVE-2024-9680 和 Windows CVE-2024-49039中的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793276&idx=1&sn=6f49f00a02c2093806a4281bbed7bcff": "俄罗斯黑客组织Romcom利用0day漏洞攻击 Firefox、Tor 用户", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247509479&idx=1&sn=fcd10e1e25906677825041d94c01d6e6": "Shiro漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491681&idx=1&sn=b6ec04cc6969427872d1425cb42e0dab": "超过 2,000 个 Palo Alto 防火墙遭到最近修补的零日漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzI1Mjc3NTUwMQ==&mid=2247536753&idx=1&sn=b3ae96aa4bb51470b962b0f96714cc95": "网安众生相【四十七】网络安全一本及以上学历就业路线推荐，适用毕业一两年甲方就业的同学....", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487869&idx=1&sn=c6eec65d79d82285101ba7a80848077c": "顺景ERP GetFile接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499276&idx=1&sn=fa57cd3c739d2a56024d1a6a6da003c7": "G.O.S.S.I.P 阅读推荐 2024-11-27 又一个内核内存安全漏洞猎手", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492698&idx=2&sn=50144deca9bef5a52a097e941775f37a": "macOS 漏洞 (CVE-2023-32428)本地提权，有poc", "https://mp.weixin.qq.com/s?__biz=MzIyNzc3OTMzNw==&mid=2247485594&idx=1&sn=f07916b48ea1a7d4826a562a9f983b1b": "【工具分享】某 FE 平台一键漏洞探测工具", "https://mp.weixin.qq.com/s?__biz=MzI3NzI4OTkyNw==&mid=2247489519&idx=1&sn=b939e5dc74d7454cca83e688b2f45a4d": "【漏洞情报】快排查！开源分享功能域名遭灰黑产抢注，用作黑帽SEO", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484561&idx=1&sn=8cb121fd6b70d997bb2172fba8850978": "多款AC集中管理平台未授权漏洞【漏洞复现|附nuclei-POC】", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492810&idx=1&sn=389a83e0263bfc916ef686658d7b17e3": "James_synthesis_tooL | 日常渗透测试或攻防演练中对于漏洞及指纹的积累工具", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491570&idx=2&sn=1353e926154547a4132feb4a8afb1bd0": "漏洞预警 | 懂微百择唯·供应链SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247505583&idx=1&sn=3005e31a4684af8891cef2abef768833": "美国Verizon、AT&T电信网络攻击案疑似内鬼kiberphant0m？此人声称获取了特朗普和哈里斯的通话记录", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247505583&idx=2&sn=6ea0b2ec70e958d252246bd0abf6be4e": "小米电动滑板车漏洞或致电子木马攻击：电池供电嵌入式系统上的勒索软件、跟踪、DoS和数据泄露问题研究", "https://mp.weixin.qq.com/s?__biz=Mzg4MjQ4MjM4OA==&mid=2247522279&idx=1&sn=9ffc60ebfdd7792c6353624adbf4b0ec": "2024年软件供应链安全挑战迈入新阶段！", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247493697&idx=1&sn=5e927967f0126a4b20bcf610135bf63c": "【神兵利器】JAVA JMX漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488646&idx=2&sn=c2dfaf5ba31c7d478865e3dddd31b72a": "【大量存在】用友U8C ajaxgetborrowdata存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247534800&idx=3&sn=cc02fd4232b68f295133224584d8cd6f": "MITRE公布最危险软件漏洞TOP25榜单", "https://mp.weixin.qq.com/s?__biz=Mzg5NjU3NzE3OQ==&mid=2247490236&idx=1&sn=2467e77baf0e3b560ef57a7725560439": "【漏洞情报】快排查！开源分享功能域名遭灰黑产抢注，用作黑帽SEO", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502491&idx=1&sn=6bfeace574bf3ea581fbbb82cf005900&chksm=fe79ee03c90e67153a7cdca590eff3bbebfc9d7026e656bebc14779be100a7bee9b71f13927a&scene=58&subscene=0": "GitLab LFS Token 权限提升漏洞(CVE-2024-8114)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458584116&idx=2&sn=efa0909856edd8923c4e025510b5cb8f&chksm=b18c34be86fbbda8264e38c310b407ecce383c96d111d66c164454920f3f1c4ef7203e68370e&scene=58&subscene=0": "“看雪漏洞小组”集结！组团挖洞，一起冲击华为漏洞更高奖励", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521617&idx=1&sn=cc6372f588d0fbc52027797f7d23ae53&chksm=ea94a43bdde32d2d7788140cbef334c7440a1777d309ce9d91bac48e50624f4f067938c35f6f&scene=58&subscene=0": "俄黑客组织 RomCom 被指利用火狐和Windows 0day攻击用户", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521617&idx=2&sn=0e9ac32a3223e727cd6cd99460e0387e&chksm=ea94a43bdde32d2d156961ca2f3e3020fe479986f24f7b566a4252db8e0cf759e9e2b35cea13&scene=58&subscene=0": "Palo Alto 防火墙 0day 由低级开发错误引发", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499276&idx=1&sn=fa57cd3c739d2a56024d1a6a6da003c7&chksm=c063d0d5f71459c32ce5dd3a25361caba4f9a8c7af58670973bb6750a59feddcc2e6e823f0a2&scene=58&subscene=0": "G.O.S.S.I.P 阅读推荐 2024-11-27 又一个内核内存安全漏洞猎手", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066249&idx=3&sn=c16dd8113efa3f879e94a0128384f7be&chksm=f36e7d89c419f49fb3a2915184568b4a51c1bcf58da2b60b496d622047008b653b429485ab28&scene=58&subscene=0": "【安全圈】Firefox和Tor浏览器遭遇神秘0Day漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066249&idx=4&sn=df7d811b5e62d6af63575344f1f21cad&chksm=f36e7d89c419f49f075967dfff39374d77a07eeef0a4b0df50211a4fb3226a276a3c467fe120&scene=58&subscene=0": "【安全圈】CVE-2024-8114：GitLab 漏洞允许权限升级", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513163&idx=1&sn=6e7bc3db9029e161c258fba47004aa43&chksm=ebfaf36bdc8d7a7d15a39a39e960ffa596396ccd943a500db69cc2d7b085ba62612c3080ba6b&scene=58&subscene=0": "网站漏洞致用户信息长期被爬，两家保险商被罚超8100万元", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523860&idx=1&sn=6bd78d3240bebaa8b0b3669897db617d&chksm=ce461504f9319c127636bae094b3e7d3ca4eaef1b9b95e44ad7980154e6d827f30cd082466e3&scene=58&subscene=0": "【漏洞通告】GitLab 权限提升漏洞(CVE-2024-8114)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523860&idx=2&sn=60dee21e95737f07ed9a68c90e5bf180&chksm=ce461504f9319c12192c0cb88cbb3db2a8b37756b91e892f421828c33472b2a30f55d5be871d&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241118-20241124)", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485748&idx=1&sn=8a6f72ab5197ccbf53c8f82555e3d192": "【漏洞复现】某平台-receiptDetail-mysql-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651461677&idx=1&sn=62fa971338a579f75e9efa7bdad3e5d7": "信息安全漏洞周报（2024年第48期）", "https://mp.weixin.qq.com/s?__biz=MzkyNjczNzgzMA==&mid=2247484294&idx=1&sn=945aa5d3f04bd25e27bf79f75bab0812": "漏洞挖掘—越权更改、删除信息", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247579846&idx=1&sn=0bb37a38ab5998f595038709b86b4063": "RomCom 黑客利用 Firefox 和 Windows 零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMzczNTA4MQ==&mid=2247483957&idx=1&sn=0bcd9ad9035581a34f8db5bacc018c41": "疑似0day window全版本RCE", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486164&idx=1&sn=82f20754d12c6098cffb4d09c43a3de4": "「漏洞复现」安科瑞环保用电监管云平台 GetEnterpriseInfoById SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MzU3MTcwNg==&mid=2247486141&idx=1&sn=3524ce4aeed67e0037b31c4589d2fe8f": "记一次逻辑漏洞(2)", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247545492&idx=1&sn=46f8045ffe716fe86aa708ba2a0105fa": "较为丝滑的一次证书站漏洞打包", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614324&idx=1&sn=80bc2f0431733718278f14f920fb8d38": "漏洞挖掘 | 通过一个简单的注册漏洞获取任意账户访问权限", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502502&idx=1&sn=874d1d96ffd31643476939deced0fd4f": "【在野利用】ProjectSend 身份认证绕过漏洞(CVE-2024-11680)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486295&idx=1&sn=abfa87852e2e7dc8d2b0d2c9c1760f95": "某微信万能门店小程序系统存在前台任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247488006&idx=1&sn=69194b9ea7c038bace29df89d53fa101": "工具分享 | nuclei管理工具＋9w poc不想要嘛？", "https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651206699&idx=1&sn=b850cf1e858f00b90a717efd504988dc&chksm=bd2cd18d8a5b589baf4bc2e8229f0eef51a96cf1ffe79bcd9214278becd3684f3fa040892043&scene=58&subscene=0": "大模型应用实践（一）：AI助力Code Review安全漏洞发现", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247487694&idx=2&sn=4cbf3f73698e15a3d4134fe9c293a674": "漏洞预警 | 7-Zip代码执行漏洞CVE-2024-11477", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513175&idx=1&sn=aad9a2b08d9d8d9699a7496e63f316e8": "史上最高漏洞赏金计划出炉：单个漏洞最多奖励1.1亿元", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247489930&idx=1&sn=766e34a9f96662ab6f3afea35dc2e1be": "创宇安全智脑 | 用友 NC process SQL注入等73个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649870256&idx=1&sn=25f2861475ff891be653aa284cb49e32": "新书来了！《Web漏洞分析与防范实战（卷1）》正式发售", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500309&idx=3&sn=3cf382f546d45d798a5eafd69bbfc3e0": "【漏洞通告】Zabbix SQL注入漏洞（CVE-2024-42327）", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247494942&idx=2&sn=1126c4b20f4c21941b695f0588b1c62c": "Firefox和Tor浏览器遭遇神秘0Day漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651134615&idx=1&sn=dcb76588fcf20926def837cfcffaa086": "构建电子政务全渠道安全防御体系 梆梆安全亮相2024网络安全创新发展大会", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247529850&idx=1&sn=4a1addfc83108525d6cf92ddb002a8f8": "Intruder推出Intel：一个免费的漏洞情报平台", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485141&idx=1&sn=0d2c58af3cb50194f0f70f2525b1beee": "漏洞推送|万能门店小程序管理系统 requestPost存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489436&idx=1&sn=7df9869adacb2d84a3cc11a313adf700": "Altenergy电力系统控制软件 status_zigbee SQL注入漏洞(CVE-2024-11305)", "https://mp.weixin.qq.com/s?__biz=MzA5NzQ0Mjc5NA==&mid=2649766179&idx=1&sn=19bc392d7501331260a85660f1d427d8": "漏洞盒子 x 汽车之家SRC | 漏洞盒子「企业SRC」新住客", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521625&idx=2&sn=8a7741ed8a419b06a972294416323328": "黑客利用 ProjectSend 严重漏洞攻击服务器", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500309&idx=2&sn=96fcae50d9147bd55ad96ab4aef729f1": "【漏洞通告】ProjectSend身份验证绕过漏洞（CVE-2024-11680）", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517346&idx=1&sn=994ffeec2fa01bbf52616e57faceed19": "Nacos2.4.3新版漏洞利用方式总结", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487882&idx=1&sn=538ceedb7a3754102f139f196c13d046": "万能门店小程序管理系统_requestPost接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247506224&idx=1&sn=e83970b0c4d3942d269e688628784f1c": "必应主站www.bing.com惊现蠕虫XSS漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517394&idx=1&sn=21abc79bebba33a518c9b526fa6e2aa5": "【工具推荐】springboot打点工具，内置目前springboot所有漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMDQ4MDU2MA==&mid=2247484417&idx=1&sn=6f4cc0766411a4efe0a5ba648a80f51f": "利用gitRepo卷在Node上RCE(CVE-2024-10220)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489233&idx=1&sn=813b669371f32694d48087f9e54af5f8": "【漏洞预警】Zabbix SQL注入漏洞（CVE-2024-42327）", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650989985&idx=1&sn=a710028cf7838a01f6146e554247fd78": "新书发售抢先看：《Web漏洞分析与防范实战（卷1）》", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247622843&idx=2&sn=e58b5c466505cf5ae07a26a4eef66e53": "知名压缩软件被曝严重漏洞，谁会成为受害者？", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458584139&idx=3&sn=2da9c8566535b151f08abba973c4cbda": "惊喜开班！系统0day安全-IOT设备漏洞挖掘（第6期）", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523865&idx=1&sn=a85f1659ccbd217fd246c088babf8a97": "【漏洞通告】Zabbix 服务器SQL注入漏洞(CVE-2024-42327)", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247490220&idx=2&sn=d1d013adb3a9540504c23b2930e6f846": "开源文件共享软件存在严重漏洞CVE-2024-11680，已有公开的PoC", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486870&idx=2&sn=1948479dc1ffdf886bd89765c51dcfb3": "记一次SRC利用github搜索拿下中危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247503484&idx=1&sn=e3eb5a40d0988c77c33d974008df4c8d": "构建 Spectre：用于 XSS 漏洞利用的红队工具（第 1 部分）", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247493702&idx=1&sn=2186fab30eaee576dbca5c54e3bf00e6": "【神兵利器】高危漏洞EXP实用性工具", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488650&idx=1&sn=3c2a69aef2c8bd73e875b717bca41cf0": "【0Day】圣乔ERP系统name*存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524738&idx=4&sn=b31c451cdd0b6f7219abff8f78b19210": "macOS 磁盘仲裁中的 TOCTOU 漏洞可通过利用符号链接进行沙箱逃逸和权限升级攻击", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502502&idx=1&sn=874d1d96ffd31643476939deced0fd4f&chksm=fe79ee3ec90e6728cb38cbc7cf03b5ac32273e1cc74442e830866650cc7551ccda12fd8ab98b&scene=58&subscene=0": "【在野利用】ProjectSend 身份认证绕过漏洞(CVE-2024-11680)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458584139&idx=3&sn=2da9c8566535b151f08abba973c4cbda&chksm=b18c34c186fbbdd73b144f7819cfe609f804980362e2d8d65188bf5b244531a5f7848cc104f6&scene=58&subscene=0": "惊喜开班！系统0day安全-IOT设备漏洞挖掘（第6期）", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513175&idx=1&sn=aad9a2b08d9d8d9699a7496e63f316e8&chksm=ebfaf377dc8d7a6171bdefc5530053ed3687222b6955f98bd96205bbe5608bed5807bf8c2223&scene=58&subscene=0": "史上最高漏洞赏金计划出炉：单个漏洞最多奖励1.1亿元", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521625&idx=2&sn=8a7741ed8a419b06a972294416323328&chksm=ea94a433dde32d256ddf003492c63581ae6e4ca796a7b7d06dfae15b7c1db0eaf3864e15b031&scene=58&subscene=0": "黑客利用 ProjectSend 严重漏洞攻击服务器", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247529850&idx=1&sn=4a1addfc83108525d6cf92ddb002a8f8&chksm=c14407c7f6338ed116afe6056c52bb6911a17d0b2be1ca25e1f374efa7d03d5732ed7eff8e79&scene=58&subscene=0": "Intruder推出Intel：一个免费的漏洞情报平台", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523865&idx=1&sn=a85f1659ccbd217fd246c088babf8a97&chksm=ce461509f9319c1f4441af7449295d3562c27b0cf5dcae9304e5fde4a4d849357bd239935320&scene=58&subscene=0": "【漏洞通告】Zabbix 服务器SQL注入漏洞(CVE-2024-42327)", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485752&idx=1&sn=e28d9413e0a5ef65c14fa149dc727d7c": "【漏洞复现】某平台-statusList-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247502795&idx=2&sn=93d58992c4190f544fae0e8b5d4b8c7f": "RomCom 黑客利用 Firefox 和 Windows 零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247488190&idx=1&sn=e8350d40fdb0826b878493ba1901cbe5": "【企业数据泄露】IP欺骗攻防实战指南，打造铜墙铁壁级安全防线！", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247074&idx=1&sn=71265ed700c3e74e33cefa7595424766": "安全e刻 | 全球最大盗版IPTV网络被清剿，月入2.63亿美元", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247493727&idx=1&sn=52aabdb46b51bc552492cba49750ce09": "GitLab漏洞汇总", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247485787&idx=1&sn=1f202987e42634743b29aeea66916628": "Java反序列化漏洞之JNDI注入原理及利用IDEA漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkxMTY1MTIzOA==&mid=2247484433&idx=1&sn=14e3f8fdb875a41434afc1cef578dc42": "【技术分享】关于C-Lodop打印服务文件读取漏洞修复方式", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793307&idx=3&sn=6fd4460f0136999cf427b64b71ce498a": "微软修补四个漏洞，其中一些漏洞非常严重且已被广泛利用", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247535199&idx=2&sn=d31d171442f078518d645d320b381482": "全球 | 近40个【大模型】相关安全【漏洞】曝光", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247488833&idx=1&sn=a92313f93aa23824eadb8be499d6b166": "渗透测试高频面试题分享", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484577&idx=1&sn=2cc88f0347850a9a6f074438afe107e5": "资产管理运营系统mobilefront2接口处存在前台文件上传漏洞【漏洞复现|附nuclei-POC】", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247579846&idx=1&sn=0bb37a38ab5998f595038709b86b4063&chksm=e91468fcde63e1ea605e3adce9da5489720e2d21a69c61eb7e63479b335a52d44bd7c62bbffe&scene=58&subscene=0": "RomCom 黑客利用 Firefox 和 Windows 零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496830&idx=1&sn=4550017de10cbb9463e78d91a1472b71": "【漏洞通告】ProjectSend身份验证绕过漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496830&idx=2&sn=32feb8d3794ac11cdf54df8999ee1ce1": "【漏洞通告】Zabbix SQL注入漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4MjYxNTYwNA==&mid=2247487556&idx=1&sn=a2ba74fa4542943c3f58fff8acd6ca6e": "Nuclei报告图形化", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502512&idx=1&sn=6f8aba628a7b2bfe2bcf2403541b375e": "【已复现】Mozilla Firefox 释放后重用漏洞(CVE-2024-9680)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650604261&idx=4&sn=89ded4cfd4566918dd520488c54f250e": "Shiro漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg2ODE5OTM5Nw==&mid=2247486516&idx=1&sn=e9fddb6f26423f7d6a50d7d34be6dc4c": "WPS最新0day漏洞？电脑被控仅仅是一个PDF（含视频）", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507478&idx=1&sn=3427d3a5f23b7973076ac0219e3c2073": "0day速修 | H3C SecCenter SMP 安全管理平台远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486304&idx=1&sn=8f7f768fcd81251b6ece478f82fb5172": "edusrc 某中学Swagger接口泄露未授权漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkxOTUyOTc0NQ==&mid=2247492639&idx=1&sn=443bb480a80ca6b2fa33ab02f3161461": "仍未出补丁,Windows新的PE漏洞及完整利用代码", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486173&idx=1&sn=859b8110fe566e760fc432622c66d100": "「漏洞复现」《黄药师》药业管理软件 XSDService.asmx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484429&idx=1&sn=68a1517617279baad8d107745f42fc21": "【漏洞复现】同享TXEHR V15人力管理管理平台信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjIxNjExNg==&mid=2247485886&idx=1&sn=9e399e37895b283dec4804d27dfb675b": "安卓app抓包总结", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492826&idx=1&sn=75938c84eb56cc7f82beb164b02c29fa": "Burpsuite存储桶配置不当漏洞检测插件", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491585&idx=1&sn=b4006957cc14a541db72088caecfbd9c": "漏洞预警 | 辰信景云终端安全管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491585&idx=2&sn=70273e2ec824ce2e0ec8669552d2534f": "漏洞预警 | 任我行协同CRM普及版SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491585&idx=3&sn=3febf83e42ab74481bebf264334e9eca": "漏洞预警 | TamronOS IPTV系统任意用户创建漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066334&idx=4&sn=11465e70e7b110f53a2339d3dae91a21": "【安全圈】俄罗斯黑客组织 Romcom 利用 0day 漏洞攻击 Firefox、Tor 用户", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787484&idx=1&sn=9c4fcdaa3a27548374d027af4bcfc38d": "POC公布：Windows驱动程序暴整数溢出漏洞可致权限提升", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489455&idx=1&sn=119190d29be2f70b8be45a609e8b45ef": "懂微百择唯·供应链 RankingGoodsList2 SQL注入致RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3NTIyNzgwNA==&mid=2650259619&idx=2&sn=e338a58a66c60964bac54483ff1b0f85": "VPN漏洞和弱凭证助长勒索软件攻击", "https://mp.weixin.qq.com/s?__biz=MzkzNTUwNzIxNA==&mid=2247484491&idx=1&sn=5b3201c62060ef45a4d7fdd941051766": "【实战小技巧系列】前端 JS 解密：一次简单高危漏洞案例", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500317&idx=2&sn=16fcd5426c0b54439754a9c7ddaffefa": "【漏洞通告】Zyxel ZLD防火墙路径遍历漏洞（CVE-2024-11667）", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500317&idx=3&sn=0a51e2ea3a8e46f34ce745e930bc79b8": "【漏洞通告】Apache Arrow R package反序列化漏洞（CVE-2024-52338）", "https://mp.weixin.qq.com/s?__biz=Mzk0MjU5NTY2MQ==&mid=2247484291&idx=1&sn=2c88236e3448e8b5dfa525803f1f70fa": "【0day漏洞复现】广州和晖科技有限公司本草纲目首营资料审核中台系统存在认证绕过", "https://mp.weixin.qq.com/s?__biz=MjM5Njk1MDY5Ng==&mid=2247491131&idx=1&sn=e0d2e24b268d735ec0bc5039a5d98645": "Android Native内存型漏洞实例", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489445&idx=1&sn=0ff8623a90af54b023cbf870a1b7abd1": "D-Link NAS设备 sc_mgr.cgi 未授权RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491118&idx=1&sn=2a8cd53472ffeabe46dd0aa8ddcb820f": "记一次小程序渗透测试到通杀RCE(0day)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489245&idx=1&sn=3f922cee40f94bcc5d8936ebb8bd1259": "【漏洞预警】H3C SecCenter SMP未授权输入验证不当漏洞可导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489245&idx=2&sn=9ba5ffd1d4f95444d590dd16f0b59623": "【漏洞预警】Apache Arrow R package反序列化漏洞（CVE-2024-52338）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489245&idx=3&sn=08443a5512e58139bc61e318ba68fd64": "【漏洞预警】Zyxel ZLD防火墙路径遍历漏洞（CVE-2024-11667）", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485150&idx=1&sn=8bcafff0d5d7cde84c06c97d2f2e1566": "漏洞推送|某信公交apply存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490040&idx=1&sn=b912e9429b195dedefa1fbfff148f631": "Microsoft 修复 AI、云和 ERP 安全漏洞；一个在主动攻击中被利用", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485971&idx=1&sn=8b767002024a7edacf192d5f42041df6": "广联达OA系统漏洞批量检测工具 - GlodonScan", "https://mp.weixin.qq.com/s?__biz=MzU3MzU4NjI4OQ==&mid=2247515538&idx=1&sn=4a2477128ee6e1c0a01b279ecc8a5195": "【漏洞复现】安科瑞环保用电监管云平台 HomenewLogin SQL注入漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247523427&idx=1&sn=dd1123e0af7c000e04f67383a2af0d82": "funbox5复现", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247493936&idx=1&sn=aa7e8c1beea46d10a356a837a611bf8d": "【2024漏洞马拉松】OPPO赛程正式启动，1.5倍奖励，新人额外奖励……超多奖金拿到手软！还有手机大奖等你来拿！", "https://mp.weixin.qq.com/s?__biz=MzU1MzEzMzAxMA==&mid=2247492696&idx=1&sn=de59abdfd55672b0046505484485ff41": "网络安全动态 一周速览 2024.11.23 - 2024.11.29", "https://mp.weixin.qq.com/s?__biz=Mzg4MzU3MTcwNg==&mid=2247486156&idx=1&sn=5305da7ce5dfe5dcb3b78d365016550e": "记一次逻辑漏洞（3）", "https://mp.weixin.qq.com/s?__biz=MzkzMDY1Nzc5MQ==&mid=2247483785&idx=1&sn=2a0f73e089f60fd9570e9d25f7b8d66c": "记一次20000美元的漏洞挖掘报告(HackOne)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491684&idx=1&sn=a4cd67263f4e366037fdcace8843b6c2": "Ubuntu Linux 受到“需要重启”漏洞的影响，该漏洞会导致本地提权到 root", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247514984&idx=1&sn=c57940df55bdbd6e53cb457f4b060964": "Shiro漏洞利用工具 -- ShiroEXP（11月26日更新）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521633&idx=1&sn=479bf08551e7f1c208c83e877ab89f34": "速修复！Advantech 工业WiFi 访问点中存在20个漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MDYwNDc5Nw==&mid=2247486425&idx=1&sn=0551e4fecc2912049578b9c78a1868c4": "俄罗斯关联RomCom组织利用零日漏洞攻击Mozilla和Windows系统", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488666&idx=1&sn=1ef6c1da4033ecf956961f030d0f643c": "【漏洞复现】九思OA getUserStatusByRole存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491603&idx=1&sn=c1efcecbe162862e28c3fe13e8e0f85d": "漏洞预警 | 东胜物流软件任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491603&idx=2&sn=ad336b228ccca5f55ebc26514bfca10b": "漏洞预警 | 任子行网络安全审计系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491603&idx=3&sn=677995c6d32ab004efcf3e5216b28147": "漏洞预警 | 西迪特Wi-Fi Web管理系统远程命令执行和登录绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502523&idx=1&sn=a831935fa92e1ff34b2ffa0bc192aeb7": "【已复现】7-Zip 代码执行漏洞(CVE-2024-11477)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787484&idx=1&sn=9c4fcdaa3a27548374d027af4bcfc38d&chksm=8893bc33bfe4352539871ef424161e89f3c548991f974353b109d29e5fa176fbbe8cd06c1c55&scene=58&subscene=0": "POC公布：Windows驱动程序暴整数溢出漏洞可致权限提升", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521633&idx=1&sn=479bf08551e7f1c208c83e877ab89f34&chksm=ea94a40bdde32d1dc2416c640578e2c28536a8d53f4823815adc4ea55ee71c00617606ac3885&scene=58&subscene=0": "速修复！Advantech 工业WiFi 访问点中存在20个漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507478&idx=1&sn=3427d3a5f23b7973076ac0219e3c2073&chksm=cfcabd02f8bd341450c49c57e2944986992da9eb9a85e28e0cfe030a99e5f5ff31e48b65fd77&scene=58&subscene=0": "0day速修 | H3C SecCenter SMP 安全管理平台远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066334&idx=4&sn=11465e70e7b110f53a2339d3dae91a21&chksm=f36e7e5ec419f74854a25fa61ed147efd22e98ef5b6de5c23de7bd687f6e2459303cbc314c3a&scene=58&subscene=0": "【安全圈】俄罗斯黑客组织 Romcom 利用 0day 漏洞攻击 Firefox、Tor 用户", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502512&idx=1&sn=6f8aba628a7b2bfe2bcf2403541b375e&chksm=fe79ee28c90e673ed4c87de21345a91cd57d6bd9b3dd5350d1c89cdf28fb5f82edbbfeb0846a&scene=58&subscene=0": "【已复现】Mozilla Firefox 释放后重用漏洞(CVE-2024-9680)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247493936&idx=1&sn=aa7e8c1beea46d10a356a837a611bf8d&chksm=fa78e87ccd0f616ae40f81749ef755aacee837416e4bb8b70e07079b3ade1573f0e4f4365120&scene=58&subscene=0": "【2024漏洞马拉松】OPPO赛程正式启动，1.5倍奖励，新人额外奖励……超多奖金拿到手软！还有手机大奖等你来拿！", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247485469&idx=1&sn=3326a0c63e8b77dd3bbc660026f9d8ee": "俄国黑客组织 RomCom 利用 Firefox 和 Tor 浏览器零日漏洞，攻击欧洲和北美用户", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308588&idx=2&sn=7329e9b2eb8d07ede48fd64e561a1ec4": "FreeBuf周报 | VPN正成为企业入侵的关键路径；知名压缩工具7-Zip存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308588&idx=3&sn=507f9cfa85259269aad5b20cdc369747": "知名工业WiFi接入点被曝存在20多个漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655260600&idx=2&sn=d45fcadd0c225f99fa9553f8b67beeb0": "Windows驱动程序暴整数溢出漏洞可致权限提升", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491120&idx=1&sn=8db3b58d4bf3b995f085d9bb757a355f": "某众测记录｜细心 = or ≠ 漏洞 ？", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793322&idx=3&sn=4dd79dc082182372b968a8d6151913e6": "施耐德电气、mySCADA 和 Automated Logic 产品中发现严重 ICS 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MTg2NzI5OA==&mid=2247484746&idx=1&sn=fc5e8cfb4ee4912ca505e0adde2012ea": "Docker Registry 未授权访问漏洞利用(工具+利用思路)", "https://mp.weixin.qq.com/s?__biz=Mzg3NTk4MDQ1NA==&mid=2247484786&idx=1&sn=799ffb07449f2d2ce73067e9c4f38a50": "天清汉马vpn任意文件读取【漏洞复现】", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524888&idx=1&sn=bf44332ba1a09b699dc30663a366aeb4": "地穴传说：微软 Unicode 排序规则异常导致软件漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485712&idx=1&sn=34d09311081e1ccdcc96464b3824f719": "CVE-2024-48307｜JeecgBoot SQL 注入漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485712&idx=2&sn=f6b75b7ecbb1169fce7fbd70bbfbe1bb": "CVE-2024-46938｜Sitecore CMS未经身份验证任意文件读取漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650604301&idx=3&sn=6203d901cebb019b098eb79083364ff8": "漏洞挖掘｜遇到APP数据加密如何解密测试", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486182&idx=1&sn=cc3a52c0256ec17f34f9539fa82760b2": "「漏洞复现」昂捷CRM cwsfiledown.asmx 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247487758&idx=1&sn=982ca71dd0242d09a5ed9effb713cb7b": "cby围观同学求婚", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247485494&idx=1&sn=c9d6028a35da67abc3c0a4ae39c4383d": "CVE-2024-11477: 7Zip 中的“代码执行”漏洞 Writeup", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652112887&idx=2&sn=21e400e8cf4e6303d98403cc2af294c3": "攻击者利用Windows 11整数溢出漏洞提升权限", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491685&idx=1&sn=a907897b572d0e992a941751e26cc227": "德国起草法律保护发现安全漏洞的研究人员", "https://mp.weixin.qq.com/s?__biz=MzkyODY5ODAyOA==&mid=2247488568&idx=1&sn=b92c8b624e62d32b2387377ae2b89808": "打造高效运营引擎：揭秘IBM企业流程框架方法论的实战应用（附PPT下载）", "https://mp.weixin.qq.com/s?__biz=MzUxMjc0MTE3Mw==&mid=2247494775&idx=1&sn=663d228539b8c7d0207554d994968758": "Advantech工业级Wi-Fi接入点多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247545552&idx=1&sn=b685a20e7273ec1ae2e5a2282c2e475d": "记一次接口fuzz+逻辑漏洞拿下证书站高危", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655260631&idx=1&sn=6979dd317fb046882d4563bf57e3907a": "CVE-2024-52338：Apache Arrow 存在严重安全漏洞，允许未授权任意代码执行", "https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247490911&idx=1&sn=9f1a6c7c0eae8c0864b4ad6818ed3e4d": "选择一个细分领域，成为专家，或许能发现漏洞甚至 0day 漏洞或逆向 n-day 漏洞，并撰写博客。", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485713&idx=1&sn=de263c85dbef17756b944853870cf207": "CVE-2024-42327｜Zabbix SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485713&idx=2&sn=6b514f8a63ef9950e23b2b6671d555c2": "CVE-2024-11477｜7-Zip代码执行漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650604309&idx=2&sn=da7af306259f84bf1d1eb30c34fe1963": "知名工业WiFi接入点被曝存在20多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTY4NTQwMg==&mid=2247484100&idx=1&sn=bd1389cc16246729ae15e078bee53d54": "经验贴收稿分享3 | 一次XSS漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzAwOTQzMjMwOQ==&mid=2247483890&idx=1&sn=a691603b482681117b33c8e20dcc55db": "什么CNVD证书批量化挖掘 ？", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517444&idx=1&sn=0ee06e80236b7ffc5cd64df21a05d827": "CNVD通用型漏洞挖掘-cnvd证书的刷洞技巧", "https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650475531&idx=1&sn=87249b7f85681a8a8861489ecf32eabc": "秦安：刘纪鹏教授披露的这个股市不公平规则，亿万股民需怒吼叫停", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652112892&idx=2&sn=da534908bbc1b0b00bc9bae0a8fde09f": "AD证书服务漏洞使攻击者能够提权", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489204&idx=1&sn=8bf569f2824beddb053d74868d67d981": "记一次从0到1的漏洞挖掘过程 发现Accesssecret泄露实现权限接管 越权等漏洞|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=MzU5OTMxNjkxMA==&mid=2247488022&idx=1&sn=67aaed483092d9231c0a1c1744d53f6e": "某通用系统0day审计过程", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486203&idx=1&sn=bb91174473f1d41934a85073804fec49": "「漏洞复现」九思OA workflowSync.getUserStatusByRole.dwr SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492888&idx=1&sn=e82e6cc24fad3f50641261e79572cc04": "一个半自动化springboot打点工具，内置目前springboot所有漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247509558&idx=1&sn=4ed77b8fbe43290b3fb889465673e9a3": "利用js挖掘漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491620&idx=1&sn=bc353ebff4eec5172710bb052bc2c31b": "漏洞预警 | PAN-OS Web管理界面身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491620&idx=2&sn=abf6ad1b88c4d7efe8ee9966fc2568de": "漏洞预警 | 海信智能公交企业管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491620&idx=3&sn=7b494bfcaffc088fe6b99d84309de032": "漏洞预警 | SRM智联云采系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488700&idx=1&sn=097193ece2c4ee45d744ff19b5883d77": "【0day】电子图书阅读平台downFile存在SQL注入漏洞", "https://mp.weixin.qq.com/s/sqwUvwdoK66SpY8CIdCxIg": "Windows 自动登录配置指南", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489464&idx=1&sn=5e9d75fc459499bee5931b854a9e6b22": "任子行网络安全审计系统 log_fw_ips_scan_jsondata SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NDg2MDIxNQ==&mid=2247485181&idx=1&sn=19d894e589badfb040423b5f9dc66b0b": "一次0Day漏洞Rce审计流程", "https://mp.weixin.qq.com/s?__biz=Mzg2NjUzNzg4Ng==&mid=2247484687&idx=1&sn=6b3aebc2aa377f1ec8d89d07168de4c3": "发货100cms存在SSRF漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484430&idx=1&sn=ce83f5232dd760583f858e6ddccf7aa7": "【漏洞复现】OfficeWeb365 SaveDraw 任意文件上传getshell漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486155&idx=1&sn=853814e2de56863228049b5207d23e70": "一次0Day漏洞Rce审计流程", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY2ODE1NA==&mid=2247484884&idx=1&sn=c3d38f9f57d4e2b96d95aea5b15ddaa6": "【漏洞复现】Apache OFBiz远程代码执行漏洞(CVE-2024-45195)", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247493715&idx=2&sn=1babb7a848d1598f0a83a7e5df2fe4f3": "Active Directory Enumeration:RPCClient", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247487711&idx=1&sn=a4170ba803e835de42597805b12fbb0e": "又一款 all in one 综合漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg5MzMzNTUzMA==&mid=2247485567&idx=1&sn=66d20525cf0f69be1f3c6915c52fa48c": "SSP-高效 Spring 框架漏洞扫描与利用工具", "https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247487572&idx=1&sn=c515afe3ded2d5f5d763a2f8611aa1d7": "当信息安全成为廉价商品的时候，崩盘是迟早的！", "https://mp.weixin.qq.com/s?__biz=MzA3NTIyNzgwNA==&mid=2650259629&idx=1&sn=11894f840270c36fd578f81d2964d4e9": "漏洞管理挑战与自动化解决方案探讨", "https://mp.weixin.qq.com/s?__biz=Mzg3NTk4MDQ1NA==&mid=2247484811&idx=1&sn=c0e058c0906d579d8d6dd967b92666cb": "泛微E-Mobile-client_do-rce【漏洞复现】20241202", "https://mp.weixin.qq.com/s?__biz=MzkzNjM5NDU0OA==&mid=2247486203&idx=1&sn=195421b509dcbf7ba6eca59d16085fab": "一次0Day漏洞Rce审计流程", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133722&idx=1&sn=c3ac7d76f7b002486115949f7551d7b0": "Linux安全警报：首个UEFI bootkit恶意软件现身；ThinkPad笔记本曝硬件级漏洞，黑客可偷偷控制摄像头 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247490053&idx=1&sn=5f930cb292a1df708f877af3800eba4d": "从0到1掌握设备漏洞挖掘核心技术", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247545580&idx=1&sn=b177bb6f876e6363c7633e53a8157dc2": "记一次网上阅卷系统漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485756&idx=1&sn=d0973175772b2f5f39a5557ff4d8e2f0": "【漏洞复现】某平台-TMScmQuote-GetFile-readfile任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3ODk3ODE2OA==&mid=2247484389&idx=1&sn=3614d5031272831703e808971f003bbc": "【福利抽奖】用网空测绘ZoomEye主动发现被黑的网站", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291900&idx=1&sn=52fb27c14d392ae7db10750c2810342f": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247505266&idx=1&sn=6ba5102dc93110ef70185d6e456fc083": "每周网安资讯 （11.26-12.2）|Containers等厂商的多款产品存在链接跟随漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521645&idx=1&sn=6b419fc6a9985c4a220c5fd4596e4d3e": "微软修复已遭活跃利用的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521645&idx=2&sn=3a85491541969226b45d2bca18f4373b": "VMware 修复 Aria Operations 中的多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247523491&idx=1&sn=4ea12a053dc17deb84ecceedaa7abd91": "API测试思路及crAPI漏洞靶场复现", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495539&idx=1&sn=b497e7a41bd73cd28d81ad392c17c499": "CNVD漏洞周报2024年第48期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495539&idx=2&sn=51a7cb6561725d8d239ea7796d4c87d0": "上周关注度较高的产品安全漏洞(20241125-20241201)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502546&idx=1&sn=e301f3d4f389baa4e9e448b7cdefb1e8": "【已复现】Zabbix SQL注入漏洞(CVE-2024-42327) 安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502546&idx=2&sn=6e953166ad2f865e994cf4dae7787b9d": "安全热点周报：黑客利用 ProjectSend 漏洞攻击暴露后门的服务器", "https://mp.weixin.qq.com/s?__biz=MzAwNDUzNDExMQ==&mid=2247485166&idx=1&sn=fc6827c1156d35634432440dd02e68b9": "Patchwork(白象)APT组织Protego远控木马攻击场景复现", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650620029&idx=2&sn=9fcc1074fb8178d2f8ac88ecafa3ad0e": "非管理员就可访问！Zabbix SQL注入漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzNjM4ODc3OQ==&mid=2247485518&idx=1&sn=8329a25397b75dc609b57b9a8fb31448": "网络安全态势周报（11月18日-11月24日）2024年第46期", "https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659211215&idx=1&sn=4221144f225e260ea54da682b21083d1": "时空WMS-仓储精细化管理系统两处文件上传致RCE漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzIzMDQwMjg5NA==&mid=2247506222&idx=1&sn=9f7508db88f8d909e35a3b08038c26fa": "聚铭网络上榜安全牛《网络安全企业100强》", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486533&idx=1&sn=8d46b544b1fdddb5cbc38b18ab0f13b7": "【工具分享】I-Wanna-Get-All 主流OA漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489485&idx=1&sn=3d132022d60a074ede75bdaab2c79f6f": "海信智能公交企业管理系统 apply.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489476&idx=1&sn=fe81181a05d394083a3fca2f8405d4ca": "Palo Alto Networks PAN-OS身份认证绕过导致RCE漏洞(CVE-2024-0012)", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247518527&idx=1&sn=5b925c3749b3c132148947805f8e350e": "送！一本书带你速通YaKit", "https://mp.weixin.qq.com/s?__biz=MzkwMzQyMTg5OA==&mid=2247485262&idx=1&sn=3979397ea2306771cb63291e43514ecb": "Java 安全 | 从 Shiro 底层源码看 Shiro 漏洞 (上)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489253&idx=1&sn=94cbfc91e7da2499acfad5272df15561": "【漏洞情报】任我行管家婆订货易在线商城 UploadImgNoCheck未授权文件上传限制不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489253&idx=2&sn=5f79f460785757251736a4635fbe639a": "【漏洞情报】九思协同办公系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517473&idx=1&sn=1b1243aeb8410ce2b661e1d2b892abbe": "0day 挖到手软，403 到 getshell", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485159&idx=1&sn=abb74fde1a013ec53abb6d7c9018b01d": "漏洞推送|EnjoyRMIS_cwsfiledown存在文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484742&idx=1&sn=95c54287f548e5f8ec29e9252cf822b4": "【漏洞复现】CVE-2024-11680", "https://mp.weixin.qq.com/s?__biz=Mzg3NzIxMDYxMw==&mid=2247503995&idx=1&sn=9ded651555248b55f70a4e36ad2b1d89": "文末抽奖福利！发现Web API漏洞居然能赚到400w刀，看懂这本书你也可以！", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651129390&idx=1&sn=81a9a6bbaa7c79665824a969c6c5535b": "微软超高危漏洞“狂躁许可”：从无回显漏洞看传统漏扫局限性", "https://mp.weixin.qq.com/s?__biz=MzkxNjU2NjY5MQ==&mid=2247508149&idx=3&sn=58f5ae285624269d9247f4248ba55ded": "苹果官方警告：零日漏洞攻击瞄准Mac电脑用户", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247489301&idx=1&sn=50d654dc3d2fb82eda35e3b17d3a63a4": "全球首份《大模型安全漏洞报告》", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133722&idx=1&sn=c3ac7d76f7b002486115949f7551d7b0&chksm=bd15a7c98a622edfc0eced4f184a4d959fa1ff4e5354018393a27f00466fffaf7211ee585683&scene=58&subscene=0": "Linux安全警报：首个UEFI bootkit恶意软件现身；ThinkPad笔记本曝硬件级漏洞，黑客可偷偷控制摄像头 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502546&idx=1&sn=e301f3d4f389baa4e9e448b7cdefb1e8&chksm=fe79ee4ac90e675c46b21b6755d924988a848e52f13af242be79c9b65a4dd174aafb5a1cdd6d&scene=58&subscene=0": "【已复现】Zabbix SQL注入漏洞(CVE-2024-42327) 安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502546&idx=2&sn=6e953166ad2f865e994cf4dae7787b9d&chksm=fe79ee4ac90e675c2e13a316d23a4206e33721cfea9d557383cb4da90247163672fb76e03866&scene=58&subscene=0": "安全热点周报：黑客利用 ProjectSend 漏洞攻击暴露后门的服务器", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521645&idx=1&sn=6b419fc6a9985c4a220c5fd4596e4d3e&chksm=ea94a407dde32d117f4af2c69d432603462a5c5f07564a4197cbec9f18e001180b3fde0d2377&scene=58&subscene=0": "微软修复已遭活跃利用的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521645&idx=2&sn=3a85491541969226b45d2bca18f4373b&chksm=ea94a407dde32d111019da790bc26a832e84ea5c251237f49761f7d5bea8d8509b8ab7d648c7&scene=58&subscene=0": "VMware 修复 Aria Operations 中的多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MTg2NzI5OA==&mid=2247484752&idx=1&sn=11f717a42e8b1e332a6e68aa76a479fd": "Burpsuite存储桶配置不当漏洞检测插件", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492812&idx=1&sn=9735ed97824b65fb886b0a07fe30720f": "Windows 任务计划程序漏洞 (CVE-2024-49039) 零日漏洞利用代码发布", "https://mp.weixin.qq.com/s?__biz=MzkzMjIxNjExNg==&mid=2247485927&idx=1&sn=3a2f360161032c9065e88f6a619341e8": "游戏漏洞挖掘思路分享", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489494&idx=1&sn=270503f5a73bb72a19c28aa50be37baa": "智联云采 SRM2.0 quickReceiptDetail SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NDgxMzgxNA==&mid=2247496442&idx=1&sn=978d98c1582027cc0ee73be7f459259d": "CNVD漏洞周报2024年第48期", "https://mp.weixin.qq.com/s?__biz=Mzg3NTk4MDQ1NA==&mid=2247484813&idx=1&sn=7e2432f14450d4de504f6b13876bb8f3": "泛微E-Mobile-client_common-error命令执行【漏洞复现】", "https://mp.weixin.qq.com/s?__biz=MzA3NDE0NDUyNA==&mid=2650801813&idx=1&sn=f52a5453c3112fafbcc1027879181c32": "美创蝉联国家信息安全漏洞库（CNNVD）二级技术支撑单位！", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499505&idx=1&sn=f889cf5b6519afeef6e1e158a49ab584": "CNVD漏洞周报2024年第48期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499505&idx=2&sn=ef3fadc3bc76fc795be2bb777d46dcb3": "上周关注度较高的产品安全漏洞(20241125-20241201)", "https://mp.weixin.qq.com/s?__biz=MzkyNzQxMjQ4Ng==&mid=2247484213&idx=1&sn=5f02c5c4bdbb4522880b81fdcf4c4aba": "11w漏洞poc", "https://mp.weixin.qq.com/s?__biz=MzU5ODE2NDA3NA==&mid=2247496618&idx=1&sn=cf02fc742b1c64e4d18e54e3bdca8004": "VMware发布更新,修复墨云科技报告的高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485760&idx=1&sn=fdc697067990411601ee803c76aa8e14": "【漏洞复现】某平台-Sc-Clue-count-search-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5OTQzNTI4Nw==&mid=2247488921&idx=1&sn=796d00590260af7c745e20f4cb082c0b": "两个影响WPS Office的任意代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308739&idx=1&sn=d35a77c0fb47a68f87a8f37d91f4bb5e": "知名开源监控系统Zabbix存在SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308739&idx=2&sn=9f511acdd37389f627c4dd8e2667b338": "新型恶意软件能利用LogoFAIL漏洞感染Linux系统", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066393&idx=1&sn=ac63bf158d1e3e33b69fbab49a5ae214": "【安全圈】知名开源监控系统Zabbix存在SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066393&idx=4&sn=b1e7b15689fa221569f9a1cad7eff071": "【安全圈】新型恶意软件能利用LogoFAIL漏洞感染Linux系统", "https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651729625&idx=1&sn=88a46004f6807392ed040391e769be25": "数据使用控制｜面向五类可信数据空间建设的数据安全沙箱", "https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247493372&idx=1&sn=f8ed6cc9dc514805d164f9d47277e8f5": "年末冲刺！2024漏洞马拉松『美团站』正式启动", "https://mp.weixin.qq.com/s?__biz=MzI0MTY5NDQyMw==&mid=2247525335&idx=1&sn=3c4d387336e0c4ad6298568a52661dec": "docker历史上的第一个漏洞：关于shocker的一切", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489531&idx=1&sn=b8aa79a6bb356af80069827d5d8a0075": "从零开始：K8s安全测试与漏洞挖掘全攻略 开胃K8S LAN PARTY CTF", "https://mp.weixin.qq.com/s?__biz=MzU5Mjg0NzA5Mw==&mid=2247493593&idx=1&sn=56add9a2f2a097757cc4601ea46e1c10": "国家平台认可｜众智维科技获中国CNVD年度星级认定", "https://mp.weixin.qq.com/s?__biz=MzA5NDQzODQ3MQ==&mid=2648194328&idx=1&sn=a59c0ff9c783306d55f7139b98401b63": "泰晓社区推出口袋AI盘，普通PC即插即跑", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484709&idx=1&sn=b9e726441e7c55aa51751d27d441bcd3": "【复现】泛微 e-cology前台SQL注入漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485166&idx=1&sn=cf85ddc0f463107ad7165d7fd89bbed6": "漏洞推送|某空WMS-仓储精细化管理系统 SaveCrash.ashx存在文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458585295&idx=3&sn=e84b92c130bef5ae24d71d72283bd86e": "CTF训练营-Web篇 更新： 反序列化漏洞-Phar反序列化和字符串逃逸", "https://mp.weixin.qq.com/s?__biz=MzkxMDc0MTc5Mw==&mid=2247483778&idx=1&sn=617673eea861e0f39c1b0c1f5e976558": "【免杀+钓鱼】钓鱼页面搭建+免杀捆绑拿shell", "https://mp.weixin.qq.com/s?__biz=Mzg2MDU5NjI0Mw==&mid=2247490281&idx=1&sn=d685ffad16184b8e941bb837dcc4caa2": "【12月Huo力全开】LLSRC全线漏洞2倍积分奖励！", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247506250&idx=1&sn=65c3600e701ae88d87981315807f4d12": "CVE-2024-42327 Zabbix 严重漏洞POC已公开！", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515040&idx=1&sn=9a0c97b9ff7c9ac20e790864231ba0f7": "单兵漏洞测试工具 -- Yakit", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247498804&idx=1&sn=7b4841d81ea301d1b204b069ffc9250b": "sign加密小程序漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489258&idx=1&sn=37b588ec3a46cd041f49cdc24390fdd6": "【漏洞预警】Dell NetWorker权限提升漏洞(CVE-2024-42422)", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664712099&idx=1&sn=61a72f188755066a11d2bbfb63a06708": "searchsploit漏洞辅助利用工具", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247632675&idx=2&sn=9836ac0b7ae06ac3f5be960a95f43789": "自助彩票机成“提款机”？3人利用系统漏洞窃取220余万元", "https://mp.weixin.qq.com/s?__biz=MzAwNTg2NjYxOA==&mid=2650741919&idx=1&sn=3772fbe77afe8d68f005323e2f90c803": "荣获最佳实践案例，网易易盾发力央国企合规内控数字化", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247567953&idx=2&sn=47f141df1d0d634de4d06cf53e6c7b61": "【珍藏版】渗透测试手册，简直太赞了！", "https://mp.weixin.qq.com/s?__biz=MzkyOTUxMzk2NQ==&mid=2247485627&idx=1&sn=22b7126319128dc90cd1fb3659a2c5c8": "Windows漏洞：MS08-067远程代码执行漏洞复现及深度防御", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491636&idx=1&sn=5ae3f182c579e9eb6bcbb0cf1d1b36db": "漏洞预警 | 7-Zip整数下溢漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491636&idx=2&sn=2d7f1f2bbdc233543e7c316a9a7d4297": "漏洞预警 | 致翔OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzODMyMzQxNQ==&mid=2247484290&idx=1&sn=360be325d8ceb57a683f4156ebdd2520": "黑客武器库 | AMSI.fail完美bypass AMSI", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247493740&idx=1&sn=0ca4e44056c922c451e534424089df72": "【神兵利器】Jeecg综合漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492864&idx=1&sn=c1ba496faf888e4050d43d6963f2d1d5": "发现利用LogoFAIL漏洞的BootKitty Linux UEFI启动工具包", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491122&idx=1&sn=bb9371663020caf90ea8432d73756f63": "GitLab漏洞汇总", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247502178&idx=1&sn=bd49402624ad97e1d5aac52790c107fe": "网安牛马碰见WAF如何凑出漏洞数量？（逻辑漏洞篇）", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787552&idx=1&sn=28ab5c68562d4aeadd078125fc90c915": "安全KER|作家招募火热进行中", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247525251&idx=3&sn=abbd8e7be86d11ab9ebf4a932d72cff9": "Windows Server 2012 用户注意：0day 漏洞可绕过 Web 安全标志", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651129390&idx=1&sn=81a9a6bbaa7c79665824a969c6c5535b&chksm=80e71c9eb790958862c09deb7147a65e9781d729aa3e4e14f46a847da9d800bb3b57a0da1a7e&scene=58&subscene=0": "微软超高危漏洞“狂躁许可”：从无回显漏洞看传统漏扫局限性", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458585295&idx=3&sn=e84b92c130bef5ae24d71d72283bd86e&chksm=b18c384586fbb1535735f8496a6b6ebeb503113ebdd67b9eb348c7d67ff6866c613783cf385f&scene=58&subscene=0": "CTF训练营-Web篇 更新： 反序列化漏洞-Phar反序列化和字符串逃逸", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521662&idx=1&sn=f6345622bb66821f5bf5fcb0e222aa43&chksm=ea94a414dde32d028c675ddcd14b0de88fa05b1d2e477b937d155ee4040b22bf2be4dd0c664b&scene=58&subscene=0": "Zabbix 修复开源企业网络监控工具中严重的SQLi漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066393&idx=1&sn=ac63bf158d1e3e33b69fbab49a5ae214&chksm=f36e7e19c419f70fbbf339ed9443f3c6144f86fd4c2767b6093fa54e3cdac6dd1a3c287d74d2&scene=58&subscene=0": "【安全圈】知名开源监控系统Zabbix存在SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066393&idx=4&sn=b1e7b15689fa221569f9a1cad7eff071&chksm=f36e7e19c419f70f532549488e0e8d0f8aae4d951c7530354d032c143effdb2584400674cfa0&scene=58&subscene=0": "【安全圈】新型恶意软件能利用LogoFAIL漏洞感染Linux系统", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499505&idx=1&sn=f889cf5b6519afeef6e1e158a49ab584&chksm=973acd93a04d4485db65e1d8fc09b175d15713ab3c8127734762a2cec42e917b61543533bdd2&scene=58&subscene=0": "CNVD漏洞周报2024年第48期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499505&idx=2&sn=ef3fadc3bc76fc795be2bb777d46dcb3&chksm=973acd93a04d4485d13fc8007fa42d7ab73fb65f43d5cf792bb58ef2889b145fa6a5d1e7eea6&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241125-20241201)", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489531&idx=1&sn=b8aa79a6bb356af80069827d5d8a0075&chksm=fb029aa3cc7513b53bf86447e392a74900ffe3ae568fe7882ce569427a18e8b004883290e12a&scene=58&subscene=0": "从零开始：K8s安全测试与漏洞挖掘全攻略 开胃K8S LAN PARTY CTF", "https://mp.weixin.qq.com/s?__biz=Mzk0NTY5Nzc1OA==&mid=2247484160&idx=1&sn=768fc0310477001e491b83ee2ccdbd59": "一文学会fastjson漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247502895&idx=1&sn=f0ef4dda50f565a3c0001a2d868173ce": "知名开源监控系统Zabbix存在SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489512&idx=1&sn=2e745e5c6a4f4db81676b988999d69eb": "智联云采 SRM2.0 receiptDetail SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg1MTA5MQ==&mid=2247484544&idx=1&sn=edccc83fdc6c490a2e6fea3dca97653f": "CVE-2017-7504 JBOSS反序列化漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzU1Mjk3MDY1OA==&mid=2247518877&idx=1&sn=a11ed90f8e0e77753a6ce81928e563cb": "网安牛马碰见WAF如何凑出漏洞数量？（逻辑漏洞篇）", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793364&idx=2&sn=d12bfd3862e0cd52b8c857595203e4d5": "Veeam 警告服务提供商控制台中存在严重 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491124&idx=1&sn=a0b37e5980727d2306c23e85b77a4db1": "【实战小技巧系列】前端 JS 解密：一次简单高危漏洞案例", "https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247489624&idx=1&sn=d79b623b062721f4270af7e991894bf1": "银狐黑产最新加载器利用破解版VPN为诱饵进行传播", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491636&idx=3&sn=b01fdd9d4755ed5068d97d6a493c81fb": "漏洞预警 | Eking管理易任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjU2NjY5MQ==&mid=2247508195&idx=1&sn=fb8f74f3b180a105172e67d7ff88fc52": "关保联盟2025 年团体标准预研征集通知", "https://mp.weixin.qq.com/s?__biz=MzkxNjU2NjY5MQ==&mid=2247508195&idx=3&sn=b3b1239facd94841bd2ff0bccf05da41": "VMware发布更新,修复墨云科技报告的高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247493372&idx=1&sn=f8ed6cc9dc514805d164f9d47277e8f5&chksm=ec18072fdb6f8e39c609c95ac1b0aba49aa2e9f70246d4c7af7ce82ca6d40ee9caa7fef0e362&scene=58&subscene=0": "年末冲刺！2024漏洞马拉松『美团站』正式启动", "https://mp.weixin.qq.com/s?__biz=MzI5MDcyODIzNg==&mid=2247484735&idx=1&sn=772fd5e4e3080538ee286b09acd0d073": "占省师傅：从零基础到单个漏洞1.5万元，8个月他用努力书写了自己的“封神之路”", "https://mp.weixin.qq.com/s?__biz=MzIyMzIwNzAxMQ==&mid=2649463312&idx=1&sn=92057a4f693945a955aa89e48af8c678": "推荐 10 个漏洞管理工具，漏洞猎手必备！", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580067&idx=2&sn=d10b2e801f0d756e658e21558ddff8d7": "新型漏洞攻击利用服务器进行恶意更新", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247490461&idx=2&sn=08cc776019baf385a479ee02ed9635ae": "Zabbix SQL 注入 CVE-2024-42327 POC已公开", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133796&idx=1&sn=006e621bf25cb8e231717afc6980c998": "四大行业协会同日发布安全提示声明：审慎采购美国芯片；Safari浏览器零日漏洞或已遭利用，多个Apple应用平台被波及 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502675&idx=1&sn=9da987c093db694ef04ea7eeb72e4bd8": "【成功复现】JeecgBoot SQL注入漏洞(CVE-2024-48307)", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485764&idx=1&sn=ed5c5f388466a3044d490276e0d4e911": "【漏洞复现】某平台-tag-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247632689&idx=3&sn=3c9e08e5af95f26a73913ce6e7ded2bc": "微软驱动程序关键漏洞已被APT组织利用", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486221&idx=1&sn=8ed854d241c149fe530ee0e4f313d861": "「漏洞复现」同享人力资源管理系统-TXEHR V15 ActiveXConnector 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490059&idx=1&sn=815a095a3f15acb7fa90d072628c460e": "Veeam 针对服务提供商控制台中的严重 RCE 漏洞发布补丁", "https://mp.weixin.qq.com/s?__biz=MzU1NDU1NTI5Nw==&mid=2247488156&idx=1&sn=1d8d9f43ad59603307d7e916df2ae109": "提价配活动！“严重漏洞”单价万元以上，“中低危”1.5倍起步", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651461963&idx=1&sn=203cd41e8d0df5d658325df01da13a8a": "信息安全漏洞月报（2024年11月）", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651461963&idx=2&sn=477e8872c1f04b2e609013941a980248": "信息安全漏洞周报(2024年第49期)", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494202&idx=1&sn=07df2e9165411c51b79242aa35a06423": "提价配活动！“严重漏洞”单价万元以上，“中低危”1.5倍起步", "https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650277174&idx=1&sn=1c09acfc7f34b77405224cca88db209c": "盛邦安全获CNVD满星评价，专业实力再获权威认可", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308802&idx=1&sn=ed99bbd47f1003dc1db38fa05309efca": "微软驱动程序关键漏洞已被APT组织利用", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308802&idx=3&sn=b5b1c2eefdb347a23f0346c009022f75": "思科安全设备ASA十年老漏洞正在被利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066407&idx=3&sn=26ea707878614e9c3a2395f4334a3b4c": "【安全圈】思科安全设备ASA十年老漏洞正在被利用", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247513696&idx=1&sn=7c88b6b634b4ac1e28b987f2a9615627": "网安瞭望台第9期：0day 情报，OAuth 2.0授权流程学习", "https://mp.weixin.qq.com/s?__biz=MzUzNjg1OTY3Mg==&mid=2247491707&idx=1&sn=469de37341e0040e4e66b452207e3211": "华顺信安获评NVDB漏洞库“技术支撑单位”", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521684&idx=1&sn=b5ba5835dc8937327b3ded698979f0f2": "Veeam 提醒注意VSPC中的严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521684&idx=2&sn=d7717056b8823ba4a6de5202613f9d39": "思科证实已存在10年的ASA产品漏洞正遭利用", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247577400&idx=1&sn=87074d2775537d441ac7810f9fe11967": "最高级！360获评NVDB通用网络产品安全漏洞专业库“三星级技术支撑单位”称号", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489536&idx=1&sn=44605bb9e4f29ccc3c9ffa22b1b13513": "从零开始：K8s安全测试与漏洞挖掘全攻略二", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247623073&idx=1&sn=3f349e63c358eb0d851df2697940fb8d": "奇安信获评工信部NVDB漏洞治理合作“三星级技术支撑单位”", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484361&idx=1&sn=2fddbed9dcf2ab77c9e5f6c846dce7b6": "第十五期 · 安钥®「漏洞处置标准作业程序（SOP）」征文启示", "https://mp.weixin.qq.com/s?__biz=MzI0NzY1MDgyMw==&mid=2247513490&idx=1&sn=6b47c5db8eec9cc0454514032835df17": "开源网安受邀出席2024四川网信企业家发展年会，展示网信安全领域优秀解决方案", "https://mp.weixin.qq.com/s?__biz=Mzk0MTUxNzAxMg==&mid=2247484141&idx=1&sn=ab52db7afb078dc0594ae666b550a7e6": "用友NC workflowService SQL注入1day代码分析", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500336&idx=2&sn=af8ed86d64b88dd9cf96ca2ee1644938": "【漏洞通告】Progress WhatsUp Gold远程代码执行漏洞（CVE-2024-8785）", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500336&idx=3&sn=ed879b95117db59435069bc0690d8367": "【漏洞通告】Veeam Service Provider Console远程代码执行漏洞（CVE-2024-42448）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489265&idx=1&sn=bfa7c936f79c9a65dfda98c9b44c5c6c": "【漏洞预警】ProFTPD权限管理不当漏洞可导致权限提升", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247501960&idx=1&sn=b1a874b5cd7e3c9c5fa8df96481612cc": "360漏洞云情报月度合集-2024年11月期", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247487830&idx=1&sn=c73070283e1b24b768e04165b08c1289": "Java 反序列化之 XStream 反序列化", "https://mp.weixin.qq.com/s?__biz=Mzg4MTA2MTc4MA==&mid=2247493550&idx=1&sn=c510562442bf86723a5b2ac1107e4be5": "CSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NDYzNjY0Mg==&mid=2247500706&idx=1&sn=29b5e12ad6a0d9d037b53d2fda911c25": "实力攀升丨云天安全荣登第十二版《网络安全企业100强》第37名", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515057&idx=1&sn=3438bafbf1ea31482cff9d6f0be0619a": "WordPress Query Console漏洞EXP（CVE-2024-50498）", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487930&idx=1&sn=589b3837a2dc8ff72e861b99f6947f5d": "Zabbix api_jsonrpc.php接口存在SQL注入漏洞CVE-2024-42327 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486207&idx=1&sn=0a038edf2f8010249ccb82461ef389dd": "你名下关联了多少账号？速查！", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247520783&idx=1&sn=e6d18857c2b21d1bc8b80636051ff403": "钓鱼网页散播银狐木马，远控后门威胁终端安全", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484756&idx=1&sn=752d76f74d42ba7f8a4a10a54383a15d": "【漏洞复现】CVE-2024-9935", "https://mp.weixin.qq.com/s?__biz=Mzg3NzE4NzgzMA==&mid=2247484964&idx=1&sn=0e8a1331b6b922f07501f66fd83c91af": "大模型的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899701&idx=1&sn=656efce49817921565c19e3107237f5a": "微软修复 AI、云计算和 ERP 安全漏洞，其中一个已被用于攻击", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491639&idx=1&sn=39e40ca6d804352e6d20235db2217c6f": "漏洞预警 | GitLab权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491639&idx=2&sn=ef0f15d92963fe62bd06df07429f9bce": "漏洞预警 | 用友NC SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247509613&idx=1&sn=3d46d512c0ea527fdba9869e770416e8": "移动安全框架 (MobSF) 存在存储型XSS漏洞 | CVE-2024-53999", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486893&idx=1&sn=4910174c4a8925e18aae62644f0d7dec": "API安全漏洞靶场crapi漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486893&idx=2&sn=191f261307362506181be108372096f1": "网安牛马碰见WAF如何凑出漏洞数量？（逻辑漏洞篇）", "https://mp.weixin.qq.com/s?__biz=MzkyODY5ODAyOA==&mid=2247488732&idx=1&sn=1cb8ad2c108f085ca1907e59c5d42bb1": "大模型安全漏洞：AI时代的“隐形炸弹”（附下载）", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247505811&idx=3&sn=4427c170e490db198897f9762069430b": "5th域安全微讯早报【20241205】292期", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492872&idx=1&sn=63eff1dd884f77fb706066595cc12e75": "思科ASA漏洞CVE-2014-2120当前正在被利用攻击", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488753&idx=1&sn=bfd5495957e2ee2a2129a1c2f5a66d85": "【漏洞复现】Wordpress ElementorPageBuilder插件存在文件读取漏洞(CVE-2024-9935)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521684&idx=1&sn=b5ba5835dc8937327b3ded698979f0f2&chksm=ea94a4fedde32de81ba198d63194acfd35654a0fb756fa23333f2f5a4738769841bd5d1834e2&scene=58&subscene=0": "Veeam 提醒注意VSPC中的严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521684&idx=2&sn=d7717056b8823ba4a6de5202613f9d39&chksm=ea94a4fedde32de8a7cb8b62b8be9a979c6a959069b85ae3d1afdde8ea26be3e36187d94c087&scene=58&subscene=0": "思科证实已存在10年的ASA产品漏洞正遭利用", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502561&idx=1&sn=6b0222e9c2cb7f15486d885d1137313b&chksm=fe79ee79c90e676fc7cb50bebe31bafe77c5a1ee4af702a39234ee5555741d09674e90ac0d6b&scene=58&subscene=0": "ProFTPD 权限提升漏洞(CVE-2024-48651)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066407&idx=3&sn=26ea707878614e9c3a2395f4334a3b4c&chksm=f36e7e27c419f731e6dac2fb2ce42e4931eb3dd86c6fa19bbeb2be2bb63870488d6f36224aed&scene=58&subscene=0": "【安全圈】思科安全设备ASA十年老漏洞正在被利用", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503221&idx=1&sn=d9fadb7bf0f6c6c6a20cedd0746be700&chksm=f2585f06c52fd61017d9efc986d383f93a607def83f0413aa7393d8ee84c3d98ed977910f806&scene=58&subscene=0": "雷神众测漏洞周报2024.11.25-2024.12.01", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489536&idx=1&sn=44605bb9e4f29ccc3c9ffa22b1b13513&chksm=fb029558cc751c4edbe0de110e6107a1d44b65f04eb68a89bc7963093524c23cd0884c47c7c4&scene=58&subscene=0": "从零开始：K8s安全测试与漏洞挖掘全攻略二", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133796&idx=1&sn=006e621bf25cb8e231717afc6980c998&chksm=bd15a7b78a622ea1b1dd6f2818bc9258b3b9fa995e19e3fb80adad2a1138833ad438dee16016&scene=58&subscene=0": "四大行业协会同日发布安全提示声明：审慎采购美国芯片；Safari浏览器零日漏洞或已遭利用，多个Apple应用平台被波及 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580067&idx=2&sn=d10b2e801f0d756e658e21558ddff8d7&chksm=e9146999de63e08ff17ab052e0ec7992afceda9bfabcd1b260cc2e0f3b313eb07cc84736bef4&scene=58&subscene=0": "新型漏洞攻击利用服务器进行恶意更新", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247577400&idx=1&sn=87074d2775537d441ac7810f9fe11967&chksm=9f8d3f30a8fab626c9792a1daa553e54a499270797b3ea41fcb1aaa200a0328ba95f9939d5e7&scene=58&subscene=0": "最高级！360获评NVDB通用网络产品安全漏洞专业库“三星级技术支撑单位”称号", "https://mp.weixin.qq.com/s?__biz=MzIxMDYyNTk3Nw==&mid=2247515004&idx=1&sn=49ef9432fd64ba81064c5af61066efee": "CVE-2024-31317 复现", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492849&idx=1&sn=b99b718c887d1d4b4b491a4e01253dc0": "Lorex 2K 安全摄像头存在五个漏洞 可让黑客完全控制，已有可用 PoC", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492849&idx=3&sn=a1317c6f0ad8fd60b6511f297c6cde4a": "Lineaje 报告显示开源软件漏洞增多", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492849&idx=4&sn=a3441c1ca8c3aba877ceebd7454b594c": "Zabbix 漏洞CVE-2024-42327 (CVSS 9.9)的 PoC 发布", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492849&idx=5&sn=9246d119bb38bf9a5a65e7c6332589f6": "暗网犯罪份子常用通讯软件 uTox 被曝 0day", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485768&idx=1&sn=c2428c06ecb9465e92c2e2479df88bbf": "【漏洞复现】某平台-webservice-GetUDEFStreamID-delay-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247506571&idx=1&sn=f68e2a8f5a1ffa13ad6b1ba4d476e0a6": "通知 | 事件型漏洞收录范围调整", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484468&idx=1&sn=034d450a0362a5ea3ced5e18dd1f68eb": "【漏洞复现】金华迪加现场大屏系统存在任意文件上传getshell漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491689&idx=1&sn=7fc67fbf122f113cf401c2a5fc38dcd8": "Oracle 警告 Agile PLM 文件泄露漏洞可能被积极利用", "https://mp.weixin.qq.com/s?__biz=MzI4MjA1MzkyNA==&mid=2655348118&idx=1&sn=75c1156ae2e457423eda64f3d7fba120": "思科10年老漏洞，影响ASA软件WebVPN登录页面", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793379&idx=3&sn=62ee6dd06f47c5b1777c48cd0a47a9fa": "CISA 警告 Zyxel 防火墙漏洞可能被利用进行攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247501960&idx=1&sn=b1a874b5cd7e3c9c5fa8df96481612cc&chksm=cfc56fd7f8b2e6c121f2c3e4596d13e63743c4782201dd9f51e82486fda1fe83495b8b7a8d41&scene=58&subscene=0": "360漏洞云情报月度合集-2024年11月期", "https://mp.weixin.qq.com/s?__biz=MzI4ODQzMzk3MA==&mid=2247489408&idx=1&sn=6883413f41c3e0c125dc9096a281e90a": "美英加澳新在堪培拉联合开展“网络哨兵”战术演习", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247484700&idx=1&sn=142480b37f5b1b6ccc6e05ab5f9eb651": "【漏洞分享】通达 OA getdata RCE 通达OA 命令执行漏洞 通杀漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580078&idx=1&sn=9a9522c0b349583b66c4c0d1f21b1978": "网络钓鱼电子邮件越来越多地使用 SVG 附件来逃避检测", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247487695&idx=1&sn=65d7e7419f8d11a5cd05a191525939d6": "9个超级实用BurpSuite插件，SRC漏洞挖掘利器打包推荐", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492849&idx=8&sn=9dca4a8bd9aee191eb10cc4a313771b5": "Veeam 备份和复制漏洞曝光：高危漏洞使数据面临风险", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491639&idx=3&sn=49bb61d194288d81af219d52581e49eb": "漏洞预警 | 安科瑞环保用电监管云平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4Njg3MDk5Ng==&mid=2247486764&idx=1&sn=a55fcbfb3164c8aba676e4571543cab6": "来抖音！小瘦带你集齐库里南碎片！", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308892&idx=1&sn=5a199edd9b8c9141ea0f237cee8292b8": "单洞奖金1万刀，我挖海外漏洞的第3年", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308892&idx=3&sn=a61ff7db311ac4f64fb8eb5cdc6bbd66": "谷歌浏览器类型混淆漏洞让攻击者能够执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066421&idx=1&sn=8b5178681a68125be7487364041e0e92": "【安全圈】Crypto.com 与 HackerOne 一起推出 200 万美元的漏洞赏金计划", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066421&idx=2&sn=c856137ec845bc74a8a86abc23c1eb69": "【安全圈】立即修复，微软驱动程序关键漏洞已被APT组织利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066421&idx=3&sn=28c802936604146904c583d74c14846f": "【安全圈】谷歌浏览器类型混淆漏洞让攻击者能够执行远程代码", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY1NTI5Mw==&mid=2247489958&idx=1&sn=c2ffa969e3dc9c3e2498efa58fbae82a": "单洞奖金1万刀，我挖海外漏洞的第3年", "https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650849758&idx=1&sn=553ea868757eb4e5d8a904185df91d80": "渤海证券基于互联网环境的漏洞主动防护方案探索与实践", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489539&idx=1&sn=69e2563458072584247038ace3c47897": "大模型的反序列化导致的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247525328&idx=2&sn=9359464472ac9ce0e09e7e04e80d874f": "CVE-2024-42448 (CVSS 9.9)：Veeam VSPC 中的严重 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247490005&idx=1&sn=7ccc648116b083bdab6dc782be6d1c61": "创宇安全智脑 | 大华 DSS 数字监控系统 adminOperate 信息泄露等79个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521692&idx=2&sn=adb3ff5ba3ff65807012edd28d90be20": "日本CERT提醒：IO-Data 路由器中的多个0day已遭利用", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247526919&idx=1&sn=0386721ba5a1ddad7d8d307ba4c159f5": "渗透测试高级技巧（三）：被前端加密后的漏洞测试", "https://mp.weixin.qq.com/s?__biz=MzU0MDI1MjUxMg==&mid=2247531454&idx=1&sn=8ba14eeeb53bc24ea03b2b5c6ca7ec45": "对攻击者保持视野领先：从漏洞情报到「扩展漏洞情报」", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650182725&idx=1&sn=03eb43e4f2d51b44e5e608a0b0c57ffc": "微步获评工信部NVDB通用漏洞库“三星级技术支撑单位”", "https://mp.weixin.qq.com/s?__biz=MjM5MTI2NDQzNg==&mid=2654552132&idx=1&sn=c15183e828e83707f18a206bd3473d0f": "四叶草安全获评NVDB漏洞库“二星级技术支撑单位”称号", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500344&idx=2&sn=0178ec0447d8480a855cf590c0cdc849": "【漏洞通告】SailPoint IdentityIQ访问控制不当漏洞（CVE-2024-10905）", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500344&idx=3&sn=0e3c5d14ebd792146b390a8f4033252e": "【漏洞通告】Django Oracle SQL注入漏洞（CVE-2024-53908）", "https://mp.weixin.qq.com/s?__biz=MzA3NjU5MTIxMg==&mid=2650575005&idx=1&sn=2945cdfb719cbcd96448d6e9e31be7a9": "再度登榜 | 国舜股份上榜2024中国网络安全企业100强", "https://mp.weixin.qq.com/s?__biz=MzU1OTUxNTI1NA==&mid=2247591715&idx=1&sn=099ecce590bb4a3e0a57257e97568e66": "中国信通院高琦受聘中关村工业互联网产业园专家委员会，助力园区高质量发展", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133823&idx=2&sn=1980e42c963033b69f13a1db90d7a5ef": "Zscaler CEO抨击虚假SASE方案严重误导用户；思科发布紧急预警：10年前的ASA系统漏洞正遭黑客积极利用 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489270&idx=1&sn=4b59e7c59879b2db9ad770253cc7b265": "【漏洞预警】Django Oracle SQL注入漏洞（CVE-2024-53908）", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489552&idx=1&sn=4af132ea745c3855bca33b85780a7f6b": "万能门店小程序管理系统 doPageGetFormList SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490066&idx=1&sn=19f10acfb4432ac39d26b9c846eece40": "立即修复，微软驱动程序关键漏洞已被APT组织利用", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247545671&idx=1&sn=6d387b3b1feabae2ace40e9ad806f1e0": "安全419《9问CEO》系列之：深蓝互联王得金", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517492&idx=1&sn=f586d9016d9592f6f6dffa36d64a2eda": "CVE-2024-22399 - SwingLazyValue利用链构造分析", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY3MTM4Nw==&mid=2247484054&idx=1&sn=8a23efc97b5ae0c014ad74d391dd5717": "Jolokia logback JNDI RCE漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497278&idx=1&sn=169a546ae3fc49b099dc54f68b7b5818": "漏洞分析 | 挖掘 .NET SqlSugar 框架SQL注入", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497278&idx=3&sn=9a007c17825bbe39189acd9ede4b5f18": "48套.NET系统漏洞威胁情报(12.05更新)", "https://mp.weixin.qq.com/s?__biz=Mzg4MDYwNDc5Nw==&mid=2247486445&idx=1&sn=6f3691c776441bd69449c6aaf6f6a6ae": "Earth Minotaur组织利用MOONSHINE漏洞工具包和DarkNimbus后门进行跨平台攻击", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492910&idx=1&sn=09a010c00e7b570a4044e87718fd1ea4": "POC集合，框架nday漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247509663&idx=1&sn=36790b3290209381053ccbb1036f3b23": "某订货系统文件上传漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491646&idx=1&sn=e2735658a6d4f6f895d5a79139c28b03": "漏洞预警 | WordPress Elementor PDF生成器任意文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491646&idx=2&sn=146ed161d1ca3fb154097be23b43a507": "漏洞预警 | 用友U8CRM SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491646&idx=3&sn=c46fce8ecd1a9f93c4787c5b907a8bc2": "漏洞预警 | 海信智能公交企业管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488767&idx=1&sn=2ee26bcf0b0ee5ec015000cf0fb9bf28": "【0day】圣乔ERP系统uploadFile存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521692&idx=2&sn=adb3ff5ba3ff65807012edd28d90be20&chksm=ea94a4f6dde32de0aa4388ab79e16c2747401cfbe56fea1c1445d852c6c6e6561fc639e183a1&scene=58&subscene=0": "日本CERT提醒：IO-Data 路由器中的多个0day已遭利用", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247506571&idx=1&sn=f68e2a8f5a1ffa13ad6b1ba4d476e0a6&chksm=eaf992c7dd8e1bd104d6d6a7d38a6d09db8fdb722402bc892dc35e6b990e59b902d860a7ac21&scene=58&subscene=0": "通知 | 事件型漏洞收录范围调整", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650182725&idx=1&sn=03eb43e4f2d51b44e5e608a0b0c57ffc&chksm=f4486ff9c33fe6ef0d47ef8026c8a71354bb9545522b763f142745db7d12b2323b6e22951901&scene=58&subscene=0": "微步获评工信部NVDB通用漏洞库“三星级技术支撑单位”", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489539&idx=1&sn=69e2563458072584247038ace3c47897&chksm=fb02955bcc751c4dec3afdef0f6425ec619901675928a3ded7cfbdd682e2fe9592a5ede95d5d&scene=58&subscene=0": "大模型的反序列化导致的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066421&idx=1&sn=8b5178681a68125be7487364041e0e92&chksm=f36e7e35c419f723248ced5990c93fa03b324de16147f2582fee595b39037591c7812287abf4&scene=58&subscene=0": "【安全圈】Crypto.com 与 HackerOne 一起推出 200 万美元的漏洞赏金计划", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066421&idx=2&sn=c856137ec845bc74a8a86abc23c1eb69&chksm=f36e7e35c419f723beffbdca1db705d69cd6c43e9da167f5a9d1b2905a34a6e32ae2740c3743&scene=58&subscene=0": "【安全圈】立即修复，微软驱动程序关键漏洞已被APT组织利用", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247526919&idx=1&sn=0386721ba5a1ddad7d8d307ba4c159f5&chksm=c2d116a3f5a69fb57e216f9bbdb4727a8e48f48f9929a0f77b192702c0c6d59a71b08a0ae5a8&scene=58&subscene=0": "渗透测试高级技巧（三）：被前端加密后的漏洞测试", "https://mp.weixin.qq.com/s?__biz=Mzg2NzkxOTQ0OA==&mid=2247484486&idx=1&sn=7a15fc7f6dc988da668fea8f1e56ab43": "zabbix SQL注入漏洞(CVE-2024-42327)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492886&idx=1&sn=d756b32f8abfbcd1e8cb11906dd81ec4": "数百台思科交换机受启动加载程序漏洞影响", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492886&idx=2&sn=cc627c845e5d461b974822fe037e5623": "Veeam修复了关键的服务提供商控制台 (VSPC) 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjU5NTY2MQ==&mid=2247484296&idx=1&sn=890c5d7d84b5feecb5a0ef7741a8f57c": "【漏洞复现】彩讯邮件系统5.0.0版本存在逻辑缺陷修改用户密码", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247489190&idx=2&sn=34b2b8fd8d97ed3410b550c61468f779": ".NET 安全攻防知识交流社区", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485773&idx=1&sn=d02bae22b16a74565cccdbca9d3aec85": "【漏洞复现】某平台-taillog-readfile任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487533&idx=1&sn=4eb64d6b9826505165054511c71288e2": "赛克安全本周漏洞推送（12.2-12.6）", "https://mp.weixin.qq.com/s?__biz=MzI5MzU4ODE5Mw==&mid=2247485592&idx=1&sn=a6d4635e8349bc57169d61d88bd9088b": "赛克安全本周漏洞推送（12.2-12.6）", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652250973&idx=1&sn=58660cc9fd124290dbef70e8f000d867": "思科发布紧急预警：10年前的ASA系统漏洞正遭黑客积极利用", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484475&idx=1&sn=abb1e90b0a7bf06630254cbceb7a4db6": "【漏洞复现】赛普EAP企业适配管理平台Upload任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793394&idx=2&sn=06277be44ef38c9683d24a9ef2472d1c": "黑客利用 MOONSHINE 漏洞和 DarkNimbus 后门攻击", "https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247485821&idx=1&sn=b98633172a515bdd2cbbfed5efdc3e30": "渗透测试人员的 Nmap：漏洞扫描", "https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247490923&idx=1&sn=f17dfe44ab6378a7f8dd918d7e89e309": "一个声音克隆工具：clone-voice", "https://mp.weixin.qq.com/s?__biz=MzIxMDYyNTk3Nw==&mid=2247515004&idx=1&sn=49ef9432fd64ba81064c5af61066efee&chksm=97634faaa014c6bc8d271434890da9fa1423f4cffa5b6eea0f706cd10222c62508d323f30267&scene=58&subscene=0": "CVE-2024-31317 复现", "https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650849758&idx=1&sn=553ea868757eb4e5d8a904185df91d80&chksm=80dba27bb7ac2b6db6d3036bcd5e0755a1ae6e0af5a030435033d1e750ca2e4cb0097c273209&scene=58&subscene=0": "渤海证券基于互联网环境的漏洞主动防护方案探索与实践", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066421&idx=3&sn=28c802936604146904c583d74c14846f&chksm=f36e7e35c419f723e1439d92f0683c879d36f2c8fbb1924b0e56cf622579af6653c835a4f408&scene=58&subscene=0": "【安全圈】谷歌浏览器类型混淆漏洞让攻击者能够执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502571&idx=1&sn=c30e1d47ae1059542d59b52c7c4ddfd5": "SonicWall SMA100 SSLVPN 多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA3OTMxNTcxNA==&mid=2650955393&idx=1&sn=e2b764b3fbac3a173c1080cad44da575": "收藏！银行业数据安全工作备忘录，随时自查超适用~", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247491936&idx=1&sn=012e625f885581be435e1e76a5f715ea": "漏洞预警 灵当 CRM uploadxx.php 文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484585&idx=1&sn=5454bc75cdf44fafbb3e5e8027140664": "Apache-HertzBeat开源实时监控系统存在默认口令漏洞【漏洞复现|附nuclei-POC】", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133870&idx=1&sn=bbdb0d6ade319897ba8d80e124901b49": "英国电信巨头BT集团遭遇勒索攻击，500GB敏感数据恐遭窃取；流行移动安全测试工具曝XSS漏洞，文件名成为攻击新途径 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzA5MTM1MjMzNA==&mid=2653425589&idx=1&sn=61fa9b1c408e4fd0b661e6750c6e4417": "北信源携手中外文化交流中心用“爱传(AITran)”助力文化出海", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309094&idx=4&sn=a4310a5d090519e47811b92239c23f69": "CABED：一款针对Chrome应用程序绑定数据的加密解密工具", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486248&idx=1&sn=c5db4ce371a7d76a113ec5be58c6a312": "「漏洞复现」易宝OA GetUDEFStreamID SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247495970&idx=1&sn=ff9a5f04745abfade7cb4ca85fc55840": "CVE-2024-42327 Zabbix SQL注入 POC", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066435&idx=3&sn=bbca90f744a9f08fd2d2e9d95bb190e2": "【安全圈】I-O Data路由器0Day漏洞被利用，无修复补丁", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247488033&idx=1&sn=596233b0055d9fdc24b51f7fbaa5ea3e": "用友NC-Cloud process SQL注入漏洞复现及POC", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247632570&idx=3&sn=f622ece0c8d345a542cbc143d224a5a9": "诸子云｜甲方 ：不同供应商的漏洞评级不同怎么办？Windows固定网址访问怎么做？", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523938&idx=1&sn=6c81b44f4c94f68c790de69ec5748741": "【漏洞通告】Django Oracle数据库SQL注入漏洞(CVE-2024-53908)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231514&idx=5&sn=a1b9fdf907d919a928c462945660f655": "CNNVD | 关于SonicWall SMA100安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247525341&idx=1&sn=ea86ae1bed2b137932a11ba97f44f21c": "[漏洞] CVE-2024-44308：Apple Safari JavaScriptCore 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NDg0ODkwMQ==&mid=2247486098&idx=1&sn=ae6ad47bd22e1e3125d2fe45a58ae8b8": "渗透测试高级技巧（三）：被前端加密后的漏洞测试", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521713&idx=1&sn=7bdde63b35fa4a28908581f18c38883e": "引导加载程序存在高危漏洞，影响思科100多个交换机机型", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651461968&idx=1&sn=0a6663b04895b46371bd12da4468b547": "CNNVD 关于SonicWall SMA100 安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507515&idx=1&sn=83bcc14122f1b7fd67fed7d5868d21fc": "微步协助统信修复提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500352&idx=2&sn=235a9462be5bc3a03d48bbfb6ab01bd6": "【漏洞通告】Mitel MiCollab身份验证绕过漏洞（CVE-2024-41713）", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500352&idx=3&sn=8418c366f125a72454f0879f77e27f18": "【漏洞通告】SonicWall SMA100 SSL-VPN缓冲区溢出漏洞（CVE-2024-45318）", "https://mp.weixin.qq.com/s?__biz=Mzg2NTA4OTI5NA==&mid=2247517561&idx=1&sn=54d4c087458711183eef2d5373e7dc33": "Spring漏洞测试与利用", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484772&idx=1&sn=8e593a28c598c058805d54e0cfef6028": "【漏洞复现】CVE-2024-41713", "https://mp.weixin.qq.com/s?__biz=MzkwMzQyMTg5OA==&mid=2247486322&idx=1&sn=fbd61172d2e9bb94ebd76a78608b2ced": "Java 安全 | 从 Shiro 底层源码看 Shiro 漏洞 (下)", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247498845&idx=2&sn=25201142c51e9dbeacbaf956dbf30b41": "渗透测试 -- Web漏洞介绍和Sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489275&idx=1&sn=31722ca4a5e3edc74c5e218e4bfedbdf": "【漏洞预警】SonicWall SMA100 SSL-VPN缓冲区溢出漏洞CVE-2024-45318", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491663&idx=1&sn=13f8337d2c5b035b77d6655b19c9fc53": "漏洞预警 | Zabbix SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491663&idx=2&sn=15daefd39c0e30d1382305c7482cf614": "漏洞预警 | 九思OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491663&idx=3&sn=6b2aa26c1481def636af9c318e3ce674": "漏洞预警 | 昂捷ERP SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513246&idx=1&sn=a4a663b3a67c336106c8f2c644048dbf": "严重损害数据安全，湖南一IT公司被罚20万元", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652113041&idx=2&sn=ce9243791a081b087a014d89f2b9f468": "2024年最危险的25个软件漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488779&idx=1&sn=9a633d7bc6504c05e173fe7110716099": "【漏洞复现】EasyCVR视频管理平台taillog存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MDkyMTE4OQ==&mid=2247486180&idx=1&sn=258dd29d0a97c72092bd6b722048e94d": "代码审计 ｜ Jump Server堡垒机历史漏洞审计", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133870&idx=1&sn=bbdb0d6ade319897ba8d80e124901b49&chksm=bd15a77d8a622e6b8a009b9c77717ac002be4c6326296ad17b7e71b54840a5e6c8dea4bdee76&scene=58&subscene=0": "英国电信巨头BT集团遭遇勒索攻击，500GB敏感数据恐遭窃取；流行移动安全测试工具曝XSS漏洞，文件名成为攻击新途径 | 牛览", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507515&idx=1&sn=83bcc14122f1b7fd67fed7d5868d21fc&chksm=cfcabd2ff8bd34390927ec4b3e4474acd0ef2b7d036e886b03a6e6ad21da3852f9a9df801fc3&scene=58&subscene=0": "微步协助统信修复提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497278&idx=1&sn=169a546ae3fc49b099dc54f68b7b5818&chksm=fa5958d3cd2ed1c510f4fb849cc2d2c03a8dc61d0d509b6550405b9e20962197f50ae3809fbc&scene=58&subscene=0": "漏洞分析 | 挖掘 .NET SqlSugar 框架SQL注入", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497278&idx=3&sn=9a007c17825bbe39189acd9ede4b5f18&chksm=fa5958d3cd2ed1c5d28b06748f185c62bdcea1ba991e083dff02e650181c89c7e74602d0fb24&scene=58&subscene=0": "48套.NET系统漏洞威胁情报(12.05更新)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521713&idx=1&sn=7bdde63b35fa4a28908581f18c38883e&chksm=ea94a4dbdde32dcd5e8fb217c09d01c5c1de3a63fcb86fe3d69baffeb27cb89f965d42210193&scene=58&subscene=0": "引导加载程序存在高危漏洞，影响思科100多个交换机机型", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502571&idx=1&sn=c30e1d47ae1059542d59b52c7c4ddfd5&chksm=fe79ee73c90e67653d869887a830bf2a25190cbd667ff181b5e7f6535ba46c4cfb73f220d44f&scene=58&subscene=0": "SonicWall SMA100 SSLVPN 多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066435&idx=3&sn=bbca90f744a9f08fd2d2e9d95bb190e2&chksm=f36e7ec3c419f7d5cf01456a6710a86aa0232fb64cceceecabeed12a0e2bcb562d4935577983&scene=58&subscene=0": "【安全圈】I-O Data路由器0Day漏洞被利用，无修复补丁", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231514&idx=5&sn=a1b9fdf907d919a928c462945660f655&chksm=8b59f0a3bc2e79b50b247cd840b93ebd4c5907171fe3ec15d7fc1fd6b4795be7d7ad42d5eb82&scene=58&subscene=0": "CNNVD | 关于SonicWall SMA100安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247525108&idx=1&sn=6e27512b02e4148cf87e701c0a56e75c": "SRC漏洞挖掘之道", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727840329&idx=1&sn=8e4b7109f4601396270ae0922058dd61": "【活动】2024漏洞马拉松活动来袭，史无前例反爬专项单个奖励最高5w！", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650604682&idx=3&sn=66e331213aaa69ebd6e06ba539c6cbae": "移动安全框架 (MobSF) 存在存储型XSS漏洞 | CVE-2024-53999", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309095&idx=1&sn=c6dd464702642072510bbb85c37cb402": "无补丁，I-O Data路由器0Day漏洞被利用", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497324&idx=3&sn=726aa5ada489a6cc591b1f36e419bb9b": "漏洞分析 | 挖掘 .NET SqlSugar 框架SQL注入", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793408&idx=3&sn=07c14519c7e26f4483bd662559941c89": "新的Windows 0day漏洞：攻击者几乎无需用户交互即可窃取 NTLM 凭据", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523938&idx=1&sn=6c81b44f4c94f68c790de69ec5748741&chksm=ce461572f9319c64441dbb9b9fec89017ec3a569bc74e97b707ce386a4284f8ad97b521bacdb&scene=58&subscene=0": "【漏洞通告】Django Oracle数据库SQL注入漏洞(CVE-2024-53908)", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492906&idx=1&sn=bcccbff213bc1e74461cb25625f86307": "Windows 中存在严重0day，可导致用户凭据泄露", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247487942&idx=1&sn=15aa489d022ced042139dc1381fcafd4": "高质量企业+eduSRC漏洞挖掘实战资料分享", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247525456&idx=2&sn=36ccd1ade2da7b7093c538a25b09dc4a": "新的 Windows 零日漏洞暴露 NTLM 凭据，已获得非官方补丁", "https://mp.weixin.qq.com/s?__biz=MzkzMjIxNjExNg==&mid=2247485990&idx=1&sn=303f4ff26e9de1a67b30a91e4094d384": "支付类漏洞挖掘技巧总结", "https://mp.weixin.qq.com/s?__biz=Mzg2NTA4OTI5NA==&mid=2247517561&idx=1&sn=54d4c087458711183eef2d5373e7dc33&chksm=ce5da718f92a2e0e8f53cf92d03de7e78076267af9cfe8e6a0fc7d509811666fb6cb92d62ebe&scene=58&subscene=0": "Spring漏洞测试与利用", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487535&idx=1&sn=8de530d3ddedd7217a57c2e53b7b6be5": "赛克安全本周漏洞推送（12.2-12.6）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485721&idx=1&sn=aa1125a603acdb5b911e5e35ea92b93c": "CVE-2024-45318｜SonicWall SMA100 SSL-VPN缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485721&idx=2&sn=33b93268432cff8257daa4d1e5239492": "CVE-2024-53908｜Django Oracle SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458585581&idx=2&sn=93d80a7ee158f6ced9cf81c118db2390": "12月31日截止 | “看雪漏洞小组”集结！组团冲击华为漏洞更高奖励", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486259&idx=1&sn=dd51ca8df3aa1533144b975b9bec3086": "「漏洞复现」EasyCVR-视频管理平台 taillog 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY0MzE2NQ==&mid=2247483958&idx=1&sn=bd8d4407a74e628e6eb222ab3b30070a": "Docker0day，影响近4000台主机", "https://mp.weixin.qq.com/s?__biz=MzkyOTUxMzk2NQ==&mid=2247485642&idx=1&sn=afcc7c4a8330cefeed2195326b87685f": "记一次简单的代码审计项目案例", "https://mp.weixin.qq.com/s?__biz=MzkyMTYyOTQ5NA==&mid=2247485906&idx=1&sn=85d283dcf4ac6ef6ea62b49c1db8f492": "AI不到3分钟生成了一份29页的《漏洞扫描原理及常用工具》PPT材料", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247514051&idx=2&sn=e39a03d52f1e51705a6d98d33c0d2c99": "网安瞭望台第10期：开源机器学习框架存在漏洞、GammaDrop 恶意软件", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247504999&idx=3&sn=860de968b5da5269ea0ec755cd3e8392": "Windows 7 至 Windows 11 中存在新的 0 Day NTLM 哈希泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247505049&idx=3&sn=3d5ddf0d99cec9a595d1f68d4a705cb8": "SD Express 卡漏洞导致笔记本电脑和游戏机遭受内存攻击", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488796&idx=1&sn=6d6053b4caec0a1edb3e9de18b68d64d": "【大量存在】用友NC yerfile_down_bill存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458585581&idx=2&sn=93d80a7ee158f6ced9cf81c118db2390&chksm=b18c396786fbb071705f7f8b884a96dcf374e55a263d7e2ddff73bc1c46dfcc27d8933809a91&scene=58&subscene=0": "12月31日截止 | “看雪漏洞小组”集结！组团冲击华为漏洞更高奖励", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497324&idx=3&sn=726aa5ada489a6cc591b1f36e419bb9b&chksm=fa595881cd2ed197da53a8f8a689200cddc5e420f03195716fffc04190c050059eafd0e665bc&scene=58&subscene=0": "漏洞分析 | 挖掘 .NET SqlSugar 框架SQL注入", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727840329&idx=1&sn=8e4b7109f4601396270ae0922058dd61&chksm=80505dc1b727d4d7f11a0db75283d0a13c1e9887756a1a2d702a3646b7be19b286333c0c9298&scene=58&subscene=0": "【活动】2024漏洞马拉松活动来袭，史无前例反爬专项单个奖励最高5w！", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309096&idx=1&sn=4e32dd93c350ea357aa0013d017d03d8": "关键的联发科芯片组漏洞影响15亿手机用户", "https://mp.weixin.qq.com/s?__biz=Mzg3NTU3NTY0Nw==&mid=2247489413&idx=1&sn=fcde34dfbd9e6aa9333ff082c3d3c056": "第一届数证杯团体赛---服务器取证", "https://mp.weixin.qq.com/s?__biz=MzU0NDI5NTY4OQ==&mid=2247486237&idx=1&sn=61373f8016157b66e2c28307cdd3de53": "一文看懂安卓JSB风险漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066522&idx=2&sn=e68dc56710af72cb8e044123396dd41a": "【安全圈】关键的联发科芯片组漏洞影响15亿手机用户", "https://mp.weixin.qq.com/s?__biz=MzkxNzY0MzE2NQ==&mid=2247483971&idx=1&sn=81a4379fe0e4ceb11fcf5148189668bf": "【1day报送】安徽生命港湾信息技术有限公司采集服务管理工具存在未授权访问&弱口令漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496542&idx=1&sn=786c2ef243463b972253ad6ccf7dc2eb": "挖洞荒？工作两年半的渗透测试实习生如何挖到第一个高危sql注入漏洞？慎用！", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486271&idx=1&sn=8dc5deae4121a38158edf57e71dcf089": "「漏洞复现」圣乔ERP系统 DwrUtil SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492928&idx=1&sn=84b4e3fc0b92ae1f566a69902aa4184e": "Windows 权限提升漏洞检测工具集", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491681&idx=1&sn=6eabf10b247a0dcb0e6ff57570a23d7b": "漏洞预警 | Zyxel ZLD防火墙路径遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491681&idx=3&sn=aafb0b02aa119154c0ed4bb77faded81": "漏洞预警 | 思普企业运营管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066522&idx=2&sn=e68dc56710af72cb8e044123396dd41a&chksm=f36e7e9ac419f78c42203655a869ed106f01a948d8e7de64cf75fca1cf5bee3eed25ec14b8af&scene=58&subscene=0": "【安全圈】关键的联发科芯片组漏洞影响15亿手机用户", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496542&idx=1&sn=786c2ef243463b972253ad6ccf7dc2eb&chksm=e8a5f93ddfd2702ba5c86f55216742d9780d1504c5cf7b55d57e37f741241abc0f83e72d204d&scene=58&subscene=0": "挖洞荒？工作两年半的渗透测试实习生如何挖到第一个高危sql注入漏洞？慎用！", "https://mp.weixin.qq.com/s?__biz=Mzg2NDg2MDIxNQ==&mid=2247485198&idx=1&sn=665ecbc787b32963eea5d0b320ca174e": "网安牛马碰见WAF如何凑出渗透报告漏洞数量？", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247497755&idx=1&sn=e0b32483908e2f420efedf2dfa784bcd": "2024年10月份恶意软件之“十恶不赦”排行榜", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503011&idx=2&sn=86f3757c8d1f10c57e921039e6650e10": "无补丁，I-O Data路由器0Day漏洞被利用", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247486037&idx=1&sn=fe4e70919205522d0e229d662246dd37": "重生之我在推特逛漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485777&idx=1&sn=e59434cc1cbea489951c59499d4e9b80": "【漏洞复现】某平台-Sc-Interview-search-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjU5NTY2MQ==&mid=2247484301&idx=1&sn=5d9659c031f61d53a920fd44234a8536": "【漏洞复现】英飞达医学影像存档与通信系统WebUserLogin.asmx存在信息泄露", "https://mp.weixin.qq.com/s?__biz=Mzg3NTY0MjIwNg==&mid=2247484982&idx=1&sn=f38d3f91cde8ae393d8fa111b6fc69a7": "2024年OWASP LLM安全漏洞年度报告", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650604707&idx=3&sn=c9de054d4fda0db26998079e2dad84c4": "某订货系统文件上传漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484485&idx=1&sn=0f5b3d6588ad00afd34fe51811a012a4": "【漏洞复现】Palo Alto PAN-OS身份认证绕过CVE-2024-0012及命令执行漏洞CVE-2024-9474", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486227&idx=1&sn=a70bbbb6e66a54b7a6765ab23f927f9f": "CVE-2023-6553 WordPress存在的远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMTIyMjg0NQ==&mid=2247495682&idx=1&sn=05d00ffc6e8884f1917fecc62d760e0f": "X漏洞奖励计划收录扩大！高价收洞！（文末抽奖）", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899704&idx=1&sn=f4bb23c0bd779a13500ae6b75d213b39": "Array Networks SSL VPN 产品曝严重漏洞，已被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491681&idx=2&sn=6e023ccd4d0d3fa65654c5c2d88ff938": "漏洞预警 | Apache Arrow R package反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247530686&idx=2&sn=a0087e732b60c3c448073aa749ca8d2d": "全面防护：AI驱动持续安全验证，灵活应对万变攻击", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247525485&idx=1&sn=a5aeff09df0da8ba8baa5a35ae43b833": "Windows 零日漏洞 CVE-2024-38193 在野外被利用：PoC 发布", "https://mp.weixin.qq.com/s?__biz=Mzk0NzQxNzY2OQ==&mid=2247487368&idx=1&sn=e37ec534c44ac5981864d0853b870a29": "太棒辣 | 感谢大哥带我学习关于验证码逻辑漏洞这些事", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489562&idx=1&sn=6d639cb1b3d931b066f554c5d797b99a": "海信智能公交企业管理系统 AdjustWorkHours.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NDE4MzE5MA==&mid=2247487187&idx=1&sn=83cd510202e9273c772ef3f606c6afe6": "【活动】2024漏洞马拉松活动来袭，史无前例反爬专项单个奖励最高5w！", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492986&idx=1&sn=09e54f7bf277f6cbca0f1c957c7e12cd": "有PoC，Windows 0day漏洞CVE-2024-38193在野外被利用", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580114&idx=1&sn=fa181017da36db2d6d5598cb97f6ec10": "黑客利用 ProjectSend 漏洞对暴露的服务器进行后门处理", "https://mp.weixin.qq.com/s?__biz=Mzk0MDY2NTY5Mw==&mid=2247485555&idx=1&sn=ce73bb7765466995a3745ab23db7e56f": "[含POC]CyberPanel upgrademysqlstatus 远程命令执行漏洞(CVE-2024-51567)", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133887&idx=2&sn=5e64b53a72121f42601f459acb55f305": "劫持其他APT组织基础设施实施攻击，APT组织新战术曝光；罗克韦尔自动化软件曝多个严重漏洞，可被利用执行远程代码 | 牛览", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY1NzM3NQ==&mid=2247484770&idx=1&sn=40040159b0f73448fa9dfc51dde8baf8": "助力企业实战化安全运营 | 灰度安全首次亮相2024年电信和互联网行业网络安全年会", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247487956&idx=1&sn=cc514f441b4a92ba7909f0674bfe82cf": "DockerUI存在默认口令漏洞，可导致拉取镜像，管理等操作", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066537&idx=4&sn=6f910eee1c20ed718fdf7c754fd840e1": "【安全圈】需要采取紧急行动：ABB ASPECT 漏洞使建筑物面临网络攻击", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495571&idx=1&sn=0c222901aba75215f7b034c9a02775e8": "CNVD漏洞周报2024年第49期", "https://mp.weixin.qq.com/s?__biz=MzI3NjA4MjMyMw==&mid=2647789831&idx=1&sn=012815bf3c53ef1a6060c1dc35d847b9": "X情报社区漏洞奖励计划收录扩大！提供本地环境再享额外20%奖金加成！", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247488563&idx=1&sn=a550cfd3444cdc1a232119a08e1539e9": "建议收藏！这15个命令让你的效率提升3倍", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247519358&idx=2&sn=053fe593848492102cf308e4ce93de7f": "\"多引擎\"的资产识别、信息收集 | 干货", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260229&idx=1&sn=f6a11bf294dc8f32a86b9a5cafa66554": "【 CVE-2024-38193 】Windows 0day漏洞已在野利用，PoC已发布", "https://mp.weixin.qq.com/s?__biz=MzIxNjI2NjUzNw==&mid=2247492752&idx=3&sn=a61b3440c0226297a23f67abe9933266": "上周关注度较高的产品安全漏洞(20241125-20241201)", "https://mp.weixin.qq.com/s?__biz=MzU1NDU1NTI5Nw==&mid=2247488158&idx=1&sn=98acc9ee5fb73ae5ba6267e0eed963a3": "【活动】2024漏洞马拉松活动来袭，史无前例反爬专项单个奖励最高5w！", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247498096&idx=1&sn=60b0f557103ef67e7cf9159778b928d8": "全球云上数据泄露风险分析简报 （第三期）：云盘误配置与API漏洞致高校信息泄露，影响7亿账户", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491216&idx=1&sn=390db568593214c3e21c608f9aac4946": "CVE-2024-48307｜JeecgBoot SQL 注入漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489351&idx=1&sn=aa6577fd6d005684fd089d08b094a531": "一个好用的Nuclei POC模版管理工具支持一键漏洞探测|渗透测试", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515106&idx=2&sn=b625c72739d7c62b246efccace7fbb18": "渗透测试 -- Web漏洞介绍和Sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491694&idx=1&sn=3fb11feee2a30c6a980a0af26aa8ffcb": "MITRE 分享了 2024 年最危险的 25 个软件漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489283&idx=1&sn=29b9004e3fdc168434fc378d44504590": "【漏洞预警】SoftLab Integrate Google Drive身份认证绕过漏洞(CVE-2023-32117)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489283&idx=2&sn=5c93a143e811b95e8b77abdcb97f6599": "【漏洞情报】海信智能公交企业管理系统AdjustWorkHours.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486288&idx=1&sn=1bb852514919b1b26bddd263e28d5501": "「漏洞复现」Mitel MiCollab 企业协作平台 任意文件读取漏洞(CVE-2024-41713)", "https://mp.weixin.qq.com/s?__biz=Mzk0NzM4NzI1MA==&mid=2247486212&idx=1&sn=a25394ea5d523773aa1771aebc8872fc": "Zabbix SQL 注入漏洞（CVE-2024-42327）", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247525557&idx=2&sn=780285b5a5a94ef626071a57bc2412e1": "CVE-2024-55563：交易中继干扰漏洞对比特币闪电网络构成威胁", "https://mp.weixin.qq.com/s?__biz=MzIxODIzNzgwMw==&mid=2654070792&idx=1&sn=12d743d033becec5fcc0920e17922d86": "漏洞马拉松2024 | 积分赛阶段冲刺ing，半区见真章！", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247505295&idx=1&sn=c7dccc68315c50474f6e877a45a1b391": "每周网安资讯（12.3-12.9）|Oracle等厂商的多款产品存在漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495571&idx=2&sn=464e8fb82cad6f465f8242e841ab2260": "上周关注度较高的产品安全漏洞(20241202-20241208)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521726&idx=2&sn=4020dbda138c28b7da91666b33eb120a": "SonicWall 修复Secure Access Gateway 中的6个漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502580&idx=1&sn=6c73b0ed8291424bf945a368d40498c1": "安全热点周报：新的 Windows 零日漏洞暴露 NTLM 凭据，已获得非官方补丁", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247496891&idx=1&sn=9c8fd99b9ddc86cb7f57bee467702ab5": "TimelineSec助力2024漏洞马拉松活动，史无前例反爬专项单个奖励最高5w！", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247551853&idx=1&sn=ed4347c2164a771f0ba762ebd7940c96": "Spring漏洞测试与利用", "https://mp.weixin.qq.com/s?__biz=Mzk0MTQ5NjI2Ng==&mid=2247486366&idx=1&sn=41dcf0e70589bd41d82cb1b369b42865": "数据安全新动态（2024年11月）", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497381&idx=3&sn=8636f9e208f208c153d7ab0957f3d4ff": "49套.NET系统漏洞威胁情报(12.10更新)", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247488511&idx=1&sn=7a651145360443820b3f940e3734193e": "Nuclei AI - 让漏洞发现更加智能化与高效", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491682&idx=2&sn=976fbe42f73cc5380687be1c5227d1bc": "漏洞预警 | 安科瑞环保用电监管云平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491682&idx=4&sn=a0dc4444764ab2ef9ba32da241a71790": "工具 | FastjsonExploit", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247493826&idx=2&sn=2f70d68dfd020f5c120e5f7d596b9b81": "CVE-2018-15664:Docker CP任意读写主机文件", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488835&idx=1&sn=383eabd7e635fe856fbc2899b7f119b8": "【0day】安徽生命港湾信息技术有限公司服务配置工具存在任意文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291910&idx=1&sn=cce3441e3c4e73b5d7381cac3619dd88": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133887&idx=2&sn=5e64b53a72121f42601f459acb55f305&chksm=bd15a76c8a622e7a7bbfa541d6ae401b0d481ab229de33253da125d2bbfd20dada28b8730503&scene=58&subscene=0": "劫持其他APT组织基础设施实施攻击，APT组织新战术曝光；罗克韦尔自动化软件曝多个严重漏洞，可被利用执行远程代码 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521726&idx=2&sn=4020dbda138c28b7da91666b33eb120a&chksm=ea94a4d4dde32dc25a0dcbe4bb417dad621e9d9ab1c701a92e4cccf1dda90fcc8f7fc0d1eea9&scene=58&subscene=0": "SonicWall 修复Secure Access Gateway 中的6个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580114&idx=1&sn=fa181017da36db2d6d5598cb97f6ec10&chksm=e91469e8de63e0fe2c1a9542280afc7bb19ad4f3b5fb1026fcfc02ef039eebb5daa59df0e88e&scene=58&subscene=0": "黑客利用 ProjectSend 漏洞对暴露的服务器进行后门处理", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066537&idx=4&sn=6f910eee1c20ed718fdf7c754fd840e1&chksm=f36e7ea9c419f7bff05e335235f5475598b068e6dabeebb56b12bd1c608f6af50d94bb06833e&scene=58&subscene=0": "【安全圈】需要采取紧急行动：ABB ASPECT 漏洞使建筑物面临网络攻击", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247498096&idx=1&sn=60b0f557103ef67e7cf9159778b928d8&chksm=e84c5fafdf3bd6b900c1a3366bb5bf4596df0f45680ccc8b16e4d250e452104e9c80d3e53b3c&scene=58&subscene=0": "全球云上数据泄露风险分析简报 （第三期）：云盘误配置与API漏洞致高校信息泄露，影响7亿账户", "https://mp.weixin.qq.com/s?__biz=Mzg5MTM5ODU2Mg==&mid=2247501076&idx=1&sn=ea61326375112eb6b7486937c1ca2278": "[漏洞挖掘与防护] 05.CVE-2018-12613：phpMyAdmin 4.8.1后台文件包含缺陷复现及防御措施", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499522&idx=1&sn=d5908340cc5cb33839f6ae973dbb7103": "CNVD漏洞周报2024年第49期", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247536203&idx=3&sn=f8288da3046f8571a22e5ba05788fba0": "网络安全知多少【科普】5：找业务本身也可能就是漏洞，就是风险", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486968&idx=1&sn=7ee147a6efd7c1a074d8acd00e67fe4a": "Burpsuite存储桶配置不当漏洞检测插件", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485781&idx=1&sn=abe472af31e677010d02b7b3450afdf7": "【漏洞复现】某平台-Upload-file-upload-aspx任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247616783&idx=1&sn=c757bff28e0b57427ff74433f1db3b8f": "扩展 SAE J1939 的攻击场景：传输协议中已建立和新的漏洞的综合分析", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454063716&idx=1&sn=dee9adde502f466cd9c9b73fa7cb94f1": "信息安全漏洞周报【第001期】", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503036&idx=1&sn=826c19c1c6963eedc5d85957a93b8f72": "黑客利用 ProjectSend 漏洞对暴露的服务器进行后门处理", "https://mp.weixin.qq.com/s?__biz=Mzg2MDY0MjQwMw==&mid=2247494229&idx=1&sn=00ba639704a1a21def406229988dd7a3": "从勒索软件到APT：揭开制造业面临的8大网络安全威胁", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614638&idx=1&sn=23b8076cd1077afa63bfcef17858af9f": "安全学院24期开班福利！大咖嘉宾课、poc知识星球免费送", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247545940&idx=1&sn=4961694b69a4880b3558ec8068e83e19": "安全学院24期开班福利！大咖嘉宾课、poc知识星球免费送", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489611&idx=1&sn=870491e1594390da4dc881600491a28d": "用友U8 CRM ajaxgetborrowdata.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247487863&idx=1&sn=2b5ec8568da6bc4cdc7a12ca5f3e300b": "用Python实现自动化漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU5NzQ3NzIwMA==&mid=2247486297&idx=2&sn=00c9f509418128a39f1339e08e4c57ff": "羽绒服vs冲锋衣，谁才是冬季保暖的最佳选择？", "https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649248462&idx=1&sn=1fef839e04c52388ba93c9b94a45b20c": "新鲜出炉！GaussDB在HyBench基准测试中表现优异", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309321&idx=2&sn=d90a45affb4d7a3b267b7dcb64922161": "防火墙服务配置漏洞波及多家全球财富100强公司", "https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247493926&idx=1&sn=66f71ef679da29fecf866e7df2eefbe5": "绿盟科技勇夺“强网杯”高阶技术专项赛一等奖，多赛道实现奖项全面突破", "https://mp.weixin.qq.com/s?__biz=MzI0NzY1MDgyMw==&mid=2247513624&idx=1&sn=8f1943d31e319d66200c5a6849f3346f": "500强上市车企通过模糊测试降低未知风险，构筑汽车行业领先的品质基石", "https://mp.weixin.qq.com/s?__biz=MzkyNzE5MDUzMw==&mid=2247560864&idx=1&sn=21c3af15a2b0dff6b8c0835853e9809d": "喜报！炼石中标某大型商业银行金融数据与个人信息保护项目", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488850&idx=1&sn=2f906a07fd040ed4b4a04171950e3383": "【未公开1day】某科网威anysec安全网关arping存在远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502726&idx=1&sn=f74cad3a1971f2f2530634d3b57b676f": "【失败复现】Zabbix SQL注入漏洞(CVE-2024-42327)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489368&idx=1&sn=84a64bc6c014dd11c44cc14f3d2df027": "一款能够自动化过滤扫描结果的目录扫描工具|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487960&idx=1&sn=201e394851f63027036f862d8a36895d": "Palo Alto Networks PAN-OS存在远程命令执行漏洞CVE-2024-9474 附POC", "https://mp.weixin.qq.com/s?__biz=MzkyMzYwNTEyNg==&mid=2247487157&idx=1&sn=8091c0a81829f3cb58d776c8f6dd38e0": "(未公开)灵当CRM某接口存在文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486302&idx=1&sn=ad62aba60f4f3a333c289d186c92afaf": "「漏洞复现」三汇SMG网关管理软件 SMGSuperAdmin 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247492164&idx=2&sn=c240cfffa57ae70caf5f080c969ab408": "【活动预告】ISC2华南分会线下活动欢迎您：平安专场，AI的安全探索与实践", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521736&idx=1&sn=f656ad45da506b8f778e68ff0243d0be&chksm=ea94a4a2dde32db4651e878de8188d4f6cae7312a721ec5b3a69201300cc4b8990af592861cc&scene=58&subscene=0": "研究员在DeepSeek 和 Claude AI 中发现多个提示注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521736&idx=2&sn=37cc8cc02d4dc7c59168f8bb841938a9&chksm=ea94a4a2dde32db4fcf8d9da57d0da38ee6f89a7cfeee9b469e91b0bc2d89db95227a50943f1&scene=58&subscene=0": "QNAP修复Pwn2Own大赛利用的多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497381&idx=3&sn=8636f9e208f208c153d7ab0957f3d4ff&chksm=fa595848cd2ed15e45f17000e815e8d47db26a14f732e2555d047d9e0d01a3dd44285fee839f&scene=58&subscene=0": "49套.NET系统漏洞威胁情报(12.10更新)", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499522&idx=2&sn=fa8b9737d4181e218c2ee200ec329bc0&chksm=973acc60a04d4576fb683cae96f216d3a733a43601e8b23e71f8f54b8c9a2dc0f953385dfbec&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241202-20241208)", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650182736&idx=1&sn=114de58c87950ec9eac7ccc24b290958&chksm=f4486fecc33fe6fac35edaffc7f8afa6f84e8393ef84627fa778957bef4d8e46a747d4d05dea&scene=58&subscene=0": "美国顶级红队演练，只用了个Nday？", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066552&idx=4&sn=1e612f3b3ba252c5b5578d381d2737ee&chksm=f36e7eb8c419f7aead22e1ec719f6b8294d8e61b27774e7355bdc6c949f9b0b03c8d7351e4e0&scene=58&subscene=0": "【安全圈】防火墙服务配置漏洞波及多家全球财富100强公司", "https://mp.weixin.qq.com/s?__biz=Mzg5MTM5ODU2Mg==&mid=2247501076&idx=1&sn=ea61326375112eb6b7486937c1ca2278&chksm=cfcf75d9f8b8fccfa24221b6515a0ead04eaec7fa5124a46bd9f8e5250525f22c0c234e7dedb&scene=58&subscene=0": "[漏洞挖掘与防护] 05.CVE-2018-12613：phpMyAdmin 4.8.1后台文件包含缺陷复现及防御措施", "https://mp.weixin.qq.com/s?__biz=Mzg5NTUyNTI5OA==&mid=2247486314&idx=1&sn=6ca1faf4185516060554cb5767910675": "edu小程序挖掘严重支付逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260244&idx=1&sn=77a2cf6fca1132ac57455e3e98394dd3": "发现关键漏洞获得 $4,000 赏金奖励", "https://mp.weixin.qq.com/s?__biz=Mzg3NzIxMDYxMw==&mid=2247504189&idx=1&sn=203a7a0abd62c42363032ddf93a633a4": "零基础学习如何挖掘第一个SRC漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491220&idx=1&sn=33447580838d346357e11ff01107377f": "某通用系统0day审计过程", "https://mp.weixin.qq.com/s?__biz=Mzg4NTUwMzM1Ng==&mid=2247512787&idx=1&sn=1c6cd54a524329190ebb2a2f336a843e": "好用的Nuclei GUI POC管理工具", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247506001&idx=2&sn=643c526ae97cfc56fb5d56832b4275ea": "美国与菲律宾成功举行海上网络安全和化学品安全演习", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499522&idx=1&sn=d5908340cc5cb33839f6ae973dbb7103&chksm=973acc60a04d45766360f1774e46a8e71fa55b69f7f12db9451d67e7dfbfc2dd0e92afe05c9a&scene=58&subscene=0": "CNVD漏洞周报2024年第49期", "https://mp.weixin.qq.com/s?__biz=MzkzMzczODA0OQ==&mid=2247483997&idx=1&sn=7ab4b5b9d865dae859a2b7b4077c6c1f": "CVE-2019-13288复现笔记及其国产化pdf生成挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503054&idx=2&sn=61c49201691eec638bda1a2b5a90d85e": "防火墙服务配置漏洞波及多家全球财富100强公司", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502600&idx=1&sn=2b1a45b44e8988e6121af578a0aece0a": "微软12月补丁日多个产品安全漏洞风险通告：1个在野利用、17个紧急漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTQ0MjE1NQ==&mid=2247494539&idx=1&sn=c9e951a6295df1f1f94a2f3793cc7ff2": "【攻击手法分析】勒索病毒如何轻松绕过安全设备防线：第一篇-驱动漏洞一击致命", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247486103&idx=1&sn=d3ccd2ca78da5d7c49416e47a24f83d1": "分享最近攻防演练HVV漏洞复盘", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793447&idx=3&sn=74a8fd5532aebfa95540119d6c2c34a2": "Ivanti 警告最高严重程度的 CSA 身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899710&idx=1&sn=542451000c5f6f3109a6fa80c8cbbb9c": "WordPress插件WPForms惊现高危漏洞，数百万网站面临退款风险！", "https://mp.weixin.qq.com/s?__biz=Mzg5MjgxNTQ1MA==&mid=2247488111&idx=1&sn=94afaf884447ae0b2f77400c0ee18bd2": "大模型安全的漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497409&idx=1&sn=a82b09186c21bf8d98ac1c656bbdac06": ".NET 一款内网渗透中清理日志服务的工具", "https://mp.weixin.qq.com/s?__biz=MzkyOTQyOTk3Mg==&mid=2247484928&idx=1&sn=0d5f72ae7989e53bcc477d6e0f275680": "Nuclei|图形化|轻量化刷漏洞神器|11000+poc", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503228&idx=1&sn=8158cbc5e01aec5972035af661193b6d": "雷神众测漏洞周报2024.12.02-2024.12.08", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787591&idx=1&sn=e8b66114e6f98d415269d5b8d9f96a37": "银狐团伙再出新招，Web漏洞成切入点", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247693&idx=1&sn=3851764e6b990474556fa86b1a6a0365": "Spring漏洞测试与利用", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500373&idx=2&sn=de1d1f63dc8bc0f867a230507640bdc2": "【漏洞通告】微软12月多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500373&idx=3&sn=098e9ed670b71cb63665f4e81802d13e": "【漏洞通告】Ivanti Cloud Services Application身份验证绕过漏洞（CVE-2024-11639）", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496850&idx=1&sn=21c9286190406da9b6d1eaf566c9289d": "2024年12月微软补丁日多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659211287&idx=1&sn=648b0bcf5231aa3c73bd8820bc05666c": "【工具分享】Nuclei GUI 管理工具(附12W+poc)", "https://mp.weixin.qq.com/s?__biz=MzIwNzE2MDc5Mg==&mid=2649267037&idx=1&sn=2c0d099c30c393817dbc77e1fb623e18": "国产信创 | 经纬信安拳头产品携手麒麟完成产品兼容性互认证", "https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653931228&idx=2&sn=3ebb24d1b78d2a0d8b3caf676ac9b252": "农信银完成7个重要信息系统容灾切换运行工作，强化数据安全管理与业务连续性保障能力", "https://mp.weixin.qq.com/s?__biz=MzI1NDQxMDE0NQ==&mid=2247485083&idx=1&sn=b0001d31a1da90591366a8795080ae1b": "【漏洞通告】微软2024年12月安全更新通告", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650620145&idx=2&sn=d4e72021c21b8c572ae4541eaa30fe99": "涉及72个漏洞！微软发布12月补丁日安全通告", "https://mp.weixin.qq.com/s?__biz=MzA5OTk2OTY5MA==&mid=2247485642&idx=1&sn=da42b6283d1ceef4780bef8f5a7cf5be": "Microsoft 12月 CVE 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247520891&idx=2&sn=fbe68b0ed739b4477459f1f9d95cea6f": "诚邀渠道合作伙伴共启新征程", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247545977&idx=2&sn=cab2fea2d92a1bdd20e088c916587f46": "安全学院24期开班福利！大咖嘉宾课、poc知识星球免费送", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614651&idx=2&sn=5b9bf023f7b5cf87e84bd07bb9b0f73d": "安全学院24期开班福利！大咖嘉宾课、poc知识星球免费送", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247179&idx=2&sn=0f629a416f42e4eb4195b95c624df07e": "安全工具 | Windows 权限提升漏洞检测工具集", "https://mp.weixin.qq.com/s?__biz=MzkxOTUyNTg2MA==&mid=2247483968&idx=1&sn=3974d5a946237beacb754ffe0e2fdf68": "poc管理工具|精准漏扫|附10w+poc|Wavely|有他就够了", "https://mp.weixin.qq.com/s?__biz=MzI5NTQwMjYxNg==&mid=2247483809&idx=1&sn=37e28e355bfced41d98b9f2197d5022d": "ZASRC漏洞接收资产范围更新", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486468&idx=1&sn=da5c6be67fefc6804c0cd02238523a1e": "【漏洞通告】Django Oracle数据库SQL注入漏洞(CVE-2024-53908)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486468&idx=2&sn=a820a5fbc1f6c805244208bae4735e58": "【漏洞通告】ProFTPD 权限提升漏洞(CVE-2024-48651)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486468&idx=4&sn=ebd6c9aa71c0b9af4de51bf0a0e08604": "【漏洞通告】ProjectSend 身份认证绕过漏洞(CVE-2024-11680)", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247493731&idx=1&sn=9c7f57a06c7845b2562623c29f591d50": "最近打点用的一些java漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650621658&idx=1&sn=27b85f13c888cf79969dd35429df0ba5": "最高级！安恒信息获评工信部NVDB漏洞治理合作“三星级技术支撑单位”", "https://mp.weixin.qq.com/s?__biz=Mzg5NTUyNTI5OA==&mid=2247486316&idx=1&sn=99516f099d6a519939789425766585b8": "记一次接口fuzz+逻辑漏洞拿下证书站高危", "https://mp.weixin.qq.com/s?__biz=Mzg4NDY4Mzk3Mw==&mid=2247485450&idx=1&sn=9e273181e277230b4fd971bdbf600709": "解锁 JVM 性能调优奥秘：让你的 Java 应用飞速驰骋", "https://mp.weixin.qq.com/s?__biz=MzkyMDY1NzA2Mw==&mid=2247483820&idx=1&sn=a23aeb71510508774f10b307c7147e14": "DMC Airin Blog Plugin 反序列化 CVE-2024-52413分析", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650182768&idx=1&sn=26452c69a1346cdb53381e524ab2425e": "漏洞发现，除了漏扫还能靠啥？", "https://mp.weixin.qq.com/s?__biz=MzkzMDQ5MDM3NA==&mid=2247487448&idx=1&sn=7ee29c06eeab215458a3c97c371e9d36": "探索开源 C2 框架中的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491701&idx=2&sn=986dca366576ab77940040ab4b163181": "漏洞预警 | Veeam Service Provider Console远程代码执行和信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491701&idx=3&sn=a5686e3902d307406a535d6aff1858a3": "漏洞预警 | Progress WhatsUp Gold远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491701&idx=4&sn=44471582ba985789485e32d4f0c3966f": "工具 | ShiroEXP", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899727&idx=1&sn=ab9d08bee30a638793178500d65bdc02": "Cleo文件传输软件爆严重漏洞，黑客组织Termite或已发动大规模勒索攻击！", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488883&idx=1&sn=0cbfef21b2574f37a5e53563e0150749": "【edu 0day预警】某公司教育教学监测与保障系统存在信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515150&idx=1&sn=cdde4c00dd188d786d3e826d01dcb79a": "XXE漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247505136&idx=3&sn=3b8e04d0266d9db89d08cd23faefb52b": "Windows 11 12 月补丁星期二修复了 72 个漏洞和一个零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652113172&idx=1&sn=cc65dbbe46b9dba55b33562e14441b09": "微软2024年12月份于周二补丁日针对72漏洞发布安全补丁", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309577&idx=2&sn=6fd24a945862bf834c191ed6f0cfec7b": "Ivanti最严重的 CSA 认证绕过漏洞曝光", "https://mp.weixin.qq.com/s?__biz=MzI4NzA1Nzg5OA==&mid=2247485612&idx=2&sn=2a1158f7b17eb1ee8b19889b6f5ffcfd": "渗透测试小练习（1）尝试一个图形验证码绕过的复现", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486335&idx=1&sn=168f466d99da132b903604afc13a3a35": "「漏洞复现」电子图书阅读平台 downFile.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486633&idx=1&sn=ce9d691bace642433060f9e374fae37d": "【漏洞预警】Apache Struts 文件上传漏洞(CVE-2024-53677)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496582&idx=1&sn=e36e6d50967d7b97dcd7cec8a6b930e1": "发现关键漏洞获得 $4,000 赏金奖励", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309661&idx=1&sn=cfdd79332e829413af2d16cb841ac66b": "单洞赏金1万美刀的漏洞思路分享| 玲珑安全帮会直播", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521773&idx=1&sn=3e980835ea6ecc3e1562c951bb038730": "微软 MFA 中存在AuthQuake 漏洞，可导致无限次暴力攻击", "https://mp.weixin.qq.com/s?__biz=MzUzNDg0NTc1NA==&mid=2247510479&idx=1&sn=d578238889ffed2b12bf3c600b6d1e4c": "中国网数中心和国家邮政局领导赴启明星辰集团调研交流", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458585913&idx=1&sn=9b3e3bf33a7c7827dc567f6c4588e586": "即将开班！​“系统0day安全”系列课程：掌握漏洞挖掘重要技能", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664232034&idx=4&sn=d4c255d0547183fe574225341573d4cc": "CNNVD | 关于Apache Struts安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496866&idx=1&sn=bbb30a60616ec1cf4ea6804a05eac048": "【漏洞通告】Apache Struts 2远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523950&idx=1&sn=c7f7b9fa14789faf8a6c75b897452a46": "【漏洞通告】Apache Struts 2 任意文件上传漏洞(S2-067)(CVE-2024-53677)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500381&idx=1&sn=bf0c2ee1284d729c2b7443e54dc2d93a": "安全简讯（2024.12.12）", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500381&idx=2&sn=bdeddcb5ace7d2ee19d04851329b6f15": "【漏洞通告】Apache Struts 2远程代码执行漏洞（CVE-2024-53677）", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500381&idx=3&sn=083d549b2dcf727a31f4e9b61a647018": "【漏洞通告】GitLab Kubernetes Proxy Response NEL头注入漏洞（CVE-2024-11274）", "https://mp.weixin.qq.com/s?__biz=Mzg3MDk0OTc1Nw==&mid=2247487889&idx=1&sn=d63e39882d747cd1ed7c3c59635dd669": "Cleo 0day漏洞 CVE-2024-50623 poc 公开", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462062&idx=1&sn=6d04ce844444272812e3be3b061bf062": "CNNVD关于Apache Struts安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462062&idx=2&sn=51b3e8ee84acc08434a2309ef838b85d": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzkyMzYwNTEyNg==&mid=2247487166&idx=1&sn=4761c7215606df90787c654d6ceb8411": "(0day)杜特网上订单管理系统getUserImage存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486362&idx=1&sn=7817b14339852f25f402164121d84609": "Apache Struts FileUploadInterceptor 目录遍历与文件上传漏洞（CVE-2024-53677）", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507539&idx=1&sn=988e5b92e2c247e3b172cd0170b42c9f": "漏洞通告 | Apache Struts2文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488718&idx=1&sn=a1dc37b8103bff225bac31cc7d4623a6": "【安全更新】微软12月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUyMTA0MjQ4NA==&mid=2247551275&idx=2&sn=6b84b6daf3d7d3e6a6137ca9a7253946": "广联达OA系统漏洞批量检测工具 - GlodonScan", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652113189&idx=1&sn=554d13bbf4170011c45f1040aed5d2ae": "Palo零日漏洞凸显面向互联网的接口风险不断上升", "https://mp.weixin.qq.com/s?__biz=Mzg5NTUyNTI5OA==&mid=2247486347&idx=1&sn=85137a0acb6c87cbba9b0be502bbad60": "记一次网上阅卷系统漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247485958&idx=1&sn=5b9296ea0c9d303950e55b2e9f337108": "Burp Suite for Pentester：软件漏洞扫描程序和 Retire.js", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066578&idx=4&sn=fb9fe492092fe4a3088d8bcf368835be": "【安全圈】Windows 远程桌面服务漏洞允许攻击者执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521773&idx=2&sn=9334dce8b280dba2dd408a1b5854e232": "施耐德电气提醒注意 Modicon 控制器中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664232034&idx=3&sn=ccdb518e321ac9c3d701cf06978bc39e": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650620155&idx=2&sn=25816eda1386048700d085e49807bf55": "高危！Apache Struts文件上传漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247490057&idx=1&sn=898cb42cbed7532cef5ba97f53508c92": "创宇安全智脑 | Mitel MiCollab 企业协作平台任意文件读取（CVE-2024-41713）等80个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247568491&idx=1&sn=636c74804b027a06692725d2766cf513": "Shiro框架漏洞看了你就会了（含靶场复现）", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490197&idx=1&sn=9ffaa9babf02fbd7ab419b9c4a23da71": "【风险通告】Apache Struts存在文件上传漏洞（CVE-2024-53677）", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490197&idx=2&sn=f905ddb46575c4bbf932f4af33a4738a": "【风险通告】GitLab存在敏感信息泄露漏洞（CVE-2024-11274）", "https://mp.weixin.qq.com/s?__biz=MzA5Nzc4Njg1NA==&mid=2247489168&idx=1&sn=2b4448d1d4b839029d38cabe1e4cf5ee": "关于防范Zabbix软件SQL注入超危漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=Mzg4MDY1MzUzNw==&mid=2247497998&idx=2&sn=076c87adb99ee8206cebc88e147c57e9": "漏洞扫描产品介绍", "https://mp.weixin.qq.com/s?__biz=Mzg3MDk0OTc1Nw==&mid=2247487889&idx=2&sn=0912f0715b90ec7999f942aa0df0a5f3": "Zabbix SQL 注入 CVE-2024-42327 POC已公开", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247489342&idx=1&sn=88c2ad15c90e205a1b6fd6a2cb7cea59": "推荐一款功能强悍的渗透脚本", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497453&idx=3&sn=96ddb90221002fcab8ab6365b5b71c3a": "50套.NET系统漏洞威胁情报(12.13更新)", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502754&idx=1&sn=8d5198f970edcdce2109d001969ce60f": "【成功复现】Wordpress Elementor Page Builder路径遍历漏洞(CVE-2024-9935)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491705&idx=1&sn=c6d00db2d1d2da8d4eccb0541ede19a2": "漏洞预警 | Django拒绝服务和SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491705&idx=2&sn=a828acfbefc73997aa7725a8076ddc41": "漏洞预警 | 圣乔ERP系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491705&idx=3&sn=cfbfa8d0e7f3f0cf0bb12bfdb1f55e15": "漏洞预警 | 小米路由器任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492955&idx=1&sn=394994faf4a919f7d1520e437498c6ea": "XXE 漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487028&idx=1&sn=59fd71a1f2ba11ab7b07247934d24721": "闭源系统半自动漏洞挖掘工具 SinkFinder", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247506067&idx=1&sn=51b6e4654476511318badae0e17e231c": "“芝麻开门”无线攻击：针对中国锐捷网络的物联网设备漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzODMyMzQxNQ==&mid=2247484344&idx=1&sn=23bea36464fb1ec449f66047871fdf87": "【MalDev-10】免杀-3", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492939&idx=1&sn=0f0d3ee31741d751f496b8dc075f28dd": "Ivanti修复了其客户成功平台 (CSA) 中一个最高严重级别的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247489420&idx=1&sn=bffac0e9e6364b249bd4b3fc96147516": "《电力监控系统安全防护规定》2024年第27号令", "https://mp.weixin.qq.com/s?__biz=MzkyNzE5MDUzMw==&mid=2247560967&idx=1&sn=edc2b9e31ed1952c94e297433fb3e27b": "附下载！炼石参编工业数据安全脱敏标准发布", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488897&idx=1&sn=f860e7c647eebbb00c843ec6048fef38": "【0day】深圳国威电子有限公司HB1910数字IP程控交换机存在远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247505156&idx=1&sn=8b9e9979adb64197311a0dbe6ec5ff74": "大众和斯柯达汽车存在漏洞，导致发动机故障和车主数据被盗", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066578&idx=3&sn=55d3538cbf8999a9aa8be86d3ea965e6": "【安全圈】知名企业级文件传输产品存在漏洞，正在被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247505156&idx=3&sn=c456598d99353e763fbdc160fe0f3444": "苹果通过 iOS 18.2 更新修复了密码应用程序中的加密漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458585913&idx=1&sn=9b3e3bf33a7c7827dc567f6c4588e586&chksm=b18c3bb386fbb2a5383619e665650a2d6d199860eac365f85e9601b7bcb7778018b92491f6fe&scene=58&subscene=0": "即将开班！​“系统0day安全”系列课程：掌握漏洞挖掘重要技能", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502622&idx=1&sn=b09b74ae58ce913511ebc0fee0ec7fef&chksm=fe79ef86c90e669039b61b9b5924eb24b667153b9a47d4a40f3e2738878d49b38d48f228edfe&scene=58&subscene=0": "Apache Struts 文件上传漏洞(CVE-2024-53677)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507539&idx=1&sn=988e5b92e2c247e3b172cd0170b42c9f&chksm=cfcabd47f8bd34511cdbcc6f262493f7fc994ef267f8e470ce48d96fd90a0bf4915359136e5e&scene=58&subscene=0": "漏洞通告 | Apache Struts2文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066578&idx=3&sn=55d3538cbf8999a9aa8be86d3ea965e6&chksm=f36e7f52c419f644374ed6e38ec284d9cbd66833b16d2dffbf74a282c791e1a17709b3b7902b&scene=58&subscene=0": "【安全圈】知名企业级文件传输产品存在漏洞，正在被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066578&idx=4&sn=fb9fe492092fe4a3088d8bcf368835be&chksm=f36e7f52c419f644b0505dba59eba684542159abcbc55918cca05917e2f5bc8c4fe45089a051&scene=58&subscene=0": "【安全圈】Windows 远程桌面服务漏洞允许攻击者执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486362&idx=1&sn=7817b14339852f25f402164121d84609&chksm=ec6fec9adb18658c00af20b701aa0cfab384228b89da7f43edcd79781b968ff408dad6b309d3&scene=58&subscene=0": "Apache Struts FileUploadInterceptor 目录遍历与文件上传漏洞（CVE-2024-53677）", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650182768&idx=1&sn=26452c69a1346cdb53381e524ab2425e&chksm=f4486fccc33fe6da43a706a6ab100eb7ace61244a4b0fa4808d8aede74562173c25b76324ed0&scene=58&subscene=0": "漏洞发现，除了漏扫还能靠啥？", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664232034&idx=3&sn=ccdb518e321ac9c3d701cf06978bc39e&chksm=8b59f69bbc2e7f8de070955d46613cb4e4a06cebb6220e99e3458836ea4503df3cf4e501b9d3&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521773&idx=1&sn=3e980835ea6ecc3e1562c951bb038730&chksm=ea94a487dde32d91d33e375aa8b72490a1daf1a3640f08c77409be3a66062af25a407b909384&scene=58&subscene=0": "微软 MFA 中存在AuthQuake 漏洞，可导致无限次暴力攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521773&idx=2&sn=9334dce8b280dba2dd408a1b5854e232&chksm=ea94a487dde32d9163abde86ace9b63ba55a88d022c03411d8072763533dd6664a1afb906710&scene=58&subscene=0": "施耐德电气提醒注意 Modicon 控制器中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523950&idx=1&sn=c7f7b9fa14789faf8a6c75b897452a46&chksm=ce46157ef9319c681325f638276f630c4c9fc73296dfb4e767f246a4d0eeef167b15f9317dab&scene=58&subscene=0": "【漏洞通告】Apache Struts 2 任意文件上传漏洞(S2-067)(CVE-2024-53677)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496582&idx=1&sn=e36e6d50967d7b97dcd7cec8a6b930e1&chksm=e8a5f9e5dfd270f3a6ca60c604d0791cdb92f81c3601ba143e0d67d933957b527a6987441e42&scene=58&subscene=0": "发现关键漏洞获得 $4,000 赏金奖励", "https://mp.weixin.qq.com/s?__biz=Mzg4OTU4MjQ4Mg==&mid=2247488118&idx=1&sn=5c5cb1fcf0548be2a9f031db07a60af4": "活动预告|“AI+Security”系列第4期之“洞”见未来：AI驱动的漏洞挖掘新范式", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484729&idx=1&sn=c4e43f6027f2caeeca0e8ac1610504d6": "【复现】 Apache Struts 文件上传漏洞（CVE-2024-53677）风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NDg2MDIxNQ==&mid=2247485250&idx=1&sn=e67f0d77c54f42ab5461bd67ed71007f": "黑盒乱锤某专属SRC到0day代码分析", "https://mp.weixin.qq.com/s?__biz=MzU5Njg1NzMyNw==&mid=2247488781&idx=1&sn=9cf9a3173e478a3407e42537063219d0": "活动预告|“AI+Security”系列第4期之“洞”见未来：AI驱动的漏洞挖掘新范式", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493039&idx=2&sn=b15c23be7d87bcb5ea5d7df1af1fb382": "超过 30 万台 Prometheus 服务器和 Exporter 暴露于拒绝服务（DoS）攻击中", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493039&idx=3&sn=6825a1e1963fd82c3dbe8d1f6d4ffaed": "【OleView.NET】Windows COM 攻击面漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489687&idx=1&sn=b9022acae500cb9ca86712332ef5edef": "思普企业运营管理平台 apilogin SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485795&idx=1&sn=f06ce780a90a36fa3c47b18e951a679f": "【漏洞复现】某平台-cwsuploadpicture-GetPicture-file-read-任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTYwMzc5OQ==&mid=2247499343&idx=1&sn=77513dfe7863e99207212700e29e7055": "玲珑安全直播：单洞赏金1万美刀的漏洞思路分享", "https://mp.weixin.qq.com/s?__biz=Mzg3Mjg4NTcyNg==&mid=2247489970&idx=1&sn=0f31c205d76351382a0490b5f765a806": "活动预告|“AI+Security”系列第4期之“洞”见未来：AI驱动的漏洞挖掘新范式", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489677&idx=1&sn=a93b17ebac75bad9add1bc68528a2eec": "安科瑞环保用电监管云平台 GetEnterpriseInfoById SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503097&idx=2&sn=dbb8082751d5715551c096f63d4bb2a8": "知名企业级文件传输产品存在漏洞，正在被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487537&idx=1&sn=fb94ab90c088e2be3d41f9d8d9b2fea2": "赛克安全本周漏洞推送（12.9-12.13）涉及孚盟云、用友时空、蓝凌OA、月子会所、时空VMS等产品相关漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650621697&idx=1&sn=cda70429226d0540d8d9cc385d78bb03": "遇到漏洞怎么办？美妆思路试试看", "https://mp.weixin.qq.com/s?__biz=MzI4MjA1MzkyNA==&mid=2655348206&idx=1&sn=ea85cb93ee6383222f1cc27eb30063e8": "Ivanti云服务严重漏洞：CVE-2024-11639（CVSS 10）建议立即修补", "https://mp.weixin.qq.com/s?__biz=MzI0NTI4NjEwOQ==&mid=2247484957&idx=1&sn=37059c25f43518ac486bd4d37596e732": "Mitre_Att&ck框架T1622（调试器规避）技术的简单实现", "https://mp.weixin.qq.com/s?__biz=MzA4NzU1Mjk4Mw==&mid=2247492196&idx=1&sn=9a17a69290ef6d3f0970fde1eb354811": "网络资产收集与漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=MzkyMDY1NzA2Mw==&mid=2247483831&idx=1&sn=317637ef6617e99f0ba2575c705aaca6": "SeaCMS admin_files.php CVE-2024-42599分析", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487028&idx=2&sn=4668ad2932afd679ad10d8dcb4628d3f": "最近打点用的一些java漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787610&idx=1&sn=95a8903a00d204b2f0a97e8c4b9362d9": "斯柯达汽车漏洞披露：超过140万辆汽车面临远程控制与追踪风险", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247525742&idx=2&sn=38f0f752f0a2a20ce08741f4dc7e8cef": "MyQ 打印服务器未经身份验证的 RCE (CVE-2024-28059)", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247185&idx=2&sn=c6276f9079857176ffbd0642427bfa0e": "安全工具 | Windows 权限提升漏洞检测工具集", "https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652316231&idx=1&sn=b3423c6bb4904ec61f6226b60f05da50": "【活动预告】“AI+Security”系列第4期之“洞”见未来：AI驱动的漏洞挖掘新范式", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488061&idx=1&sn=0c1b5efe856733122cc099e6199dfff3": "用友U8-CRM系统存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546009&idx=2&sn=8ff0c02ef8d437280d40107620596a67": "安全学院24期开班福利！大咖嘉宾课、poc知识星球免费送", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650605007&idx=3&sn=36d026706ffc889660ce97c269b91909": "Spring漏洞测试与利用", "https://mp.weixin.qq.com/s?__biz=MzI5MzU4ODE5Mw==&mid=2247485605&idx=1&sn=0972cd05c82a2042a8e7ccd90c8f93a6": "赛克安全本周漏洞推送（12.9-12.13）涉及孚盟云、用友时空、蓝凌OA、月子会所、时空VMS等产品相关漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664232034&idx=4&sn=d4c255d0547183fe574225341573d4cc&chksm=8b59f69bbc2e7f8d6052c1c608f41cb088c5bf0eb9cbae630fdc6a8d5f7d0a014f6f554430fc&scene=58&subscene=0": "CNNVD | 关于Apache Struts安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247488068&idx=1&sn=80c09e5283881fc86ac6235e1c6d96f3": "用友NC yerfiledown SQL注入漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzAwNTI1NDI3MQ==&mid=2649619760&idx=1&sn=941fa5fb1aeba9276998379a942c2a88": "Unix通用打印系统cups-browsed远程代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309849&idx=3&sn=d3d596e08cc54e08b3e20a458a7ac9e7": "Windows远程桌面服务漏洞允许攻击者执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066594&idx=2&sn=b944b25addf57bec5231e17520c14d2c": "【安全圈】大众和斯柯达曝12个组合漏洞，攻击者可在10米内无接触入侵", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066594&idx=3&sn=fb1485e3b4a0ed439c616f967bfc2543": "【安全圈】关键的Windows UI自动化框架漏洞允许黑客绕过EDR", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066594&idx=4&sn=b010357e9e80003c07a80b440507c355": "【安全圈】Ivanti最严重的 CSA 认证绕过漏洞曝光", "https://mp.weixin.qq.com/s?__biz=MzkxMTA3MDk3NA==&mid=2247486901&idx=1&sn=2b82a1c35d19c81b176e5237e5729b7d": "【新发布】2025年美《国防授权法案》涉中内容", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458585919&idx=2&sn=3bb34e0901a29e5afc2fe734b34df7e0": "斯柯达和大众汽车信息娱乐系统漏洞：攻击者可在10米内无接触入侵", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247547339&idx=1&sn=57a0ac75c29a76c3c8320bf2d4aae8ef": "斯柯达汽车漏洞披露：超过140万辆汽车面临远程控制与追踪风险", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247488175&idx=1&sn=1c921a987a68886965f42dd89bd995bd": "黑盒乱锤某专属SRC到0day代码分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521787&idx=2&sn=6bccdb74a809a4f90b14cdd90c9c2985": "Cleo修复严重的0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247531758&idx=3&sn=fc121931d90c3bd57de3013a2513e4f0": "上周关注度较高的产品安全漏洞(20241202-20241208)", "https://mp.weixin.qq.com/s?__biz=MzU0NDc0NTY3OQ==&mid=2247488069&idx=1&sn=48196bd07b78302298ba270e7ffa5e27": "安全设备漏洞 Checklist", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247493957&idx=1&sn=e321390a222acdb9054677bb1645e4a5": "【众测挑战赛最终场】漏洞马拉松赛程二正式开启！超多业务等你来测！", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247493957&idx=2&sn=25f373967d5cfff03e611ac6924fcec4": "【2024漏洞马拉松】OPPO赛程正式启动，1.5倍奖励，新人额外奖励……超多奖金拿到手软！还有手机大奖等你来拿！", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247495011&idx=1&sn=256dd54d6fc4d062660d7c4c1cba4f91": "对攻击者保持视野领先：从漏洞情报到「扩展漏洞情报」", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247487889&idx=1&sn=3cc6ea970109136c7522b2c5ff73bdf0": "一个0day的开端：失败的man与nday", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500387&idx=2&sn=fe3998c2402e46104f04d64e18e62c50": "【漏洞通告】Cleo 远程代码执行漏洞 ( CVE-2024-50623 )", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247490507&idx=1&sn=72c3fc1663b1a5a1b7b64b2a8b1fafb0": "反面教材+1 切勿把个人信息放公网", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515188&idx=2&sn=57cd6e0b04194a02d28788957d533559": "渗透测试 -- Web服务程序解析漏洞和文件包含漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496596&idx=1&sn=5af17ad8fcf461b401780dfe33b5ff27": "利用开放式重定向、2FA 绕过等漏洞获取$1600赏金奖励", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489541&idx=1&sn=0a586e636598ce0f0cf438b4e3a00d47": "【云原生攻防研究】Istio访问授权再曝高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489308&idx=1&sn=5c47de34e923278823c34ea94e60cbb6": "【漏洞预警】Cleo远程代码执行漏洞CVE-2024-50623", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309849&idx=1&sn=6849f94f691ae8bacd9489f813864299": "大众和斯柯达曝12个组合漏洞，攻击者可在10米内无接触入侵", "https://mp.weixin.qq.com/s?__biz=MzI0NzY1MDgyMw==&mid=2247513670&idx=1&sn=191a30556fd27585c0e3eda82e42883b": "DevSecOps面面观 | 聊聊DevSecOps度量实践中的那些误区", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521787&idx=1&sn=aa7443d590ca0182f0cbd4386c81152a": "Apache修复 Struts 2 中的严重 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247498989&idx=2&sn=165316bf3bca3a70f0c334ba2c86dc44": "渗透测试 -- CSRF漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247497792&idx=1&sn=38bf4f291266c0a62fb6758c56b04d46": "2024年十大最佳漏洞管理工具", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247488515&idx=1&sn=3ec0060c8eb88e788077895e9929ced8": "apt-t00ls 漏洞检测", "https://mp.weixin.qq.com/s?__biz=MzkyOTUxMzk2NQ==&mid=2247485822&idx=1&sn=7121f15cad1c3aaf8a54ff5735789067": "PHP 常见漏洞威胁函数 | 全面总结", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491726&idx=1&sn=3cc974eaf3fee6d1baa7741b52b96b0b": "漏洞预警 | I Doc View SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491726&idx=2&sn=e1d9019f697e2b42d4d8fee135c26031": "漏洞预警 | 顺景ERP管理系统任意文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491726&idx=3&sn=295c736ddffb607c469f96a60e45993d": "漏洞预警 | YourPHPCMS SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487539&idx=1&sn=8e7a1acdc9dccb02671b789348622ea4": "赛克安全本周漏洞推送（12.9-12.13）涉及孚盟云、用友时空、蓝凌OA、月子会所、时空VMS等产品相关漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488910&idx=1&sn=214f24e9f57f5edee007028c576f7f68": "【0day】圣乔ERP系统downloadFile存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458585919&idx=2&sn=3bb34e0901a29e5afc2fe734b34df7e0&chksm=b18c3bb586fbb2a39743e902afa63e0412fad850f82e65fd105f799ab9fe3edfad907cfc518a&scene=58&subscene=0": "斯柯达和大众汽车信息娱乐系统漏洞：攻击者可在10米内无接触入侵", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521787&idx=1&sn=aa7443d590ca0182f0cbd4386c81152a&chksm=ea94a491dde32d87b3060602978c36b5e8d18e86a58054c857fc9c0ef0807f81f3a326687c1d&scene=58&subscene=0": "Apache修复 Struts 2 中的严重 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521787&idx=2&sn=6bccdb74a809a4f90b14cdd90c9c2985&chksm=ea94a491dde32d878d12b484356d74f82ce50e72b41607967c69d46af23089404ac6bc4d5de1&scene=58&subscene=0": "Cleo修复严重的0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497453&idx=3&sn=96ddb90221002fcab8ab6365b5b71c3a&chksm=fa595800cd2ed116ed9d8d8b7038f3bbb9e8ebd1b0ff985e83be86ff69664ca1aeb38a128f8e&scene=58&subscene=0": "50套.NET系统漏洞威胁情报(12.13更新)", "https://mp.weixin.qq.com/s?__biz=MzU5Njg1NzMyNw==&mid=2247488781&idx=1&sn=9cf9a3173e478a3407e42537063219d0&chksm=fe5d0d8dc92a849b892909c973424fd948dde4500c1d6066dcd61b86c462c418ecd7d7e672d2&scene=58&subscene=0": "活动预告|“AI+Security”系列第4期之“洞”见未来：AI驱动的漏洞挖掘新范式", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066594&idx=2&sn=b944b25addf57bec5231e17520c14d2c&chksm=f36e7f62c419f674c25c2731e00045529a26d413856ffe1f83e7f550bf4adade4c9edc817539&scene=58&subscene=0": "【安全圈】大众和斯柯达曝12个组合漏洞，攻击者可在10米内无接触入侵", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066594&idx=3&sn=fb1485e3b4a0ed439c616f967bfc2543&chksm=f36e7f62c419f674925c4fd86653e81123e3e05d411e575edd5ffcf7b8c21e0c38337de1b810&scene=58&subscene=0": "【安全圈】关键的Windows UI自动化框架漏洞允许黑客绕过EDR", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066594&idx=4&sn=b010357e9e80003c07a80b440507c355&chksm=f36e7f62c419f674bf2fcde34f7aed14f464143ef5283e001b7ce427b24ed44858953afd2a85&scene=58&subscene=0": "【安全圈】Ivanti最严重的 CSA 认证绕过漏洞曝光", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247493957&idx=1&sn=e321390a222acdb9054677bb1645e4a5&chksm=fa78e809cd0f611fbf317ac9c52626f6e6d208ba17c2d8d09a1a1384a2f4a830edec42e5ac5b&scene=58&subscene=0": "【众测挑战赛最终场】漏洞马拉松赛程二正式开启！超多业务等你来测！", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247493957&idx=2&sn=25f373967d5cfff03e611ac6924fcec4&chksm=fa78e809cd0f611f693b712f382403221c59b63b720d6d5fa857115e47d3d8ad899c2c8ca3ff&scene=58&subscene=0": "【2024漏洞马拉松】OPPO赛程正式启动，1.5倍奖励，新人额外奖励……超多奖金拿到手软！还有手机大奖等你来拿！", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496596&idx=1&sn=5af17ad8fcf461b401780dfe33b5ff27&chksm=e8a5f9f7dfd270e136ea467a560e89982864ff0210c71fa6a13dc9f6b88f6ceed7afb9f22a01&scene=58&subscene=0": "利用开放式重定向、2FA 绕过等漏洞获取$1600赏金奖励", "https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652316231&idx=1&sn=b3423c6bb4904ec61f6226b60f05da50&chksm=8bc4bfc9bcb336dfae863c4548718d74af6325bebc0f5161c725b1b1b2f96ee5fb4ecdcaa2ed&scene=58&subscene=0": "【活动预告】“AI+Security”系列第4期之“洞”见未来：AI驱动的漏洞挖掘新范式", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247495011&idx=1&sn=256dd54d6fc4d062660d7c4c1cba4f91&chksm=96d8e6b9a1af6faf27ffa548af4be5c572cf13427e9675fde58dbcd839a169a45e6e7072012f&scene=58&subscene=0": "对攻击者保持视野领先：从漏洞情报到「扩展漏洞情报」", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493068&idx=5&sn=6cbbaac9e6c56d21ac09c0bb63b45aea": "OpenWrt 严重漏洞致设备遭受恶意固件注入", "https://mp.weixin.qq.com/s?__biz=Mzk0MzY3MDE5Mg==&mid=2247483870&idx=1&sn=f2d83df755a6168806722398cf014828": "北京时空智友科技有限公司企业流程化管控系统存在SQL注入漏洞（2024-新）", "https://mp.weixin.qq.com/s?__biz=MzkyODY3NjkyNQ==&mid=2247484369&idx=1&sn=6bf8e1fb3de630777ecce9568e186adf": "AI安全漏洞之VLLM反序列化漏洞分析与保姆级复现（附批量利用）", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309860&idx=1&sn=faca11b08d12852dd40f9633cec1dfbf": "大量用户吐槽，Microsoft 365 又大面积宕机", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309860&idx=3&sn=cf5a31b4089c8f38b66010ac56f5528a": "知名企业级文件传输产品存在漏洞，正在被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650605043&idx=1&sn=aa0ce5d1e96b5a03e2cb55586120ebf3": "考研还有VIP？人财两空要注意！|大众和斯柯达曝12个组合漏洞，攻击者可在10米内无接触入侵", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793494&idx=1&sn=f15254b38aa27158bd9f2161dd2d8b1f": "锐捷Reyee云管理平台发现严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793494&idx=2&sn=a4ae56bd580ed692bbcdfbca69751e99": "CISA 确认勒索软件攻击利用了关键的 Cleo 漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787610&idx=1&sn=95a8903a00d204b2f0a97e8c4b9362d9&chksm=8893bcb5bfe435a394e1aea971bb0426b06390f8efb65f97a5811b81e2a1b8630d40c794fd55&scene=58&subscene=0": "斯柯达汽车漏洞披露：超过140万辆汽车面临远程控制与追踪风险", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486360&idx=1&sn=0d5a93471d5f0175a53d8867f0cb5a6d": "「漏洞复现」YourPHPCMS checkEmail SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488091&idx=1&sn=e6260f524d404ed289aa878c061f01f4": "Zabbix 存在SQL注入漏洞 (CVE-2024-42327)", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247506296&idx=1&sn=d78be69680656e7f679dc04367806179": "价值1.4 W人民币漏洞！骚！缓存配置错误造成鉴权绕过", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546029&idx=1&sn=66caa413669a7c737555534c7e8eb0e6": "某阅读器支付逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546029&idx=2&sn=74867a57d82d0db91f08d5319d6253cf": "安全学院24期开班福利！大咖嘉宾课、poc知识星球免费送", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247633148&idx=2&sn=938e5457a6bef8ee0dc499916fa72b25": "在看 | 周报：央视起底倒卖游戏账号犯罪链；“招商银行崩了”冲上热搜；广西网安部门因未尽网络安全义务对某公司进行警告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458586874&idx=2&sn=def87ccd0e65d4f49f3448c619afac16": "“看雪漏洞小组”集结！组团挖洞，一起冲击华为漏洞更高奖励", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486275&idx=1&sn=18c0bd580c1f76ce1aface83320fe3c2": "cve-2024-26229 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247505179&idx=1&sn=e91007c51b6a26874b220b9ab8fd50b7": "OpenWrt 中的严重漏洞：路由器和物联网的恶意固件风险", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247506199&idx=1&sn=a2e9317ad8423244888fd94381b1b797": "每周网安态势概览【20241215】050期", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486375&idx=1&sn=2f51033c1bdcd86c554acfed2a3152e9": "大华DSS数字监控系统 attachment_downloadAtt.action 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487051&idx=2&sn=9461ae572b0f2b2e73a6011d9d0f7428": "某阅读器支付逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458586874&idx=2&sn=def87ccd0e65d4f49f3448c619afac16&chksm=b18c3e7086fbb766a3c750cc6cec9f42d84bc0e3dc4ca25925934c1bfd0e2c80daaf2a5068f2&scene=58&subscene=0": "“看雪漏洞小组”集结！组团挖洞，一起冲击华为漏洞更高奖励", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493073&idx=1&sn=9f159c0c70774c9a96763486cb049c58": "CVE-2024-11053 (CVSS 9.1)：Curl 漏洞在重定向中暴露用户凭证", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309861&idx=3&sn=a55f0f1a630bff09a296cb60f7f7f5fd": "关键的Windows UI自动化框架漏洞允许黑客绕过EDR", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650605056&idx=4&sn=cd7efed4feb6063d619c80cb9b327b5b": "网络资产收集与漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247495194&idx=3&sn=f9db1bf04962c337658793212dfa3d7e": "大众和斯柯达曝12个组合漏洞，攻击者可在10米内无接触入侵", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247486218&idx=1&sn=1186b18e7409147510a68966666070f9": "实战 | 记一次双排渗透测试漏洞复盘", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247505209&idx=2&sn=e3d879187e4870549404ef7580568b4f": "数据泄露：预防和应对", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247505209&idx=4&sn=cb5748e0f25f778619769252e7da6d6d": "通过更智能的开发策略解决软件漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0NDc0NTY3OQ==&mid=2247488080&idx=1&sn=079ba007618c1361f56bb95581f4630a": "aiohttp存在目录遍历漏洞(CVE-2024-23334)", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247485065&idx=1&sn=5e280ee6cbdb82feb3f6c18fc3a0d168": "泛微云桥e-Bridge SQL注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517683&idx=1&sn=dc0041bac00ff3ac944686a1bdc2c8d8": "浅析渗透实战中url跳转漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486340&idx=1&sn=f9621c441ecc8206dacbd038cc589a87": "Atlassian Confluence 模板注入代码执行漏洞（CVE-2023-22527）", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492987&idx=1&sn=06a5d1a121c335bda422a0164efdee31": "Nuclei 分布式漏洞扫描平台可联动 AssetsDetectAPI 资产搜集", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491734&idx=1&sn=8aad76fd2d17f86a7a23aaa215e8888c": "漏洞预警 | 大华DSS数字监控系统任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491734&idx=2&sn=6a75b0253bfade7be3bbc07cadf69ca0": "漏洞预警 | 用友NC SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491734&idx=3&sn=5814fffd970fed63f305991d99e3b362": "漏洞预警 | 中成科信票务管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899756&idx=1&sn=85ef00825aef53524d39f428a5c0de41": "微软 MFA 现 AuthQuake 漏洞， 允许无限次暴力破解！", "https://mp.weixin.qq.com/s?__biz=Mzg4NDc0Njk1MQ==&mid=2247486365&idx=1&sn=f6cf2499ec26220023398ce584fe36a1": "如何有效防范勒索软件攻击？最新漏洞与防御策略", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488944&idx=1&sn=766ae78023280906e2595e294bfa06da": "【0day】《黄药师》药业管理软件UploadFile存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTYyOTQ5NA==&mid=2247485932&idx=1&sn=ce5622d60a21d9b99e971546249d4360": "OpenCVE：一款自动收集NVD、MITRE等多源知名漏洞库的开源工具，累计收录CVE 27万+", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614686&idx=1&sn=5c2a183a959901cde0a0ce6f4dc52164": "【$25000】利用Zendesk Nday获取漏洞赏金", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489710&idx=1&sn=3da0a42c282713d932adcdd522c15dbc": "九思OA workflowSync.getUserStatusByRole.dwr SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485799&idx=1&sn=69a6489bc4850684bb6ba3d0815adb22": "【漏洞复现】某平台-Template-readfile-任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499702&idx=1&sn=50c4df738f4d9978c8aaff35f8ead247": "玩儿转网站备份泄漏漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MzU4ODE5Mw==&mid=2247485613&idx=1&sn=39d1f5801b29c06477abe0faa7e361eb": "【漏洞预警】Cloudlog 电台日志系统 SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247196&idx=6&sn=3956b599b3963d2a61b9cebefdf74863": "安全工具 | Windows 权限提升漏洞检测工具集", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489696&idx=1&sn=39930a2658d350b0f35807a65b724c2b": "昂捷CRM cwsfiledown.asmx 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650605077&idx=4&sn=0f193d2b669247efaa2e79766bf4a968": "XXE 漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659211300&idx=1&sn=bb5c277c3bcd4785d0600c971e15c282": "【十步\"杀\"一车】大众和斯柯达曝12个组合漏洞，攻击者可在10米内无接触入侵", "https://mp.weixin.qq.com/s?__biz=MzIzODMyMzQxNQ==&mid=2247484350&idx=1&sn=338f274cec383fd947de6beaa15f07ee": "【MalDev红队开发】笔记阶段汇总", "https://mp.weixin.qq.com/s?__biz=MzAxMzkzNDA1Mg==&mid=2247513511&idx=1&sn=b00ab171426c41029b3c99e3d470a76e": "平台权限已开放！“大狗Unlock”活动正式开启，豪华大奖等你来拿！", "https://mp.weixin.qq.com/s?__biz=MzI4MjA1MzkyNA==&mid=2655348234&idx=1&sn=e3bdf86725133b7439aeb030e494ef87": "利用GitLab漏洞，美国比特币ATM巨头Byte Federal数据泄露", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247484505&idx=1&sn=dbc7552b94faf5a4568e046ae01c3e44": "SRC漏洞挖掘思路手法（非常详细）", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793508&idx=2&sn=a73c2601eb9d9c522e68b9641c3a8ccd": "Clop 勒索软件组织对利用Cleo 0day窃取数据负责", "https://mp.weixin.qq.com/s?__biz=Mzg5MzMzNTUzMA==&mid=2247485668&idx=1&sn=513caba8f1d1116baf305d9e62e4c9eb": "实战渗透-某金融众测价值3k的漏洞（附SRC报告合集免费下载）", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486390&idx=1&sn=685818611c6aa820c730dde74580540f": "「漏洞复现」PbootCMS entrance.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487054&idx=2&sn=723ac096a1c539a39b6fd167b6a933b2": "记一次验证码绕过修改邮箱地址", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652113226&idx=1&sn=a9ca874583cfab7091716f44d589afb2": "网络钓鱼是数据泄露的无声前兆", "https://mp.weixin.qq.com/s?__biz=MzkyOTQyOTk3Mg==&mid=2247484933&idx=1&sn=620e7c286ce724019856a285ec016318": "Exp-Tools:一款集成高危漏洞EXP的实用工具", "https://mp.weixin.qq.com/s?__biz=MzkyMTY1NDc2OA==&mid=2247487236&idx=1&sn=acedfe7140658fa3d8b8e6bf994b390e": "【漏洞文章】JeecgBoot 任意用户密码重置", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526007&idx=1&sn=30b50a7e68c6ea8b1d791c25af3ebb6c": "CVE-2024-38819：Spring 框架路径遍历 PoC 漏洞已发布", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526007&idx=2&sn=4e7def1076ab4e88d21b868da6b21abf": "知名开源生物医学工具（InVesalius 3.1）存在远程代码执行漏洞 CVE-2024-42845", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526007&idx=4&sn=9db2d1040e02b05a2060512a24b1251c": "CVE-2024-45337：Golang 加密库存在缺陷，存在授权绕过风险", "https://mp.weixin.qq.com/s?__biz=MzA5OTI3MTE5MQ==&mid=2247485438&idx=1&sn=8d03a526fda42f52f94b334d0a290708": "【Poc】-Spring Framework路径遍历漏洞(CVE-2024-38819)", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488155&idx=1&sn=22465acb48eb452307c7f4bc4940b2a0": "【0day】某州数码DCME-320存在前台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503123&idx=2&sn=5dd8d8ef12e293191bd286b255519a79": "利用GitLab漏洞，美国比特币ATM巨头Byte Federal数据泄露", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247505335&idx=1&sn=b644498e28b671bb36e14c80f9eb495f": "每周网安资讯 （12.10-12.16）|7-zip存在整数下溢或超界折返漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787627&idx=1&sn=4aca62c5aa480dccf358e90b043f3dcc": "警惕！微软Azure MFA漏洞曝光：数百万用户面临安全风险", "https://mp.weixin.qq.com/s?__biz=MzU1NTYxMjA5MA==&mid=2247504527&idx=1&sn=0ffd69e5c3aeba9398a43593b146f6d9": "米好信安成功助力第十七届山东省职业院校技能大赛（高职组）司法技术赛项！", "https://mp.weixin.qq.com/s?__biz=Mzg5NjY4NDg1Nw==&mid=2247483861&idx=1&sn=5c201134f7e14bd55bdd5d4923f0a60c": "fscan存在命令注入漏洞[doge][doge]", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490204&idx=1&sn=badaacd6921113d2a4a11f94f32db2fa": "【已复现】Apache Struts存在文件上传漏洞（CVE-2024-53677）", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502627&idx=1&sn=97347a777e7bcfbcd672a0f5efc781c6": "安全热点周报：新的 Cleo 零日 RCE 漏洞被利用于数据盗窃攻击", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247568602&idx=2&sn=7cf70e0de693e7ca55e723467fec2b45": "一款简单好用的漏洞管理工具-miscan", "https://mp.weixin.qq.com/s?__biz=MzU0NDc0NTY3OQ==&mid=2247488161&idx=1&sn=c186d4c63a938b5e71058467fcfb72ae": "74cms v4.2.1 v4.2.129 后台getshell漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247531062&idx=1&sn=ca1b73c32eb7b7655cd51fc61c3254e7": "研究显示：平均每个软件容器中发现600多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMDUzMzY1MA==&mid=2247499380&idx=1&sn=8b4d272d36267ca85173f2320771ac61": "《东京将启动上四休三工作制》", "https://mp.weixin.qq.com/s?__biz=MzkyMzYwNTEyNg==&mid=2247487188&idx=1&sn=593d4161d86b6af216a9a786bd23268a": "(0day)月子会所ERP某接口存在文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493078&idx=1&sn=01910d118c0de482cc69af2970614341": "CVE-2024-38819：Spring Framework 路径遍历漏洞 PoC 发布", "https://mp.weixin.qq.com/s?__biz=Mzg3ODkzNjkxMg==&mid=2247483987&idx=1&sn=8c3fb49d4ddbac681c27dfc0908c1175": "某科云连erp存在sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMjU5MzgzMQ==&mid=2247485084&idx=1&sn=94e7a98aa90e1b72155ab44a8fa77e4c": "CORS漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309955&idx=3&sn=df35fe54116cbd577e1f9b43f4eccb8a": "iOS和macOS系统曝关键漏洞，可破坏TCC框架", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066638&idx=4&sn=34b67f730621eac29fece525a015ab35": "【安全圈】iOS和macOS系统曝关键漏洞，可破坏TCC框架", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495600&idx=1&sn=dc6800fba8615ff029253a77d6e5b8d5": "CNVD漏洞周报2024年第50期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495600&idx=2&sn=e5180e3d367866b22424a2c460e81b51": "上周关注度较高的产品安全漏洞(20241209-20241215)", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494243&idx=1&sn=615b86970a35613e4ee903ac6cab66d7": "3倍积分奖励！抖音电商情报专测上线", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488989&idx=1&sn=a98ecf1b0a0e0f054a18360b1d9e05ca": "【未公开】泛微e-cology 9 x.FileDownloadLocation接口存在SQL注入漏洞导致Getshell", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489739&idx=1&sn=6a2b3b35ac1d6254b2485512a3e059ed": "电子资料管理系统 ImageUpload.ashx 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502638&idx=1&sn=98d3602c7f4df70ae3d72d1809a70dc3": "【已复现】Apache Struts 文件上传漏洞(CVE-2024-53677)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515209&idx=2&sn=155d31d384080db10d6e707621eeb8cd": "渗透测试 -- SSRF和XXE漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517716&idx=1&sn=ef1b5ef09d2003aadce7cd0867da175b": "Eyoucms的sql注入复现", "https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247490059&idx=1&sn=ccf765a173dfd31c4d49e2533124a10d": "未来五年网络安全最具潜力的十大方向", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499000&idx=1&sn=ee4aa3d20e3f82a903e5f51a028a9102": "某数AnyShare信息泄露漏洞检测脚本（12月16日更新）", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486341&idx=1&sn=b8e402631af06e5440f9c93a80d0c0ce": "支付类漏洞挖掘技巧总结", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491773&idx=1&sn=528008b81a8cb80cc311e0cbe1425822": "新的 Cleo 零日 RCE 漏洞被利用于数据盗窃攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247515548&idx=1&sn=2d8c70c61bc7d779572eb88723f3ca54": "漏洞通告｜Cleo 任意文件读写漏洞(CVE-2024-50623)", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291918&idx=1&sn=2d9ffa6d537500e9ed7afcdf5ed01864": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247486028&idx=1&sn=f153f8205b6f71c0daa4982536c1b5d0": "主动安全策略的 3 个组成部分", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497542&idx=1&sn=07d3f26e280c58604e0a757832204762": ".NET LINQPad 最新反序列化漏洞分析与利用", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491735&idx=1&sn=9ed2301b5331410d288c485d63ab7d33": "漏洞预警 | SonicWall SMA100 SSL-VPN缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491735&idx=2&sn=22ef31ba9057034fcae3fad4e1271e57": "漏洞预警 | Mitel MiCollab身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491735&idx=3&sn=bad2193b293b2463565dec1b321aa323": "漏洞预警 | WordPress Query Console远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247517246&idx=1&sn=a49a3d11a9fc2316f920b2f105cf0ef2": "HOST碰撞漏洞挖掘技巧，可以解决日常99%的问题！", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247493923&idx=1&sn=3e3ff8d146bb1ccd0458cb151c5b6d36": "【神兵利器】飞企互联FE漏洞综合利用工具", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247506241&idx=1&sn=dcc78dc007d6b22432c44e330d0d984e": "解锁+监控！最新安卓间谍软件NoviSpy植入疑利用了高通零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650475787&idx=1&sn=7ba275857c900c208be6d95a1190b0d6": "秦安：澳大利亚高达325瓶致命病毒至今下落不明，这四点不要放过", "https://mp.weixin.qq.com/s?__biz=Mzg3NTUzOTg3NA==&mid=2247514817&idx=1&sn=49238c059dfd55dac0f5b32c714cc812": "你了解VPC、子网、namespace之间的区别吗", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499000&idx=2&sn=ab9c01fe2209bcaa4c6faa8b14c51f0f": "渗透测试 -- 命令执行漏洞和反序列化漏洞学习课程（免费下载）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489313&idx=1&sn=a73bb22f29dcc1bfa6f4383454599255": "【漏洞预警】Menlo Security Menlo On-Premise Appliance安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502627&idx=1&sn=97347a777e7bcfbcd672a0f5efc781c6&chksm=fe79efbbc90e66ad8c8ac4b0c36d014bfe44291e1bcd47586e5c1be7b26415b22c3f854efdab&scene=58&subscene=0": "安全热点周报：新的 Cleo 零日 RCE 漏洞被利用于数据盗窃攻击", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499702&idx=1&sn=50c4df738f4d9978c8aaff35f8ead247&chksm=ec1dcf9edb6a4688f8e401d3171a0a1b5d3ed78e8cb9ce098586a0d1c9375f049792a3b8f6ff&scene=58&subscene=0": "玩儿转网站备份泄漏漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247531062&idx=1&sn=ca1b73c32eb7b7655cd51fc61c3254e7&chksm=c144088bf633819d4df022e6663bc59ed8b42dd21cc0b7b2873f7a264baac40a56c6f305e45a&scene=58&subscene=0": "研究显示：平均每个软件容器中发现600多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066638&idx=4&sn=34b67f730621eac29fece525a015ab35&chksm=f36e7f0ec419f618bf50a593773d4d2d4b959a327145ed7417a53af1c019d9bf5dd1598e609c&scene=58&subscene=0": "【安全圈】iOS和macOS系统曝关键漏洞，可破坏TCC框架", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzc3MTk3Mg==&mid=2247488827&idx=1&sn=f3086118f07d69c4ba6746464f993e16": "Apache Solr 身份验证绕过漏洞分析（CVE-2024-45216）", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247490516&idx=1&sn=d28a93cc259ba3199e08cafaededba89": "沈阳深蓝2024年HW项目结算完毕", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247509952&idx=1&sn=a439169394b57c514f886bebb419777e": "24年11月必修安全漏洞清单｜腾讯安全威胁情报中心", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485011&idx=1&sn=bda119ff87c4ce0aaef9439a4a1fb834": "腾讯云安全情报中心推出2024年11月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485803&idx=1&sn=540aa7d7066b69c8203a44a3ff99464a": "【漏洞复现】某平台-TUploadImgNoCheck-fileupload任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNTM4NDY2MQ==&mid=2247514930&idx=3&sn=97eb14a55274c0237c298fe50fdf03f0": "学员分享 | CISP-PTS—渗透测试进阶的不二之选", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg0MjMzNQ==&mid=2247484101&idx=1&sn=229c59119c2a8177eba5b4c31c4c9d18": "DFA攻击白盒AES复现——某新能源车企", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503145&idx=1&sn=d055df27ce64c457cf92890ea9161a7d": "iOS和macOS系统曝关键漏洞，可破坏TCC框架", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503145&idx=2&sn=cc39acbf2eae9f5bcc28c9401e6615e6": "文件传输平台Cleo零日漏洞，Clop团伙声称对数据盗窃攻击负责", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486268&idx=2&sn=43f748ec703b4423d0217f58c8f54f33": "SpringSecurity权限绕过漏洞-好玩", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247501831&idx=2&sn=d46f09ca7bcd0bbb103e627313a165fb": "CVSS漏洞评分系统曝出严重缺陷", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247206&idx=6&sn=4a7573044a9419233d4717f67e8bac7d": "安全工具 | Windows 权限提升漏洞检测工具集", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650605174&idx=1&sn=790e260cd929b46aaf819d4ca6f70c9e": "组织人员“刷单炒信”？严厉打击！|苹果 HomeKit 漏洞曝光，间谍软件入侵的新途径", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499533&idx=1&sn=547f274f9419278e747ee7fd6838edef": "CNVD漏洞周报2024年第50期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499533&idx=2&sn=334108850bd6b05f25907f6be5d4f166": "上周关注度较高的产品安全漏洞(20241209-20241215)", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493125&idx=1&sn=c9ddfebf5517803b98cfb33475b9bbef": "CVE-2024-53677:严重的Apache Struts RCE漏洞 PoC 已发布", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493125&idx=3&sn=21cdfe1e3bd3da8d3455c249663a4978": "Windows 内核漏洞现被利用来获取系统权限", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652251047&idx=1&sn=05349d5fcf4d21b805f74653b54cd0e4": "利用GitLab漏洞，美国比特币ATM巨头Byte Federal数据泄露", "https://mp.weixin.qq.com/s?__biz=MzI5MzU4ODE5Mw==&mid=2247485619&idx=1&sn=11f2d983b3f0dfceeac651b93b4de3ad": "【漏洞预警】蓝凌OA-thirdimsyncforkkwebservice-文件读取", "https://mp.weixin.qq.com/s?__biz=MzI4MjA1MzkyNA==&mid=2655348248&idx=1&sn=0e1754b0f166fa0b1fc24324e09e5f01": "文件传输平台Cleo零日漏洞，Clop团伙声称对数据盗窃攻击负责", "https://mp.weixin.qq.com/s?__biz=MzUzMDQ1MTY0MQ==&mid=2247506425&idx=1&sn=fcc3f82ea04ea9729651367ad210fd98": "1Day-某优先锋-流量管理系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMDY1NzA2Mw==&mid=2247483845&idx=1&sn=d6a5712b5cfd90a1aede3097b897218c": "DTStack Taier 1.4.0 listNames sql注入分析(CVE-2024-41579)", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499709&idx=1&sn=37ae556f51a5d91da71ea04b2afee842": "写了一个自动测试弱口令漏洞的脚本", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793528&idx=3&sn=f3f3747dd5697ed2b3a379c507782412": "大众汽车信息娱乐系统存在多个缺陷，可能导致车辆被实时追踪", "https://mp.weixin.qq.com/s?__biz=MzAwNzQ1NTE1OQ==&mid=2247485937&idx=1&sn=c364c75ba642030a3e554e2d2a2d739c": "启明星辰集团2025校园招聘火热进行中！", "https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247527862&idx=2&sn=8861777e01ccd9fd2378cc3b7ee68d9c": "研究显示：平均每个软件容器中发现600多个漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247515552&idx=1&sn=c60ac9a0a7631d7c6b2752e7ebb68964": "漏洞通告｜Apache Struts 2远程代码执行漏洞（S2-067）(CVE-2024-53677)", "https://mp.weixin.qq.com/s?__biz=Mzg2NDg2MDIxNQ==&mid=2247485252&idx=1&sn=3b54011114b049cff1b78391ebafa5f4": "某科云连ERP系统存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MzcxNzg1Ng==&mid=2247485628&idx=1&sn=acde82258512cb49764da882fae372ad": "某科云连ERP系统存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526078&idx=2&sn=d8a722a5736e7e1a03a9878e36e11b9a": "通过 CVE-2024-52875 攻击 Kerio Control：从 CRLF 注入到一键 RCE", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247490793&idx=1&sn=6c634e841e3747293b0d85100b58cad5": "Apache Struts RCE (CVE-2024-53677) POC公开", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793528&idx=1&sn=26f1950857db2d8b248303e56b7af199": "以色列公司 Cellebrite 利用安卓 0day漏洞进行间谍软件攻击", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489319&idx=1&sn=713bc94c930a2f885aa69e6f2435dd60": "【已复现】Apache Struts文件上传漏洞（CVE-2024-53677）", "https://mp.weixin.qq.com/s?__biz=MzU3ODI3NDc4NA==&mid=2247484608&idx=1&sn=4b85151deec033d57451111c949e829c": "网安人体检报告：漏洞最多的人竟是我自己？！", "https://mp.weixin.qq.com/s?__biz=MzkzMDY2MDA2Ng==&mid=2247485815&idx=1&sn=f79057bf044c6febf9c06deea18e44ba": "【安全漏洞】Apache Struts任意文件上传漏洞S2-067【CVE-2024-53677】 POC 已发布", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247485655&idx=1&sn=0598b4c4ba4ae8f0d3fa999818df5c7e": "一次完整的Jwt伪造漏洞实战案例", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899772&idx=1&sn=87345af2e1739c5c24e80cb26e331d66": "iOS 和 macOS 惊现 TCC 绕过漏洞！ TCC符号链接攻击手法深度解析", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651310049&idx=3&sn=e826857cbaba996b54f223f056a5154b": "最新的Windows内核漏洞，可获system权限", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066655&idx=1&sn=57e7dca07986a799143fbca48a88cb03": "【安全圈】苹果HomeKit出现安全漏洞被间谍机构利用 目前具体漏洞细节尚未公布", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066655&idx=4&sn=c56864b01e3e298b37ea2863eea40424": "【安全圈】最新的Windows内核漏洞，可获system权限", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488765&idx=1&sn=cb38f34e16235b415098e0a348c004ab": "【处置手册】Apache Struts任意文件上传漏洞S2-067(CVE-2024-53677)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521826&idx=1&sn=8401d12768469de690ea3a216e63c875": "Windows 内核漏洞已被用于获取系统权限", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521826&idx=2&sn=2e115cf641ac90636ca05cde8df5fa09": "安卓间谍软件 NoviSpy 利用高通6个0day感染设备", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587285&idx=3&sn=fe9ca791431e72d184fc3fca2470e155": "探秘移动端漏洞世界 | 零基础入门Android漏洞挖掘-入门篇", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484790&idx=1&sn=5552cbc8206e5552aefc265060c3bae1": "【漏洞复现】CVE-2024-8963、CVE-2024-8190", "https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247526130&idx=1&sn=c8e2d37ea184a3b62de81eecae6654fe": "直播预约 | 攻防常态化，企业如何提高自身实战能力？", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247547498&idx=1&sn=6a693d280a3781051b63c6bd9946069f": "神漏洞！任意修改车牌号码，让其他车主支付过路费和罚单", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247486791&idx=1&sn=b6b5c31b8ace0a9aeec45c44ad2f5e53": "PbootCMS V3.2.9前台SQL注入漏洞（上）", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247488890&idx=1&sn=f1cac1b4bd5f878ba8ee4c5cb9afb63a": "漏洞预警|CVE-2024-49112 Windows 轻量级目录访问协议 （LDAP） 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzYwNTEyNg==&mid=2247487189&idx=1&sn=9d00a65196166346a91d7f6069740844": "(0day)秒优科技供应链管理系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493131&idx=1&sn=53054222a61d0f4f5bb380d9a1332acb": "古河大佬发现的最新漏洞：Windows LDAP RCE漏洞（9.8）", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513296&idx=1&sn=6e551ba031ad27466e2160d34f16b5ae": "神漏洞！任意修改车牌号码，让其他车主支付过路费和罚单", "https://mp.weixin.qq.com/s?__biz=MzIxNjI2NjUzNw==&mid=2247492794&idx=1&sn=dff86fd90195db40c0ceb1864c9396be": "上周关注度较高的产品安全漏洞(20241209-20241215)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489761&idx=1&sn=dff5f6a3183ce82bb042e8e510ba7c38": "PbootCMS entrance.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489750&idx=1&sn=cc8d9f80e65e4c98f0695aa7a49ead84": "万能门店小程序管理系统 onepic_uploade 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517720&idx=1&sn=dbbbdc3cbf014d0ba6d68a6b2882bd61": "XXL-JOB默认accessToken身份绕过RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488173&idx=1&sn=1a1b64eedff4ec862f6186b6d500ddbe": "【0day】99bitbet双语言交易所存在前台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094328&idx=1&sn=c158e0da11cdb3ad962815dd29cdf861": "iOS和macOS系统曝关键漏洞，可破坏TCC框架", "https://mp.weixin.qq.com/s?__biz=Mzg4MTg0MjQ5OA==&mid=2247487478&idx=1&sn=763e6261bb82678d8ff964b97ef5c41b": "项目管理去考PMP，还是去考CSPM？", "https://mp.weixin.qq.com/s?__biz=Mzg2NDU3Mzc5OA==&mid=2247489728&idx=1&sn=c72ffd32c1866180b7ffbc454f5d0502": "品牌焕新升级！“WaBug漏洞响应平台”正式起航，开启崭新篇章", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497562&idx=3&sn=95e20ae2b522c3b6fad7bf80b1c3cf6e": ".NET LINQPad 最新反序列化漏洞分析与利用", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491752&idx=1&sn=ac93a2e38067d03269d9e264b73bd524": "漏洞预警 | 用友U8CRM SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491752&idx=2&sn=dfb0ef6d0f30c63772cacf7c8524dbb4": "漏洞预警 | 圣乔ERP系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491752&idx=3&sn=758d0e61e39f07b88b2102f6f3281010": "漏洞预警 | 金和OA任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487085&idx=2&sn=3a1a4c5b93874a0f93689f06386c8972": "CVE-2024-48307：JeecgBoot SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247506278&idx=1&sn=358d4453178e40281bc60e817e5ae313": "Dirty DAG：微软Azure数据工厂的Apache Airflow集成中的新漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247493955&idx=1&sn=aeb1f353ae9f70b0fc315196774e71e2": "【神兵利器】帆软BI反序列漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492975&idx=1&sn=57e419207530fa3496e3372624655a3b": "大众汽车集团的信息娱乐系统存在多个漏洞，可能导致车辆被攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247489467&idx=1&sn=5c6dfa3003de97d19e34c9cc46d1c2ff": "本周六举行2024年度密评从业人员考核", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488995&idx=1&sn=9617efc19dde578fb08c62fa156334e5": "【大量存在】飞鱼星-路由器存在敏感信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1Mzk0MjU1OQ==&mid=2247493289&idx=1&sn=97dff30b3420519894ae5911d450f9a7": "【漏洞预警】热门摄像头曝零日漏洞，黑客借此入侵政府部门", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488765&idx=1&sn=cb38f34e16235b415098e0a348c004ab&chksm=c2c643f6f5b1cae02308b33981c82c888a78c82ffa6bb440cf4a875790265a20d5b003c9cd86&scene=58&subscene=0": "【处置手册】Apache Struts任意文件上传漏洞S2-067(CVE-2024-53677)", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513296&idx=1&sn=6e551ba031ad27466e2160d34f16b5ae&chksm=ebfaf3f0dc8d7ae6008b0cf16bdb9f21c80afb57f577b1098d593922f6fcbf78098b09013922&scene=58&subscene=0": "神漏洞！任意修改车牌号码，让其他车主支付过路费和罚单", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521826&idx=1&sn=8401d12768469de690ea3a216e63c875&chksm=ea94a748dde32e5eb85a2d43633878de31150537893c6123c6c7bc739f26c1c85c3ee69ed8ed&scene=58&subscene=0": "Windows 内核漏洞已被用于获取系统权限", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521826&idx=2&sn=2e115cf641ac90636ca05cde8df5fa09&chksm=ea94a748dde32e5e240c297499b4a7753baff26f7b887420df59da0631b3b45cc44b73026012&scene=58&subscene=0": "安卓间谍软件 NoviSpy 利用高通6个0day感染设备", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587285&idx=3&sn=fe9ca791431e72d184fc3fca2470e155&chksm=b18c201f86fba9099c21103bad9f8346ba517b54f6819e51f9a57c43940d3f6102085c1a891b&scene=58&subscene=0": "探秘移动端漏洞世界 | 零基础入门Android漏洞挖掘-入门篇", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507565&idx=1&sn=f1eb832586d6ef20bbd6b579dff4956f&chksm=cfcabd79f8bd346f18fe53c9b16c9b7029e5124dffe6fd10d7027af46c8fab5d4f12807425d8&scene=58&subscene=0": "【更新】Apache Struts2文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499709&idx=1&sn=37ae556f51a5d91da71ea04b2afee842&chksm=ec1dcf95db6a468326ec10ef4a3feee1fde64e01d6454e055bc92c16c698b4190e0ad6517892&scene=58&subscene=0": "写了一个自动测试弱口令漏洞的脚本", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499533&idx=1&sn=547f274f9419278e747ee7fd6838edef&chksm=973acc6fa04d4579d163a4bbc1c67cde754c96f464c1ac3ebfb6ba9ecb00dbddb2ce7757788e&scene=58&subscene=0": "CNVD漏洞周报2024年第50期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499533&idx=2&sn=334108850bd6b05f25907f6be5d4f166&chksm=973acc6fa04d4579e97bd240396c787995261ad2ef7ef643fd5612ac419cd9b2b0ba9d0b0c6d&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241209-20241215)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066655&idx=1&sn=57e7dca07986a799143fbca48a88cb03&chksm=f36e7f1fc419f6091c648425f65f481ee023841a152bedbc9367f9587bf95d18a3d075b3a013&scene=58&subscene=0": "【安全圈】苹果HomeKit出现安全漏洞被间谍机构利用 目前具体漏洞细节尚未公布", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066655&idx=4&sn=c56864b01e3e298b37ea2863eea40424&chksm=f36e7f1fc419f609a1fbb13ab7b6034ae28df0252abc5dbb47ba057c00c636754fcd86e2efcc&scene=58&subscene=0": "【安全圈】最新的Windows内核漏洞，可获system权限", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247486791&idx=1&sn=b6b5c31b8ace0a9aeec45c44ad2f5e53&chksm=c22295bef5551ca8792a4995840335057e593dac6cedff9883e4df8636af25be9d78a176ab3f&scene=58&subscene=0": "PbootCMS V3.2.9前台SQL注入漏洞（上）", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247509952&idx=1&sn=a439169394b57c514f886bebb419777e&chksm=ec9f7eb3dbe8f7a51c824c37ba5711a4cfac107170d9bfceaad5b275a4560925300aaba7fcf8&scene=58&subscene=0": "24年11月必修安全漏洞清单｜腾讯安全威胁情报中心", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485011&idx=1&sn=bda119ff87c4ce0aaef9439a4a1fb834&chksm=c2b10425f5c68d33d062e09ef5181fdacf9286075ae13d64ab7298749df91f3e643cd8588239&scene=58&subscene=0": "腾讯云安全情报中心推出2024年11月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546080&idx=1&sn=25c1d7d63492dabf32381937df0d6dfb": "区块链安全 | 智能合约重入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492666&idx=1&sn=a650f29da3e91b115518248dd903d28c": "【已复现】Apache Tomcat条件竞争致远程代码执行漏洞（CVE-2024-50379）", "https://mp.weixin.qq.com/s?__biz=MzA3OTMxNTcxNA==&mid=2650956216&idx=1&sn=4ae52e54a6cbc81e9830e7ef8bf0a3e3": "知名企业深陷漏洞“迷局”，网络安全专家组队“破局”！", "https://mp.weixin.qq.com/s?__biz=MzkxNzIzNDExMA==&mid=2247486657&idx=1&sn=9f0234ffb306e760ae29f81a6c6df980": "【最新Struts2高危漏洞】Apache Struts CVE-2024-53677", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247493733&idx=1&sn=3a4d58e897ccecbb382cfe9ed4645ae7": "CVE-2024-50379|条件竞争Tomcat RCE POC（首发）", "https://mp.weixin.qq.com/s?__biz=Mzk0NDU5NTc4OA==&mid=2247484286&idx=1&sn=22775600d7b7d06b6e9d816ea4ee3b38": "渗透测试——曲折的文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NDc0MjUxMw==&mid=2247486030&idx=1&sn=49476b5e6cff4f67c66f9d23c63f9323": "打印机也有“隐形”威胁？这些安全漏洞请注意！", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ2NzQ0Ng==&mid=2247484906&idx=1&sn=bfa5e6d913bdfe338b72726ba0e38830": "记一次CNVD事件漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5Mzk2OQ==&mid=2247486318&idx=1&sn=93c203e68a7de391e374b0a3cfb18297": "CVE-2024-50379|条件竞争Tomcat RCE POC（首发）", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485807&idx=1&sn=d0fbcedf0a441bb7f7b4b8fa166ce0d1": "【漏洞复现】某平台-getTotalData-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NzQxNzY2OQ==&mid=2247487464&idx=1&sn=d299e081cf73a1f046b0b0b6c706aa4d": "极致经典 | 一次客户系统渗透，多种经典漏洞集合于一身", "https://mp.weixin.qq.com/s?__biz=Mzg3MDk0OTc1Nw==&mid=2247488016&idx=2&sn=c33e7785242fdaf63efd18f32f38cabf": "Apache Struts RCE (CVE-2024-53677) POC公开", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503165&idx=2&sn=fae09af9640fbd5683d7ff03f72b98ca": "最新的Windows内核漏洞，可获system权限", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650605232&idx=1&sn=a616a1590e3a342cb0c9610c68865fd7": "充值499元成为VIP，开通权限后随时可约！|神漏洞！任意修改车牌号码，让其他车主支付过路费和罚单；", "https://mp.weixin.qq.com/s?__biz=MzAwMTg3MDQzOA==&mid=2247510958&idx=1&sn=a260090535e30de0a2c233c3787b963a": "苹果HomeKit出现安全漏洞被间谍机构利用 目前具体漏洞细节尚未公布", "https://mp.weixin.qq.com/s?__biz=Mzg3NTUzOTg3NA==&mid=2247514818&idx=1&sn=0d2f983bfde8f4fd789a80d29d0a8736": "安全大数据平台的上游、下游系统有什么", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247537024&idx=2&sn=1abdfffc1ecf4bc0f1051caad49e9731": "神【漏洞！】任意修改车牌号码，让其他车主支付过路费和罚单", "https://mp.weixin.qq.com/s?__biz=MzA4NzU1Mjk4Mw==&mid=2247492223&idx=1&sn=44c088b639e364ad470e0c2462ad18b8": "SQL注入漏洞批量检查工具", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497542&idx=1&sn=07d3f26e280c58604e0a757832204762&chksm=fa5959abcd2ed0bd8e338a2cba31a9fec4f25fcf577395619ea1c3f2910fac2eb73376b05e19&scene=58&subscene=0": ".NET LINQPad 最新反序列化漏洞分析与利用", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496875&idx=1&sn=c5cdc97e1bdf31dd8a9d1a81e9c68d06": "【漏洞通告】Apache Tomcat远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUxNTQxMzUxMw==&mid=2247524710&idx=1&sn=b994ca870206d2cf58d1ea0aa87fec12": "安全通告丨网络安全漏洞通告（2024年12月）", "https://mp.weixin.qq.com/s?__biz=MzkyNzYxMDQ2MQ==&mid=2247484977&idx=2&sn=62df25a36acfb864e1cd34f92d669c1f": "泛微ecology9 1day分析", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526094&idx=2&sn=b381eedcae7c75c5af5d8b7ae48d7bb7": "自动化漏洞利用工程：从理论到实践的旅程", "https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486366&idx=1&sn=ccc57cb3f6086c4fc9b47ac935f996d7": "Apache Tomcat 条件竞争文件上传漏洞（CVE-2024-50379）", "https://mp.weixin.qq.com/s?__biz=Mzg5MjY2NTU4Mw==&mid=2247486500&idx=1&sn=6b6ce9bf66721fd7f5823e3eadc950c1": "Apache Tomcat CVE-2024-50379", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247500298&idx=1&sn=05c72ef1db47fe87704a5732066cd8fa": "【高危 含POC】Tomcat 远程代码执行漏洞(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502648&idx=1&sn=efadd668e22cb6151e0765d0937e3343": "【已复现】Apache Tomcat 远程代码执行漏洞(CVE-2024-50379)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247491149&idx=1&sn=c88b61c414d7d9fcef48e9f185499dc7": "cve-2024-53376：CyberPanel RCE 已发布PoC", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489324&idx=1&sn=df351d8075e19c7590b08dcd023cfb94": "【漏洞预警】 Apache Tomcat default servlet条件竞争文件上传漏洞（CVE-2024-50379）", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484736&idx=1&sn=174f2fddd9500e3b10c1bd5141227669": "【复现】Tomcat DefaultServlet远程代码执行漏洞(CVE-2024-50379)风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247633354&idx=2&sn=97c545e273d442a6684a5cb8be44dbee": "黑客通过漏洞赏金赚取了80万美元", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247488084&idx=1&sn=d751a3b846f4f8b5c90e6df02fd57f14": "蓝凌OA thirdimsyncforkkwebservice 任意文件读取漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484375&idx=1&sn=e7eb4755e4f7b6c3f7538961222d5772": "第十七期 · 安钥®「漏洞处置标准作业程序（SOP）」征文启示", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521836&idx=1&sn=1ac593b2544b8e1e86da611a669fe6f3": "超2.5万SonicaWall VPN 防火墙易受严重漏洞影响", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521836&idx=2&sn=31f9af20432d3d2a6003ea8c1a92fe5a": "大众信息娱乐单元存在多个漏洞，可用于实时追踪车辆位置", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247552053&idx=2&sn=49717316acd55d82b72512d983e064cd": "【免费领】挖洞宝典：全网搜罗的漏洞挖掘实战技巧大全", "https://mp.weixin.qq.com/s?__biz=MzU0MjEwNTM5Ng==&mid=2247520280&idx=1&sn=b8b711192227797e246af9e1ea6902a6": "知名企业深陷漏洞“迷局”，网络安全专家组队“破局”！", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500402&idx=2&sn=670455c374a3c6bff14b495943c0d1c4": "【漏洞通告】Apache Tomcat 竞争条件远程代码执行漏洞（CVE-2024-50379）", "https://mp.weixin.qq.com/s?__biz=MzI3MzExMTk5Mw==&mid=2247484533&idx=1&sn=1ae93875862de8a96cf077f3aeee9a0a": "Tomcat CVE-2024-50379 条件竞争漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwNzk0NTkxNw==&mid=2247487025&idx=1&sn=a5c8cfe64de615946d67f91ff2853f04": "漏洞风险提示 | Tomcat 条件竞争漏洞导致远程RCE（CVE-2024-50379）", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523957&idx=1&sn=969b80d781110862122c8003edbc7023": "【漏洞通告】Tomcat 远程代码执行漏洞(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247495445&idx=1&sn=4ddda7a5db910393e22c6f97f0689b2e": "【论文速读】| 利用人工智能修复 OSS-Fuzz 中的安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513306&idx=1&sn=1f55c8207eaf709ec57b190fb4fdd06e": "产品漏洞被利用致大量用户数据泄露，这家巨头被罚超19亿元", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462113&idx=1&sn=93c8155dfc2d56ca35448e14cca8ac6a": "信息安全漏洞周报（2024年第51期）", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488777&idx=1&sn=2e8d82ca372a1f191c3e46d818a39475": "【漏洞通告】Apache Tomcat条件竞争代码执行漏洞（CVE-2024-50379）", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490212&idx=1&sn=16ffe5eaf17ed711dbfcc0a9f203e3a4": "【已复现】Apache Tomcat存在远程代码执行漏洞（CVE-2024-50379）", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507571&idx=1&sn=2ee4ea1d3100d5ff50536b0d61bec91d": "漏洞通告 | Apache Tomcat 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787651&idx=1&sn=3ec2660ca7270d7114baa4c06baf3c9e": "瞄准安全研究人员！攻击者在GitHub上使用伪造PoC窃取39万WordPress凭证", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247531866&idx=1&sn=6f39682cbc5c8f1e3e0d2d15020fcf16": "研究发现：CVSS 漏洞评分系统存在严重缺陷", "https://mp.weixin.qq.com/s?__biz=MzkwMjQyNjAxMA==&mid=2247484768&idx=1&sn=312d27be01812f1c01852048d99ce2a2": "教你用python读取csv文件，调用企业微信API发送邮件", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247220&idx=6&sn=401fbb41c7961877e30847322da4da10": "安全工具 | Windows 权限提升漏洞检测工具集", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247488895&idx=1&sn=39e2d95db349cae397597868a345661e": "通杀漏洞|CVE-2024-50379 Apache Tomcat条件竞争RCE", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY3MTM4Nw==&mid=2247484056&idx=1&sn=6b388eef926a79e484f3d3be1e0d17b3": "CVE-2024-50379|条件竞争Tomcat RCE POC（首发）", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247617580&idx=2&sn=ce08ac01fa6014eab9112d9d30ac8683": "扩展 SAE J1939 的攻击场景：传输协议中已建立和新的漏洞的综合分析", "https://mp.weixin.qq.com/s?__biz=MzAwNDUyMjk4MQ==&mid=2454828910&idx=1&sn=34a18dd889f688ac490b7a5764d9ae6f": "霄壤实验室获Apache社区致谢，永信至诚「数字风洞」测评中心提醒：Apache Tomcat 存在远程执行漏洞请尽快修复", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496629&idx=1&sn=39a9eef5154441c9a42979a74ba9a774": "【高危 含POC】Tomcat 远程代码执行漏洞(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=MzIxODIzNzgwMw==&mid=2654070871&idx=1&sn=3bd5b22989dd3cfbc5968127ac2776ca": "漏洞马拉松2024 | 团体对抗，锋芒毕现！", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486635&idx=1&sn=7ac8d259c95b99e721ec7343479f7f00": "【漏洞预警】Apache Tomcat 条件竞争漏洞(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489547&idx=1&sn=3f8b0e53b8842f04f2498d88310da4b9": "从零开始：K8s安全测试与漏洞挖掘-8", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489792&idx=1&sn=03b59f0b3700284eb4565b0a37a92118": "海康威视运行管理中心 applyST 远程代码执行漏洞(XVE-2024-33936)", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515252&idx=2&sn=aa9a9358b4941b26a8602d0511794999": "渗透测试 -- 目录越权和旁注和CDN绕过越权漏洞和登录页面漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486343&idx=1&sn=0509e8974bf768fb57e8b7f7929f4f9f": "【SRC】记录一次从小程序静态分析+动态调试获取到严重漏洞的过程", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633159&idx=4&sn=e6bff7477cbc41d023fcb0d19a2e202e": "产品漏洞被利用致大量用户数据泄露，这家巨头被罚超19亿元", "https://mp.weixin.qq.com/s?__biz=MzA3ODE0NDA4MA==&mid=2649401063&idx=1&sn=d1b0f04a913a540a4eccee9ef1c07b6e": "网络产品安全能力提升计划漏洞线下检测（第一期）活动成功举办", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491768&idx=1&sn=434935e3e87e391acbfdac4d795baca9": "漏洞预警 | Ivanti Cloud Services Application身份验证绕过、命令注入和SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491768&idx=2&sn=b419456e71a8697d34f4fee2ab6007bf": "漏洞预警 | 孚盟云SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491768&idx=3&sn=cde190167226801bbe33165c54038bff": "漏洞预警 | 智邦国际ERP SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247493956&idx=1&sn=7d3c35588ef20be40738ace28accb0d9": "【神兵利器】高危漏洞EXP实用性工具", "https://mp.weixin.qq.com/s?__biz=Mzg2MzkwNDU1Mw==&mid=2247485381&idx=1&sn=79215a9a9657a0915aa63ef5fa6fd754": "常见的API漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247489470&idx=1&sn=4c7366c85823353766c469550d0b3652": "如何开展漏洞扫描工作", "https://mp.weixin.qq.com/s?__biz=MzkyNzE5MDUzMw==&mid=2247561055&idx=1&sn=2aacb4c8d81aee0dd9b2fd4c4d7059b2": "喜报！炼石中标海尔集团数据安全项目", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488999&idx=1&sn=51229f0d00309669fc68d0a72b7b5981": "【漏洞复现】泛微云桥e-Bridge checkMobile存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787651&idx=1&sn=3ec2660ca7270d7114baa4c06baf3c9e&chksm=8893bd6cbfe4347a5e48d1a57e69027c5452067dacbc253484e6a486edbace5e98c70fca1756&scene=58&subscene=0": "瞄准安全研究人员！攻击者在GitHub上使用伪造PoC窃取39万WordPress凭证", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492666&idx=1&sn=a650f29da3e91b115518248dd903d28c&chksm=96f7fb57a18072410e958679b3ef73487cd3d6846810b88bc0a0ff67d742354b887785790b04&scene=58&subscene=0": "【已复现】Apache Tomcat条件竞争致远程代码执行漏洞（CVE-2024-50379）", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502648&idx=1&sn=efadd668e22cb6151e0765d0937e3343&chksm=fe79efa0c90e66b6a2308ddc3180a09a343e928d2d28e56f213e6edb932476f8a43137341ef9&scene=58&subscene=0": "【已复现】Apache Tomcat 远程代码执行漏洞(CVE-2024-50379)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486366&idx=1&sn=ccc57cb3f6086c4fc9b47ac935f996d7&chksm=ec6fec9edb186588db72f71f31c28f3f0f825bad0e21ab28967620de5b833f562f959fb24a70&scene=58&subscene=0": "Apache Tomcat 条件竞争文件上传漏洞（CVE-2024-50379）", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507571&idx=1&sn=2ee4ea1d3100d5ff50536b0d61bec91d&chksm=cfcabd67f8bd34712f0110942c80bedd686614f7735dc66618734680a8d403b6643099ed3467&scene=58&subscene=0": "漏洞通告 | Apache Tomcat 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497562&idx=3&sn=95e20ae2b522c3b6fad7bf80b1c3cf6e&chksm=fa5959b7cd2ed0a1411e8388beebdcf3e7a2b73a48db2a907bce388f08e5f8704dcc707a299e&scene=58&subscene=0": ".NET LINQPad 最新反序列化漏洞分析与利用", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513306&idx=1&sn=1f55c8207eaf709ec57b190fb4fdd06e&chksm=ebfaf3fadc8d7aeca02d01580537f8e231c977eb84f4bcfcf112a362aead50a335513778dc80&scene=58&subscene=0": "产品漏洞被利用致大量用户数据泄露，这家巨头被罚超19亿元", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521836&idx=1&sn=1ac593b2544b8e1e86da611a669fe6f3&chksm=ea94a746dde32e50b2831f33c867b085c923bded2776a57fc1af502e5fcb6668d1e8b4dfbb44&scene=58&subscene=0": "超2.5万SonicaWall VPN 防火墙易受严重漏洞影响", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521836&idx=2&sn=31f9af20432d3d2a6003ea8c1a92fe5a&chksm=ea94a746dde32e50d8efd5c8569ffb992f5b27aec0d014fb508bf96576064f7ca7f1096b5b68&scene=58&subscene=0": "大众信息娱乐单元存在多个漏洞，可用于实时追踪车辆位置", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488777&idx=1&sn=2e8d82ca372a1f191c3e46d818a39475&chksm=c2c64202f5b1cb1426c3499f3a4ff104f9e1e2c03e14f917aebab394e9f1243aeb8bc6bf6550&scene=58&subscene=0": "【漏洞通告】Apache Tomcat条件竞争代码执行漏洞（CVE-2024-50379）", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523957&idx=1&sn=969b80d781110862122c8003edbc7023&chksm=ce461565f9319c73f3629b83feef2ae14d385bfc28cc9c72f02522877e0c439de28d45ce6719&scene=58&subscene=0": "【漏洞通告】Tomcat 远程代码执行漏洞(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247531866&idx=1&sn=6f39682cbc5c8f1e3e0d2d15020fcf16&chksm=c1440fe7f63386f17015807f15f31bd5c35bc96b1095d5c3cd51c6be49eef9751b71da5c80b7&scene=58&subscene=0": "研究发现：CVSS 漏洞评分系统存在严重缺陷", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496629&idx=1&sn=39a9eef5154441c9a42979a74ba9a774&chksm=e8a5f9d6dfd270c02eef37e0d5c306aa966fe24942e2c649d87b2c45781bd2d3eea7d34f5c93&scene=58&subscene=0": "【高危 含POC】Tomcat 远程代码执行漏洞(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489547&idx=1&sn=3f8b0e53b8842f04f2498d88310da4b9&chksm=fb029553cc751c4592bab7a4b5f6c78cfe67db71a67a46b96c9f11568c34e23982b65559baa1&scene=58&subscene=0": "从零开始：K8s安全测试与漏洞挖掘-8", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491781&idx=1&sn=cd905e6813d77910c07ec8a2d271b234": "补丁警报：严重 Apache Struts 漏洞被攻击者积极利用", "https://mp.weixin.qq.com/s?__biz=Mzg5MjY2NTU4Mw==&mid=2247486515&idx=1&sn=519f6f8f6b6913d1ad0394f7ea6f9f61": "Apache Tomcat CVE-2024-50379", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247495233&idx=2&sn=117791f0a46cb4234c11d39ada84abe2": "美国数字车牌被曝存在漏洞，车牌号码可任意修改", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247495233&idx=3&sn=380a579d683bd3b712e6a479ea3cdb0a": "产品漏洞被利用致大量用户数据泄露，Meta被罚超19亿元", "https://mp.weixin.qq.com/s?__biz=MzIyNzc3OTMzNw==&mid=2247485624&idx=1&sn=3e15ce8db03128a8a48343186209f11c": "【工具分享】一款基于Java框架的综合漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247493735&idx=1&sn=1bddb619955a1bd046d9d339ac759299": "某源码前台RCE漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493196&idx=4&sn=fce9b7ba151b7167f5542611499fff83": "威胁行为者正利用最近披露的 Apache Struts 漏洞 CVE-2024-53677。", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247235&idx=6&sn=cfe0c9a4cf9ec353c32e9fcf9b32c221": "安全工具 | Windows 权限提升漏洞检测工具集", "https://mp.weixin.qq.com/s?__biz=MzU2NjgzMDM3Mg==&mid=2247493867&idx=1&sn=23e869acb0c12d949a39b98e5555946c": "Apache Tomcat远程代码执行漏洞(CVE-2024-50379)复现+修复方案.", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247484945&idx=1&sn=292914d90842ea641d9baccfb114f32a": "记一次牛逼克拉斯的漏洞挖掘过程", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497583&idx=3&sn=a257313ae94cf7a802e4006aba4ab91e": "50套.NET系统漏洞威胁情报(12.13更新)", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247510007&idx=1&sn=6fc90ec81b2c25fd0b615bd24433abac": "黑客泄露了思科 4.5TB 数据", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247486333&idx=1&sn=349981824f44648bd9432a1c1bdc7870": "实战-关于KEY泄露API接口利用", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651310195&idx=3&sn=d9e83e129b0a14950e2d04cd8ad9576c": "Apache Tomcat新漏洞允许攻击者执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066717&idx=4&sn=b641682a1ea1ea39882cd929b37a230e": "【安全圈】Apache Tomcat新漏洞允许攻击者执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247541073&idx=1&sn=66d200edcdbbb26a0c8618ca749bcfbe": "Apache Struts重大漏洞被黑客利用，远程代码执行风险加剧", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664232585&idx=5&sn=b82810b82d6eb59c2598075d87f09b53": "关注 | 第一期漏洞挖掘与利用中高级培训班招生", "https://mp.weixin.qq.com/s?__biz=MzkyODcwOTA4NA==&mid=2247487434&idx=1&sn=52ed8d0b21e6701c0e4503999d9dfeaa": "Apache Tomcat 最新RCE 稳定复现+分析 保姆级！附复现视频+POC", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587465&idx=2&sn=e5d0f25746dce13de80ec7ed9907263f": "​Apache Tomcat高危漏洞曝光，远程代码执行风险需警惕", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247490111&idx=1&sn=0c1158934db85f02099fd8f3d919c930": "创宇安全智脑 | 灵当 CRM uploadify.php 任意文件上传等70个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MjM5NzgzMjMwNw==&mid=2650662503&idx=1&sn=34de5fb811a2d054325b638bf4046a1a": "已结束意见征集！《关键信息基础设施商用密码使用管理规定（征求意见稿）》有哪些说明值得关注（附下载）", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500408&idx=2&sn=3445af6ce0d2a1f047ac681fac4d2c4e": "【漏洞通告】BeyondTrust RS & PRA命令注入漏洞（CVE-2024-12356）", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247568707&idx=2&sn=6d994592bb54a5d5a6bce372dcf38907": "支付类漏洞挖掘技巧总结", "https://mp.weixin.qq.com/s?__biz=MzkzNTY1MTg4Mg==&mid=2247484202&idx=1&sn=0e1298d761bd7888caf1c2f8f6dee4f1": "Apache Tomcat 最新RCE 稳定复现+分析 保姆级！附复现视频+POC", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492478&idx=1&sn=8cf4e1f8b4b3378e053529a9505884c3": "黑客利用Linux eBPF传播恶意软件展开攻击活动", "https://mp.weixin.qq.com/s?__biz=MzkxNTY4NTQwMg==&mid=2247484183&idx=1&sn=54a360747cca4c12f38b8325bbe8230a": "新高危漏洞 （附在野POC）| Struts2任意文件上传漏洞（CVE-2024-53677）", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247531931&idx=1&sn=5668beb83a342334cd0c5e435601230c": "避免漏洞管理中的陷阱：关键见解和最佳实践", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247495461&idx=1&sn=dc63c0a29d46b90e275110fbfdf9c5f0": "附原文 |《2024年漏洞与威胁趋势报告》深度解读", "https://mp.weixin.qq.com/s?__biz=MzkyODY3NjkyNQ==&mid=2247484396&idx=1&sn=73b8f9b54a54eb1b5412bfc84a7662fc": "Apache Tomcat 最新RCE 稳定复现+分析 保姆级！附复现视频+POC", "https://mp.weixin.qq.com/s?__biz=MzA4NjMwMzI3Mg==&mid=2247500501&idx=1&sn=0b2c3d4cdb4a3205d1ec94183b5108b1": "【漏洞通告】Apache Tomcat远程代码执行漏洞(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507585&idx=1&sn=5ece95159551948b0ffa7cd719aefdf7": "近期活跃利用高危漏洞自查！含文档管理、Exchange、Apache多个产品", "https://mp.weixin.qq.com/s?__biz=Mzk0NzQxNzY2OQ==&mid=2247487499&idx=1&sn=54c62641c62f93cdf13a14f22231801f": "Tomcat RCE | CVE-2024-50379条件竞争RCE复现，带视频教程及POC", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485811&idx=1&sn=e64daf3659180b8b3ccfa808c5a56017": "【漏洞复现】某平台-getPicServlet-readfile任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488266&idx=1&sn=801e77220b48b586c1f056f13b2add69": "【1day】某家政上门预约小程序系统存在前台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzYwNTEyNg==&mid=2247487197&idx=1&sn=f0e9f21b1644944d1229df83969d9cc0": "(0day)安科瑞环保用电监管云平台存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5OTEzMjc4OA==&mid=2247488982&idx=1&sn=94a03c5d2886be42631e3fc9eef6db7f": "Struts2漏洞深度解析 ：CVE-2024-53677任意文件上传逻辑绕过及修复建议", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247484949&idx=1&sn=a085c39db61dc1de6a41747466c1fa26": "工具集：TomcatScanPro【tomcat自动化漏洞扫描利用工具】", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614726&idx=1&sn=78a89e1680495198a24d2c662e557ea0": "漏洞挖掘 | Swagger UI 目录枚举小总结", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486412&idx=1&sn=712f6ea6d9343dfea4389136b50008d4": "「漏洞复现」方正畅享全媒体新闻采编系统 screen.do SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486475&idx=1&sn=a6abc6678bce010ef732dfc02c5de936": "【漏洞通告】GitLab Kubernetes Proxy Response NEL 头注入漏洞（CVE-2024-11274）", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486475&idx=3&sn=9f3590ac9d85d305b380de81489941af": "【漏洞通告】Ivanti Cloud Services Application 身份验证绕过漏洞（CVE-2024-11639）", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486475&idx=5&sn=4d662930a1561be456356a31827c5a92": "【漏洞通告】Cleo 远程代码执行漏洞 ( CVE-2024-50623 )", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496635&idx=1&sn=34c31d16785a1db6359cc507f1312498": "深入浅出API测试｜搜集分析与漏洞挖掘实战", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490119&idx=1&sn=b4ee325a5b5ff4787c6b6b1290e0f9e8": "Fortinet 警告可能导致管理员访问漏洞的关键 FortiWLM 漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587465&idx=3&sn=f606b36568e16830f7ccb8d80bdd6cea": "欢迎报名！​“系统0day安全”系列课程：掌握漏洞挖掘重要技能", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489811&idx=1&sn=d672db7d9c8cfc80ee8a56623d137ecf": "时空WMS-仓储精细化管理系统 ImageAdd.ashx 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493003&idx=1&sn=a66dc3c7877fa2f4288ba75e6e950847": "Fortinet 警告称其无线局域网管理器 FortiWLM 存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515271&idx=2&sn=c418da4780646d43c1d688f964809dc3": "渗透测试 -- 逻辑漏洞和挂马和钓鱼", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499048&idx=1&sn=8b4ebcd450f2bf1c19eef0d34f7ae4a8": "Apache Struts2 文件上传逻辑绕过(CVE-2024-53677)(S2-067)", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499048&idx=2&sn=7859c9f96e59a019564b5d235b56faeb": "渗透测试 -- Web漏洞扫描", "https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485285&idx=1&sn=45a780c7b3b660fa186c85863e85cb3c": "从技术抗衡走向体系化国家力量比拼——2024全球网络战呈现五大特点", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489333&idx=1&sn=dff7d934b42679e01f662c8f10e27f33": "【漏洞复现】Apache Tomcat竞争条件远程代码执行漏洞（CVE-2024-50379）", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486475&idx=4&sn=943a72a40bc01ee1401d16c5b6db3f11": "【漏洞通告】OpenWrt Attended SysUpgrade 命令注入漏洞（CVE-2024-54143）", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247488587&idx=1&sn=36947cca7b136734d9f974ecba1910b9": "从漏洞数据库搜索漏洞的工具go-exploitdb", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491780&idx=1&sn=9ad859958ef94c4b28503b45631a5cce": "漏洞预警 | Apache Struts2文件上传限制不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491780&idx=2&sn=c706c7bf32eb530317c380573930ef57": "漏洞预警 | 杜特网上订单管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491780&idx=3&sn=93fa1f3e603467757cccc4f78afa7774": "漏洞预警 | GitLab Kubernetes Proxy Response NEL头注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247494055&idx=1&sn=e6d8fa033cd944548086c716ac0004fb": "【神兵利器】XXL-JOB漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkyNzE5MDUzMw==&mid=2247561231&idx=1&sn=d395619d9c7e37fee040540992546806": "喜报！炼石中标某大型国有综合性保险金融集团数据加密项目", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247497894&idx=2&sn=a3d6383d0a7c182a96101ad4591734e1": "Apache Struts RCE 漏洞被公开 PoC 积极利用", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486475&idx=2&sn=d72f0a05e1e612fa56354ae1a878a765": "【漏洞通告】Apache Struts 2 远程代码执行漏洞（CVE-2024-53677）", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507585&idx=1&sn=5ece95159551948b0ffa7cd719aefdf7&chksm=cfcabd95f8bd34838fd5ab4044866d81a0b443ffbc5e66f89c4407b9b866ee891f036097b191&scene=58&subscene=0": "近期活跃利用高危漏洞自查！含文档管理、Exchange、Apache多个产品", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587465&idx=3&sn=f606b36568e16830f7ccb8d80bdd6cea&chksm=b18c21c386fba8d5127a6d2b07a92ceadd369622ffa057dc032148779ab0e72a399dff415028&scene=58&subscene=0": "欢迎报名！​“系统0day安全”系列课程：掌握漏洞挖掘重要技能", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664232585&idx=5&sn=b82810b82d6eb59c2598075d87f09b53&chksm=8b59f470bc2e7d66737bd7baf256c0cc37b4d7d892b7d5137bc15af66a345b6c97940301bb28&scene=58&subscene=0": "关注 | 第一期漏洞挖掘与利用中高级培训班招生", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066717&idx=4&sn=b641682a1ea1ea39882cd929b37a230e&chksm=f36e7fddc419f6cba24202816ce961aac15b183ff97a27fbb019b434f5d7e60a6fdfa32e0d2d&scene=58&subscene=0": "【安全圈】Apache Tomcat新漏洞允许攻击者执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247531931&idx=1&sn=5668beb83a342334cd0c5e435601230c&chksm=c1440f26f63386307f6312e5f22d00cd7121b204ca332d6c38f460179ec350ba3c892fd97acd&scene=58&subscene=0": "避免漏洞管理中的陷阱：关键见解和最佳实践", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496635&idx=1&sn=34c31d16785a1db6359cc507f1312498&chksm=e8a5f9d8dfd270ce98244fefaaff483cbbfc2b1a94710d1eb30fdc1b35c8f91dcb606f71c6f6&scene=58&subscene=0": "深入浅出API测试｜搜集分析与漏洞挖掘实战", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497583&idx=3&sn=a257313ae94cf7a802e4006aba4ab91e&chksm=fa595982cd2ed0943cb357c385cae45d9142c9e02bc2fa241049bb8d545bec7993170a4903a9&scene=58&subscene=0": "50套.NET系统漏洞威胁情报(12.13更新)", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484499&idx=1&sn=5e4e9c892b49d69df1a5ebc34b3ee227": "CVE-2024-11477：7-Zip 中的严重缺陷可让黑客控制", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247486361&idx=1&sn=38c35d7dfeeb4f23bb79b134d105a9f0": "分享OAuth2.0原理及漏洞挖掘技巧案例分析", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491251&idx=1&sn=e1519a3103033cf6a50d9d229f99003c": "记一次溯源真实案例", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247489068&idx=2&sn=6e38841cf254c1c670f47a40ee15bd3c": "【漏洞复现】方正畅享全媒体新闻采编系统reportCenter存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587465&idx=2&sn=e5d0f25746dce13de80ec7ed9907263f&chksm=b18c21c386fba8d5143def50c0fea96255f636311a6494c19b1e2f693f34d65cd53557264f87&scene=58&subscene=0": "​Apache Tomcat高危漏洞曝光，远程代码执行风险需警惕", "https://mp.weixin.qq.com/s?__biz=Mzg3NTk4MzY0MA==&mid=2247487895&idx=1&sn=f6a8e98c8bbd2f91264c648e106570e5": "Zabbix从环境搭建到漏洞利用，附批量漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkyOTQ0MjE1NQ==&mid=2247495012&idx=1&sn=1296119e4a5d81cc17c8c894eb81c9ec": "【工具分享】全网首发！袭扰国内top1家族Mallox家族恢复工具", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487541&idx=1&sn=e4a29fa7e3d8982823df494f4d681f54": "赛克安全本周漏洞推送（12.15-12.20）涉及Cloudlog、bmcm、汉明科技-无线控制器、迈普无线系统等产品相关漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MzU4ODE5Mw==&mid=2247485633&idx=1&sn=250856a0c5df8005e7e4ccafa8fc5e53": "赛克安全本周漏洞推送（12.15-12.20）涉及Cloudlog、bmcm、汉明科技-无线控制器、迈普无线系统等产品相关漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546115&idx=1&sn=a2d3f19e56af1f2a02b2d6e5ff9f69bc": "CVE-2024-21762漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546115&idx=2&sn=375c6493f91e8c36e4d450c4c849e2da": "区块链安全 | 智能合约重入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454063729&idx=1&sn=589720470530ff0346b0da4e297f010f": "信息安全漏洞周报【第002期】", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650605364&idx=4&sn=aee1cb28e83f2b6dd706be24fe33bf22": "SQL注入漏洞批量检查工具", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247488095&idx=1&sn=9e6234bfb837864874b7823c72a5a398": "飞鱼星路由器 账户密码泄露漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094354&idx=2&sn=3a60c2337e04ee15140b801c8002914f": "Apache Tomcat新漏洞允许攻击者执行远程代码", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzc3MTk3Mg==&mid=2247488851&idx=1&sn=efb4d5fe76d020e05760236c16b33ac5": "Apache Struts2 文件上传漏洞分析（CVE-2024-53677）", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247699&idx=1&sn=8cfa9f1b17a853ce8e42a0c99bc8acae": "CVE-2024-53677：Apache Struts2文件上传逻辑漏洞S2-067", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513326&idx=2&sn=b46e1ade4f9e30f4f08fbf4bbca1bd20": "外媒：马斯克因涉密安全问题受美军方审查", "https://mp.weixin.qq.com/s?__biz=MzI0NDgxMzgxNA==&mid=2247496499&idx=1&sn=3ad526afdadb1d41245df21bd6cfbd64": "每周安全速递³²³|Cl0p勒索组织利用Cleo漏洞攻击全球企业", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247496974&idx=1&sn=32969894b2db845f027d58c9c704ba42": "CVE-2024-53677：Apache Struts2文件上传逻辑漏洞S2-067", "https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247512487&idx=1&sn=2084969d835f481f70244a795d40aa77": "NDSS 2025｜ 抖音集团安全研究团队提出机密沙箱内存管理方案WAVEN", "https://mp.weixin.qq.com/s?__biz=MzAxODg1MDMwOQ==&mid=2247506869&idx=1&sn=5eff5ed4d2afa5ff3a6c0a8bfff9ccdf": "再获漏洞治理能力认可，谋乐科技获颁工信部NVDB通用漏洞库“技术支撑单位”荣誉称号", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521859&idx=1&sn=6aade83438190800942638166b046757": "Fortinet：注意FortiWLM漏洞，黑客可获得管理员权限", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521859&idx=2&sn=342840d67c1fbf01af15a41ea7621df8": "Chrome 131 更新修复高危内存安全漏洞，其中1个获奖5.5万美元", "https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653931270&idx=1&sn=cb11c508d1c42ef2b727375e2695dba9": "第十一届“金松奖”已开始申报，包含合规科技发展奖、AI科技进步奖等", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247552089&idx=1&sn=e58b77c5f8083efd50bde11cf5bb2896": "解放双手，批量刷漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247498611&idx=1&sn=5451b3f155e7c67d51aadd3e816a5898": "《中医医院信息与数字化建设规范（2024版）》解读", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500414&idx=2&sn=40647e4e4d3af58a8c692e400df5ba6e": "【漏洞通告】Sophos Firewall SQL注入漏洞（CVE-2024-12727）", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247531975&idx=1&sn=56c499e1153e0c4f6356185ac1ded5a1": "思科物联网无线AP遭遇严重命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489338&idx=1&sn=d7f3b1f635c785d818ad3b8e32e9d83c": "【漏洞预警】moaluko Store Locator代码执行漏洞(CVE-2024-12571)", "https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247486034&idx=1&sn=e1071dd8c3acaa34494bfc2255a23817": "Play 勒索软件声称 Krispy Kreme 遭入侵，威胁泄露数据", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499454&idx=1&sn=96a579525a54f7e4000867bcfb7643f3": "G.O.S.S.I.P 阅读推荐 2024-12-20 Android芯片组相关漏洞总结报告2025版", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493219&idx=1&sn=dc76c163b7149d91b59b32c45efda63a": "[PoC] Databricks 远程代码执行漏洞 CVE-2024-49194", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587582&idx=2&sn=4b21c27b28faa9c50e657aba34ad4be4": "FortiWLM重大安全漏洞曝光，远程攻击者可夺管理员权限", "https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247503614&idx=1&sn=6411afe7e813f28c7e5dc04f06eafa28": "观安信息获评“2024上海软件核心竞争力企业（规模型）”", "https://mp.weixin.qq.com/s?__biz=MzIxNTM4NDY2MQ==&mid=2247515061&idx=2&sn=221fe9e7df5487a65ac6c27d27bb64a3": "CCSK试题等你来答，参与抽奖赢取首期班福利！", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486354&idx=1&sn=ed60c9249844adc217d6dc144178754c": "Src挖掘之比较有意思的几个漏洞挖掘记录", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486353&idx=1&sn=652419703f4d5311dac369eb1a1a6014": "记一次磕磕绊绊的sql注入漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzk0NDQwMDY1Nw==&mid=2247485413&idx=1&sn=47451afa77e27bca85b16eb8c9c125ea": "隆重登场：Google 最新推理模型，Gemini 2.0 Flash - Thinking-exp-1219", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489822&idx=1&sn=c2122703daa803e3edfa9adc122a6c16": "时空WMS-仓储精细化管理系统 SaveCrash.ashx 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899798&idx=1&sn=a5f4eb2aa8955f5fe679cd627968dadb": "Apache Struts 严重漏洞恐再现“噩梦”， 攻击者已展开行动！", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491804&idx=2&sn=1b58756b842eabe75c03da17279606b8": "漏洞预警 | NextChat SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491804&idx=3&sn=7d2c640fda5f60bb78dd1511bd64f853": "漏洞预警 | 网神SecGate3600防火墙任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487125&idx=1&sn=2dcb68ae48973292ce0e41ebe7b6d41a": "Zabbix从环境搭建到漏洞利用，附批量漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487125&idx=2&sn=ec3d00ecc8c4f8f61c72585c57ffb1d1": "CVE-2024-50379|条件竞争Tomcat RCE POC（首发）", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247489098&idx=1&sn=241319fc05874fab20fe11fc31e569a5": "【0day】中科商软云连ERP getAllUserListData存在信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247494056&idx=1&sn=745c6db09be2022a37d4366370e6fa3d": "【神兵利器】Redis漏洞综合利用工具", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515286&idx=1&sn=f7ad70d62fef2564f484020c5716f9a2": "Apache Tomcat（CVE-2024-50379）条件竞争致远程代码执行漏洞批量检测脚本", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587582&idx=2&sn=4b21c27b28faa9c50e657aba34ad4be4&chksm=b18c213486fba822d37b6a318f39f151c9f35da5a51cc4151917ac1fcfc6b817bd873da639d9&scene=58&subscene=0": "FortiWLM重大安全漏洞曝光，远程攻击者可夺管理员权限", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521859&idx=1&sn=6aade83438190800942638166b046757&chksm=ea94a729dde32e3fff2298ee3a0ab33be5cf7cc9bbfebb1e65bcf4b1a355e4369a3ae43bb957&scene=58&subscene=0": "Fortinet：注意FortiWLM漏洞，黑客可获得管理员权限", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521859&idx=2&sn=342840d67c1fbf01af15a41ea7621df8&chksm=ea94a729dde32e3fa2f20b8187093ff135d86d86f18361c7a4cae398bc831b6f9e04d5a21ca9&scene=58&subscene=0": "Chrome 131 更新修复高危内存安全漏洞，其中1个获奖5.5万美元", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499454&idx=1&sn=96a579525a54f7e4000867bcfb7643f3&chksm=c063d067f71459710b20f7f42f409e6a44da03f245ec80005326c7b8b022ed3119efbb022ea8&scene=58&subscene=0": "G.O.S.S.I.P 阅读推荐 2024-12-20 Android芯片组相关漏洞总结报告2025版", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247531975&idx=1&sn=56c499e1153e0c4f6356185ac1ded5a1&chksm=c1440f7af633866c05c42df55d11bf04d3c958aa61ec6c19861393ad6e599687d4011abedd73&scene=58&subscene=0": "思科物联网无线AP遭遇严重命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MzE4MjAxMw==&mid=2247484369&idx=1&sn=478b83aaba8f2dc1fbc47bd52655654b": "CVE-2024-56337", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486442&idx=1&sn=56c0d4d924372cdf6e0685a3cccbc483": "「漏洞复现」Cloudlog 电台日志系统 request_form SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491782&idx=1&sn=0ec56be3f4aff171268e9834d45e974d": "安娜雅克医院勒索软件漏洞导致 30 万名患者数据泄露", "https://mp.weixin.qq.com/s?__biz=Mzg5MjkwODc4MA==&mid=2247485776&idx=1&sn=6d011e84e820eb2995031d6355a2ed87": "【自研工具】collect-cloud-native-security-vuln: 云原生安全漏洞收集工具", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651310351&idx=1&sn=431965e436402476cf84910b092c1628": "FortiWLM 曝关键漏洞，攻击者可获得管理员权限", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247484966&idx=1&sn=c9077bd3b588953184cf7d6d94ce6e41": "Google日历网络钓鱼骗局", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793589&idx=2&sn=1f3dfc23261c4f764df5452f3ae77a05": "研究人员警告称，Apache Struts 2 关键漏洞可能遭利用", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793589&idx=3&sn=091ad734f1363feff0581eebe726992b": "Rockwell PowerMonitor 漏洞允许远程黑客攻击工业系统", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491804&idx=1&sn=9ca9d6fe52223ae2d42a4e122bbad7d6": "漏洞预警 | Cleo Harmony任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526269&idx=1&sn=9e773282c8039d1a8f836fb8e90e8aac": "8,000 美元漏洞赏金亮点：Opera 浏览器中的 XSS 到 RCE", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526269&idx=2&sn=be4f2144eee49c7ab4153c1c05760a33": "新的Windows权限提升漏洞！ SSD 咨询 – cldflt 基于堆的溢出 (PE)", "https://mp.weixin.qq.com/s?__biz=MzU0MzgzNTU0Mw==&mid=2247485929&idx=2&sn=85652ae4ff67dac73e8c8c8e0fcd320b": "网络安全顶会——CCS 2024 论文清单与摘要（2）", "https://mp.weixin.qq.com/s?__biz=Mzg3NTUzOTg3NA==&mid=2247514855&idx=1&sn=c31bfc54cc6875e32ec73a225f057a36": "你可能了解Ebpf，但是你了解Cbpf技术吗？", "https://mp.weixin.qq.com/s?__biz=MzU4NTY4MDEzMw==&mid=2247494030&idx=1&sn=330c20307561a3c8c3b1ad2dd17be0b0": "EKUwu-CVE-2024-49019", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247485930&idx=1&sn=b212c0f73f12ef7a741f99bb4b8fd2e1": "OtterRoot Netfilter 通用型 Linux 本地提权 1-day 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502658&idx=1&sn=e1de6decc572e58a32c667c1ecd2ec0b": "【已复现】Apache Tomcat 远程代码执行漏洞(CVE-2024-56337)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485358&idx=1&sn=c180edecfc5c80fefafb15baea7e06d5": "【翻译】身份验证失效：利用高级身份验证漏洞的完整指南", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546135&idx=1&sn=cbfb468158bc82d35028d522eaa3ab4d": "新手小白如何挖掘cnvd通用漏洞之存储xss漏洞（利用xss钓鱼）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066803&idx=3&sn=dca3ffae63a4a135b0aaae997fee9b6d": "【安全圈】大众车载系统暴出12个安全漏洞，黑客可轻松接管车内信息！", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485730&idx=2&sn=ee2e3210c82a61b26acfc5ba94b512ca": "CVE-2024-50379｜Apache Tomcat竞争条件远程代码执行漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587593&idx=1&sn=f01974c27a3a04371655e7ea6eace814": "欢迎报名！​“系统0day安全”系列课程：掌握漏洞挖掘重要技能", "https://mp.weixin.qq.com/s?__biz=Mzk0NzQxNzY2OQ==&mid=2247487610&idx=1&sn=d3773f95c08472577d4c5dca4d24dc10": "最终章 | Tomcat条件竞争RCE的最终利用篇，带视频教学及POC", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500418&idx=1&sn=dbe755575c1cc8ea303921c5c7ee9317": "【漏洞通告】Apache Tomcat远程代码执行漏洞（CVE-2024-56337）", "https://mp.weixin.qq.com/s?__biz=MzkxOTYwMDI2OA==&mid=2247484301&idx=1&sn=cc09d0ed73141c9df1190979180a4bb6": "[靶场复现计划]春秋云境 CloudNet", "https://mp.weixin.qq.com/s?__biz=MzkyMTYyOTQ5NA==&mid=2247485993&idx=1&sn=a04b3a29e74391e6948c0ef6dc41969a": "搭建Web安全入门漏洞靶场DVWA其实只要10分钟！（附30个免费docker镜像加速源）", "https://mp.weixin.qq.com/s?__biz=Mzg5MzcxNzg1Ng==&mid=2247485630&idx=1&sn=3d1301d407df653985532869ae3acfe1": "网安人体检报告：漏洞最多的人竟是我自己？！", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493261&idx=1&sn=519cd25d6df0692babe00f4c41ffdee9": "CVE-2024-56337 Apache Tomcat - 通过启用写入功能的默认 servlet 进行 RCE", "https://mp.weixin.qq.com/s?__biz=MzkyODcwOTA4NA==&mid=2247487494&idx=1&sn=de643d61ba91eb9452c98cebeb61a56a": "【新day】CVE-2024-56145（Craft CMS 模板注入导致 RCE）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485730&idx=1&sn=4a11c334dc821e3cebf6e8642e236341": "CVE-2024-53677｜Apache Struts 2（S2-067）远程代码执行漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247490108&idx=1&sn=44caf097ec471143db38533b39921e7e": "一文解读hashdump工具", "https://mp.weixin.qq.com/s?__biz=Mzg5NTUyNTI5OA==&mid=2247486364&idx=1&sn=6376e5a20c87ec8e5f291c09a4e13f16": "新手小白如何挖掘cnvd通用漏洞之存储xss漏洞（利用xss钓鱼）", "https://mp.weixin.qq.com/s?__biz=MzI5NDg0ODkwMQ==&mid=2247486136&idx=1&sn=181b8c04c06163724b7307a30645a2ef": "[靶场复现计划]春秋云境 CloudNet", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485745&idx=1&sn=d1090b68df39020f6ad17405afe7f029": "CVE-2024-12727｜Sophos Firewall SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485745&idx=2&sn=5b11dd987b70d63bd327eea23f305e74": "CVE-2024-49112｜Windows 轻量级目录访问协议（LDAP）远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487133&idx=1&sn=1a65a357b5fb4ed4bd2928654519d005": "新手小白如何挖掘cnvd通用漏洞之存储xss漏洞（利用xss钓鱼）", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487133&idx=2&sn=e85f9ffecb8fa68f9544dbae2722aad0": "漏洞挖掘 | 某平台存储型XSS", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517788&idx=1&sn=5bf26f6dbafbcb94f439e8a8f6a0cf3f": "PE文件代码注入", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587593&idx=1&sn=f01974c27a3a04371655e7ea6eace814&chksm=b18c214386fba855c7d8837a605a2a87e7bb9c53b5ade3206e3b7a4379bddcd8ef5efb693457&scene=58&subscene=0": "欢迎报名！​“系统0day安全”系列课程：掌握漏洞挖掘重要技能", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066803&idx=3&sn=dca3ffae63a4a135b0aaae997fee9b6d&chksm=f36e7fb3c419f6a501dfeb9d60cff3b477a4ac64b70fdd353bed9f6ab86f24ba62907b4475ae&scene=58&subscene=0": "【安全圈】大众车载系统暴出12个安全漏洞，黑客可轻松接管车内信息！", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502658&idx=1&sn=e1de6decc572e58a32c667c1ecd2ec0b&chksm=fe79efdac90e66cc313e0e0816a80c07931f5719df659f74aba6bb8efcfae9347460cd26c232&scene=58&subscene=0": "【已复现】Apache Tomcat 远程代码执行漏洞(CVE-2024-56337)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493290&idx=1&sn=87dbe8e4fb12dd7dc0b236623fe5f4be": "CVE-2024-56145：Craft CMS 漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899799&idx=1&sn=bf5134fc99d34ec1f16199c151fa25ef": "Fortinet 无线管理器惊现严重漏洞，黑客可轻松获取管理员权限！", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633268&idx=3&sn=98f0293cc6251ab7304f147afa79483c": "FortiWLM 曝关键漏洞，攻击者可获得管理员权限", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526407&idx=2&sn=c861b76793e01721eca83cd6cd50d901": "一个不起眼的 PHP 漏洞如何导致 Craft CMS 出现 RCE", "https://mp.weixin.qq.com/s?__biz=MzkzNTQwNjQ4OA==&mid=2247484039&idx=1&sn=84848557aee5ef51ec87d5cd74607656": "记一次逻辑漏洞修改任意用户密码", "https://mp.weixin.qq.com/s?__biz=MzkzNTY1MTg4Mg==&mid=2247484206&idx=1&sn=c6c8bc748d9cd6b3305a188a37b8c6b9": "【首发1day详情】CVE-2024-51479 全网首发漏洞复现分析+POC (Next.js权限绕过)", "https://mp.weixin.qq.com/s?__biz=MzkyODY3NjkyNQ==&mid=2247484401&idx=1&sn=71dcfb268f5852a19c75d24153bb827e": "【首发1day详情】CVE-2024-51479 全网首发漏洞复现分析+POC (Next.js权限绕过)", "https://mp.weixin.qq.com/s?__biz=MzkyODcwOTA4NA==&mid=2247487524&idx=1&sn=0ba60c7c544d38db55c6cc9723985528": "【首发1day详情】CVE-2024-51479 全网首发漏洞复现分析+POC (Next.js权限绕过)", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484851&idx=1&sn=52c5df6c1e8f7e240e5d705a9adb8fbc": "【漏洞复现】CVE-2024-50623", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066819&idx=2&sn=d36a351bfabba8d719c29fa871c22b3c": "【安全圈】FortiWLM 曝关键漏洞，攻击者可获得管理员权限", "https://mp.weixin.qq.com/s?__biz=MzkwMDc5NDQ4OA==&mid=2247494604&idx=1&sn=e708788215b2043d657d20c4aab45fde": "2024年湖北省网络与数据安全实践能力竞赛——天权信安WriteUp", "https://mp.weixin.qq.com/s?__biz=MzAwNTc5MTMyNg==&mid=2247500072&idx=1&sn=2b761dedd7c1caedbe68c644c1292ec6": "关于AWD的小结", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486453&idx=1&sn=c80d52031a23f7939f932cb30817a4d7": "「漏洞复现」云连POS-ERP管理系统 download.action 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491784&idx=1&sn=bc289d1572bd1db0c695ab15af7ab441": "CISA 将 Progress Kemp LoadMaster 漏洞标记为易被攻击利用漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496658&idx=1&sn=a962d7f0a95d295e95082d39881b8d9a": "任意账户绑定微信逻辑缺陷案例", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491824&idx=1&sn=1e180df542cc81f8ccd126fa3a1a793a": "漏洞预警 | Apache Tomcat条件竞争漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491824&idx=2&sn=00d3f008f7a8e6862f85e636c1729047": "漏洞预警 | 蓝凌OA SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMzIwNTY1OA==&mid=2247509920&idx=1&sn=4edcca4471e6daccf241f1af05ac1900": "Caddy能取代Nginx吗？", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655262466&idx=1&sn=cba108d6018be686d89bca36a5fe24ae": "2025年我国网络安全发展形势展望", "https://mp.weixin.qq.com/s?__biz=MzA4MzMzOTQ4Mw==&mid=2453672473&idx=1&sn=b1f42abfb69489f1d38f2bf96dcc303b": "补丁警报：发现关键的Apache Struts漏洞（CVE-2024-53677）", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493022&idx=1&sn=ef5134da8ef54faf7fc94a7213224e62": "Sophos修复了其防火墙产品中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247489127&idx=1&sn=572846e45ecb431c0b52259247eb3ddb": "【0day】北京用友审计软件有限公司友数聚科技CPAS审计管理系统V4 存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066819&idx=2&sn=d36a351bfabba8d719c29fa871c22b3c&chksm=f36e7843c419f15552cf2929e13f6e9b8e3fa19750a3413a503d97ed18773b49e2b9626f057d&scene=58&subscene=0": "【安全圈】FortiWLM 曝关键漏洞，攻击者可获得管理员权限", "https://mp.weixin.qq.com/s?__biz=MzkyOTMxNDM3Ng==&mid=2247488752&idx=1&sn=f5d1b413360eaaa586e8547d31c4dbce": "IIS中间件漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NzQxNzY2OQ==&mid=2247487630&idx=1&sn=6cf205a3fab2e22c6d42abce80395724": "Tomcat RCE | CVE-2024-56337远程代码执行，带复现视频及POC", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503217&idx=2&sn=0c8f76b82c16c05a9f732ba0e5bde0e6": "FortiWLM 曝关键漏洞，攻击者可获得管理员权限", "https://mp.weixin.qq.com/s?__biz=MzkyMzYwNTEyNg==&mid=2247487205&idx=1&sn=33cd765343a53aeb0cb95c7e05719160": "(1day)金华迪加现场大屏互动系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517797&idx=1&sn=efa6756c0e64b9c89c49f021251b789d": "【CVE-2025-50379】利用cursor解读tomcat 条件竞争导致RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMDc1NzU1Ng==&mid=2247484143&idx=1&sn=0909bc6a1e1608db5396bd53d3516603": "【POC开发系列01】Pocsuite3框架的使用与poc的编写", "https://mp.weixin.qq.com/s?__biz=Mzg3Mzg3OTU4OQ==&mid=2247493123&idx=1&sn=e978677722b36e1d7a8b163fe104c1c9": "庆尘SRC漏洞挖掘第二期来袭", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485075&idx=1&sn=68db2f838cf34395ab94bbc562be7cf5": "深度剖析 CVE-2024-56145：Craft CMS 高危漏洞的利用与防御", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485075&idx=2&sn=b8aebda4d9773c722dd15d51bc6b357b": "Apache Tomcat 高危远程代码执行漏洞（CVE-2024-56337）", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491824&idx=3&sn=182280414c04ee47c247bae26a93c39e": "漏洞预警 | 国威数字程控交换机远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Mzk0MDE2Ng==&mid=2649608656&idx=1&sn=0de2056bef0fcc1cb20ec49cd4a73751": "重磅｜天地和兴董事长王小东荣获第九届“管理科学奖-个人奖”", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485815&idx=1&sn=48d1b8666f2a180250f25790a487e940": "【漏洞复现】某平台-thirdImSyncForKKWebService-read-file任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247520334&idx=2&sn=5ec75125a7aba0d5b3c983dfae3ae073": "CCSK试题等你来答，参与抽奖赢取首期班福利！", "https://mp.weixin.qq.com/s?__biz=MzkwMjU5MzgzMQ==&mid=2247485143&idx=1&sn=ca184c882a6f45a7b1160c5e65116d61": "文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495634&idx=1&sn=7ad3a2cfe0a427fe348fb02c0405f8e2": "CNVD漏洞周报2024年第51期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495634&idx=2&sn=e5f4d98d6400cfec5f6954869c58c5ca": "上周关注度较高的产品安全漏洞(20241216-20241222)", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486464&idx=1&sn=647dde52226377e5282adb190d4c5dfb": "「漏洞复现」灵当CRM getMyAmbassador SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNjg1OTY3Mg==&mid=2247491737&idx=1&sn=c64f3af144a46bf369b4071fcb9521cb": "华顺信安获评攻击面管理领域十大代表性厂商", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291940&idx=2&sn=017c601f071172c54e31467605898ee7": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494252&idx=1&sn=c73d258b557537455c7fdc4af249ae56": "NDSS 2025｜Prompt泄露风险：抖音集团安全研究团队揭露多租户KV缓存共享漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247512517&idx=1&sn=5eeba37b918c35be1eb6209fed0aa9fc": "NDSS 2025｜Prompt泄露风险：抖音集团安全研究团队揭露多租户KV缓存共享漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490225&idx=1&sn=afd97fcef9e2132344f804a84347ba7f": "【已复现】Apache Tomcat存在远程代码执行漏洞（CVE-2024-56337）", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490225&idx=2&sn=885da3c3fa05d39949c5718797a96226": "【已复现】Apache Tomcat存在远程代码执行漏洞（CVE-2024-50379）", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502670&idx=1&sn=479d015990e5c63cf38d46824cc7a6d5": "安全热点周报：Windows 内核漏洞现被利用来获取系统权限", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247547783&idx=1&sn=f16e44bb0f27672bde6ffc2def95890e": "九年磨砺，再启新程！谈思AutoSec 9周年年会报名正式启动~~", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247623763&idx=2&sn=a09d131d7c26fb44de15e653371e639f": "警惕！高危漏洞利用成为美国对中国企业网络攻击突破口", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247568797&idx=1&sn=0b1ea74516af141a6361daa62ee22c80": "Java之SpringBoot漏洞利用姿势合集总结详细版", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503241&idx=1&sn=46f1e55ddd334e1241a4f2a5cc61150a": "雷神众测漏洞周报2024.12.16-2024.12.22", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxNTMzNw==&mid=2247484048&idx=1&sn=75765ca273ebe45ec635d0c1d6037b66": "路径遍历漏洞技巧手法", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489841&idx=1&sn=e9b36f27caee5e069eb26b0f8eb5decb": "同享人力资源管理系统-TXEHR V15 ActiveXConnector 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487973&idx=1&sn=ae1887a94edc58e3f4368af534ceafa6": "YourPHPCMS checkEmail接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499471&idx=1&sn=6b9864c7e3748af4d5599a55b0b6014f": "G.O.S.S.I.P 阅读推荐 2024-12-23 那些挖漏洞的团队（伙）", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496663&idx=1&sn=7ed86171cd982ef9bada19590988c53b": "价值1.4 W人民币漏洞！", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247484732&idx=1&sn=85b562f93dd4a61946496a4d4c1e4f26": "【工具分享】Tomcat CVE-2024-50379 条件竞争文件上传 exp RCE", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247505377&idx=1&sn=8775c6c4e8a60dde7049562e2aeec313": "每周网安资讯 （12.17-12.23）|Apple多款产品存在漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517803&idx=1&sn=bbf1338350e2628431ec7659eb014097": "蓝凌EKP V16 未授权SQL注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499057&idx=1&sn=a4a5cfad638b65d4c903edb3115ea230": "远程代码执行漏洞检测利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517735&idx=1&sn=7d8c311aaec65b40784ae780af73519b": "漏洞公开——从弱口令到通杀", "https://mp.weixin.qq.com/s?__biz=MzkyNzE5MDUzMw==&mid=2247561298&idx=1&sn=3cc8bfff2eeb748094f92f4be51ae12a": "附下载！炼石参编《多方数据共享服务数据安全技术框架》标准发布", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247489149&idx=1&sn=39f2e5f02dee35d38a179723aa7aed1a": "【EDU】勤云科技期刊采编CMS存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515310&idx=1&sn=0d5a90a6415efced680b61d90b5d0c8c": "Bazaar v1.4.3 任意文件读取漏洞(CVE-2024-40348)", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515310&idx=2&sn=56e4be8036c18c800185e9bb1a7dc78c": "渗透测试 -- 系统漏洞扫描", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489345&idx=1&sn=91726b817300dc5b41e7c6a25ef449d4": "【漏洞预警】Poppler越界读取漏洞(CVE-2024-56378)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523969&idx=1&sn=b096f169d52f79ead83a7f4899282a8f": "【漏洞通告】Craft CMS 远程代码执行漏洞(CVE-2024-56145)", "https://mp.weixin.qq.com/s/7cV7xUD5XoElvax20i0fzg": "内网远程桌面密码获取", "https://mp.weixin.qq.com/s/FlUrJBbv-uD6fZn_rTIXQg": "文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521868&idx=1&sn=62d6c6882cbe7ca4516d3b679eea7dfa&chksm=ea94a726dde32e301b12f414868b0e6781c25f64fd9abbfe3612bcf308592daf167e1efbf01e&scene=58&subscene=0": "速更新！Sophos 热修复严重的防火墙漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499471&idx=1&sn=6b9864c7e3748af4d5599a55b0b6014f&chksm=c063d016f7145900a49ddbaa4bcb1884049b8265f5cfa44eaffefb88d4af6a19080043ba5a8a&scene=58&subscene=0": "G.O.S.S.I.P 阅读推荐 2024-12-23 那些挖漏洞的团队（伙）", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503241&idx=1&sn=46f1e55ddd334e1241a4f2a5cc61150a&chksm=f2585f7ac52fd66c9fbaef9af81bcf89af0acc29f39cbc52f5e76f147c863688e0dda944ee43&scene=58&subscene=0": "雷神众测漏洞周报2024.12.16-2024.12.22", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523969&idx=1&sn=b096f169d52f79ead83a7f4899282a8f&chksm=ce461591f9319c87263fd82778e07d456f46f9766a855d4c240764614e96d53e893ccb619460&scene=58&subscene=0": "【漏洞通告】Craft CMS 远程代码执行漏洞(CVE-2024-56145)", "https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247512517&idx=1&sn=5eeba37b918c35be1eb6209fed0aa9fc&chksm=e9d37a27dea4f3314f6b15c21cdad97ce21e9891d0e1ba2fb756e5fdd1ad4240630266dee1a2&scene=58&subscene=0": "NDSS 2025｜Prompt泄露风险：抖音集团安全研究团队揭露多租户KV缓存共享漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496663&idx=1&sn=7ed86171cd982ef9bada19590988c53b&chksm=e8a5f9b4dfd270a2cafb8005565dd0a67f4b38c79f38674a43411e3d52530d764d132ab4c1ea&scene=58&subscene=0": "价值1.4 W人民币漏洞！", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499550&idx=1&sn=622098dcd766068e4c23662a34d39664": "CNVD漏洞周报2024年第51期", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485819&idx=1&sn=9878fa5b05719c5c70082d09e2371eb1": "【漏洞复现】某平台-getPaperLayoutList-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650605533&idx=1&sn=63d68320f681744a2c81f0f813169cad": "警惕！“银狐”木马病毒再次出现新变种并更新传播手法；|00后大学生盗取数万个社交平台账号 非法牟利7万余元", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247486906&idx=1&sn=f30579afd864dc32a4b8d966b5fbe1e1": "PbootCMS前台SQL注入漏洞（下）", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247506316&idx=1&sn=b59c502ca9ac40e07ee62a970b0a39aa": "书店停业：10万册好书【买2本送5本】清仓处理", "https://mp.weixin.qq.com/s?__biz=Mzk0NzQxNzY2OQ==&mid=2247487679&idx=1&sn=9aada25fb8260f17942f0d8726a6cb7a": "满足你 | Tomcat条件竞争RCE利用脚本：CVE-2024-50379、CVE-2024-56337", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247486527&idx=1&sn=0e5b1a7c579ad31c1583a45c71bd41c2": "Java反序列化漏洞 | log4j2远程代码执行漏洞原理+漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497683&idx=3&sn=d7780a5d9d05f1a65998a1855fc4a1bb": "52套.NET系统漏洞威胁情报(12.24更新)", "https://mp.weixin.qq.com/s?__biz=MzkyMzYwNTEyNg==&mid=2247487212&idx=1&sn=88b716175ea813484124aed2140e2e31": "(1day)全媒体采编平台存在未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491825&idx=1&sn=3f17b8321f3d7a18c621a9631b58033f": "漏洞预警 | CyberPanel命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491825&idx=2&sn=10017681ee52f6f356351fc448cb1d45": "漏洞预警 | SitecoreCMS任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491825&idx=3&sn=2ea9dc185f5490c84245d06a73f4e9fe": "漏洞预警 | 中科网威anysec安全网关远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMzIwNTY1OA==&mid=2247509941&idx=1&sn=2fc68474fecf59e0faacac6a6a7c79c8": "在NAS中部署Jellyfin 拥有自己的影院", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502670&idx=1&sn=479d015990e5c63cf38d46824cc7a6d5&chksm=fe79efd6c90e66c0316c6f9d4122e6c35359545aa816b07ec0b92c866870421e8eda95754a0d&scene=58&subscene=0": "安全热点周报：Windows 内核漏洞现被利用来获取系统权限", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxNTMzNw==&mid=2247484054&idx=1&sn=fe0f59eddecc373a8c0f4f6e0f530973": "dedecms织梦任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493396&idx=4&sn=cb28d670614d1ebf375025ab2f3a0c36": "【漏洞预警】CVE-2024-45387", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493396&idx=5&sn=cf01d14f914941546541b6a0a2f5abec": "Adobe 警告 ColdFusion 存在严重漏洞，并且 PoC 已流出", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486477&idx=1&sn=b867e1f057d49e2a34b8de245f66d834": "「漏洞复现」方正畅享全媒体新闻采编系统 reportCenter.do SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526417&idx=1&sn=5d19b7fd81e7e92ff3cca973a60ccd22": "CVE-2024-56337：Apache Tomcat 修补关键 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3Njc0NTgwMg==&mid=2247502001&idx=1&sn=9ee9dbe3b289e181b228325a53fb8cfe": "B站自研动画视频生成模型全链路技术报告", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614788&idx=1&sn=103b63a5b448cad699cc6cf32f1cdb5a": "一文理解条件竞争漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488285&idx=1&sn=97653bb5fd6a2d661776be1026799921": "【首发 1day】WordPress File Upload 插件存在前台任意文件读取漏洞(CVE-2024-9047)", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490137&idx=1&sn=78576f52ebabdecdd02f55dabd2c8688": "Apache Tomcat 漏洞 CVE-2024-56337 导致服务器遭受 RCE 攻击", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502682&idx=1&sn=83e2cebbdeddd336724d291651d2bc51": "Adobe ColdFusion 路径遍历漏洞(CVE-2024-53961)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489351&idx=1&sn=01778ca696e485c04d2862adb19bfa8c": "【漏洞预警】Apache Hive&Spark信息泄露漏洞（CVE-2024-23945）", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500430&idx=2&sn=51e64cf96ac475e77bba565a6f15c133": "【漏洞通告】Adobe ColdFusion路径遍历漏洞（CVE-2024-53961）", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500430&idx=3&sn=27e75fa3a6f951dd60a96f3f4b20cdc9": "【漏洞通告】Apache Hive & Spark信息泄露漏洞（CVE-2024-23945）", "https://mp.weixin.qq.com/s?__biz=MzUxMjc0MTE3Mw==&mid=2247494824&idx=1&sn=b03003ad6787b8b285ca4e469940cf87": "Apache Tomcat远程代码执行漏洞（CVE-2024-56337）", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486291&idx=2&sn=e7d12cbe52353178dcc3270259a41f7b": "SpringSecurity权限绕过漏洞-好玩", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485993&idx=1&sn=dd9e46b807f5bd2742162658819f983c": "Burpsuite存储桶配置不当漏洞检测插件 - BucketVulTools", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487986&idx=1&sn=a88b5191db732c85f0b1e8f66e36f6da": "大华DSS 系统attachment_downloadAtt.action存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649166901&idx=1&sn=d6ba83a2fbc5306817e6e67072c261dc": "揭秘最为知名的黑客工具之一：Exploit-DB（开源的漏洞数据库）", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651310503&idx=2&sn=1ebf51f286f2b68c54b3628d8f84a6d4": "Adobe最新漏洞被披露，已有PoC代码流出", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247495498&idx=1&sn=9283e907b59aeac0ee59de44d0038e89": "“AI+Security”系列第4期（一）之“洞” 见未来：AI 驱动的漏洞挖掘新范式", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523973&idx=1&sn=328a8278946c6ddc659d707dda812940": "【漏洞通告】Adobe ColdFusion任意文件读取漏洞(CVE-2024-53961)", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247487964&idx=1&sn=ddd91046b72e8c7335e0fb5ee0768853": "小皮 Windows web 面板漏洞详解", "https://mp.weixin.qq.com/s?__biz=MzkwOTM0MjI5NQ==&mid=2247488008&idx=1&sn=983f22455f1e1149fbb51982dc4afa30": "直播倒计时2天：网安人做好职业规划之「如何持续保持职业竞争力」", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515334&idx=1&sn=58be31ef4e6037ed3af431dd20747bdd": "Nuclei分布式漏洞扫描平台 -- NucleiPlatform", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491786&idx=1&sn=5029b14a5a8d187655a8e3ab2cd98c06": "Helldown 勒索软件利用 Zyxel 防火墙的 VPN 漏洞入侵公司网络", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651310503&idx=4&sn=ffab5b5454473a0107b9d59f5283dac5": "Clair：一款针对应用程序容器的安全漏洞静态分析工具", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587741&idx=2&sn=69f46c917601d0c81a95befbfe959dc3": "0.01美元吃麦当劳？印度麦当劳外卖App存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTA0MTY2Mw==&mid=2247485729&idx=1&sn=e4974c15092b047d347c8c11399b645f": "命令注入漏洞使数百万Node.js系统面临攻击", "https://mp.weixin.qq.com/s?__biz=MzA4NzU1Mjk4Mw==&mid=2247492248&idx=1&sn=dc70cc34275484780dddad5435859b02": "5.1k Star！好用的开源漏洞管理平台", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899833&idx=1&sn=63e0f2134e7437b5d424f1accb41c473": "Sophos 防火墙爆严重漏洞，速查！你的网络安全吗？", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491829&idx=1&sn=506b1de865ee34ffe069adf00d0792d0": "漏洞预警 | 泛微云桥SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491829&idx=3&sn=6931b6b0b3bc693cc6827a674a08af13": "漏洞预警 | 协众OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655262542&idx=1&sn=ddc6db2cb0bedf70ae49af20abcc7089": "2024年人工智能全景报告", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493039&idx=1&sn=aa602c3642fde6a6dcb6a5767587847a": "Apache基金会修复了一个严重的Tomcat漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499069&idx=1&sn=e7ac0601926895e20f9d1da09c0f5cd0": "灵当CRM系统接口wechatSession文件上传漏洞检测利用工具", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633325&idx=5&sn=5a916bebd7eb13b5351ec1c3f11ff717": "Adobe最新漏洞被披露，已有PoC代码流出", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521882&idx=1&sn=1a457064eddc19fcc7a712086557d5cb&chksm=ea94a730dde32e267f2aef8e7cac134060cd8861b682e2aac8af75f6d38f506106b86532bb75&scene=58&subscene=0": "Adobe紧急修复严重的ColdFusion 路径遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587741&idx=2&sn=69f46c917601d0c81a95befbfe959dc3&chksm=b18c22d786fbabc120ce82c955e10d51efdef9e9dcef7dc43d3c84de58fee5999a398fe76d6d&scene=58&subscene=0": "0.01美元吃麦当劳？印度麦当劳外卖App存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497683&idx=3&sn=d7780a5d9d05f1a65998a1855fc4a1bb&chksm=fa59593ecd2ed028f25856a38e2d06ea581067b22ae53dbd52309329831e91d6403e3704f6ae&scene=58&subscene=0": "52套.NET系统漏洞威胁情报(12.24更新)", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499550&idx=1&sn=622098dcd766068e4c23662a34d39664&chksm=973acc7ca04d456a0d7b990ef469c60e62feaca1c5c24d2dbbce68195a4120cda0cb4f074b77&scene=58&subscene=0": "CNVD漏洞周报2024年第51期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499550&idx=2&sn=ad48a11257a083ed0783d7c9f95fe243&chksm=973acc7ca04d456a195d6f1cc7e15f66f8e20cbc1f811736933f78a8e856ecb806c3865e3067&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241216-20241222)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523973&idx=1&sn=328a8278946c6ddc659d707dda812940&chksm=ce461595f9319c839ceef0e2701f5f925b2d9cc1b28bbb45d337f1a70b466024e580ab27a021&scene=58&subscene=0": "【漏洞通告】Adobe ColdFusion任意文件读取漏洞(CVE-2024-53961)", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247486906&idx=1&sn=f30579afd864dc32a4b8d966b5fbe1e1&chksm=c2229543f5551c558c86f7d33bc347df36ebd379953234d4ab58a8fa78e529582b937f73bc2d&scene=58&subscene=0": "PbootCMS前台SQL注入漏洞（下）", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247493993&idx=2&sn=7d42674213454d55fa2a054c16e57da2&chksm=fa78e825cd0f6133f0e4b4850ec32278d8d2115134718425c6079ae9d175a6929e90ab5ec4a3&scene=58&subscene=0": "【CVE-2024-1610】OPPO 商城APP远程账户TOKEN劫持、敏感信息泄露致谢公告", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247493993&idx=4&sn=3ab09d03d077bf455158186920fb8573&chksm=fa78e825cd0f6133ec2f9b89171d95e57bac5c0450f980602cafe5c64b0a84f902c67317680d&scene=58&subscene=0": "【2024漏洞马拉松】OPPO赛程正式启动，1.5倍奖励，新人额外奖励……超多奖金拿到手软！还有手机大奖等你来拿！", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546189&idx=1&sn=b8d940c4ba773d4c64e9702b1bc2c588": "记一次某企业管理系统SQL注入拿下CNVD", "https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247502625&idx=1&sn=32863b4c03fc77bda2535640aef5aafe": "“炼金术”：英国军事小组的秘密行动计划曝光", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489888&idx=1&sn=c6b86984d8215a950e7f77f0e417b760": "电子图书阅读平台 downFile.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493438&idx=2&sn=2bf63573c04f4cd2a2cb822334c8d039": "【漏洞预警】开源图形数据库系统 Apache HugeGraph-Server 存在安全漏洞 CVE-2024-43441", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493438&idx=3&sn=7c6d3ad3049f44965fe8082752ee6dcf": "【漏洞预警】CVE-2024-23945：Apache Hive 和 Spark 中存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MjE2Mjk3Ng==&mid=2247488262&idx=1&sn=725078f1d42de941b5caf4c3894bcd0c": "新的僵尸网络能利用 NVR、TP-Link 路由器中的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503274&idx=1&sn=eedb40242f561ac4e1a6fdbe1ab26061": "立即更新！Adobe警告ColdFusion严重漏洞PoC", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489878&idx=1&sn=1359fe4b6b4dfe04c408e9693c7315a3": "圣乔ERP系统 queryForString.dwr SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMDQ0NzQwNA==&mid=2247485764&idx=1&sn=4c2c0c267e91a8ef660adf0aa532036a": "利用防火墙修复Oracle数据库漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485823&idx=1&sn=71cc8384af6f9ac0ff97bf9e18689c1c": "【漏洞复现】某平台-reportCenter-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496897&idx=1&sn=5c8bba976404cced861b965c6bcfd950": "【漏洞通告】Adobe ColdFusion路径遍历漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496897&idx=2&sn=0d8efe9e9a42601832812cd7e83ce830": "【漏洞通告】Apache Hive & Spark信息泄露漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyMzYwNTEyNg==&mid=2247487220&idx=1&sn=21cf49089d55901c71a6bb550588ff8e": "(0day)当虹科技-Arcvideo-Live存在文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MjA1MzkyNA==&mid=2655348345&idx=1&sn=02f5839a880a5e2191b58ca3dc6b324d": "立即更新！Adobe警告ColdFusion严重漏洞PoC", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793628&idx=2&sn=42bf5f5cc56312df950aa58ac749beb7": "新的僵尸网络利用 NVR、TP-Link 路由器中的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTUwMzM1Ng==&mid=2247512945&idx=1&sn=fdaef5aeff7aea57cbec186d8b8651c1": "PostExpKit插件使用常见问题11-18", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491829&idx=2&sn=8e7ff0c4d22c2821e3205f5e074754a1": "漏洞预警 | Jeecg-Boot任意用户密码重置漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MjkzMTcxMg==&mid=2449046600&idx=1&sn=6d7cdf0fc376922daa4203105d77cf5c": "Planka：可在NAS上部署的看板工具，让工作安排如鱼得水！", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247494211&idx=1&sn=54fe4985b6b0543d1f779aae119f366d": "【神兵利器】最新Nacos综合漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787672&idx=1&sn=414101ef66f3ee973ac7054187675a01": "2024年零日漏洞利用七大趋势", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492485&idx=1&sn=34cb96ae174f9f538a189541e923423a": "以色列NSO Group公司利用WhatsApp漏洞部署间谍软件展开APT网络攻击", "https://mp.weixin.qq.com/s?__biz=MzU1Mzk0MjU1OQ==&mid=2247493347&idx=1&sn=72c5c67dd43713c95512eb9be536a236": "漏洞预警| TP-LINK Archer C7存在安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462241&idx=1&sn=2da0ba5a4ed15e8beafe9786cefddc9a": "信息安全漏洞周报（2024年第52期）", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899845&idx=1&sn=14730a5021ad3597b64582f0452ae380": "警惕！热门 npm 包 Rspack 和 Vant 遭投毒，你的电脑可能已被挖矿！", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484506&idx=1&sn=4e8642ae5fb5ac56155c85575660f234": "Oracle WebLogic Server反序列化漏洞(CVE-2024-21216)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580423&idx=1&sn=4a44563ed7ec0aafc5aaa48302756b22": "勒索软件攻击中利用了关键的 Cleo 漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652113391&idx=1&sn=f783ade6d7910acd71c8cd82c69a1c59": "红队如何暴露人工智能模型中的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NTY0MjIwNg==&mid=2247485277&idx=1&sn=d9ca6d53bc55584c08aa60bc0c805df1": "Node.js 严重漏洞使数百万系统面临 RCE 攻击", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094434&idx=2&sn=61f063fdf6d46e3c1b85a02e8785785f": "Adobe最新漏洞被披露，已有PoC代码流出", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066932&idx=4&sn=90071983b67d793ccd950d077faa76c0": "【安全圈】僵尸网络利用漏洞攻击网络录像机及TP-Link路由器", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513353&idx=1&sn=cc572d3391797a15aa66590d70d0ac96": "警惕！2024年全球零日漏洞利用呈现七大趋势", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513353&idx=2&sn=2e9b4bf47922e34e7c38f4143394ae0d": "代运维电子政务数据库存在漏洞，浙江某软件厂商被罚款", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521893&idx=1&sn=867f98595849107577a98fcaf043a177": "Apache Tomcat 漏洞导致服务器易受RCE攻击", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526433&idx=2&sn=9734352beed4645fcdc599733e607e22": "探索 NASA CryptoLib 的 SDLS 实现中的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484383&idx=1&sn=aac763c4a87da3c56823e7cf08d71ac9": "第十八期 · 安钥®「漏洞处置标准作业程序（SOP）」征文启示", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484383&idx=2&sn=da1c094281f3ad7ef7bedbcde6056425": "入选作品公布｜安钥®「漏洞处置标准作业程序（SOP）」征文第十五期", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587767&idx=3&sn=8d01b37f88555c9fb0dc004f40145942": "欢迎报名！系统0day安全-二进制漏洞攻防（第4期）", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247552595&idx=2&sn=9a57fa4c2a8631ff49dc9aa2b6ce822c": "【免费领】社会工程之解密安全体系中的人性漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247488110&idx=1&sn=67048c20f7a099f13195d19e8a086c93": "协众OA checkLoginQrCode接口 SQL注入漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkyMTY1NDc2OA==&mid=2247487244&idx=1&sn=5011bd862eae6337a04f9e1673c7a184": "【漏洞文字】博斯外贸管理软件 SQL注入", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488801&idx=1&sn=60be4d8cff8f2bbedf73bf54fe8bf3e0": "【漏洞通告】Adobe ColdFusion任意文件读取漏洞（CVE-2024-53961）", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484865&idx=1&sn=4c2f9b81123b4f38c3b17528a64f250d": "【漏洞复现】CVE-2024-10400", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247506323&idx=1&sn=51d7b829c95d2414fab4e9beab5686c8": "Discord爆\"幽灵\"漏洞存在隐私泄漏风险", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496677&idx=1&sn=3606ef03556ff457f835eecc77c528fe": "获取$1600赏金的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3MTE0NTg4OQ==&mid=2247484051&idx=2&sn=8439fbc0ab813be475d7d9d211e7ae16": "2024 年七大零日漏洞利用趋势", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247617922&idx=3&sn=d76ead41998a71a89c38e9dab64a185d": "扩展 SAE J1939 的攻击场景：传输协议中已建立和新的漏洞的综合分析", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489359&idx=1&sn=7d1d4163125cfb41ce639e41c93b675a": "【漏洞预警】Apache MINA反序列化远程代码执行漏洞（CVE-2024-52046）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489359&idx=2&sn=539ab9151135b08415e5c6bd4fbe0887": "【漏洞预警】Adob​​e ColdFusion路径遍历漏洞（CVE-2024-53961）", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486490&idx=1&sn=7e07e6196a70d8da4e77b7d08acf255a": "「漏洞复现」WordPress File Upload 插件 任意文件读取漏洞(CVE-2024-9047)", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247514556&idx=1&sn=a10e80238c91658489ebe6cc8657315c": "网安瞭望台第18期：警惕新型攻击利用Windows Defender绕过终端检测、CVE-2024-50379 漏洞利用工具分享", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633341&idx=4&sn=e0b56625be7870c3dc28ab530dc4f4a7": "代运维电子政务数据库存在漏洞，浙江某软件厂商被罚款", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247488673&idx=1&sn=7e062376c9801c6926c6dffad21b6147": "工具 | xxl-jobExploitGUI", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500463&idx=2&sn=8797a9788659c15836d029b770e07bb5": "【漏洞通告】Apache MINA反序列化远程代码执行漏洞（CVE-2024-52046）", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489612&idx=1&sn=c5e9cbdadaf86d1494d0ad0e20de258a": "Nuclei-Scan分布式漏洞扫描平台-可联动 AssetsDetectAPI 资产搜集|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247489857&idx=2&sn=ed8c38d03e42795ab2bf82d63f8ca7e4": "重磅！国内最专业的 [ .NET 代码审计 ] 体系化学习互动社区，强势来袭！", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491868&idx=1&sn=ff32a5597211eb29e21480d42428f07f": "漏洞预警 | 神州数码DCME-320出口网关任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491868&idx=2&sn=5bcc90ec07c14145945c4f6cb5bc3729": "漏洞预警 | 杜特网上订单管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491868&idx=3&sn=9007d38e1a237febff727153fc5317f1": "漏洞预警 | 云连POS-ERP管理系统SQL注入和任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247510085&idx=1&sn=e031cb6652036ccd37641e5fc30ba651": "NB!一款基于java开发的漏洞检测工具，集合了泛微、用友、大华、海康、致远、红帆、万户、帆软等漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247493022&idx=1&sn=a8fc343234a413c73ebe445d74266a28": "【1day】Z-Blog 后台文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247489213&idx=1&sn=a2b72f9f7907995420072d5743d646ef": "【edu 未公开】某科技有限公司数字化智能中台系统存在sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NDc0Njk1MQ==&mid=2247486580&idx=1&sn=210d7e25300d83a0415f8bf3ae55e315": "网络安全中的零日漏洞：如何快速响应突发威胁？", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787672&idx=1&sn=414101ef66f3ee973ac7054187675a01&chksm=8893bd77bfe434614c2700253efcc1184d8221f7a22018111d5a2608f351d032a98031561d56&scene=58&subscene=0": "2024年零日漏洞利用七大趋势", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521893&idx=1&sn=867f98595849107577a98fcaf043a177&chksm=ea94a70fdde32e19100b879ef6b6206b25f1ce4ef2d06f4980913cc6dfccd6675021781e9401&scene=58&subscene=0": "Apache Tomcat 漏洞导致服务器易受RCE攻击", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488801&idx=1&sn=60be4d8cff8f2bbedf73bf54fe8bf3e0&chksm=c2c6422af5b1cb3c410f3ecfed05f414b3ea8a10bb1c1e21ba12de4c31403f0fcac5eeae8cf3&scene=58&subscene=0": "【漏洞通告】Adobe ColdFusion任意文件读取漏洞（CVE-2024-53961）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066932&idx=4&sn=90071983b67d793ccd950d077faa76c0&chksm=f36e7834c419f1223f8c86ab18042512d1d737aaf42f177639389bb325faac193f7b9b9612a4&scene=58&subscene=0": "【安全圈】僵尸网络利用漏洞攻击网络录像机及TP-Link路由器", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513353&idx=1&sn=cc572d3391797a15aa66590d70d0ac96&chksm=ebfaf229dc8d7b3fc06d896e6a4682f7c86fe72ac4147e5eef7394dbe188eff23f281e347cce&scene=58&subscene=0": "警惕！2024年全球零日漏洞利用呈现七大趋势", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513353&idx=2&sn=2e9b4bf47922e34e7c38f4143394ae0d&chksm=ebfaf229dc8d7b3f8d526688ede31fd6182a4a02f4543fbb681826ccdb66ccffd837f3117913&scene=58&subscene=0": "代运维电子政务数据库存在漏洞，浙江某软件厂商被罚款", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580423&idx=1&sn=4a44563ed7ec0aafc5aaa48302756b22&chksm=e9146b3dde63e22b4167d8ad47bf789091878f5888de0896d7e3644afa417b63b98c275f1407&scene=58&subscene=0": "勒索软件攻击中利用了关键的 Cleo 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496677&idx=1&sn=3606ef03556ff457f835eecc77c528fe&chksm=e8a5f986dfd27090786590b1483581edb0bfa722bb4f434914e44bbbed8ab954be55b3b80ca1&scene=58&subscene=0": "获取$1600赏金的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4Njg3MDk5Ng==&mid=2247486837&idx=1&sn=3692b6f92d2bf8049525a4dd7e7e7dae": "通过源码文件差异对比审计未公开1day，让你1day拿到手软！", "https://mp.weixin.qq.com/s?__biz=MzkxNTczMjA1Ng==&mid=2247483959&idx=1&sn=b70e3b60f8da82f799be4c55107479d0": "NB!一款基于java开发的漏洞检测工具，集合了泛微、用友、大华、海康、致远、红帆、万户、帆软等漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247501914&idx=2&sn=1c6de3ff616e3417b47a78f7ba17bed3": "锐捷网络云管理平台爆出严重漏洞，可从云端劫持WiFi热点", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485827&idx=1&sn=e20622b692299473a55c582b189fb074": "【漏洞复现】某平台-article-abstract-delay-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486498&idx=1&sn=22e1e713ea716f4adf819e6bc9bd3070": "【漏洞通告】Adobe ColdFusion 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486498&idx=2&sn=22e2086e51e6faabadb5fa8c76197627": "【漏洞通告】Craft CMS 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486498&idx=3&sn=3d49766352ea0f65584e85afcac09318": "【漏洞通告】IBM Cognos Analytics Mobile for Android 加密算法过弱", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486498&idx=4&sn=100800439f273ba82390026cc0ac85d5": "【漏洞通告】Operations Bridge Manager 外部实体注入", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493467&idx=2&sn=47f7f42e77eb03f0ca00882cb29f581f": "DigiEver DS-2105 中的 0day 漏洞将 DVR 变成僵尸网络", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493467&idx=3&sn=3e24bde738adebbe044cc3391b3f56b7": "某捷网络云平台漏洞可能使 50,000 台设备遭受远程攻击", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493467&idx=4&sn=430ab66ab5a6127dcff2d0f3613420bc": "CVE-2024-40896 (CVSS 9.1)：libxml2 中发现严重 XXE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503304&idx=1&sn=1dd30945905ce0d903b977a91818797a": "僵尸网络利用漏洞攻击网络录像机及TP-Link路由器", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503304&idx=2&sn=52667ad1ad6f9678951fb47d6572b6e3": "勒索软件攻击中利用了关键的 Cleo 漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899851&idx=1&sn=dfcc184b0aa19c3abd7880317af392fe": "紧急预警！Apache Traffic Control 曝严重 SQL 注入漏洞，CVSS 评分 9.9，请立即更新！", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485104&idx=1&sn=9e7b6d338076a9825ea6b10473fb6f27": "CVE-2024-49112 Windows 轻量级目录访问协议（LDAP）的远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485104&idx=2&sn=2a74138bd2377792232546e6efd12f3f": "Apache Struts 文件上传漏洞分析与复现指南", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793640&idx=3&sn=4c01c7f9ccadb39363f8239a828df037": "Apache Traffic Control 中的严重 SQL 注入漏洞 CVSS 评分为 9.9", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247486637&idx=1&sn=368de1984a108e85cc78222c85b3918f": "分享最近攻防演练HVV漏洞复盘", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486374&idx=1&sn=011d3e9ddd9452107935b0384ba90d78": "CVE-2024-50379|条件竞争Tomcat RCE POC（首发）", "https://mp.weixin.qq.com/s?__biz=MzkxNjU2NjY5MQ==&mid=2247508963&idx=1&sn=fbb166b6457c9337fde785adf0fbad39": "网络勒索：技术之外，“人”为漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587767&idx=3&sn=8d01b37f88555c9fb0dc004f40145942&chksm=b18c22fd86fbabeb78c1be0cfd78963697351aac1c88b9d6a582d594e7deac457ecb238d66a7&scene=58&subscene=0": "欢迎报名！系统0day安全-二进制漏洞攻防（第4期）", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247495023&idx=1&sn=ca560627e8512fc6acbf827258d5d238": "4F级民航机场如何完善实战能力建设？", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247485020&idx=1&sn=8c8ad3015e570c916b4cbfb180a22303": "工具集：EZ【多功能跨平台综合漏洞扫描器】", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488354&idx=1&sn=f324f79a395aabaf1272bcd76b686fe3": "【工具分享】超好用Nuclei 图形化GUI管理工具+14w poc", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247537880&idx=2&sn=e5d4a9c8e07347812e6399622132ef42": "Node.js 严重漏洞使数百万系统面临 RCE 攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651310663&idx=1&sn=7076305ec46f30810b825ea61d11d978": "9.9分的SQL注入漏洞，可获admin权限", "https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649870474&idx=1&sn=60782d890bdceb6bf3712c5474329e54": "知道创宇与《中国企业报》集团深入交流，共谋数字安全合作新篇章", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247541162&idx=1&sn=427b98d0b2a5f7dbf683f15d22824546": "大众车机系统现漏洞：黑客能获取GPS等隐私，已修复", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247495540&idx=1&sn=26e1bae6e77332b60b973385539b9d8e": "“AI+Security”系列第4期（三）：基于大模型的漏洞挖掘技术与实践", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500510&idx=2&sn=a567741e50ded3bcaa476cd8205e0e51": "【漏洞通告】libxml2 XML外部实体注入漏洞（CVE-2024-40896）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587787&idx=1&sn=41d2b407676f2bc7e7673d21eaf675a4": "PWN入门：三打竞态条件漏洞-TOCTOU", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587787&idx=3&sn=21252886bea96ee3843d9aaf18ecb293": "系统0day安全-Windows平台漏洞挖掘（第5期）", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247490138&idx=1&sn=244e20d29e696d95b79ea4f5883e507e": "创宇安全智脑 | 泛微e-cology 9 FileDownloadLocation SQL 注入等69个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247624078&idx=1&sn=70b1f90254305872efacca1d5f7eb2ac": "奇安信两方案荣膺中国信通院“磐安”优秀案例", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyOTk0NA==&mid=2247488497&idx=1&sn=5ae709cbefe82d4985910480bac356ff": "操作系统主机安全测试：脆弱点与漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493479&idx=1&sn=2383f9b4d9ba05bd1cbb2eddd77265a6": "【PoC】CVE-2024-50379 (9.8）Tomcat竞态条件漏洞深度分析及 PoC", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513360&idx=2&sn=d8aff409483c58eb180c3a8fbbc1b6b6": "锐捷云管理平台曝严重漏洞：可从云端劫持WiFi热点", "https://mp.weixin.qq.com/s?__biz=MzkzOTYzMzY3MQ==&mid=2247483951&idx=1&sn=52e79cafd89081ca2eb5029d5f800d09": "从SRC漏洞挖掘到红队综合利用的思路转变", "https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247597059&idx=1&sn=8d38e690abab254d31724f5b79e651e5": "基于UEBA的零信任安全体系架构设计与实现", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489908&idx=1&sn=6230cac64468fc70cd66f2e69819825a": "易宝OA GetUDEFStreamID SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499080&idx=1&sn=a05030e04b4a455ec33fa46b339296c2": "WordPress File Upload插件任意文件读取漏洞（CVE-2024-9047）批量检测脚本", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499080&idx=2&sn=a05e54e238c5cc7a609810fbdb5e2379": "渗透测试 -- Waf绕过补充和其他漏洞和代码审计", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664712138&idx=1&sn=b9cca457700cad5e6c2058b54a51f37b": "Jenkins漏洞利用精华总结", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487999&idx=1&sn=818f160852ba140400b2b152252b7d9d": "蓝凌EKP系统thirdImSyncForKKWebService接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489364&idx=1&sn=08c738c76121f332d16238129157fa32": "【漏洞预警】libxml2 XML外部实体注入漏洞（CVE-2024-40896）", "https://mp.weixin.qq.com/s?__biz=MzU2MDE2MjU1Mw==&mid=2247486119&idx=1&sn=55695ba688dc3608b64cb12ead2b3353": "D-LINK DIR-815多次溢出漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517892&idx=1&sn=25d86eb632264e257c289a39ce50518b": "cnvd通用型漏洞挖掘思路-从逻辑漏洞到拒绝服务漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247489232&idx=1&sn=d7896892a6a288a20cf56f017ac79774": "一个Nmap命令扫出企业漏洞？资深黑客总结的4大扫描神器", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521906&idx=1&sn=9cb8ea9b9dbfb2a32eec80f9973d8cf1": "Apache Traffic Control存在严重的SQL注入漏洞，可在数据库中执行任意命令", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486504&idx=1&sn=11a0c71bf994213bb40cd178a40c36a7": "「漏洞复现」赛诸葛数字化智能中台系统 login SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491878&idx=1&sn=91ecf220e0a03407099c83ab6137f11b": "漏洞预警 | BeyondTrust RS & PRA命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491878&idx=2&sn=e30356365be934c0fdb7bb3f94109abb": "漏洞预警 | 昂捷ERP任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491878&idx=3&sn=061c9046b9bb714b65ec8dc6e130c8c6": "漏洞预警 | 云供应链管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247525366&idx=1&sn=5d8748115f03862342d067e1236bbbe8": "9.9分的SQL注入漏洞，可获admin权限！", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526461&idx=2&sn=1db82b48c4a02c7ddf4e72990b74903b": "CVE-2024-50379 Tomcat 漏洞深度分析及 POC（严重性 9.8）", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493057&idx=1&sn=1edb464ca8f33943031448334225d5f4": "Apache修复了Apache Traffic Control中的一个严重SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493057&idx=5&sn=b77285035bf6da7476846d148614e237": "Adobe已经知晓ColdFusion漏洞CVE-2024-53961存在已知的概念验证（PoC）利用代码", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489621&idx=1&sn=24fc522d7b044da1b0a0d1cb7ca5781d": "最新Nacos 综合漏洞利用检测工具12月更新|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587787&idx=1&sn=41d2b407676f2bc7e7673d21eaf675a4&chksm=b18c220186fbab17f3c5bf0239ed522d335f223892e09b156878039202cbcf6729db4b62bb7f&scene=58&subscene=0": "PWN入门：三打竞态条件漏洞-TOCTOU", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587787&idx=3&sn=21252886bea96ee3843d9aaf18ecb293&chksm=b18c220186fbab178ac91546359079c939ac3f9a0b62d1743200ab66d051d91cf00894fc2998&scene=58&subscene=0": "系统0day安全-Windows平台漏洞挖掘（第5期）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521906&idx=1&sn=9cb8ea9b9dbfb2a32eec80f9973d8cf1&chksm=ea94a718dde32e0eaffa96101dcd9b085998af672ffae70376866fc9a13fb6e62a0b045f8adf&scene=58&subscene=0": "Apache Traffic Control存在严重的SQL注入漏洞，可在数据库中执行任意命令", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513360&idx=2&sn=d8aff409483c58eb180c3a8fbbc1b6b6&chksm=ebfaf230dc8d7b26fc2469ed55f55821b6ed7155fdc777f069cc7cd1713d97964cf82208d5cd&scene=58&subscene=0": "锐捷云管理平台曝严重漏洞：可从云端劫持WiFi热点", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485831&idx=1&sn=a6c3e7120741dec5871f3f4fafbdffea": "【漏洞复现】某平台-sysNotifyTodoWebService-read-file任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651206813&idx=1&sn=d845643474a7eef20e59162ac0682def": "AI猎手：我们用大模型挖到了0day漏洞！【大模型应用实践系列三】", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487543&idx=1&sn=550da69acba8a4672ebcc2a90d75d2d2": "赛克安全本周漏洞推送（12.22-12.27）涉及国威IP数字语音系统、黄药师、企企通、快云服务器、一卡通系统漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650605854&idx=2&sn=eb680a4ee019a2f0bf800db359783b85": "文末送书！！！发现Web API漏洞居然能赚到400w刀，看懂这本书你也可以！", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247488913&idx=1&sn=2fecce60b88e4c398a692dece12447a7": "Vcenter漏洞综合利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg3NTY0MjIwNg==&mid=2247485287&idx=1&sn=dbe25435ade82a813000e9e81a9c5e80": "锐捷网络云平台漏洞使大量设备面临远程攻击风险", "https://mp.weixin.qq.com/s?__biz=MzI5MzU4ODE5Mw==&mid=2247485651&idx=1&sn=85b9a1d6ec04ec7ea97378ca85641a5e": "赛克安全本周漏洞推送（12.22-12.27）涉及国威IP数字语音系统、黄药师、企企通、快云服务器、一卡通系统漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzYwNTEyNg==&mid=2247487227&idx=1&sn=743cf64b05de25765b2d0fc52bfec350": "(未公开)深睿医疗系统存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454063782&idx=1&sn=ea2cc37585883ec374eb05c428edde52": "信息安全漏洞周报【第003期】", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484514&idx=1&sn=d4b86b9f70beb745e30ac3f215a67872": "【漏洞复现】高校人力资源管理服务平台系统ReportServer存在敏感信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MjA1MzkyNA==&mid=2655348370&idx=1&sn=5a808e8b817cddf7dbf6849bf65404ec": "Apache MINA严重漏洞 ：CVE-2024-52046 (CVSS 10)，可能允许远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247520558&idx=1&sn=8f593fbfd4e37a8db8e32bb6b940a43e": "定了！2025年CISSP这些城市考试安排", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247537926&idx=3&sn=93bf79533d50d1bc792dbbabe585f307": "网络勒索：技术之外，“人”为漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzOTY1MzcyOQ==&mid=2247490109&idx=1&sn=1890263fc634753221aec948afed386f": "SRC中的重置密码漏洞及案例", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247489246&idx=2&sn=29544ba6a271ea8eaa475df34f2d1b45": "【0day】深圳市虹安信息技术有限公司数据泄露防护平台存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489917&idx=1&sn=86ff249ad44b2e137fc75f4563f6ba43": "EasyCVR-视频管理平台 taillog 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4OTU4MjQ4Mg==&mid=2247488275&idx=1&sn=e30cc4806783ac1463178c2aadac6656": "“AI+Security”系列第4期（三）：基于大模型的漏洞挖掘技术与实践", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521918&idx=1&sn=acf8324d4a36ec4e8d37b16375da9e75": "Apache MINA 存在严重的满分漏洞，可导致RCE", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247485029&idx=1&sn=e57ec5ab92e13cc84e916d7b47c8f2f9": "工具集：TsojanScan【BurpSuite漏洞探测插件】", "https://mp.weixin.qq.com/s?__biz=MzIxNjI2NjUzNw==&mid=2247492807&idx=1&sn=762b111a5affb906d9d9037185f3daf2": "Adobe最新漏洞被披露，已有PoC代码流出", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486516&idx=1&sn=df2522520c1edd07b9c74c22088e3d91": "「漏洞复现」时空WMS-仓储精细化管理系统 SaveCrash.ashx 文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488369&idx=1&sn=822c9f77cbfe6f3b6da9d6c84fb874ef": "【1day】WordPress Elementor Page Builder 插件任意文件读取漏洞(CVE-2024-9935)", "https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650623055&idx=1&sn=d45d2b3945c54d902f46c2a270eb2fd6": "且看安恒零信任如何携手钉钉，成为客户最佳拍档", "https://mp.weixin.qq.com/s?__biz=MzIyMjU3MDg3Mw==&mid=2247489039&idx=1&sn=0551c5431032844d56b7cef7764aa2d5": "等级保护 | 等保要求及产品清单", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094453&idx=2&sn=717941fdf30b9ec5c0105e34f7d39995": "锐捷云管理平台曝严重漏洞：可从云端劫持WiFi热点", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066971&idx=2&sn=f33a68d33d05344d8693a65a70f992ef": "【安全圈】Apache Traffic Control 中的严重 SQL 注入漏洞 CVSS 评级为 9.9 — 立即修补", "https://mp.weixin.qq.com/s?__biz=MzI0MTY5NDQyMw==&mid=2247525362&idx=1&sn=c4deb862cf6c20288271d0e0f5720331": "Qemu重入漏洞梳理 & CVE-2024-3446分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587796&idx=2&sn=206238f85596e153d2d6f3c8f6c40ced": "曝9.9分高危SQL注入漏洞！Apache Traffic Control项目遭遇严重安全危机", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587796&idx=3&sn=df30dee10bc9d3568d5c5d215558f7b2": "惊喜开班！系统0day安全-IOT设备漏洞挖掘（第6期）", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247494002&idx=1&sn=c0c252a716bcd167e7afd6500d3ad00c": "【CVE-2024-1609】OPPO商城APP存在Webview组件权限提升漏洞致谢公告", "https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247492235&idx=1&sn=77d3d93dbca1231d18edeb1486dacaaa": "回看往期ISC2网络研讨会，提升网络安全技能并获取CPE学分", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247569190&idx=2&sn=f190848ca57c17c1a886af519fc3af4e": "网络安全专家爱用的逆向工具 TOP 9", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489926&idx=1&sn=9366de1ec2a50af9183770037ca1cc41": "Mitel MiCollab 企业协作平台 任意文件读取漏洞(CVE-2024-41713)", "https://mp.weixin.qq.com/s?__biz=Mzg4NjY3OTQ3NA==&mid=2247486460&idx=1&sn=612a1415f505da29609e45c087825d0c": "价值$3000的Google Slides IDOR漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489632&idx=1&sn=ef621ff598c100339f2b04e8cc9fe31f": "EDU-Kesion科汛开发的在线教育建站系统存在SQL注入漏洞 (大量存在含POC新接口) | 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzI4NTYwMzc5OQ==&mid=2247500618&idx=1&sn=4c4a94d321a4f44795de9c7ec943e774": "价值$3000的Google Slides IDOR漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489370&idx=1&sn=df60557c17a6e43934ed815009cc3408": "【漏洞预警】Apache HugeGraph-Server JWT 权限绕过漏洞（CVE-2024-43441）", "https://mp.weixin.qq.com/s?__biz=MjM5NDQ5NjM5NQ==&mid=2651626407&idx=1&sn=03d7a2320607f02314315d191da7b1a4": "网安未死，不慌烧纸", "https://mp.weixin.qq.com/s?__biz=MzU1ODk1MzI1NQ==&mid=2247491382&idx=1&sn=aaabee5428c20d4501fe9e8a126d35c0": "利用AI辅助测试WEB漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491905&idx=2&sn=29d6474005e9f8c36a129a215602547f": "漏洞预警 | 圣乔ERP系统任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491905&idx=3&sn=ef711aefb5488a75da75a83a07fb4332": "漏洞预警 | 用友U8Cloud SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2NTQxOA==&mid=2247495662&idx=1&sn=fddfa588f4eae694507d64d261b1b6ea": "国家金融监督管理总局印发《银行保险机构数据安全管理办法》", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493068&idx=1&sn=b13552bac6690f5968cc9e0a6eb6c345": "Palo Alto Networks修复了一个高危PAN-OS漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651206813&idx=1&sn=d845643474a7eef20e59162ac0682def&chksm=bd2cd13b8a5b582d7518212f69bcddd542d7f74f5fdfa55b27995d5114a8ee63075ac709b8a5&scene=58&subscene=0": "AI猎手：我们用大模型挖到了0day漏洞！【大模型应用实践系列三】", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587796&idx=2&sn=206238f85596e153d2d6f3c8f6c40ced&chksm=b18c221e86fbab084789482d7f7860f5df8bd2915739aaf9f0f088cff784d8a4275d5d4ab1aa&scene=58&subscene=0": "曝9.9分高危SQL注入漏洞！Apache Traffic Control项目遭遇严重安全危机", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587796&idx=3&sn=df30dee10bc9d3568d5c5d215558f7b2&chksm=b18c221e86fbab083b721e441b38e0af1347d49025ad070bdbe1b2916863c67dab92e68403f3&scene=58&subscene=0": "惊喜开班！系统0day安全-IOT设备漏洞挖掘（第6期）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521918&idx=1&sn=acf8324d4a36ec4e8d37b16375da9e75&chksm=ea94a714dde32e028400f9b194d97d8affc8b68ef4e2481b9541aa9150a157b01855d8f61440&scene=58&subscene=0": "Apache MINA 存在严重的满分漏洞，可导致RCE", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066971&idx=2&sn=f33a68d33d05344d8693a65a70f992ef&chksm=f36e78dbc419f1cdcdcf32755abea904b5b856bdc3e50b4b246d6fb2c1e03efbf5eba2adf433&scene=58&subscene=0": "【安全圈】Apache Traffic Control 中的严重 SQL 注入漏洞 CVSS 评级为 9.9 — 立即修补", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247494002&idx=1&sn=c0c252a716bcd167e7afd6500d3ad00c&chksm=fa78e83ecd0f612836f61b8c25e63fb35ee8ce654d92ed96b971cbcf000a11f3d8b426c4a1b8&scene=58&subscene=0": "【CVE-2024-1609】OPPO商城APP存在Webview组件权限提升漏洞致谢公告", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487545&idx=1&sn=82701065b0b2e49d07c8800023b95016": "赛克安全本周漏洞推送（12.22-12.27）涉及国威IP数字语音系统、黄药师、企企通、快云服务器、一卡通系统漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651310927&idx=2&sn=5649fe7d87c68c5f55b3586571a75803": "FreeBuf周报 | AI平台1.29T数据库裸奔；9.9分SQL注入漏洞可获admin权限", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651310927&idx=3&sn=f5d4155be6237b0c3a66ac895c0755ae": "Palo Alto防火墙存在高危漏洞，触发无需交互和权限", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247486705&idx=1&sn=860b4533ad361eafd6ebae77dafdbc7e": "分享Fastjson反序列化漏洞原理+漏洞复现+实战案例+POC收集", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793667&idx=3&sn=b07eadcd820da3a03e300e93d797e389": "Apache MINA CVE-2024-52046：满分漏洞可通过不安全的序列化实现 RCE", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491905&idx=1&sn=666f023e62a2a068803988c773b19572": "漏洞预警 | SeaCMS海洋影视管理系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247489257&idx=1&sn=0525d98e188d10ddf89b58d84381d1f0": "【漏洞复现】卓软计量业务管理平台image存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526497&idx=1&sn=0635c9355f7941678e7717b787f1a91b": "Delinea 协议处理程序 - 通过更新进程执行远程代码（CVE-2024-12908）", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526497&idx=3&sn=caf31731e63d13bd33e4fc65aa232bf0": "通过 X-Forwarded-Host 泄露密码重置令牌", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650605884&idx=2&sn=8f48fa60078b08ca19464103b73f1abf": "2024年零日漏洞利用七大趋势", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485759&idx=1&sn=366d391e8a5a07d0b0ac03f6640bc881": "CVE-2024-53961｜Adobe ColdFusion路径遍历漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485759&idx=2&sn=96f564df935b660642e688cdd6f747c1": "CVE-2024-56145｜Craft CMS远程代码执行漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485759&idx=3&sn=35fb3858f8e435c78c6ca1bfdf176f42": "CVE-2024-55461｜SeaCMS海洋影视管理系统远程代码执行漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247494700&idx=1&sn=e6450fbdecaf5a1c5ea3c50dbce5503c": "自学漏洞技术90%的人都错了！", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517903&idx=1&sn=b01118a06012af45a1e6ada882679324": "CVE-2024-9047 (WordPress File Upload 插件漏洞分析）", "https://mp.weixin.qq.com/s?__biz=MzI1Mjc3NTUwMQ==&mid=2247538192&idx=1&sn=31e87854346e28f0f99ef937777485eb": "如何利用AI（人工智能）进行自动化SRC漏洞挖掘【附代码】", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517945&idx=1&sn=2858490faf771353da39f28b59279e4c": "我的评价是全是干货", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486384&idx=1&sn=88eac745c7c780c5a7fa63bc413835e3": "PostExpKit插件使用常见问题11-18", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899862&idx=1&sn=6c3c42a1d72ccb4d5cf15f10bcf41b42": "紧急预警！热门 WordPress 教育主题 WPLMS 曝严重漏洞，可被黑客完全控制！", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2NTQxOA==&mid=2247495683&idx=2&sn=73ef00f9272e063053438370d10c7731": "车机存安全漏洞 约80万辆大众电动车位置信息公开暴露数月", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546358&idx=1&sn=3f3e9add8cba1512f713580dabdbfa82": "简易短信轰炸漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247491222&idx=1&sn=e39e5a74e9431480b1582b2b79c317f7": "交流群新增github poc监控机器人", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651310928&idx=3&sn=9a8303fc9977645e52699be6835d36d2": "曹县黑客2024年“营收”超13亿美元，单笔最高3亿美元", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655262876&idx=6&sn=8ce86f15dcd67549b95d2e50fd389ba8": "YD∕T 4996-2024 电信和互联网行业网络运营者漏洞管理平台技术要求", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486182&idx=1&sn=6b898e3622ec2befa8069e033a2f01b9": "通过代码审计用友获取CNVD高危证书", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650605913&idx=4&sn=2dbe7cfc615526cf17dfa0514711d389": "NB!一款基于java开发的漏洞检测工具，集合了泛微、用友、大华、海康、致远、红帆、万户、帆软等漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247493098&idx=1&sn=daf17eea39dbbe868a10945583414150": "网络信息系统WF2409E路由器进行了一次完整的硬件安全分析研究 | 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493642&idx=1&sn=148bc2127ec92f4853e3d25ce1e7c686": "像职业黑客一样思考，在漏洞挖掘中可以多赚30000美元（真的吗？）", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493642&idx=2&sn=e56539ff84e21a74e6dba51ec10c2eab": "【SRC】SQL 注入（SQLi）漏洞检测指南", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486540&idx=1&sn=63406d0b7e232811e72af958854598b1": "「漏洞复现」科汛新职教网校系统KesionEDU CheckOrder SQL注入漏洞(XVE-2024-1476)", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487547&idx=1&sn=208ed8027238c77ddd5a967fb895a024": "赛克安全本周漏洞推送（12.22-12.27）涉及国威IP数字语音系统、黄药师、企企通、快云服务器、一卡通系统漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247506335&idx=1&sn=7c0ecf4f62abd40aec0f31829276017e": "当黑客那些年之帐户接管系列漏洞-案例一斩获1000$", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517950&idx=1&sn=bef8c9d5541206c2256a5de3b375398a": "比较有意思的几个漏洞挖掘记录", "https://mp.weixin.qq.com/s?__biz=MzU0NDc0NTY3OQ==&mid=2247488307&idx=1&sn=bf64b07108abe531018ffec416ddf48a": "要好好的看完喔，不然会被暴力的X哟，cjson&json 二进制漏洞利用总结", "https://mp.weixin.qq.com/s?__biz=MzkyODMyODMyOA==&mid=2247487645&idx=1&sn=6ca606bda2f7ca498eea6874a2c3d2ce": "PostgreSQL-CVE-2020-25695 提权漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkyMTYyOTQ5NA==&mid=2247486094&idx=1&sn=b01f94c0609b2e5bda727bcd1f142cff": "2024年全栈安全公众号总结，启程一周年，不忘初心，继续前行！", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247489276&idx=1&sn=5ca1fedb935d5888e56c47434bd1e887": "【0day】朗速ERP UEditorAjaxApi存在文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899863&idx=1&sn=4edaf85372fe606cb8ded78b4f972a46": "警惕！新型 Mirai 僵尸网络来袭，利用未公开漏洞攻击 NVR 和路由器！", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491933&idx=1&sn=b451fb7c26eff80fc80a791f35b0f699": "漏洞预警 | 灵当CRM任意文件上传和SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491933&idx=2&sn=9a6a334bae03fa826ec5f695d14eef82": "漏洞预警 | 泛微e-cology9 SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491933&idx=3&sn=762b8a222c97692a8e610f36963bbaff": "漏洞预警 | 用友NC-Cloud SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485835&idx=1&sn=a4006b0abf897b676ebfb3f3c77e395a": "【漏洞复现】某平台-Upload-login-bypass登录绕过漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5Njg5ODM0OQ==&mid=2247485970&idx=1&sn=9b76a2caa9f387177dd7ead1489c5aad": "漏洞分析 | Apache SkyWalking SQL注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247504597&idx=1&sn=49f9f1550dbc1059ae35e9c00a5feacd": "一款卓越防护Web漏洞的神器", "https://mp.weixin.qq.com/s?__biz=Mzg3NTY0MjIwNg==&mid=2247485293&idx=1&sn=1138242da1a830b127c4b00f230940f8": "急需升级，D-Link 路由器漏洞被僵尸网络广泛用于 DDoS 攻击", "https://mp.weixin.qq.com/s?__biz=MzA4NjMwMzI3Mg==&mid=2247500509&idx=1&sn=d879aed5a495860040dfb717434d7ee2": "【漏洞通告】某凌OA fsscCommonPortle 未授权SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMzIwNTY1OA==&mid=2247510019&idx=1&sn=ef7658d9567ef58481a322510125580f": "AJ-Report 可视化大屏漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247538057&idx=2&sn=6fdb5d26fcbcf36bb8aef6816e78a238": "警惕！2024年全球零日漏洞利用呈现七大趋势", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247485325&idx=1&sn=d766f23653897e9076fc8958bb75263c": "轻量级，免费，百万POC", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247491944&idx=1&sn=bf7c78e7275f3dc7a07f208965dc9e6e": "漏洞预警 福建科立讯通信有限公司指挥调度 命令执行 sendxxx.php", "https://mp.weixin.qq.com/s?__biz=Mzg2MTg3NzQ5OQ==&mid=2247485587&idx=1&sn=87e4947393d4c58c206c4d9961a29ca0": "如何利用开源情报（osint）识别飞机和无人机", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247485035&idx=1&sn=585e3f18d100677efc727f86ce54d095": "工具集：Faraday【开源漏洞管理工具】", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546360&idx=1&sn=7178f037b525d958d7c20d08db5f1d44": "区块链安全 | 智能合约重入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517931&idx=1&sn=a31e2b38e5b404f06e701c835c8aa98a": "Guns后台任意文件上传漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg4NDc0Njk1MQ==&mid=2247486746&idx=1&sn=4a17fec7d591a59540a57f189ad9b362": "如何在复杂环境下快速定位并应对网络攻击？", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727842132&idx=1&sn=c0026260d20abcf884049d6b743e30b9": "ExpAttack:大语言模型越狱风险持续追踪框架", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291998&idx=1&sn=36120636ca1c352ce916cebd14212209": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521932&idx=1&sn=518332fa38f3263ee23df7a70c1187d3": "Palo Alto 修复已遭利用的严重PAN-OS DoS 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491820&idx=1&sn=fcc726b15045495ac1fbb41aa96315da": "锐捷网络云平台漏洞可能使 50,000 台设备遭受远程攻击", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495652&idx=1&sn=cef4406becdd51d1e33a90e86006eb68": "CNVD漏洞周报2024年第52期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495652&idx=2&sn=2f11d6d88700365343f0e1cbddb894b8": "上周关注度较高的产品安全漏洞(20241223-20241229)", "https://mp.weixin.qq.com/s?__biz=Mzg2MTc1MjY5OQ==&mid=2247486193&idx=1&sn=bc78153415de7d82ff16381fc081d515": "sd*夏还我血汗钱！", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247552839&idx=2&sn=942a986e8043298bd33af66f58fa1b62": "【免费领】智能设备安全技术干货：路由器0day漏洞挖掘指南", "https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650463818&idx=1&sn=c4a9f9fec1ad1e8d9141b2ef5cb3b8f3": "全球云上数据泄露风险分析简报 （第四期）：供应链攻击致39万账户凭证泄露，MFA漏洞致多个云服务被未授权访问", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502696&idx=1&sn=6f6eb5c064c0d4da065fa080d6b0e4c0": "安全热点周报：黑客利用 DoS 漏洞禁用 Palo Alto Networks 防火墙", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486551&idx=1&sn=0d27e7daa1e9f260dd0308faa12ee9aa": "「漏洞复现」友数聚 CPAS审计管理系统V4 downPlugs 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247498196&idx=1&sn=1fb82a841009e926aecd957f4606117c": "全球云上数据泄露风险分析简报 （第四期）：供应链攻击致39万账户凭证泄露，MFA漏洞致多个云服务被未授权访问", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500542&idx=2&sn=3fb1b5f1c2d3aeceb976ac1a854a7356": "【漏洞通告】Apache Traffic Control SQL注入漏洞（CVE-2024-45387）", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247488005&idx=1&sn=62d81de1aeddc3b12a7c5e00acfa04cb": "某小型CMS漏洞复现审计", "https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247527681&idx=1&sn=e77aaa7db384e40d9e8ba48f6dbe15eb": "路由器运行一段时间变慢了，有定时重启路由吗？", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485407&idx=1&sn=a1c9e810b243555ad112f189a4ba18ad": "【最新】推特蓝V公布 7zip 0day", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496709&idx=1&sn=4459d412d70bafeeb2be8cead320a6a7": "Springboot未授权之httptrace和logfile的实战利用", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526526&idx=1&sn=b40e4e0b3bfdf287bdb7d6d93a01a914": "CVE-2024-21182 - Oracle Weblogic Server 漏洞利用 PoC 发布", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526526&idx=2&sn=cef20dd8649aac66ad56c7106ed00265": "Krueger 是一种概念验证 (PoC) .NET 后利用工具", "https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247486138&idx=1&sn=ea815812a6b145f0e3cff283fef7d86e": "近期 Apache Struts 2 严重漏洞开始被利用", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651310972&idx=4&sn=eeb554ed9dff33696a967625fde4879e": "Brakeman：针对Ruby on Rails应用的静态分析安全漏洞扫描器", "https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491006&idx=1&sn=ae1eb85988018523b6fede2de404e828": "复测 Apache Tomcat 远程代码执行漏洞(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067016&idx=3&sn=8a2de7555b1f2f62a08ba91e461c72ba": "【安全圈】WPA3协议存在安全漏洞，黑客可获取WiFi密码", "https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247498696&idx=1&sn=fcef68c5f6b8fbcdcdedc41c75753116": "国家金融监督管理总局发布 《银行保险机构数据安全管理办法》", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517945&idx=1&sn=866df104f09aad13fccf1e26c6c78bc8": "CVE-2024-42327：Zabbix SQL注入漏洞分析漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzUxMjc0MTE3Mw==&mid=2247494831&idx=1&sn=5aaadb7d61edb505bc39101bbd83d4b9": "Four-Faith 路由器pre-auth 命令注入漏洞（CVE-2024-12856）", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247514568&idx=1&sn=e1ee1440e4e46b8e578d912fea737838": "网安瞭望台第19期：D-Link 路由器网页管理界面漏洞，攻击者可获取设备访问权限", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489376&idx=1&sn=c143a56e17c582e5f043c8486dacb182": "【漏洞预警】Craft CMS register_argc_argv 致模板注入代码执行漏洞（CVE-2024-56145）", "https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653931337&idx=1&sn=b3e41a0f78748e4805b7646fb2333b05": "浙江某软件科技公司被处罚，因数据库存在安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521932&idx=1&sn=518332fa38f3263ee23df7a70c1187d3&chksm=ea94a7e6dde32ef0734d2279cc2338eb07d4063b92d89e4de919fa8fce43313cc34fe97331a2&scene=58&subscene=0": "Palo Alto 修复已遭利用的严重PAN-OS DoS 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067016&idx=3&sn=8a2de7555b1f2f62a08ba91e461c72ba&chksm=f36e7888c419f19e03066c42c1386cf46772d64aa9efbbe0f759e026ca142a7ccf31647ec3d6&scene=58&subscene=0": "【安全圈】WPA3协议存在安全漏洞，黑客可获取WiFi密码", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495652&idx=1&sn=cef4406becdd51d1e33a90e86006eb68&chksm=fd74df2dca03563b2b826b2a5d8df199237cd226584e54c942b516757335520fa94cd30b62d7&scene=58&subscene=0": "CNVD漏洞周报2024年第52期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495652&idx=2&sn=2f11d6d88700365343f0e1cbddb894b8&chksm=fd74df2dca03563b81e39f2837b17ee1e489ac23d484a7c3ff2e13b5381dee19169186aa123f&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241223-20241229)", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247493117&idx=1&sn=5cbf11851c6bc22bb2af1ea69009af0a": "Burp Suite 插件 BurpGPT，可执行额外的被动扫描，以发现高度定制的漏洞，并可以运行任何类型的基于流量的分析。", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485838&idx=1&sn=e1160fabd8a74bcd4a53a46d1d47febb": "【漏洞复现】某平台-Process-login-bypass登录绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5Mjk3MDA5Ng==&mid=2247486451&idx=1&sn=43461931f69b85bb08cf0fae59ed2ac6": "Telegram小小0day-查询任意手机号码", "https://mp.weixin.qq.com/s?__biz=MzU3MDM2NzkwNg==&mid=2247486508&idx=1&sn=11cabc35a30ecce290f73a5197b78e4c": "美国财政部“史诗级”黑客事件：祸起网安公司产品漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjYxMDM4MA==&mid=2247484049&idx=1&sn=e4764b4de7309a9bc49a8ba4c9161b7c": "CVE漏洞监控", "https://mp.weixin.qq.com/s?__biz=Mzk0MjU5NTY2MQ==&mid=2247484329&idx=1&sn=42e67564df2d85fc84e59e458b373fec": "【0Day漏洞预警】锐捷RG-EW1200G存在逻辑缺陷", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499560&idx=1&sn=61decaa2b4ce8bc86d2180e0b3cd0b78": "CNVD漏洞周报2024年第52期", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247506448&idx=1&sn=90369432d33604a72d7b5f17b2eeadfb": "美国财政部“史诗级”黑客事件：祸起网安公司产品漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496908&idx=1&sn=352ac8e21fec342905ad73d02a58e740": "【漏洞通告】Apache Traffic Control SQL注入漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793690&idx=3&sn=6545990d8d094c2f6b2efa2c79bf0e8a": "攻击者正在利用 Four-Faith 工业路由器中的命令注入漏洞来部署反向 shell", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497847&idx=3&sn=8278fcaa911c46e45152af778abaf748": "53套.NET系统漏洞威胁情报(12.31更新)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491934&idx=2&sn=6758c92161888dc02cd88c72fc8d6559": "漏洞预警 | 方正全媒体采编系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491934&idx=3&sn=d94a3dfc31a0ad8f9e870fdff248dc44": "漏洞预警 | Sophos Firewall SQL注入、弱凭证和代码注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899889&idx=1&sn=6060673f25972e58339a5a40ae67e4be": "警惕！锐捷网络云平台曝严重漏洞，全球约 5 万台设备或遭远程控制！", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247489326&idx=2&sn=f5d4e80d03e37a0b0a8ef61195765e7e": "【大量存在】成都和力九垠科技有限公司Common存在文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502696&idx=1&sn=6f6eb5c064c0d4da065fa080d6b0e4c0&chksm=fe79eff0c90e66e676138f85b2cf4c46428c0300aea29adcc230023c1d655c02018f8dec1a96&scene=58&subscene=0": "安全热点周报：黑客利用 DoS 漏洞禁用 Palo Alto Networks 防火墙", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500548&idx=2&sn=8708d95f052191d0c9e4322802d02016": "【漏洞通告】Palo Alto Networks PAN-OS拒绝服务漏洞（CVE-2024-3393）", "https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651134870&idx=1&sn=24b9e69f07ded3afd191f616b0f09d54": "踏浪逐新 峥嵘满途丨梆梆安全2024年度回顾", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247493750&idx=1&sn=322743019a204e55a45f57cb47685ea7": "通过代码审计用友获取CNVD高危证书", "https://mp.weixin.qq.com/s?__biz=MjM5NDA3ODY4Ng==&mid=2247488839&idx=1&sn=a4ca0c28b1dc0c3e07a648e754121b0b": "国家密码管理局公告（第50号）丨19项密码行业标准发布", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503248&idx=1&sn=2f516189c6b2daf10372243ffba51d08": "雷神众测漏洞周报2024.12.23-2024.12.29", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526560&idx=3&sn=54b09d4b30d2a8b749aebb0ddbeb8e05": "CVE-2024-54819 - I Librarian 服务器端请求伪造", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526560&idx=4&sn=f3a9bdb2740228cbc942151a6713f073": "Linux 内核漏洞 CVE-2023-4147：针对权限提升缺陷的 PoC 漏洞已发布", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493699&idx=1&sn=49d9cfc1d5844ef6529f5b46a1e1cc19": "【吃瓜】价值 3000 元的 telegram 手机号查询'0day'", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493699&idx=2&sn=cf417466e1897dc482e7e9d6c4dedc3f": "x网友使用大模型生成 7-zip的0day漏洞，7-zip 原作者辟谣0day是假的", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488496&idx=1&sn=d57be6b7475b11e878558ef1ee711237": "WordPress Wux-Blog-Editor 插件存在前台越权漏洞(直接成为管理员) CVE-2024-9932", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247496388&idx=1&sn=694eb0f7fcaf672c7a5be5fe99587188": "价值1.8k人民币漏洞：Telegram小小0day-查询任意手机号码", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485113&idx=1&sn=50df90ad4a66b95ba4c48d29d449b8b0": "CVE-2024-52046 Apache MINA反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485113&idx=2&sn=45c7416f428ce01ae543c22d001b2eaa": "CVE-2024-12856 四信Four-Faith路由器存在命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499560&idx=2&sn=7b4058c8e11cfa595e24c0fce3754f55": "上周关注度较高的产品安全漏洞(20241223-20241229)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491934&idx=1&sn=c056c4384930ffec5352c63b06b11434": "漏洞预警 | GeoServer远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067033&idx=2&sn=6bf70d067d0bebdf78e4045b13df4439": "【安全圈】Linux 系统岌岌可危：GStreamer 漏洞威胁数百万用户", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067033&idx=3&sn=852cf568ead351f59557241b2af12032": "【安全圈】严重漏洞使大量Four-Faith路由器面临远程利用", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651311106&idx=2&sn=4d17c81f07075c05217f769b5f513263": "利用 DoS 漏洞可瘫痪 Palo Alto 防火墙", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651311106&idx=4&sn=c480deb733ce9cca529cc6125ab93315": "pwnobd：一款针对OBD-II设备的漏洞分析与渗透测试工具", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247505498&idx=2&sn=ff5beeae494e24f372210a8fa9ee150d": "每周网安资讯 （12.24-12.31）|Microsoft多款产品存在保护机制失效漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTU5NTI1Ng==&mid=2247486532&idx=1&sn=37417bf0416d10945d0de4e450392e6a": "你手上的漏洞poc，真能帮你解决问题吗？", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513393&idx=1&sn=1a9e508382839d999a5a0058560e6b35": "警惕！国产工业路由器零日漏洞疑遭攻击者利用", "https://mp.weixin.qq.com/s?__biz=MzA5NzQ0Mjc5NA==&mid=2649766425&idx=1&sn=8dd98072573d2f284b8012e96ac6082f": "蛙！请查收你的2024漏洞盒子年度报告！", "https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653931349&idx=1&sn=cb8ce5b3ebacbb16c2b2789891fd6ac8": "银行数据安全管理新规发布：信息科技部是技术保护主责部门", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486570&idx=1&sn=3c7b1c39f72c96f3f957db2512bc4e68": "「漏洞复现」用友U8 Cloud ReleaseRepMngAction SQL注入漏洞复现(CNVD-2024-33023)", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247494127&idx=1&sn=66b3069772e4469f6d59fe463049c089": "OSRC 2024年度颁奖典礼在深圳完美落幕", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247488012&idx=1&sn=03cd5f595007f6e1342a05b1a4342891": "SRC挖掘之Access验证校验的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247486154&idx=1&sn=f07ce16c527fab05e35d43f5cd4daa4a": "FICORA、CAPSAICIN 僵尸网络利用旧 D-Link 路由器漏洞发起 DDoS 攻击", "https://mp.weixin.qq.com/s?__biz=Mzk0ODMwNjQzMA==&mid=2247485755&idx=1&sn=2424459bff9c2f58c6001e3ab850dbd0": "瑞斯康达智能网关命令执行漏洞简单分析", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247577744&idx=1&sn=e99a3ea2349f0319f23eab9eb52cb772": "2024年度盘点之漏洞威胁：AI技术降低漏洞利用门槛，网络边缘设备成重灾区", "https://mp.weixin.qq.com/s?__biz=MzkzODQzNTU2NA==&mid=2247486264&idx=1&sn=d66a1443fa5d075f4be3fefff1faf36e": "通过代码审计用友获取CNVD高危证书", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489384&idx=1&sn=985ccff71c2ce2fbab9504240e929608": "【漏洞预警】Apache Traffic Control SQL注入漏洞（CVE-2024-45387）", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496715&idx=1&sn=5df17524d1be3680c48f6168438b7a70": "深入浅出API测试｜搜集分析与漏洞挖掘实战", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633465&idx=3&sn=ef758b05548bc18a71aefb5a10e8d08f": "警惕！国产工业路由器零日漏洞疑遭攻击者利用", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462489&idx=1&sn=629f138fdea3ab34840c961ad3d4d350": "信息安全漏洞周报（2024年第53期）", "https://mp.weixin.qq.com/s?__biz=Mzk0ODY1NzEwMA==&mid=2247484687&idx=1&sn=08ebc682562eef9246ca314ab4af2548": "HTB靶场通关-1", "https://mp.weixin.qq.com/s?__biz=MzAwNTc5MTMyNg==&mid=2247500090&idx=1&sn=3fc186c31fd4b21d7c6d5c98c4644bdc": "元旦节快乐师傅们，祝各位师傅手握0day打天下！", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515415&idx=1&sn=0302b4a3ffa8ce6ea4ef4b342f977b64": "Cleo 远程代码执行漏洞复现（CVE-2024-50623）（附脚本）", "https://mp.weixin.qq.com/s?__biz=MzI5MjEyOTE4MA==&mid=2648520045&idx=1&sn=81b836983e9975eb61323771fdaa3883": "愿新年，胜旧年", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260358&idx=1&sn=985920a3606cd74312bd080b14bffcca": "意外发现谷歌Slides越权漏洞，获得赏金$3133.70的故事", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491956&idx=1&sn=ed3a1c1888a52f13e7a3d3d1f1ae9add": "漏洞预警 | Apache Hive & Spark信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491956&idx=2&sn=f417021e873e2e489ceaec238fb37c25": "漏洞预警 | 易思智能物流无人值守系统 SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491956&idx=3&sn=ceaee3325e00f83e7428839355d46a1d": "漏洞预警 | WordPress Plugin KiviCare SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497847&idx=3&sn=8278fcaa911c46e45152af778abaf748&chksm=fa59569acd2edf8c9b018aa93f5ba606327376fbcde94105e68d18782a830e0cc825ccc05bbe&scene=58&subscene=0": "53套.NET系统漏洞威胁情报(12.31更新)", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513393&idx=1&sn=1a9e508382839d999a5a0058560e6b35&chksm=ebfaf211dc8d7b07015600b9003f5f1acfbccf930b0eed3ad0bd3be2567b0cec0ece7a558d6e&scene=58&subscene=0": "警惕！国产工业路由器零日漏洞疑遭攻击者利用", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503248&idx=1&sn=2f516189c6b2daf10372243ffba51d08&chksm=f2585f63c52fd675454b2fb328308122b6daa75e9bd6e1ea331fe21cf1cf6132ab1ad4165612&scene=58&subscene=0": "雷神众测漏洞周报2024.12.23-2024.12.29", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067033&idx=2&sn=6bf70d067d0bebdf78e4045b13df4439&chksm=f36e7899c419f18fa333cb25b0da58cc1c4c85067efbaaa4f07d75759489fcedb137e123cdf0&scene=58&subscene=0": "【安全圈】Linux 系统岌岌可危：GStreamer 漏洞威胁数百万用户", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067033&idx=3&sn=852cf568ead351f59557241b2af12032&chksm=f36e7899c419f18fe3bec1754f0338d4e7f54e0bd2217e301fcc3d9583f573cde7d2e9869224&scene=58&subscene=0": "【安全圈】严重漏洞使大量Four-Faith路由器面临远程利用", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499560&idx=1&sn=61decaa2b4ce8bc86d2180e0b3cd0b78&chksm=973acc4aa04d455c31f20b3875086896489dfa9b69dfc9a3306352dfbc4e081810307c18b1fe&scene=58&subscene=0": "CNVD漏洞周报2024年第52期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499560&idx=2&sn=7b4058c8e11cfa595e24c0fce3754f55&chksm=973acc4aa04d455c2bc44c4ed03826287f76bc06ec3439b71546dcb149aa74673db82ec26b10&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241223-20241229)", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247577744&idx=1&sn=e99a3ea2349f0319f23eab9eb52cb772&chksm=9f8d2098a8faa98e5a610c8d4d5a654670f5cd489fdf5f1299c27b47438f0d678fef74b62860&scene=58&subscene=0": "2024年度盘点之漏洞威胁：AI技术降低漏洞利用门槛，网络边缘设备成重灾区", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496715&idx=1&sn=5df17524d1be3680c48f6168438b7a70&chksm=e8a5fe68dfd2777ebfb44758782386a044345b891f4edad609c5d5857be1039fbf1f5eb89bd3&scene=58&subscene=0": "深入浅出API测试｜搜集分析与漏洞挖掘实战", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493759&idx=3&sn=1aef5e4aec4152afbab4748ebf403dfc": "网络文件系统 (NFS) 协议中经常被忽视的漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651311100&idx=1&sn=cf7157892b59ec697b011bdb4e852326": "WPA3协议存在安全漏洞，黑客可获取WiFi密码", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247486709&idx=1&sn=70603444fa226522eb7fc334ead763d0": "分享应急响应排查——windows应急响应详细解析", "https://mp.weixin.qq.com/s?__biz=MzkxMTY1MTIzOA==&mid=2247484482&idx=1&sn=6ebfcd11af1fdd86f306e7c16c822820": "【技术分享】Shiro框架下文件读取漏洞快速利用思路", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526597&idx=1&sn=4eae4d01a0fec23270567af51fae332f": "7-Zip 零日漏洞据称已在网上泄露", "https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247486159&idx=1&sn=d99f4a028b1730d6366ecf0b0d342527": "46.5 万起搏器存在漏洞；用户必须就医进行修复", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067069&idx=2&sn=516425f9b9c6da18a71ed20d3b724b4b": "【安全圈】捷某网络云平台漏洞曝光：50000 台设备面临远程攻击风险", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587913&idx=1&sn=59937f7938afd40d184cb3fed087a347": "欢迎报名！​“系统0day安全”系列课程：掌握漏洞挖掘重要技能", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587913&idx=2&sn=98c0e76217bf3df9659f9e697ec2775d": "PWN入门：三打竞态条件漏洞-DirtyCOW", "https://mp.weixin.qq.com/s?__biz=MzI1NTE2NzQ3NQ==&mid=2247485474&idx=1&sn=62812c0cc77f99961af3de503e4c732d": "【漏洞复现】北京友数 CPAS 审计管理系统存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjY0NDM3OA==&mid=2247484167&idx=1&sn=b3d525b35dd2e4849cdb43db78477e55": "第二十课-系统学习代码审计：Java反序列化基础-fastjson反序列化漏洞原理分析fastjson利用条件分析", "https://mp.weixin.qq.com/s?__biz=Mzg5MDQyMzg3NQ==&mid=2247484020&idx=1&sn=f6e84e9f2be4cd908bfa4574c0ac5ea6": "还在手撸 POC？这个 AI 脚本让你直接起飞！", "https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485358&idx=1&sn=7ed90d0cac8a364bf8ff3a27f8f3cc10": "专题丨低空经济网络和数据安全风险分析研究", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486595&idx=1&sn=1c92740e47085729280d2b01d344e047": "「漏洞复现」郑州时空-TMS运输管理系统 GetDataBase 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633484&idx=4&sn=f462715f44bf9fac23924a3c3a12feed": "WPA3协议存在安全漏洞，黑客可获取WiFi密码", "https://mp.weixin.qq.com/s?__biz=MzkxMTY1MTIzOA==&mid=2247484520&idx=1&sn=f5521e504c8b6e019aad5f78b8fdcf54": "【技术分享】文件上传XSS漏洞的利用方式", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247493133&idx=1&sn=58da466e03801a32a4977feb65c2ac71": "ysoSimple：简易的Java漏洞利用工具，集成Java、Hessian、XStream、Shiro550反序列化等", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491966&idx=1&sn=9d4a99a10bebb5b5b5779656bb33a368": "漏洞预警 | 汉塔科技上网行为管理系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491966&idx=2&sn=0109569e3097888c035be7756d35dae4": "漏洞预警 | 蓝凌OA SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491966&idx=3&sn=9d8938cb9e5e52e23bd52f350b6a80a2": "漏洞预警 | 泛微E-Bridge SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899899&idx=1&sn=2f85cb1a3466fd4c8372b3207ce3c810": "紧急！Palo Alto Networks 防火墙遭 DoS 攻击，黑客利用 CVE-2024-3393 漏洞致其瘫痪！", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247489357&idx=1&sn=be87478fd82d55b1ae053e5378b40c94": "【0day】W&Jsoft-D-Security数据仿泄露系统(DLP)存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587913&idx=1&sn=59937f7938afd40d184cb3fed087a347&chksm=b18c238386fbaa957c10a8dcd63ec1caf8fb6987ddb1d56e56ab8498f579348c2cae8a1d8e0c&scene=58&subscene=0": "欢迎报名！​“系统0day安全”系列课程：掌握漏洞挖掘重要技能", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067069&idx=2&sn=516425f9b9c6da18a71ed20d3b724b4b&chksm=f36e78bdc419f1ab97757c972a051093c0e7061dbe95232d3b05c5655baab57d351000e98b8d&scene=58&subscene=0": "【安全圈】捷某网络云平台漏洞曝光：50000 台设备面临远程攻击风险", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247359&idx=1&sn=f31ecbd205f72292f49cf6cab4e276a6": "警惕！国产工业路由器零日漏洞疑遭攻击者利用", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485842&idx=1&sn=1362c91fa8813a6719e9bdd0b7f1bb7b": "【漏洞复现】某平台-checkLoginQrCode-delay-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NjA0ODAyNg==&mid=2247485931&idx=1&sn=664afa8dc20695b2d86fddda2830538f": "面向JS漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650606042&idx=2&sn=a643b8dd73810f509abdbb3f1c935808": "警惕！国产工业路由器零日漏洞疑遭攻击者利用", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247517632&idx=1&sn=f55b79811a6f8dd1ff8a1190f37f5ef3": "实战利器 50个渗透攻防命令速查！", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247490028&idx=2&sn=d61adfa8595d04cf1e03072c2aac9214": "重磅！国内最专业的 [ .NET 代码审计 ] 体系化学习互动社区，强势来袭！", "https://mp.weixin.qq.com/s?__biz=MzkzMzI3OTczNA==&mid=2247487963&idx=1&sn=f152d932bd0d1e3b3513328ced8cf98f": "面向JS漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587913&idx=2&sn=98c0e76217bf3df9659f9e697ec2775d&chksm=b18c238386fbaa95240d646e4dd53c0b5349a023b47590b174b1ac0717f14609242a7e933442&scene=58&subscene=0": "PWN入门：三打竞态条件漏洞-DirtyCOW", "https://mp.weixin.qq.com/s?__biz=Mzg5NjY4NDg1Nw==&mid=2247483907&idx=1&sn=e64a7eb7fb8ecb4ffba0df92f7de2cb0": "[武器库]-WExploit漏洞综合利用工具", "https://mp.weixin.qq.com/s?__biz=MzIxNjI2NjUzNw==&mid=2247492816&idx=2&sn=d8dd338afd2442c7ceafb08c288b7a9f": "上周关注度较高的产品安全漏洞(20241216-20241222)", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247491951&idx=1&sn=f552959dc1ebe4e8e7b692cc6f60060c": "漏洞预警 unibox checkxxxx.php 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526666&idx=1&sn=51464a34472921949f23f7dfe3591e96": "LdapNightmare 一个 PoC 工具，用于针对 CVE-2024-49112 易受攻击 Windows Server", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486500&idx=1&sn=a79b34d5cfc1b82f145f7c7a9ca3a725": "【漏洞通告】Oracle iStore 未授权访问", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486500&idx=3&sn=bf82a52a74af24fb0803fbd8da0cd4aa": "【漏洞通告】华为产品 不充分的完整性漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486500&idx=4&sn=c1dfdfbb6c0be7000b980f0f91e37902": "【漏洞通告】Perl 安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488504&idx=1&sn=10012a6a34abcf028e17645af7561ee3": "【工具分享】开源，图形化Jeecg框架漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493807&idx=1&sn=242601ce36b3839e1068a3ef8f1d28fb": "【Exp】古河大佬发现的 Ldap（CVE-2024-49112） 漏洞出现 Exp了，0-click", "https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661297669&idx=2&sn=8f3cd59e279c25009c4e77429b9dc163": "山石说AI｜突破模糊测试极限：大模型驱动的软件漏洞深度挖掘", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484399&idx=1&sn=e28404c91dc74d96bef39bff1dce0608": "安钥®「漏洞防治标准作业程序（SOP）」征文启示 [2025年第1期，总第19期]", "https://mp.weixin.qq.com/s?__biz=MzI3NjA4MjMyMw==&mid=2647789866&idx=1&sn=ede8219d518f395dcf49492ebfb5fced": "mac版本微信小程序抓包学习", "https://mp.weixin.qq.com/s?__biz=MzI1NTE2NzQ3NQ==&mid=2247485484&idx=1&sn=105f7b834b3da70b77523462ca24ac4b": "【漏洞复现】SecFox运维安全管理与审计系统FastJson反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4OTI0MDk5MQ==&mid=2247493226&idx=1&sn=13da22c29bc367231583674efc8db0f9": "【AE插件】23000款AE插件合集，全套插件一键安装包", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650606042&idx=1&sn=115a6a68aa8b721157034b562e9492f0": "网络安全公司“内鬼”监守自盗 当黑客窃取个人信息2.08亿条；|WPA3协议存在安全漏洞，黑客可获取WiFi密码", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247538451&idx=3&sn=e0d5da8061b899effd86f8e54c066daa": "【风险提示】国产工业路由器零日漏洞疑遭攻击者利用", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727843649&idx=1&sn=31bc387f68e47f9a8dd9561a46e7d95c": "【活动】你没看错，通用漏洞全年3倍奖励！", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651311189&idx=3&sn=77582a207799b2a8f44c90a6eed4a26b": "新的“DoubleClickjacking”漏洞可绕过网站的劫持保护", "https://mp.weixin.qq.com/s?__biz=Mzg5NTEwNTE1Mw==&mid=2247485171&idx=1&sn=0058b76345fc8ac04545cbf80cdc99e0": "防范XXE漏洞：XXE攻击详解与应对策略", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067095&idx=3&sn=6a10a23e41cc2e64a94951ad4f2b52a7": "【安全圈】新的“DoubleClickjacking”漏洞可绕过网站的劫持保护", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247502196&idx=1&sn=7192bdc239556ce50cef819e31df6ea7": "Web漏洞分析与防范实战丨从\"脚本小子\"迈向\"研究员\"的第一步", "https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247492248&idx=2&sn=3a4a075f85c8ab68001ce6a4fd5cecae": "【5.5CPE】ISC2焦点会议——治理、风险与合规，欢迎参会", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500562&idx=2&sn=a2bffedfb62b6f2678072c0b494338a1": "【漏洞通告】Windows LDAP远程代码执行漏洞（CVE-2024-49112）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587938&idx=1&sn=501d4121b0437af290d817483a675882": "Hyper-V拒绝服务漏洞CVE-2024-43633分析", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247490165&idx=1&sn=9256f940e9aafb6f123a2482d73d397b": "创宇安全智脑 | 灵当 CRM getMyAmbassador SQL注入等72个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521960&idx=2&sn=46eb22e98ed9cbd715a95b5188b6eac6": "黑客泄露更多数据，思科证实属实", "https://mp.weixin.qq.com/s?__biz=MzkyMDY5OTg5OA==&mid=2247492654&idx=1&sn=ae8da90daad9dd88b57bbc05ac6bde5c": "Web漏洞分析与防范实战丨从\"脚本小子\"迈向\"研究员\"的第一步", "https://mp.weixin.qq.com/s?__biz=MzkwNTE4Mzc2Mg==&mid=2247486461&idx=1&sn=e218c28bdbe2f61ee5dae5e253d5ee21": "【漏洞复现】大华智能物联综合管理平台远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMDU5MzY0NQ==&mid=2247484400&idx=1&sn=3acd310a40e16ec8877629020df10ba9": "Web漏洞分析与防范实战丨从\"脚本小子\"迈向\"研究员\"的第一步", "https://mp.weixin.qq.com/s?__biz=MzkxNTU5NTI1Ng==&mid=2247486536&idx=1&sn=612a80610f1a6ca6bdb08300f7c8a1d5": "Web漏洞分析与防范实战丨从\"脚本小子\"迈向\"研究员\"的第一步", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486619&idx=1&sn=fee8f7896e0a1157ce2632edf3de6d7c": "「漏洞复现」方正畅享全媒体新闻采编系统 imageProxy.do 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1OTc2MzE2Mg==&mid=2247489261&idx=1&sn=afa979eb1a44159426df3575203dc5b6": "【安全月报】| 12月份因漏洞、黑客攻击等损失为2860万美元，为全年黑客攻击最少月份", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515426&idx=1&sn=b76928086d14cd6ffce6164dbf7a5823": "新书推荐《Web漏洞分析与防范实战》", "https://mp.weixin.qq.com/s?__biz=MzU5OTMxNjkxMA==&mid=2247488371&idx=1&sn=4e527a3e132f3e02514cb331fa92b763": "Web漏洞分析与防范实战丨从\"脚本小子\"迈向\"研究员\"的第一步", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247492515&idx=1&sn=88978addef776d8110dd641655634b00": "研究漏洞方法指南 | Web漏洞分析与防范实战", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY1NTI5Mw==&mid=2247490620&idx=1&sn=905c800b330ae42fa306dc9018746e04": "你手上的漏洞poc，真能帮你解决问题吗？", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486500&idx=2&sn=95436cdc9aa3a3b756999d41bd092e9c": "【漏洞通告】Apache Hive & Spark 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496729&idx=1&sn=0a735adcd78402855c254e71221dff90": "赏金$3133的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489395&idx=1&sn=256650cb87713ff212758abde0e2facc": "【漏洞预警】Apache Arrow代码执行漏洞(CVE-2024-52338)", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY2ODE1NA==&mid=2247484948&idx=1&sn=480a76ee02ac812d7b8f4f5635fff7b4": "SSTI模板注入漏洞详解（附一键getshell工具）", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247519026&idx=1&sn=1199efa3c2e527406ee3ae0ae85e550d": "记一次JS中的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI5Mzg5MDM3NQ==&mid=2247498213&idx=1&sn=42949367265a2dbc23de207739cc03d9": "你乘上的是列车还是彗星？", "https://mp.weixin.qq.com/s?__biz=Mzg4Njc0Mjc3NQ==&mid=2247486620&idx=1&sn=a3c9f75946a17f69bb762ac9e19442ee": "开源代码漏洞扫描器 OSV-Scanner 新增修复和离线功能", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247498035&idx=2&sn=ae95efa731c1ad0bfb4f3907942bbcf7": "7-Zip 零日漏洞据称已在网上泄露", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651130106&idx=1&sn=a8a6ceb0bf11ca5eb70a3e6c42c9a141": "2024年我国全行业数字化及网络安全政策标准汇总下载", "https://mp.weixin.qq.com/s?__biz=MzI1NTE2NzQ3NQ==&mid=2247485496&idx=1&sn=30378454837adf12cd6f54952ac84eee": "【渗透书籍推荐】《Web漏洞分析与防范实战》丨文末参与抽奖免费赠书！！", "https://mp.weixin.qq.com/s?__biz=MzI1NTE2NzQ3NQ==&mid=2247485496&idx=2&sn=f883374d1a9a9eab5602921437412041": "【漏洞复现】朗速ERP后台管理系统FileUploadApi接口文件存在文件上传漏洞||附POC", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491967&idx=1&sn=f272d94e20068861012bfdc0fb0343c4": "漏洞预警 | Adobe ColdFusion反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491967&idx=2&sn=835396913c02e3d69338f769abed1682": "漏洞预警 | 用友NC XML实体注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491967&idx=3&sn=ae28506ae28775537a4e202b2f314308": "漏洞预警 | 用友BIP信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247506527&idx=1&sn=4f478afe2ddb7c0d9505a4575c6baaa6": "超300万台未加密邮件服务器暴露，用户数据面临严重威胁！", "https://mp.weixin.qq.com/s?__biz=MzkyNzE5MDUzMw==&mid=2247567927&idx=1&sn=86d6ea511f81433eb47444a7d9427df2": "一家网安劳模企业的2024全年创作合辑", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247489371&idx=1&sn=7bf3786a43261b9f5d4ca11a1815e449": "【1day edu 大量存在】大华智能物联综合管理平台(ICC) 存在远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247518041&idx=1&sn=07f9f7aae2aead67b9b4558d64c61cef": "代码审计 - MCMS v5.4.1 0day挖掘", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633511&idx=3&sn=a3006d2615237b392a55971d9ec8ecb5": "WPA3协议存在安全漏洞，黑客可获取WiFi密码", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587938&idx=1&sn=501d4121b0437af290d817483a675882&chksm=b18c23a886fbaabe422e605465696484340427bfb6526e2118e6f832e266bac9bce720eff738&scene=58&subscene=0": "Hyper-V拒绝服务漏洞CVE-2024-43633分析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067095&idx=3&sn=6a10a23e41cc2e64a94951ad4f2b52a7&chksm=f36e7957c419f041c9d193510f5453c8bce347ca65375be93267debb7b12fefaa85fa6841c88&scene=58&subscene=0": "【安全圈】新的“DoubleClickjacking”漏洞可绕过网站的劫持保护", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496729&idx=1&sn=0a735adcd78402855c254e71221dff90&chksm=e8a5fe7adfd2776ca71d3129f40f8563f43cf56c780d84d717f8e8cd767c5859909172fd9d04&scene=58&subscene=0": "赏金$3133的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjIxNjExNg==&mid=2247486122&idx=1&sn=fe8e6f4bc0f3516c35c83887e341c6a7": "文件读取漏洞实战利用", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485846&idx=1&sn=8821684901650fb3340200122965fecd": "【漏洞复现】某平台-taillog-mediaserverlogs-readfile任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486632&idx=1&sn=79a5e1493e56ee8fa3a591cb2ab60964": "「漏洞复现」互慧-急诊综合管理平台 ServicePage.aspx 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247525435&idx=2&sn=4140af372cc6b9d211f6fc455ada62f3": "WPA3协议存在安全漏洞，黑客可获取WiFi密码", "https://mp.weixin.qq.com/s?__biz=MzkyMTY1NDc2OA==&mid=2247487254&idx=1&sn=01268baaacf70df064ef36219af22e7c": "【漏洞文章】大华智能物联综合管理平台远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MjkwMDY3OA==&mid=2247485497&idx=1&sn=aa791ceb660da7539769e68f0ec483b7": "【漏洞复现】万能门店小程序系统存在任意文件读取", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650606113&idx=4&sn=3a58d4a332d17dd134f29e1888743162": "Burp Suite 插件 BurpGPT，可执行额外的被动扫描，以发现高度定制的漏洞，并可以运行任何类型的基于流量的分析。", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652113608&idx=1&sn=f79caed7d42805c756667e5f6216476f": "一省政务信息化项目建设办法印发：风评、密评结果不合格不得申请竣工验收", "https://mp.weixin.qq.com/s?__biz=MzkwNTE4Mzc2Mg==&mid=2247486465&idx=1&sn=1138d31bfd05c8c6efd96bfce126e10e": "【漏洞复现】急诊急救快速联动平台存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487549&idx=1&sn=9a6dcd1989da0543295006e8a93e3fc7": "赛克安全本周漏洞推送（12.28-1.3）涉及致翔 OA、校盈家财务管理平台、明源云-售楼管理系统v5.0、平升水库系统漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650623299&idx=1&sn=9a0edc99a2f75633bf1845d51b1bf96a": "《2024年度漏洞态势分析报告》重磅出炉！文末扫码下载", "https://mp.weixin.qq.com/s?__biz=MzI5MzU4ODE5Mw==&mid=2247485667&idx=1&sn=83c752dd7559eb7db583e4792aac6c83": "赛克安全本周漏洞推送（12.28-1.3）涉及致翔 OA、校盈家财务管理平台、明源云-售楼管理系统v5.0、平升水库系统漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NDQyNzg1OA==&mid=2247493791&idx=1&sn=5db4f1eab8076ccd384a942642fdc147": "Web漏洞分析与防范实战丨从\"脚本小子\"迈向\"研究员\"的第一步", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793722&idx=2&sn=0164b2813dcf92be4bc01f7397f6da75": "新的“DoubleClickjacking”漏洞攻击可绕过主要网站的点击劫持保护措施", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793722&idx=3&sn=5967bc25cd58dbddd6903bdc12c80132": "针对Windows LDAP 零点击 RCE 漏洞的 PoC 利用工具发布", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247486783&idx=1&sn=9e091d4265c105fdb69748dd2719e582": "记一次某OA渗透测试有意思的文件上传漏洞挖掘经历以及分析", "https://mp.weixin.qq.com/s?__biz=MzUzMDQ1MTY0MQ==&mid=2247506520&idx=1&sn=34e28b190e59f2ddf4e3ed081340efd1": "0Day-OURPHP建站系统存在未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247488398&idx=1&sn=21afa7d56109b232ecfd8857479dadb3": "指导手册 | Web漏洞分析与防范实战", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247538586&idx=2&sn=4fa87eedfb67b928e4df328ad6fbc89e": "【漏洞通告】Windows LDAP远程代码执行漏洞（CVE-2024-49112）", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247538586&idx=3&sn=0f21db352d546b8e521103fc73e21313": "急需升级，D-Link 路由器漏洞被僵尸网络广泛用于 DDoS 攻击", "https://mp.weixin.qq.com/s?__biz=MzIxNjI2NjUzNw==&mid=2247492825&idx=2&sn=bee7a2cc307a6c4b7272cb74bcc5188f": "上周关注度较高的产品安全漏洞(20241223-20241229)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489951&idx=1&sn=a0ac658e34aaa8913ddcdf8cfaf58749": "圣乔ERP系统 DwrUtil SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489945&idx=1&sn=a477e7aa3188a44655347cf7b1c3f64b": "圣乔ERP系统 ResultSetConvertor SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247502201&idx=1&sn=f9dbc0640e326e3c63591c0ae5c533b0": "文件读取漏洞实战利用", "https://mp.weixin.qq.com/s?__biz=MzkzODQzNTU2NA==&mid=2247486273&idx=1&sn=25043aaddb4c641195e99dbfd8312447": "记一次某OA渗透测试有意思的文件上传漏洞挖掘经历以及分析", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526722&idx=1&sn=c459e062a45c8e0fdb86bda7a9adad2d": "伪造的 7-Zip 漏洞代码被追溯到人工智能产生的误解", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526722&idx=2&sn=4e99985c4a7e6bb4da0031be24483dbb": "LDAPNightmare：SafeBreach Labs 发布了 CVE-2024-49113 的第一个概念验证漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526722&idx=3&sn=d639417738fd4aa1f00df58ecab69d19": "已修补但仍然存在漏洞：Windows BitLocker 加密再次被绕过", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489936&idx=1&sn=b378d029b84650cdd266b98ff895940e": "圣乔ERP系统 SingleRowQueryConvertor SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454063799&idx=1&sn=6adf30edb8fb730c3fcb98d5e6caccde": "信息安全漏洞周报【第004期】", "https://mp.weixin.qq.com/s?__biz=MzU5OTU3NDEzOQ==&mid=2247492707&idx=1&sn=701686fdf382df31406c42beed964ac9": "Cyber Apocalypse 2023 硬件 CTF 题解", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247485072&idx=1&sn=cd5c7085fac45bf2a9d30a905608af8c": "工具集：NacosExploit【Nacos漏洞综合利用工具2.0】", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488533&idx=1&sn=3bd41daca34f543f26361bb54f403b16": "【首发 1day】WordPress Crypto 插件存在前台任意用户登录漏洞(CVE-2024-9989)", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247495858&idx=1&sn=76fdf27c27f11d69e3effa68ce25f8e6": "【漏洞工具】小米路由器任意文件读取漏洞python命令行利用工具", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067112&idx=3&sn=7e0c3ed063040f28dd8bb8c3ead818df": "【安全圈】伪造的 7-Zip 漏洞代码被追溯到人工智能产生的误解", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247533331&idx=2&sn=751643f262d2972ec452a721c9f8ebf6": "网络安全行业的黄埔军校正奇学苑5期招生，穿越周期，成就梦想", "https://mp.weixin.qq.com/s?__biz=MzU3MzU4NjI4OQ==&mid=2247515719&idx=1&sn=01c1fdb783a2a11f73b6961114c9435b": "大量 Four-Faith 路由器因严重漏洞面临远程攻击风险", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588040&idx=3&sn=c54a81adfa6bf7c53845b3652106407a": "第一章课时12已更新！系统0day安全-IOT设备漏洞挖掘（第6期）", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650620552&idx=1&sn=f9f9673a4f304eab117055481a005b46": "红色护航者 | 亚信安全主题党日暨爱心捐赠活动圆满举办", "https://mp.weixin.qq.com/s?__biz=Mzk0MDYwMjE3OQ==&mid=2247485991&idx=1&sn=7e2497e7d5b5eed3611a44240e8f635c": "2024年度网络安全热点事件盘点", "https://mp.weixin.qq.com/s?__biz=MzA5Nzc4Njg1NA==&mid=2247489176&idx=1&sn=ffb725e520b5f1e0362b480c6148b21d": "关于防范Apache Struts2任意文件上传超危漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=MzkzMDcxNzg4MA==&mid=2247484491&idx=1&sn=ac035ef8a3a9ae982812f3dc87657a60": "[漏洞复现]大*智能物联平台GetClassValue命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247519035&idx=1&sn=6c4593ec850320bb3a2babf74b848e0c": "Web安全进阶：漏洞分析与防范实战技巧", "https://mp.weixin.qq.com/s?__biz=MzkyOTI4NTY4MQ==&mid=2247491104&idx=1&sn=e4d202e11acf2a0c3123a79f7d250d9a": "【文末抽奖】看完这篇《Web漏洞分析与防范实战》成为Web大神！", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496735&idx=1&sn=05050cc8b07c9a49333af1d0dbd6d2e2": "当黑客那些年之帐户接管系列漏洞-案例一斩获1000$", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489400&idx=1&sn=c983947941f4637d6fade0c80b18ea2c": "【高危漏洞预警】Windows LDAP远程代码执行漏洞（CVE-2024-49112）", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502708&idx=1&sn=30ee0bf007924eb359c6c609b3ba1cb7": "【已复现】Windows 轻量级目录访问协议 (LDAP) 拒绝服务漏洞(CVE-2024-49113)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502820&idx=1&sn=5ebcb4158f712c89ddc3f0c5b1ee0bed": "【成功复现】大华智能物联综合管理平台远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247552887&idx=1&sn=9fe7fc306ecf8525a4089f0857ccfd64": "Web漏洞分析与防范实战丨从\"脚本小子\"迈向\"研究员\"的第一步", "https://mp.weixin.qq.com/s?__biz=MzkwODY2MzMyMA==&mid=2247484481&idx=1&sn=98e543ae16027d7d521fd5389f6dfce3": "【全球首发】【6w$赏金】微软身份漏洞-未授权强制解绑任意微软账户邮箱（全球微软账户邮箱或受影响)", "https://mp.weixin.qq.com/s?__biz=MzI0NjA3Mzk2NQ==&mid=2247495429&idx=1&sn=38b21b3d0a81ed449647cb0de481cac6": "攻防靶场(31)：日志投毒与文件包含漏洞 Solstice", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247489375&idx=1&sn=3d401297a02bc6e0f6eb3ef1368dfbad": "【漏洞复现】方正畅享全媒体新闻采编系统imageProxy存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE1MDY0NA==&mid=2247508683&idx=1&sn=2d8afad815b3a090caa695a9c69731f8": "中孚安全荣获“山东省大数据企业50强”称号", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491972&idx=1&sn=307a01116d071dca48ffee093d16aaab": "漏洞预警 | Apache MINA反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491972&idx=2&sn=881630209ae33b7efb60ddafb7892458": "漏洞预警 | 博斯外贸管理软件SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491972&idx=3&sn=ff471839b4b2ae7ac321141a08593a64": "漏洞预警 | 卓软计量业务管理平台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247496418&idx=1&sn=8ba7f14c84d7089429b1828b786203d7": "即刻预约！长亭“WAF+AI”再度跃迁，1月7日语义3.0发布会邀您共启新篇", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489721&idx=1&sn=b03f73d9fdf6f1e1d219e73362c793e5": "大华智能物联综合管理平台RCE远程代码执行漏洞-影响资产8000+| 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588040&idx=3&sn=c54a81adfa6bf7c53845b3652106407a&chksm=b18c230286fbaa1426c7e84fac1daa652e1df3e517dd4f8b403adb7f5e797f0fac9181d0e6fb&scene=58&subscene=0": "第一章课时12已更新！系统0day安全-IOT设备漏洞挖掘（第6期）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067112&idx=3&sn=7e0c3ed063040f28dd8bb8c3ead818df&chksm=f36e7968c419f07e6117e2802423856581ea51449912efb9ef7a18550dc27bba052d7d7128e0&scene=58&subscene=0": "【安全圈】伪造的 7-Zip 漏洞代码被追溯到人工智能产生的误解", "https://mp.weixin.qq.com/s?__biz=MzkyMTQwNjA4NA==&mid=2247485131&idx=1&sn=5b3ff5eae1d2bb87ab5c38034e1d2261": "WeChatMsg：生成你的 2024 微信年报", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655263253&idx=1&sn=20cdf534e83d3983f4168fd98f57357a": "2024年度漏洞态势分析报告", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247497565&idx=1&sn=0495a32e8e257d65c7ad14810a22fa74": "【oscp】Tr0ll 靶机全系列（1-3），FTP被玩坏了", "https://mp.weixin.qq.com/s?__biz=MzkxNTU5NTI1Ng==&mid=2247486538&idx=1&sn=77ec7c2278372d78a1d4ac16c97af6fc": "【全球首发】【6w$赏金】微软身份漏洞-未授权强制解绑任意微软账户邮箱（全球微软账户邮箱或受影响)", "https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247487950&idx=1&sn=8ef08d9a0d19a6b3e0836af79fac258b": "遗憾！某漏洞挖掘者错失$60000微软奖金！", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651311342&idx=2&sn=77ebd12d4c8d0c5e3eea44fb7726b249": "FreeBuf周报 | 超过300万台未加密的邮件服务器暴露；WPA3协议存在安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496735&idx=1&sn=05050cc8b07c9a49333af1d0dbd6d2e2&chksm=e8a5fe7cdfd2776ab0338be789f2f5be122c6e4e10945d24ffb5dbd8b288ff43bd987855a64c&scene=58&subscene=0": "当黑客那些年之帐户接管系列漏洞-案例一斩获1000$", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067148&idx=2&sn=b5d58580bfec4388018946e5f03f2ce6&chksm=f36e790cc419f01a2cb74d348b4855f80c5f279e8ebab8a25cf5c2f3beffb0d66622c0567162&scene=58&subscene=0": "【安全圈】开源终端工具曝重大安全漏洞，输入信息可能被窃取！", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067148&idx=3&sn=d0e8225dafa1c2fb13ad0e7f22376327&chksm=f36e790cc419f01a20528cc722e7f75d6c77ce8bb1bb4ac0f0503c3e9f9a6357c34f2172a526&scene=58&subscene=0": "【安全圈】微软 Win11 BitLocker 存在物理接触即可绕过的重大漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247509347&idx=1&sn=d8886a100e78c54f98c7172e8f3c555a&chksm=fa5270ddcd25f9cbbe87cac2d57c45350c26df28891b05bf9671c4a13d19270f167c120225c5&scene=58&subscene=0": "山石安研院2024年度代表性原创0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489981&idx=1&sn=d2a18a6d7f33b0238c87a7091e2eeb06": "杜特网上订单管理系统 Login.ashx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489971&idx=1&sn=a69991f940624d3f9afd5836d1940ec4": "生命港湾 服务配置工具平台 Download 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247500344&idx=1&sn=5a7278e5bfdaf2f714b74aec9dc6084b": "大华DSS城市安防监控平台login_init.action远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247495870&idx=1&sn=4ed4226b873ada078ba36fccf2108607": "【漏洞工具】小米路由器任意文件读取漏洞python图形化框架利用工具", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094525&idx=1&sn=65e2d2894d932d82b3b385c1fecdb76b": "Windows LDAP远程代码执行漏洞（CVE-2024-49112）", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633558&idx=3&sn=52cfdbc169143c290a49fffc945d77d6": "Windows 曝9.8分漏洞，已有PoC及利用情况", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067165&idx=3&sn=d144262f4db66660f995538078a1b911": "【安全圈】已打补丁但仍有漏洞 Windows BitLocker 加密再次被绕过", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067165&idx=4&sn=c029416c7a5c7547cdb5718ab041f434": "【安全圈】CVE-2024-21182： 针对严重 WebLogic 漏洞发布 PoC 漏洞利用代码", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247495864&idx=1&sn=deb2517a2a592c545416b6713def7f3f": "【漏洞工具】小米路由器任意文件读取漏洞python图形化单一利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491876&idx=1&sn=1ffb723d73f1a24290998ff19c4f929e": "黑客利用 DoS 漏洞禁用 Palo Alto Networks 防火墙", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491992&idx=3&sn=f5877b3b5c43f92dac5db26d73ef9cc2": "漏洞预警 | 安科瑞环保用电监管云平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247505530&idx=4&sn=d74d0d52adbd4477bc0279d88f92f1e3": "研究人员发布针对 Windows LDAP 漏洞的 PoC 漏洞利用程序", "https://mp.weixin.qq.com/s?__biz=MzkyMjE1NzQ2MA==&mid=2247489543&idx=1&sn=5520e054baf84c6b15efb1dcba86f33f": "漏洞盒子批量提交脚本5.1.26", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518078&idx=1&sn=d18a3a9d61850a5161557e81902b3edc": "SRC中的重置密码漏洞及案例", "https://mp.weixin.qq.com/s?__biz=MzI1NTE2NzQ3NQ==&mid=2247485511&idx=1&sn=24c216754ea9f84396bd3159a2ec4b0f": "【漏洞复现】内训宝 SCORM 模块存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247506388&idx=1&sn=7849c2c58b1c52c42576c29212f5793f": "DataEase 严重级别任意登录漏洞 POC 已公开", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067165&idx=3&sn=d144262f4db66660f995538078a1b911&chksm=f36e791dc419f00b53c872da23e5261585cb279c4fa08d939ea682657a5925e791631aa65f37&scene=58&subscene=0": "【安全圈】已打补丁但仍有漏洞 Windows BitLocker 加密再次被绕过", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067165&idx=4&sn=c029416c7a5c7547cdb5718ab041f434&chksm=f36e791dc419f00be3b60bcb99751bc30c99b91e4374580b6f8324988c04ef49bec0fe5adb66&scene=58&subscene=0": "【安全圈】CVE-2024-21182： 针对严重 WebLogic 漏洞发布 PoC 漏洞利用代码", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247491534&idx=1&sn=6b91592832e349d474acaf9011cc85bf": "爱丁堡大学&剑桥大学|漏洞赏金生态系统中的团队与合作", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247490119&idx=2&sn=2b09712ebaff4912cb6d4949f5d5b65c": ".NET内网实战：通过winlogon进程提升至SYSTEM权限", "https://mp.weixin.qq.com/s?__biz=Mzg2NzkxOTQ0OA==&mid=2247484493&idx=1&sn=7545164959c161a63433f8be5dd61481": "海康威视iSecure Center综合安防管理平台center任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507635&idx=1&sn=3ed64fc475689a3cd2c08cc3a146a471": "漏洞通告 | Windows 轻量级目录访问协议 (LDAP) 拒绝服务漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485850&idx=1&sn=6bb2f5fca96567a9626e11f65c2e4bd5": "【漏洞复现】某平台-LicManage-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247488964&idx=1&sn=bd0fe693fa0fadd466193ae87b6cfe97": "Jeecg框架漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg3NTY0MjIwNg==&mid=2247485320&idx=1&sn=412bcd1b8866a2a56fdc4bcf28c57157": "严重漏洞，数十万大众电动车主数据可能遭到泄漏", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650606244&idx=1&sn=8000e773da8fb2b362bc7283a912db76": "刷脸登录银行 App 现他人信息，银行回应称“网络抖动带来的极小概率事件”|Windows 曝9.8分漏洞，已有PoC及利用情况", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650606244&idx=4&sn=cac307949d0726a89c8a1fecf76f71d5": "ysoSimple：简易的Java漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkwNTE4Mzc2Mg==&mid=2247486471&idx=1&sn=9238e79bbaa2bbde625cd95c19aaa1f8": "【漏洞复现】MasterSAM存在任意文件下载漏洞(CVE-2024-55457)", "https://mp.weixin.qq.com/s?__biz=MzkwNTE4Mzc2Mg==&mid=2247486471&idx=2&sn=31aa24c1406c4a36c74845528852505e": "【漏洞复现】DataEase数据可视化分析平台JWT硬编码身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTY1NDc2OA==&mid=2247487256&idx=1&sn=5f02d951d459a7c2ef37977afc806005": "【漏洞文章】大华智能物联综合管理平台远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1NTE2NzQ3NQ==&mid=2247485521&idx=2&sn=21fccb1beac3a0dcc9a565a36fcfa9a7": "【漏洞复现】快云服务器助手GetDetail接口文件任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247486903&idx=1&sn=0a066aff4189674338d0ffe68e405275": "【Nday漏洞分析】ProjectSend 身份认证绕过漏洞(CVE-2024-11680)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491992&idx=1&sn=fbd0590c31f7e295b5743345888e231c": "漏洞预警 | WordPress Plugin Tutor SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486408&idx=1&sn=ac34350ed2c25084cb78cec5ff40275e": "CVE-2024-50379|条件竞争Tomcat RCE POC（首发）", "https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661297849&idx=2&sn=a308a4ae4e30195959399c63a47f2d45": "山石说AI｜精准探测 智慧守护：大模型重塑漏洞检测新标杆", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526837&idx=1&sn=bdc1792b20bbc0e3485123421c3c240c": "CVE-2024-43452：针对 Windows 特权提升漏洞的 PoC 漏洞发布", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526827&idx=3&sn=d436ecb47df01da7840466672e818830": "CVE-2024-56513：Karmada 漏洞使攻击者能够控制 Kubernetes 系统", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502853&idx=1&sn=6116493ef276d07ee2f6c5105fb25d62": "【成功复现】爱数AnyShare SMTP_GetConfig 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614973&idx=1&sn=0cb7f44aa7d6b3d7f0b82a6e1490a6cc": "从js到高危垂直越权漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247492762&idx=1&sn=0bc624892380a7706ceb595f6e0a5381": "漏洞盒子批量提交脚本5.1.26", "https://mp.weixin.qq.com/s?__biz=Mzg2NzkxOTQ0OA==&mid=2247484492&idx=1&sn=7da5690238bdb790765079470195bd8e": "W&Jsoft-D-Security数据仿泄露系统(DLP)存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491992&idx=2&sn=1e67ec9b7cddeda507a7d80598525961": "漏洞预警 | 友数聚CPAS审计管理系统SQL注入和任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495665&idx=2&sn=12f9e3cc2b5d3e22e02af2d000cf0588": "上周关注度较高的产品安全漏洞(20241230-20250105)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526827&idx=1&sn=02106475443306b2005d8031e320d35f": "CVE-2024-47575：FortiManager FortiManager Cloud 缺少身份验证允许执行任意代码或命令", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489990&idx=1&sn=3bbe2aaccd2b7d99ff183f18e3509de7": "协众OA checkLoginQrCode SQL注入漏洞(XVE-2024-34879)", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655263381&idx=1&sn=899ccf90b6a54fb98818c2c375e2fe91": "2025年人工智能产业发展趋势", "https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247530812&idx=2&sn=80bce7fb3e712bd40ba29b66f8b49d68": "快讯丨工信部：关于防范Apache Struts2任意文件上传超危漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488816&idx=1&sn=40e56b606871ab82673a8eb5107edcb4": "【漏洞通告】Windows LDAP拒绝服务漏洞（CVE-2024-49113）", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247548436&idx=1&sn=baec9456357a098350c006c6186d0d2e": "日系三大车企纷纷投靠华为", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651134506&idx=2&sn=9a67c145a1539839b820660b74a1ee6e": "三部委联合印发《国家数据基础设施建设指引》；PoC漏洞利用工具LDAPNightmare或导致Windows服务器崩溃", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489999&idx=1&sn=483eb2d814c97345bcfadb2755a0fc9b": "大华智能物联综合管理平台 GetClassValue.jsp 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260378&idx=1&sn=8a397791da177ade1828327c43faa20b": "如何在M芯片的Mac上流畅游玩Windows游戏", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518105&idx=1&sn=0ee740b5265c89d5769a9d72c63546e5": "如何将低危的 SSRF 盲注升级为严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489406&idx=1&sn=54cef714873b5f9d9ffca2150ee957b3": "【漏洞预警】Windows LDAP拒绝服务漏洞（CVE-2024-49113）", "https://mp.weixin.qq.com/s?__biz=Mzg4NjY3OTQ3NA==&mid=2247486468&idx=1&sn=42f66efd85076e48ece76d7e8711f8bd": "某教学平台支付逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTYwMzc5OQ==&mid=2247500670&idx=1&sn=12cd707e76414099093fc21cf65e7a9e": "某教学平台支付逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzOTIyMzYyMg==&mid=2247494699&idx=1&sn=5359d9bd1ac4044079ed06a503a44c85": "360SRC&360漏洞云丨洞力拉满，泰国出发！", "https://mp.weixin.qq.com/s?__biz=MzkyODUzMjEzOA==&mid=2247483839&idx=1&sn=191cc600e45bc1c15207cee93794e1f0": "CVE-2024-25600 WordPress Bricks Builder远程代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247495877&idx=1&sn=6e0705560c0d368671c89ae43f6439b9": "【漏洞工具】小米路由器任意文件读取漏洞python图形化框架利用工具(poc|exp)", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094538&idx=1&sn=05dcbb09f205fa96a19b7a50cbbb52ec": "ASUS 路由器漏洞允许执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094538&idx=2&sn=3684eb5a5603b04f77d47066b15a50fa": "针对 Windows 注册表权限提升漏洞发布的 PoC 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247505572&idx=2&sn=5ea3a759ef146c95cce6966628d3e02e": "每周网安资讯 （12.31-1.6）|HP多款产品存在漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492674&idx=1&sn=e33ed0bd30aa7b5dd0ebce7fab0ae54f": "【已复现】Windows 轻量级目录访问协议 (LDAP) 信息泄漏漏洞（CVE-2024-49113）", "https://mp.weixin.qq.com/s?__biz=MzAxODg1MDMwOQ==&mid=2247506905&idx=1&sn=41f6c85975d441705ce630e3b05992df": "优秀案例｜谋乐科技入围“2024年度数据安全优秀案例评选”政务场景", "https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651134940&idx=1&sn=9d1fe08b8959e5098f587a666230b4a4": "【梆品推荐】梆梆安全移动应用合规平台 快速识别违规风险", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490009&idx=1&sn=29a640c65606ac3b71a0eccf8cf01537": "蓝凌OA WebService sysTagWebService 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247494715&idx=1&sn=bf26df8257d19255a8f2d86ad69b7e49": "【神兵利器】内网全方位漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493088&idx=1&sn=04f75d2cce65b0ea93a8576f38355a24": "Nuclei 漏洞允许绕过签名并执行代码", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247502144&idx=1&sn=a9ca57845adb8a3cee52b994bb6dd9ed": "360漏洞云&360SRC丨洞力拉满，泰国出发！", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490158&idx=1&sn=e538e6e053ca4c9fa711c39b2c7530b1": "已打补丁但仍有漏洞 Windows BitLocker 加密再次被绕过", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489577&idx=1&sn=e5b5f2ca0ca54cfad72ee3061f19209e": "【已复现】Windows 轻量级目录访问协议 (LDAP) 信息泄漏漏洞（CVE-2024-49113）", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462544&idx=1&sn=8ef4f6d5ce9ce4a58b596bbbad1a0aa3": "2024年度（第二期）CNNVD漏洞奖励评选结果公告", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247519062&idx=1&sn=3f7b5a21dfbaf02d2294efec6c27e29b": "记一次某OA渗透测试有意思的文件上传漏洞挖掘经历以及分析", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507635&idx=1&sn=3ed64fc475689a3cd2c08cc3a146a471&chksm=cfcabda7f8bd34b1a7fff4bf9e12a26159edba95f80ef2dcc1f6be93e3254b732b48b0593b5f&scene=58&subscene=0": "漏洞通告 | Windows 轻量级目录访问协议 (LDAP) 拒绝服务漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492674&idx=1&sn=e33ed0bd30aa7b5dd0ebce7fab0ae54f&chksm=96f7fb2fa18072399da0de5e3ce959dfe5751d0de1d90a0ce55ff2c4ffe9327da53542d690cd&scene=58&subscene=0": "【已复现】Windows 轻量级目录访问协议 (LDAP) 信息泄漏漏洞（CVE-2024-49113）", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247491534&idx=1&sn=6b91592832e349d474acaf9011cc85bf&chksm=fe2ee045c959695389234cb3754f83d9d20c4e8b837cf16ca737ce9a1ad7394770d7dfffb68d&scene=58&subscene=0": "爱丁堡大学&剑桥大学|漏洞赏金生态系统中的团队与合作", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503267&idx=1&sn=47e29ccabd62c421ba1c885bb208e109&chksm=f2585f50c52fd6463212a9fd5aecd87a4312f82d5052052717ab05ab56d27ffc80ea48ae57c5&scene=58&subscene=0": "雷神众测漏洞周报2024.12.30-2025.1.5", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247502144&idx=1&sn=a9ca57845adb8a3cee52b994bb6dd9ed&chksm=cfc56e1ff8b2e709b8109abb20e08bbaee22bfde3ae080d57ca440e74f4721945aeacb1b3f9b&scene=58&subscene=0": "360漏洞云&360SRC丨洞力拉满，泰国出发！", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495665&idx=1&sn=a84870c57ea8a9900f3d9c8fbc890d0c&chksm=fd74df38ca03562e9c63d183c47b2855ecebcc1ac30cdcbfcc0463c4a83637f0971607570404&scene=58&subscene=0": "CNVD漏洞周报2025年第1期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495665&idx=2&sn=12f9e3cc2b5d3e22e02af2d000cf0588&chksm=fd74df38ca03562e01745622acea53aacac64553a82441b46fdf1dc72d16062a1f8bea2ba7cf&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241230-20250105)", "https://mp.weixin.qq.com/s?__biz=MzI3NjUzOTQ0NQ==&mid=2247516929&idx=1&sn=a715db45df94a45c7c28e803faee7416": "2025 OWASP 大语言模型应用程序10大风险", "https://mp.weixin.qq.com/s?__biz=MzUyMDEyNTkwNA==&mid=2247497075&idx=1&sn=1d041504e40dfbb400c230c0dcbb1bd0": "《2024年度漏洞态势分析报告》重磅出炉！文末扫码下载", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484549&idx=1&sn=a88bf7fad8fe67e1040afaefb128bffe": "【漏洞复现】急诊急救快速联动平台ServicePage.aspx任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491415&idx=1&sn=d4d4fe16a360f1ea8a4ef40228053f8b": "【全球首发】【6w$赏金】微软身份漏洞-未授权强制解绑任意微软账户邮箱（全球微软账户邮箱或受影响)", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498056&idx=3&sn=213fffbf1af5721831386a359b2a979f": "漏洞的尽头竟然是玄学，随机触发学会了！", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652113760&idx=1&sn=567513461a25da6871c790aeadb56353": "AWS在4年内出现3次重复同一个严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491993&idx=2&sn=dc36d96c8a03d2594b7d75c14af249c7": "漏洞预警 | 科汛网校KesionEDU SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247506599&idx=1&sn=1af5738b55e3fad98549d5c4ec287791": "暗网情报5则：涉国外赌场、金融企业、国内化工上市企业、VPN漏洞等", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489577&idx=1&sn=e5b5f2ca0ca54cfad72ee3061f19209e&chksm=fb029571cc751c67a6fd5df33df6c6a56060bafb8b59b65b2256b8c6c3e3646ed497c8eec523&scene=58&subscene=0": "【已复现】Windows 轻量级目录访问协议 (LDAP) 信息泄漏漏洞（CVE-2024-49113）", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499585&idx=1&sn=07dab065b4c75233ca46e6ddbce24b33": "CNVD漏洞周报2025年第1期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499585&idx=2&sn=89a27d818040b2144ba2a3da68e1d44a": "上周关注度较高的产品安全漏洞(20241230-20250105)", "https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247487988&idx=1&sn=c73c46f0346c71cadcdf295b658710cd": "注意！安全漏洞不能随意发布！", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247500352&idx=1&sn=188c9a99437ff8a2db179048b7546bf1": "【突发】某博主因分享漏洞POC被抓", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247485708&idx=1&sn=42524032a2389e079ddd6bc610e512c5": "华天动力OA Service漏洞分析两则", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247490629&idx=1&sn=fc902e170fcd1fb1fa6b5e316b61c625": "突发！更新漏洞poc的公众号主被抓！", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488549&idx=1&sn=cad8f136819b7db090de021063bf308c": "【吃瓜】震惊，某漏洞文库公众号作者被请喝茶", "https://mp.weixin.qq.com/s?__biz=MzkxODM5MzYzNg==&mid=2247485492&idx=1&sn=f718e7f890281495ec610054e8fe9962": "某漏洞文库公众号作者去喝茶了", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247491331&idx=1&sn=ea9fbccb883075b62ac83b400fe69b91": "突发！更新漏洞poc的公众号主被抓！", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502872&idx=1&sn=26244a6372821124c553eb1dcff46815": "【成功复现】Cleo产品远程命令执行漏洞(CVE-2024-50623)", "https://mp.weixin.qq.com/s?__biz=Mzg4MjcxMTAwMQ==&mid=2247488649&idx=1&sn=2f0d1aa7eb7720838be405dc583e691c": "吃瓜-国内最快漏洞文库已注销", "https://mp.weixin.qq.com/s?__biz=MzkxNTczMjA1Ng==&mid=2247483963&idx=1&sn=246277137aaa787579ba54062af6cbb3": "漏洞文库强行退出安全圈，并上所", "https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247512706&idx=1&sn=8c10b0c6ac86a5c91fa4e64497371b65": "ICLR 2025 Workshop 征稿：推动基础模型的开源、开放、可复现", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521996&idx=2&sn=dbafe74fa2a73a7ecd72c5ca600d8614": "Moxa 设备严重漏洞将工业网络暴露在攻击中", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNzc3OQ==&mid=2247484325&idx=1&sn=d13c33978ec30d0a38052bba6c6ab437": "Nuclei 被曝高危漏洞！允许攻击者进行签名绕过和代码执行，谨慎使用陌生的YAML模板", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU0OTQyMg==&mid=2247484304&idx=1&sn=83efb53eb231adb8b58b258bb481d547": "【漏洞预警】用友 U8cloud CTExecDraftAction SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247525456&idx=1&sn=9adbaee1f78b980d00fe5586bf04e796": "Windows 曝9.8分漏洞，已有PoC及利用情况", "https://mp.weixin.qq.com/s?__biz=Mzg5NDczNDc4NA==&mid=2247495439&idx=1&sn=4b64e083c51bf2ab52aa684915c41cd0": "第八届网络空间安全西湖论坛在浙江大学成功举办", "https://mp.weixin.qq.com/s?__biz=Mzg2MjkwMDY3OA==&mid=2247485504&idx=1&sn=4e308c22e892ba7903ac17cd10ca98da": "【漏洞复现】EasyCVR视频管理平台存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247496300&idx=1&sn=6a4b98953e18f9b7389819dfae63d82c": "Burp Suite插件 SQL Injection Scout，检测SQL注入漏洞而生", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490164&idx=1&sn=76ce8521d56046c9be42f0e7e4a9ac5f": "Moxa 提醒用户注意蜂窝和安全路由器中的高严重性漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247516802&idx=1&sn=55aac04f8e0d96649f8c08142a4255f7": "漏洞预警｜Redis代码执行漏洞(CVE-2024-46981)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651311528&idx=1&sn=3491451dbb5738352f29c97dc37aa221": "Redis服务器曝2个严重的RCE漏洞，数百万系统面临风险", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651311528&idx=2&sn=3c6c85bc8d3fa2ea029e88506d563efd": "4年内重复出现3次，AWS屡曝严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489411&idx=1&sn=24e2689a0859703412b2e6d0e5e237cf": "【漏洞预警】Redis代码执行漏洞（CVE-2024-46981）", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526927&idx=2&sn=ddf256ebc16b6cac294434e36d71f0d4": "CVE-2024-43096 及更多：Android 安全更新中修复的关键 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247488592&idx=1&sn=fc646cf9f3bafe2141ec9fc2a186dd0d": "渗透测试速查表", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588181&idx=3&sn=ed0557407f95454c25c98501fe8cac6e": "更新：第3章-AFL原理！系统0day安全-二进制漏洞攻防（第4期）", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500582&idx=2&sn=026e0c07bdb2acfdb3773dc0cfa906e3": "【漏洞通告】Redis代码执行漏洞（CVE-2024-46981）", "https://mp.weixin.qq.com/s?__biz=MzkxMDYzODQxNA==&mid=2247483853&idx=1&sn=bf46a58ec18d74abdc86c483d03ec6a8": "Gayfemboy：一个利用四信工业路由0DAY传播的僵尸网络", "https://mp.weixin.qq.com/s?__biz=MzU5MTExMjYwMA==&mid=2247485701&idx=1&sn=668e8f8056e8407ee9d22479bddeba41": "帆软Finebi_V5.1.10_channel反序列化漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899958&idx=1&sn=f4f1a9debde61c9fff15b9e825658880": "Nuclei漏洞CVE-2024-43405曝光：攻击者可绕过签名验证执行恶意代码", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490028&idx=1&sn=0fe8e60a6363b5c36c11baf7a66fc49d": "蓝凌OA WebService sysNotifyTodoWebService 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486682&idx=1&sn=814bc66c684aab336ebe82fb0a00e77f": "「漏洞复现」深科特 LEAN MES系统 SMTLoadingMaterial.ashx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484885&idx=1&sn=76d3670fefa33234544d26edae8cb63b": "【漏洞复现】CVE-2025-22214", "https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247490202&idx=1&sn=7c720e0270ddcb56fc28f38bfd88491a": "某公众号作者擅自发布安全漏洞被处罚", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247487698&idx=1&sn=f277fd2202cdf84e622dca83d0aa70a7": "Linux的常用持久化手段", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247495889&idx=1&sn=98de8ca8d70849d91b142cf839c268d5": "【漏洞工具】某路由器任意文件读取漏洞go命令行跨平台利用工具", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526927&idx=1&sn=d79b7d33ed9e4462609d073a835901ed": "CVE-2024-8474：OpenVPN Connect 漏洞泄露私钥", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518111&idx=1&sn=6d7d5b677886d7ff20013f0c1e283b18": "Web安全进阶|Web漏洞分析与防范实战", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521996&idx=2&sn=dbafe74fa2a73a7ecd72c5ca600d8614&chksm=ea94a7a6dde32eb0768fd7281523c870565bc1d8ec2cd067e00a960f7468a905c6da64ea56e1&scene=58&subscene=0": "Moxa 设备严重漏洞将工业网络暴露在攻击中", "https://mp.weixin.qq.com/s?__biz=MzUyMDEyNTkwNA==&mid=2247497075&idx=1&sn=1d041504e40dfbb400c230c0dcbb1bd0&chksm=f9ed99ccce9a10da22c25a9ff321fa595600b67a6732af43b71a7eb868716f3f890b44879ba3&scene=58&subscene=0": "《2024年度漏洞态势分析报告》重磅出炉！文末扫码下载", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588181&idx=3&sn=ed0557407f95454c25c98501fe8cac6e&chksm=b18c249f86fbad8995e1190a59a1246ee4e62ef77b07b391f3146b3756ec7d7dafe3fab314a0&scene=58&subscene=0": "更新：第3章-AFL原理！系统0day安全-二进制漏洞攻防（第4期）", "https://mp.weixin.qq.com/s?__biz=MzU5MTExMjYwMA==&mid=2247485701&idx=1&sn=668e8f8056e8407ee9d22479bddeba41&chksm=fe32b9f2c94530e4b65e364b10d457aeecb0c809a7abcc146222fdf4d916780c860d87ca003f&scene=58&subscene=0": "帆软Finebi_V5.1.10_channel反序列化漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247512706&idx=1&sn=8c10b0c6ac86a5c91fa4e64497371b65&chksm=e9d37960dea4f07603771b4b22adf2dbc2a6ebf11e91c28bf377f28a42e59d24330fc4387537&scene=58&subscene=0": "ICLR 2025 Workshop 征稿：推动基础模型的开源、开放、可复现", "https://mp.weixin.qq.com/s?__biz=MzA4NDQ5NTU0MA==&mid=2647690583&idx=1&sn=f195e275b6f21632c7ca1c97078d404e": "0023. 账户接管漏洞的有趣故事【转载】", "https://mp.weixin.qq.com/s?__biz=MjM5ODYwMjI2MA==&mid=2649789520&idx=1&sn=1906605a6e8ff81f4787cc6ed1a613de": "0day漏洞无处遁形：大模型安全挖洞实践", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793776&idx=1&sn=fca2d82169541edfb78f63cf8739f5b7": "新的 Mirai 僵尸网络利用0day漏洞攻击工业路由器", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899973&idx=1&sn=54109cede9abe5c1031b597a220a9e3d": "Moxa设备曝高危漏洞，工业网络安全面临严峻挑战", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247491339&idx=1&sn=6c19b5c3f5eb209bbbcd21f6c2a093d9": "外网露出：新版 CobaltStrike 顶级免杀套件Arsenal kit", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793776&idx=3&sn=2cb4c92e2f9c3295552faf4c47c54659": "戴尔、HPE、联发科修补其产品中的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247490681&idx=1&sn=eb9b2c51f02148abbb4e263610c51c3b": "能信安：漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkyMTY1NDc2OA==&mid=2247487262&idx=1&sn=e3208de78c52368f4ac8f297f85968d4": "【漏洞预警】蓝凌EIS智慧协同平台SQL注入", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2NTQxOA==&mid=2247495867&idx=2&sn=de1537c35a09c164a8ede6a8b7cdfeff": "5人利用充电桩App漏洞“有偿代充”逃单2700余笔盗窃10余万元", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489840&idx=1&sn=100088d66cd525e0a0b6f140110bd57a": "一款免费的APP IOS抓包工具 支持Flutter应用抓包|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490064&idx=1&sn=b034bad1ec5afcdc66b3f2d1819b34f0": "蓝凌OA WebService loginWebserviceService 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490055&idx=1&sn=be3aa1020b719a94bf978811d0557ce6": "蓝凌OA WebService kmImeetingResWebService 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489427&idx=3&sn=42aa0def976de0eab48ad239642be1a4": "【漏洞预警】CyberPanel CyberPanel需授权命令注入漏洞 (CVE-2024-53376)", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490170&idx=1&sn=72623117b065630cd91f1d0a51dd2e9b": "Mirai 僵尸网络变体利用四信路由器漏洞进行 DDoS 攻击", "https://mp.weixin.qq.com/s?__biz=MzA5NzQ0Mjc5NA==&mid=2649766471&idx=1&sn=4625418c160702e932c94d9967844e74": "热血收官！2024漏洞马拉松冠军诞生！", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067220&idx=2&sn=a053c599ab3224a55ad5beec4dc12341": "【安全圈】CISA 警告称，Oracle 和 Mitel 在攻击中被利用了关键漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486695&idx=1&sn=477702ac13b879f52f8409dd3f90ec12": "「漏洞复现」以柔资讯-D-Security终端文件保护系统 logFileName 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyODYwODkyMA==&mid=2247484888&idx=1&sn=7013dedfe9013c53a4d427d05d370b02": "2024年零日漏洞攻击的七大演变趋势", "https://mp.weixin.qq.com/s?__biz=MzkzNDI5NjEzMQ==&mid=2247484370&idx=1&sn=ff7652568d2e3f2aa0449bcab22ff891": "无视加固，无视加解密，无视证书校验，不需要脱壳，半步无敌APP抓包通杀方案YYDS！", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522013&idx=1&sn=9f3081df1533336e5c1747667ca72291": "联发科芯片集存在严重的RCE漏洞，影响数百万台设备", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492013&idx=1&sn=a92e52ff8ae22ef1aace5d50b4a5f46a": "漏洞预警 | 东胜物流软件SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492013&idx=2&sn=09a0e1e42fb16edb8974c8a1c4654c61": "漏洞预警 | 数字通云平台智慧政务敏感信息泄露和任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247504441&idx=1&sn=f771b11e87512e682d7b81a9455c9b49": "大多数 Bug Hunter 忽略的简单漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzE5MDUzMw==&mid=2247568200&idx=1&sn=565468f80dec063b08e69e60c9cd9621": "喜报！炼石入选上海市“2024年度数据安全优秀案例”名单", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490046&idx=1&sn=3836e56c102c9357df406be92f1bdf9e": "蓝凌OA WebService kmImeetingBookWebService 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496793&idx=1&sn=8e3f34c066cd604eccf73f6d511b4524": "利用js挖掘漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489427&idx=1&sn=e6de3aebbb68abcd75b71caedc884021": "【漏洞预警】Aviatrix Aviatrix Controller 未授权命令注入漏洞 (CVE-2024-50603)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489427&idx=2&sn=a4654292c790b717569913b689dffa98": "【漏洞预警】Gogit Go-Git 未授权表达式注入漏洞 (CVE-2025-21613)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651311586&idx=3&sn=bf6a8c41adf32f587f4ad8673e9b94cc": "知名基因测序仪曝BIOS漏洞，可禁用疾病监测和疫苗开发", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651311586&idx=4&sn=a440576445d2d6de4200ba600d7a2d68": "Group3r：一款针对活动目录组策略安全的漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzIyMjQwMTQ3Ng==&mid=2247490921&idx=1&sn=98e7a65ec729258c484f301ae0a79ac2": "【国际视野】卡巴斯基：EAGERBEE后门变种瞄准中东", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588408&idx=3&sn=a36534a4e2a7625285916966113f109b": "Apache Struts 2 再曝远程代码执行漏洞 CVE-2024-53677", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588408&idx=4&sn=2f1a6f106c5b4a9c85840b817a044222": "更新第1章！系统0day 安全-企业级网络设备固件漏洞挖掘（第7期）", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502727&idx=1&sn=08794a77a389f88e8cac276f31020a10&chksm=fe79ef1fc90e66097ceb4fdbc07c0f6d6fdd6c00bb2e377a1ac87c123d85a03097472392e350&scene=58&subscene=0": "SonicOS SSLVPN 认证绕过漏洞(CVE-2024-53704)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522013&idx=1&sn=9f3081df1533336e5c1747667ca72291&chksm=ea94a7b7dde32ea1e597df0873feded0e252ea15614c48b51a0e8c61873427069a205f763194&scene=58&subscene=0": "联发科芯片集存在严重的RCE漏洞，影响数百万台设备", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588408&idx=3&sn=a36534a4e2a7625285916966113f109b&chksm=b18c247286fbad649f7e05b8dfaa5edcccfa51165aae2e0ffa64eaa36787df217f750059c06d&scene=58&subscene=0": "Apache Struts 2 再曝远程代码执行漏洞 CVE-2024-53677", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588408&idx=4&sn=2f1a6f106c5b4a9c85840b817a044222&chksm=b18c247286fbad64c2b173ed0507de9eab4f56747bf38e694e93fc1ddf8d67278bbeabc2a1d7&scene=58&subscene=0": "更新第1章！系统0day 安全-企业级网络设备固件漏洞挖掘（第7期）", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247513695&idx=1&sn=220c123a81824055f5afe508c55ca2a0&chksm=ea664128dd11c83ecc26ba1df583ac7a2126f06644cbde241970c85903839e573a0340893732&scene=58&subscene=0": "ALPC 之殇 - 8月未知 Windows 在野提权 Nday 漏洞研究", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067220&idx=2&sn=a053c599ab3224a55ad5beec4dc12341&chksm=f36e79d4c419f0c248527d584e07ac419961900d9991dbe7fd30e23a5263aca40f0d0324ad03&scene=58&subscene=0": "【安全圈】CISA 警告称，Oracle 和 Mitel 在攻击中被利用了关键漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496793&idx=1&sn=8e3f34c066cd604eccf73f6d511b4524&chksm=e8a5fe3adfd2772c602f91b6430ca5860e1ec9e972ea6c942c884873586b96527d2ad0f6b65f&scene=58&subscene=0": "利用js挖掘漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486706&idx=1&sn=8246a382f5e23a2e00275aca58b7efff": "蓝凌EIS智慧协同平台 fi_message_receiver.aspx SQL注入漏洞复现(CVE-2025-22214)", "https://mp.weixin.qq.com/s?__biz=MzAxMzkzNDA1Mg==&mid=2247513737&idx=1&sn=15917977f4110b6f22aaf827286aa2f0": "从计算器到诈骗软件：一款涉案APP的双面人生", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502739&idx=1&sn=dfc7e53a7f1679e3893025a8bbeaaf98": "【已发现在野利用】Ivanti 多款产品缓冲区溢出漏洞(CVE-2025-0282)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486431&idx=1&sn=6e62adecd875b73fe789c0c4988f0b38": "一款免费的APP IOS抓包工具 支持Flutter应用抓包|漏洞探测", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU0OTQyMg==&mid=2247484308&idx=1&sn=f970202fb09230e360070b2bf398b876": "【漏洞预警】Redis Lua 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652251176&idx=1&sn=26a9c1f57d3679e8dc491239bba40acb": "黑客利用漏洞入侵美国财政部后，仍有近9000个BeyondTrust系统暴露于互联网", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484405&idx=1&sn=ad5740e3e3f34267ed8156d390a34242": "安钥®「漏洞防治标准作业程序（SOP）」征文启示 [2025年第2期，总第20期]", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491468&idx=1&sn=3b6f59256dcd914bb929198011402e37": "图形化漏洞利用Demo-JavaFX版", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793788&idx=3&sn=ce31b790864ea2642c98889c8a67deba": "教育软件公司PowerSchool 遭黑客攻击，6000万学生、教师个人数据可能泄露", "https://mp.weixin.qq.com/s?__biz=Mzg5NTEwNTE1Mw==&mid=2247485221&idx=1&sn=b8f37193df408e52d9a9bfc5b734bae4": "干货！从零到一: 构建一个可靠的SCA漏洞库", "https://mp.weixin.qq.com/s?__biz=MzkzNjE5NjQ4Mw==&mid=2247543100&idx=1&sn=dc645309d04e7fbef24a13a3aeed0cf5": "外媒｜成都：茶馆、火锅、大学和......黑客", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498100&idx=1&sn=ff112648ce0fae2852f5b79963e28f49": "无独有偶，通过.NET反序列化漏洞实现 Visual Studio 钓鱼攻击", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247488856&idx=1&sn=21c2417bed12997ff5c63ec569da9870": "漏洞扫描工具 -- vulcat", "https://mp.weixin.qq.com/s?__biz=MzU2NzIzNzU4Mg==&mid=2247489233&idx=1&sn=99d0b8714b5e6cdc5b57e8b1407b22c6": "带你解锁编码新世界！--随波逐流CTF编码工具使用教程31 --Jsfuck密码", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502729&idx=1&sn=7ef5d7ec018d1cb5555c10fcdd5b2159": "ALPC 之殇 - 8月未知 Windows 在野提权 Nday 漏洞研究", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492013&idx=3&sn=916715c38d9a067335574c8fefc2ee30": "漏洞预警 | 赛诸葛数字化智能中台系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247498114&idx=1&sn=44d0f22b2437c1f62a22c46988447974": "戴尔、HPE、联发科修补其产品中的漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787711&idx=1&sn=3cd2b76ec096d4383afb18e3ce399839&chksm=8893bd50bfe43446e466c1bc09af7994b9d789df57debae634a246675be581d5c16a8d9e84b7&scene=58&subscene=0": "绕过加密防线！微软已修补的 BitLocker 漏洞仍存在被攻击风险", "https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247489932&idx=1&sn=8d31298cba1d501c3c6a7d3f33a55d3c": "护网溯源神奇HuntBack，更新啦～", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494072&idx=1&sn=96ffc11e04c3750cb63de4de27d203d0": "小伙利用漏洞盗取51,860个比特币", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247615076&idx=1&sn=65013aee5794c316d9be4d24a33845c3": "从低危Blind SSRF到严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486517&idx=1&sn=d8f0dc692de8c3c03a854b8096ff97f2": "【漏洞通告】大华智能物联综合管理平台(ICC) GetClassValue 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486517&idx=2&sn=5350237eaacb408cb4375251aff26aec": "【漏洞通告】Inspur ClusterEngine 安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489432&idx=1&sn=ee6d0c07de1e3e93c55193d9bf7bef7e": "【高危漏洞预警】Ivanti Connect Secure缓冲区溢出漏洞可导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=Mzk0MDYwMjE3OQ==&mid=2247486034&idx=1&sn=b5c2764f924dacf40943eec6c1fc3731": "网络攻防战白热化！乌克兰黑客摧毁俄罗斯ISP", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490083&idx=1&sn=6808904e8930808449beab13f87e481b": "蓝凌OA WebService wechatWebserviceService 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247495932&idx=1&sn=c4bc1fa39abaee86b165a6b0b3c77e6d": "【漏洞工具】某路由器任意文件读取漏洞railgun利用工具", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651311637&idx=3&sn=3d8a1497d5bd9ac4931bbf2245900ff9": "戴尔系统更新包框架现严重漏洞，可提升攻击者权限", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067236&idx=3&sn=d7fa7834d01e924cd20217efa4042c0c": "【安全圈】戴尔更新包框架漏洞可让攻击者提升权限", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490263&idx=1&sn=7aa3fe9c411a7f366330a4ff8aeec162": "《2024年度漏洞态势分析报告》重磅出炉！文末扫码下载", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454063823&idx=1&sn=64f118a492d3875cfc0cb56a7d79b2c7": "信息安全漏洞周报【第005期】", "https://mp.weixin.qq.com/s?__biz=MzkyOTQyOTk3Mg==&mid=2247485030&idx=1&sn=d1c94b79a2330434a22d2ebb9a349f3b": "tomcat自动化漏洞扫描利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486517&idx=3&sn=4499f4a577509cf4c43d26aa687203bf": "【漏洞通告】Aviatrix Controller命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489858&idx=1&sn=4041324e9393f936468c722573f07a46": "一款漏洞及指纹库图形化工具-强大的漏洞库及指纹库|漏洞探测", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247489904&idx=1&sn=760b4ed9e6006e819d3c528e7b34ff9c": "2024年零日漏洞攻击的七大演变趋势", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490101&idx=1&sn=c1d06a8a2535993fb70de726e28e8135": "蓝凌OA WebService sysSynchroGetOrgWebService 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1Mjc3NTUwMQ==&mid=2247538401&idx=1&sn=616ffc2b38ba907f43bdac2bfbed19a4": "成都：一座黑客之城 “真正的黑客埋头苦干，寻找网络漏洞，编写杀手级程序，靠社保生活。”", "https://mp.weixin.qq.com/s?__biz=Mzk0NTY5Nzc1OA==&mid=2247484253&idx=1&sn=9de27bdbee12945688e83e7e40e96e4e": "src|拿下高危漏洞的秘诀？", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651311637&idx=2&sn=5397b27a5532b37b3c425b5a3133097d": "Ivanti VPN 零日漏洞正在被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067236&idx=4&sn=b0147296a18e71da729ab28bc5c2ff3d": "【安全圈】Redis服务器曝2个严重的RCE漏洞，数百万系统面临风险", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490263&idx=2&sn=acb47b9a3ece0e9ca9c3e65bf11ed68c": "【风险通告】Ivanti多产品存在缓冲区溢出漏洞（CVE-2025-0282）", "https://mp.weixin.qq.com/s?__biz=MzkwODM4NDM5OA==&mid=2247519746&idx=1&sn=9c38811e7583e072346e141cafe6ec2e": "速看！蓝桥杯刷题技巧大公开！卷哭90%备赛人", "https://mp.weixin.qq.com/s?__biz=Mzk1NzIzOTc5MQ==&mid=2247483944&idx=1&sn=937d590a374c24825bd746222f57e338": "安全常用的Linux命令总结", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522025&idx=1&sn=5fd3517667080fa3c953fe0d2afa966b": "SonicWall：立即修复已遭利用的SSLVPN漏洞！", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522025&idx=2&sn=f67e98879ae334210339981b77e939e9": "Ivanti提醒注意 Connect Secure 产品中的新0day", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247490342&idx=1&sn=b7159516c545f83f15e876a2d287836a": "创宇安全智脑 | 四信通信工业路由器 apply.cgi 远程命令执行（CVE-2024-12856）等90个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247624343&idx=3&sn=1cdf1794ce36ba42e232b7a87398d047": "【已发现在野利用】Ivanti 多款产品缓冲区溢出漏洞(CVE-2025-0282)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI5NzA2MjgwNg==&mid=2648115751&idx=1&sn=679d1fea85cf3d737e7e32318658a0f1": "渗透案例：巧用JS挖掘“宝藏”", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247498147&idx=1&sn=065b135a308b96d887f690aa55aa9a3c": "2025年首个Android更新修复严重代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490092&idx=1&sn=0a014816fb7f04c01f475ed53a8643dd": "蓝凌OA WebService sysNotifyTodoWebServiceEkpj 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247486266&idx=2&sn=38421824f3817e1e1eb99afb6060b4f9": "ksmbd 漏洞研究", "https://mp.weixin.qq.com/s?__biz=MzkyNDUyNzU1MQ==&mid=2247486643&idx=1&sn=307b37d0723f16d80c9525f2236e2992": "年度包揽！长亭科技荣获2024年度（第二期）CNNVD漏洞奖励评选一级贡献奖", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523980&idx=1&sn=00c541e42b5d70c852de427d37e2f096": "【漏洞通告】Ivanti Connect Secure,Policy Secure&ZTA Gateways缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247485452&idx=1&sn=e8e90d2fe130da35a13cdcf3ecd44222": "快来cnvd找工作必备", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067236&idx=3&sn=d7fa7834d01e924cd20217efa4042c0c&chksm=f36e79e4c419f0f2715d10259d56af993acf26a7cd9cb2e0ee31dd8c02ead0683bf3dc502c49&scene=58&subscene=0": "【安全圈】戴尔更新包框架漏洞可让攻击者提升权限", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067236&idx=4&sn=b0147296a18e71da729ab28bc5c2ff3d&chksm=f36e79e4c419f0f2a35ef7ccb2f9e02e1ff05a8932fae3aec068182b76b3971be1050410a85a&scene=58&subscene=0": "【安全圈】Redis服务器曝2个严重的RCE漏洞，数百万系统面临风险", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522025&idx=1&sn=5fd3517667080fa3c953fe0d2afa966b&chksm=ea94a783dde32e9525f0fb0b763e86e9b9f4e7b2b0e8472055ffc4a880291d848b42241fefb1&scene=58&subscene=0": "SonicWall：立即修复已遭利用的SSLVPN漏洞！", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522025&idx=2&sn=f67e98879ae334210339981b77e939e9&chksm=ea94a783dde32e95cdc7f507b228d2e8c85822c8950419c515b096009972bdf7a059d31d6dfc&scene=58&subscene=0": "Ivanti提醒注意 Connect Secure 产品中的新0day", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498100&idx=1&sn=ff112648ce0fae2852f5b79963e28f49&chksm=fa595799cd2ede8ff4a679bf8626e583b72433563a159a817c84571918c4ce14e1699abea334&scene=58&subscene=0": "无独有偶，通过.NET反序列化漏洞实现 Visual Studio 钓鱼攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523980&idx=1&sn=00c541e42b5d70c852de427d37e2f096&chksm=ce46159cf9319c8a729953194779090bd1c84ad058c699f94cbd276f6cbf3556d6387638af95&scene=58&subscene=0": "【漏洞通告】Ivanti Connect Secure,Policy Secure&ZTA Gateways缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462550&idx=1&sn=14197e04f863684b1613f3c69429b623": "信息安全漏洞周报（2025年第1期 ）", "https://mp.weixin.qq.com/s?__biz=Mzk1NzMwNTM5NQ==&mid=2247483753&idx=1&sn=72ffd029fa620587c8102e17ec4058f1": "2025最新挖漏洞给报酬的网站汇总，零基础入门到精通，收藏这篇就够了", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793802&idx=1&sn=30cf3033e8ffaf45d47fd6f3b7649198": "Ivanti Connect Secure VPN 成为新0day攻击的目标", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492027&idx=2&sn=d1c82024b3cfaa3f584d0809b4cd1a2d": "漏洞预警 | 亿赛通电子文档安全管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493118&idx=1&sn=1e3059333f8849a83961a304d66c9fb3": "SonicWall 警告存在可利用的 SonicOS 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493118&idx=2&sn=1da6abe8b64254dea9ec4afad005c257": "Gayfemboy 僵尸网络瞄准 Four-Faith 路由器漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502729&idx=1&sn=7ef5d7ec018d1cb5555c10fcdd5b2159&chksm=fe79ef11c90e6607ce559b542b8bd98818ca25459580709a7207e3cb503592487b4af411dd45&scene=58&subscene=0": "ALPC 之殇 - 8月未知 Windows 在野提权 Nday 漏洞研究", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492684&idx=1&sn=3b0a607c660f6ba2dfc3db280cbf8e40": "【已复现】大华智能物联综合管理平台 GetClassValue 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NDExNDQwNA==&mid=2247489876&idx=1&sn=b620b4c55efe620eca9ebafa67d5c1b7": "2025年，网络安全意识宣贯该怎么做？", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518149&idx=1&sn=6498c967abc2646198bd742a3d2232e6": "发现Web API漏洞居然能赚到400w刀", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489437&idx=1&sn=86a7c25e1f15115c4f1bfe3bf9529dae": "【漏洞预警】Apache OpenMeetings未授权 反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247504442&idx=1&sn=b38e2fd23874bcc57a2cad01406af7aa": "漏洞赏金方法 2025 版", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496924&idx=1&sn=cde3f8dcc5062f5bae2fbcc43db8c4d1": "【漏洞通告】Ivanti 多款产品缓冲区溢出漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496924&idx=2&sn=b5e7145e48fd905325fcdf22665c67cd": "【漏洞通告】SonicOS SSLVPN 认证绕过漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247519413&idx=2&sn=2363399bbb13f91288886c2db1c060b9": "实战 | 攻防演练某x医院内网拿下集权", "https://mp.weixin.qq.com/s?__biz=Mzg2NzkxOTQ0OA==&mid=2247484500&idx=1&sn=bc5612c622b398355de7cfab77b9ff4e": "Ignition工控系统反序列化漏洞(CVE-2020-10644)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664234365&idx=1&sn=af17f45f731d0c43256ce450f1d66690": "通知 | 国家网信办就《网络信息内容多渠道分发服务机构相关业务活动管理规定（草案稿）》公开征求意见（附全文）", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492027&idx=1&sn=f67e50995c7888b746c492a865ee1569": "漏洞预警 | 北京中科聚网一体化运营平台文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499125&idx=2&sn=ed1a771fa6447002aa2fcf070c71c910": "常见的网站安全漏洞视频课程", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488825&idx=1&sn=5e77e5178823b42679dcaa1914251bf3&chksm=c2c64232f5b1cb24e14a80899dc4fedc64d3489130f642d9a59175803b8acb8d6455c3e2f7d2&scene=58&subscene=0": "【漏洞通告】Ivanti多款产品缓冲区溢出漏洞(CVE-2025-0282)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067255&idx=4&sn=3fd244b5403280e26cbc308f9d938be2&chksm=f36e79f7c419f0e19717a852043341319ec8c0f73e0e9daa2e8a6064deb75c8df3e4e101920a&scene=58&subscene=0": "【安全圈】联合国航空机构确认招聘数据库存在安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTA4OTI5NA==&mid=2247519568&idx=1&sn=a136e2cd3ab3db52ce3b8f15811f0411&chksm=ce5daf31f92a2627e42e6f140583642241a9cce471e1727c960141e4bda457f55374ea16de47&scene=58&subscene=0": "Pwn入门之格式化字符串漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522035&idx=2&sn=71c00b294647fadae4e56ffc500f1300&chksm=ea94a799dde32e8fec367a20f0630181350a5ca556cc26cfaa9fcbefdac76ae3c3831523c87e&scene=58&subscene=0": "Palo Alto Networks 修复退市 Migration Tool中的高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486728&idx=1&sn=a2987c4ca400a3a3686e1c8ebff60b66": "「漏洞复现」瑞友天翼应用虚拟化系统 GetPwdPolicy SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247525574&idx=1&sn=71fbd1aa0ae586008514d626ad81cd1e": "大模型安全的漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0NDI5NTY4OQ==&mid=2247486253&idx=1&sn=62124571618afa3afa400518ed8a9638": "基于大模型（LLM）的黑盒RCE漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655263668&idx=1&sn=ac8c38d0522ed2d4c979644a09ff179d": "2024年网络空间安全漏洞态势分析研究报告", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793817&idx=3&sn=76e96780b09c070feb5068ffc86b1d38": "Google Project Zero 研究人员发现针对三星设备的零点击漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247495975&idx=1&sn=b05958a60bbf5bbaa0abccc2f249abb9": "【漏洞工具】某路由器任意文件读取漏洞Goby低级模式利用工具", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067274&idx=3&sn=8eb5cc6c0a00bef351ca6ec387133310": "【安全圈】Ivanti VPN 零日漏洞正在被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247506729&idx=1&sn=99faf6c867705475671630c95a81b63a": "疑黑客出售国内某IT企业服务器访问权限，456GB数据遭泄露", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492691&idx=1&sn=e1d64db4b8957907e6417a61d2c40fa4": "【已复现】Ivanti Connect Secure 堆栈溢出致远程代码执行漏洞（CVE-2025-0282）", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546608&idx=1&sn=b4f5a8e22730b23ce5aafde8d28133c7": "区块链 智能合约安全 重入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk1NzQwNjQ4Ng==&mid=2247484134&idx=1&sn=723a6d60f099a461d07ed5d08217cc40": "小白必看之漏洞区分", "https://mp.weixin.qq.com/s?__biz=MzkxNjQyODY5MA==&mid=2247486964&idx=1&sn=4363616043656f8c618ace62cfe23e1a": "【实战小技巧系列】前端 JS 解密：一次简单高危漏洞案例", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247496561&idx=2&sn=52a537dedcc49372b07a6f02d4d32dfe": "一款免费的APP IOS抓包工具 支持Flutter应用抓包|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247505688&idx=2&sn=477172aee3cdadaaf70998c3cea3b917": "Chrome 扩展程序利用关键字操纵漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492691&idx=1&sn=e1d64db4b8957907e6417a61d2c40fa4&chksm=96f7fb3ea1807228c78b8469fdfa3a9fad83374094781eb88c48ae6e598331b3bd87ae4c659c&scene=58&subscene=0": "【已复现】Ivanti Connect Secure 堆栈溢出致远程代码执行漏洞（CVE-2025-0282）", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498152&idx=3&sn=a45de16edbca5168f73ea7ed4ffeca36&chksm=fa595745cd2ede53cd0f763edff055aeced78d85bdeea1f2be5fd2d80d72a65ed86e0df928f3&scene=58&subscene=0": "无独有偶，通过.NET反序列化漏洞实现 Visual Studio 钓鱼攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067274&idx=3&sn=8eb5cc6c0a00bef351ca6ec387133310&chksm=f36e798ac419f09cca9472d89e0009706062cc803d7b61065e39083441ba8c9e646c932b6efe&scene=58&subscene=0": "【安全圈】Ivanti VPN 零日漏洞正在被黑客利用", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487016&idx=1&sn=740c4dccda5bc675cb15d583a7867ad6": "禅道CMS开源版SQL注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492518&idx=1&sn=d4196de8b812e3a2d29209b50328cec0": "网络安全领域研究人员遭遇假PoC专项攻击", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MjAwNQ==&mid=2247486764&idx=1&sn=69cdc86ba9528ef7448abb4bdd976484": "JS中的漏洞信息", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486739&idx=1&sn=6463b2b41421b6514b200a5d9b397ac6": "「漏洞复现」某源地产ERP Service.asmx X-Forwarded-For注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494172&idx=1&sn=8437b6bd83d4cea051dbc558260056d8": "古河大佬发现CVE-2024-49113 被黑客利用，发布恶意 PoC（好害怕发布带毒 poc 啊）", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546664&idx=2&sn=4c18d53fa9dcc5cfebddcb4102d7baaf": "区块链 智能合约安全 重入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247615101&idx=1&sn=1c11d3cd73b424e3335a64efba88679c": "通过高效的侦察发现关键漏洞接管整个IT基础设施", "https://mp.weixin.qq.com/s?__biz=MzI5MTIwOTQ5MA==&mid=2247487572&idx=1&sn=598542b01490ec8a8f9825c4a20f54f6": "文件包含漏洞等你来看", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651311815&idx=1&sn=40eddfee1242b4b1518db9b0ecb9e786": "大量恶意npm包盯上了开发者", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651311815&idx=3&sn=e6c5675db6f0e57973dcd1817459dc10": "2025年需要防范的五大恶意软件", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900022&idx=1&sn=468ab732933d168f76e10f10d930551d": "CISA紧急警告：Oracle与Mitel高危漏洞正被攻击者利用，企业需立即修复！", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247491552&idx=1&sn=f1a376f0e49cff2ddca8fd74d0ecb5d9": "2024年度上海网络与信息安全测评工程技术研究中心开放课题申请指南", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2NTQxOA==&mid=2247495935&idx=2&sn=00a08f04efcb34f608a0a212fe9f18a0": "中信银行日照分行因“未及时处置数据安全漏洞风险”等被罚54万元", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490110&idx=1&sn=f8eff8b0b09439af303df311d04a6b75": "蓝凌OA WebService sysFormMainDataInsystemWebservice 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247486285&idx=1&sn=8188907190a4d5beb3fed38fd5275049": "我只想要一个 CVE-2024-30085 Exploit 作为圣诞礼物", "https://mp.weixin.qq.com/s?__biz=Mzk0OTUwNTU5Nw==&mid=2247488478&idx=1&sn=0e94195de32c6cc2af2df00db511b92a": "【相关分享】记一次小程序逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247489945&idx=1&sn=16fddd51cbca85affc9474949cbe7245": "Pwn入门之格式化字符串漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyNTUyNTA5OQ==&mid=2247484161&idx=1&sn=4fedc2c070e311189f636deb084deda5": "【安全产品】堡垒机-安全问题分析-漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484899&idx=1&sn=ebdbb1fe5f94622276851862e5a4dbb5": "【漏洞复现】CVE-2024-50603", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489895&idx=1&sn=d395d20867558882eeb0fd816863cd20": "记一次某SRC信息管理系统多个漏洞组合Getshell|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496832&idx=1&sn=5c72712e20772f2279b09ca9a748afc2": "SSRF 漏洞自动化 寻找", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490122&idx=1&sn=53609c160a2964063bb4bc1b113c77b8": "JeecgBoot passwordChange 任意用户密码重置漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650962428&idx=1&sn=b6d1444de2a91eaf1aa348721b0ce44f": "【安全工具】一款免费的APP IOS抓包工具 支持Flutter应用抓包|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496832&idx=1&sn=5c72712e20772f2279b09ca9a748afc2&chksm=e8a5fee3dfd277f5990fbe3dfe7247c7dd7bf125a233ad4ec99a8afb49b1b2e29ae25f7866b6&scene=58&subscene=0": "SSRF 漏洞自动化 寻找", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490141&idx=1&sn=9bdeb4a82982b626048e1a9069b4d1e9": "泛微-云桥e-Bridge addTasteJsonp SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485124&idx=1&sn=de4ced0e1f786160e9142f28356cf6df": "章管家前台任意文件上传漏洞(XVE-2024-19042)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492049&idx=1&sn=477ca1693572ddef742c786b293ae30d": "漏洞预警 | 圣乔ERP系统任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492049&idx=2&sn=52de5365cf3ce21c05a7c7f3642a5aca": "漏洞预警 | 快云服务器助手任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492049&idx=3&sn=71a228b16c671fab21ef6cf7b601ecfa": "漏洞预警 | 朗速ERP SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492049&idx=4&sn=99166247f103a1d00bedee0880079409": "工具 | WExploit", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247493254&idx=1&sn=df664e419cb1cabf2589f72b88d8570d": "Java漏洞集合工具更新2.0", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651130319&idx=1&sn=345bdcb858d6db350bb617bf16fd1016": "5G+AI+信创，深度揭秘智慧矿山工业控制网络构建之道", "https://mp.weixin.qq.com/s?__biz=Mzg5MDgzOTk2Mg==&mid=2247484579&idx=1&sn=1dcf41285d17a8a40ef114a371a0bb31": "Bp神级插件：二次开发，让API漏洞挖掘，效率倍增！", "https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247484669&idx=1&sn=909446a8538d5c33d7507c15d7839988": "CVE-2025-22777 (CVSS 9.8)：WordPress | GiveWP 插件的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247505731&idx=4&sn=eb4cadc77282c758c13dc8b2f01bb34f": "DNA 测序仪漏洞标志着医疗器械行业固件存在问题", "https://mp.weixin.qq.com/s?__biz=MzI1ODI0MTczNQ==&mid=2247491165&idx=1&sn=25ca0a0520923eeb18c1e1e347e391f0": "【赠书抽奖】发现Web API漏洞居然能赚到400w刀，看懂这本书你也可以！", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247615126&idx=2&sn=5bd8af62ab97fbe13a4424ee9e7ce5b6": "通过高效的侦察发现关键漏洞接管整个IT基础设施", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650606485&idx=3&sn=4bdcf90b59f41c99b28e4613268a24c6": "记一次某OA渗透测试有意思的文件上传漏洞挖掘经历以及分析", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489446&idx=1&sn=28468e250cf5d9b29d7a5b263e158c99": "【漏洞预警】Vim缓冲区溢出漏洞可导致拒绝服务", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247489648&idx=1&sn=5b79daec6f19ffd0c170a8b2bc6f32ae": "Nuclei，一键发现99%的漏洞，白帽子都在私藏的扫描神器| |基于YAML模板的新一代漏洞扫描工具，让渗透测试效率提升10倍", "https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649249384&idx=1&sn=0ec25d262d67ca8b1b6ee4c4392ff393": "议题征集 | 关于征集第六期移动互联网APP产品安全漏洞技术沙龙议题的通知", "https://mp.weixin.qq.com/s?__biz=MzA3NjU5MTIxMg==&mid=2650575169&idx=1&sn=cf48f807b0a583ce0d72513c0185627d": "贡献度排名第一！国舜股份积极支撑工信部车联网产品安全漏洞专业库", "https://mp.weixin.qq.com/s?__biz=MzU2MDU5MDE2MA==&mid=2247484178&idx=1&sn=d1b640eaba093986d2a9b2be283ed362": "图形化漏洞利用Demo-JavaFX版", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503014&idx=1&sn=cea00ee2401be5a3b7910e4830df9796": "【挖洞实战】这不是只要有手就能批量挖Dom Xss漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTY4NTQwMg==&mid=2247484250&idx=1&sn=94a79a0c3a5d9b0fd98cd00f3eb6e7c2": "DH POC撤稿之后还有后续......", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493135&idx=2&sn=9299b77eeebc581b8a1e2fbf85997618": "研究人员披露了三星一个现已修复的零点击漏洞的细节", "https://mp.weixin.qq.com/s?__biz=MzkxMjczNzAzMA==&mid=2247485355&idx=1&sn=6ee4688a4eb8374f47a556ee51214fa4": "什么是重保？期间都做些什么？有哪些重要影响？", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522044&idx=1&sn=71bbcad32c9a0753d8385256ee5dad03": "GFI KerioControl 防火墙存在严重的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247505577&idx=1&sn=f82c60e6b9567f984c4c17d0e98e150a": "每周网安资讯 （1.7-1.13）|Adobe多款产品存在越界读取漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588591&idx=3&sn=b11fa1206f5347a3696b9363851d9aa9": "成为看雪讲师，开启技术分享的高光时刻", "https://mp.weixin.qq.com/s?__biz=Mzg2MjkwMDY3OA==&mid=2247485529&idx=1&sn=5379f2f365b78268422e0aa297eaa61c": "【漏洞复现】科荣AIO系统存在代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247484790&idx=1&sn=7c58b5be658c0fb646c28fda9f8aeb33": "【文中抽奖】一杯奶茶钱开挣生活费 SRC漏洞挖掘基础及赏金培训", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247485481&idx=1&sn=1115561690fb800d94b50913f07bd6d2": "一次敏感信息泄露引发的逻辑漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793828&idx=2&sn=75c89a73f526a3eef48834b9589071a7": "GitHub 上的虚假 LDAPNightmware 漏洞投放信息窃取恶意软件", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503275&idx=1&sn=2b10bfb0eb83fdb8f10466f9476b7a57&chksm=f2585f58c52fd64e76b8d6e69b0939688a5ad89e9a654a4eb9345d294e495326b8a5b197a01b&scene=58&subscene=0": "雷神众测漏洞周报2025.1.6-2025.1.12", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522044&idx=1&sn=71bbcad32c9a0753d8385256ee5dad03&chksm=ea94a796dde32e80febb13e46990720e4748e375842d7d932e99d76c82cb55e561bf2219c17c&scene=58&subscene=0": "GFI KerioControl 防火墙存在严重的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247509761&idx=1&sn=a2cbe8ad893d3ab348e298ee016644dc&chksm=fa5272bfcd25fba90c69028243dcc3561afae389ab16a31faf15d757d37a79fd51eea2856d83&scene=58&subscene=0": "2024年度智能网联汽车重点安全漏洞盘点", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495678&idx=1&sn=7e9c30d0d4f9240a45a5e9618ff48fdb&chksm=fd74df37ca03562164a2b3c76c24dc512ef7ad74eb26251804eb0b78b40a3220adf127ca577f&scene=58&subscene=0": "CNVD漏洞周报2025年第2期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495678&idx=2&sn=27fbe9305e2b484bc5effac02d04f64a&chksm=fd74df37ca0356219bbde36812ef8acecf2a9c42679ccda3598d1c426be88c2934c747fbbb77&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20250106-20250112)", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247496006&idx=1&sn=ff0667fdbf667156d8c9d0910b6bf0e3": "【漏洞工具】某路由器任意文件读取漏洞Goby高级模式利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg2MDc0NTIxOQ==&mid=2247484709&idx=1&sn=b238620c27395ab7c78718f7ef256c83": "识别漏洞成了大海捞针？", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502754&idx=1&sn=48a21e24bdfc8908bb32481d68e1cb9b&chksm=fe79ef3ac90e662c847aaac7838231f459a77d12388ca13ee7bb9ae8b12b5e2b051c5fd1d54e&scene=58&subscene=0": "【技术细节公开】Ivanti 多款产品缓冲区溢出漏洞(CVE-2025-0282)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzk0Mjc2MzQ0Ng==&mid=2247484513&idx=1&sn=ce8323e3947ba30d7a9cf7463b3233db": "macos高危漏洞CVE-2024-54498 解析+复现", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247491409&idx=1&sn=6765857872fa1625c539e95acd152fc3": "macos高危漏洞CVE-2024-54498 解析+复现", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553025&idx=1&sn=d33ddf7981da6d85626bbe6362bea3b9": "PWN入门之格式化字符串漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499598&idx=2&sn=3ffda804485324be45ad5358707cb07f": "上周关注度较高的产品安全漏洞(20250106-20250112)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489457&idx=1&sn=56aacbec2792c121e13929fa55c1d15c": "【漏洞预警】科拓全智能停车收费系统Webservice.asmx存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247489687&idx=1&sn=c004c654be6ef71290e6cc23b82a8083": "网站篡改入门,一个SQL注入漏洞就能让整个网站大变样，原理详解|!|从SQL注入到XSS攻击，完整还原黑客是如何篡改网站的", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490196&idx=1&sn=c5f5b38d186df545679f4ea625394a55": "2025年首个满分漏洞，PoC已公布，可部署后门", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651311991&idx=3&sn=db90b0dc624faaae95f965931adc5423": "议题征集 | 关于征集第六期移动互联网APP产品安全漏洞技术沙龙议题的通知", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522060&idx=1&sn=562313e7f413152c3399933007b147f5": "微软：macOS 漏洞可导致黑客安装恶意内核驱动", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522060&idx=2&sn=77945a6bc936ca2cbd6fe400e106a420": "严重的 Aviatrix Controller RCE 漏洞已遭利用", "https://mp.weixin.qq.com/s?__biz=MzAxMDQxODk4NQ==&mid=2247484070&idx=1&sn=2b629af5319545695cfc98285cba1226": "泛洪攻击模拟复现详解", "https://mp.weixin.qq.com/s?__biz=MzkzNzg3NzQxMQ==&mid=2247485631&idx=1&sn=6351b8459db2459a3c9a7c8b8ab54e7b": "网络渗透“大杀器”：Cobalt Strike实操全揭秘", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462564&idx=1&sn=2257357922013ed3d0647f6ff408ccd4": "信息安全漏洞周报（2025年第2期）", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247502656&idx=2&sn=4ec6486366953c7739eb5890a86353cd": "工信部认可！360荣获车联网产品安全漏洞专业库“优秀技术支撑单位”", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247541399&idx=1&sn=c0dd23b96e9a973bc068a2183d8c1ce0": "苹果修复 macOS 高危漏洞，被黑客利用可安装恶意内核驱动", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067342&idx=1&sn=533ba142831a3c994e00cb6ec7d6d36c": "【安全圈】2025年首个满分漏洞，PoC已公布，可部署后门", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067342&idx=4&sn=380dc9803cf52db7c5d1771d404c4279": "【安全圈】为网络安全研究人员定制的虚假漏洞利用攻击利用恶意软件", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579028&idx=1&sn=3d580b0d7ca47a7f72c3197a1199540b": "工信部认可！360荣获车联网产品安全漏洞专业库“优秀技术支撑单位”", "https://mp.weixin.qq.com/s?__biz=MzIzNjE1ODE2OA==&mid=2660190222&idx=1&sn=40a5d814dcb2e57caaef3b3924b335ce": "渊亭科技入选清科「2024 Venture50」，AI+行业能力再获认可！", "https://mp.weixin.qq.com/s?__biz=Mzg5MDc1MjY5Ng==&mid=2247493009&idx=1&sn=75481fb22523e34bd68a1aac960730e4": "CyberStrikelab——重新定义网络安全靶场", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588667&idx=3&sn=af4f2eb4bededa0cea574e3cd7963382": "2025年首个满分漏洞：云攻击者利用Aviatrix Controller漏洞植入恶意软件", "https://mp.weixin.qq.com/s?__biz=Mzk1NzI5MTc0Nw==&mid=2247484589&idx=1&sn=2acfc6592b2fbc5e6f810987742286a3": "VulScanner：一款专业的红队漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649166945&idx=2&sn=601af59ba846cb97b729b826c6c06e8c": "微软起诉利用其人工智能平台创建非法内容的服务", "https://mp.weixin.qq.com/s?__biz=MzkzMDQwOTg3OQ==&mid=2247484701&idx=1&sn=c6805ed84a66a821348b1528625e8a45": "DrayTek Vigor3910 CVE-2024-41592分析", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247569683&idx=1&sn=450e5eb00d776c71a52dff655d3bea37": "使用自动化工具寻找sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500613&idx=2&sn=d5c38be468308035c9a6b96cc0e63381": "【漏洞通告】Ivanti多款产品缓冲区溢出漏洞(CVE-2025-0282)", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499598&idx=1&sn=d578eee42f5b23ecb425d9237117eec6": "CNVD漏洞周报2025年第2期", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490178&idx=1&sn=e824a1b3f07a5bd2d4c1f0be104264cc": "云连POS-ERP管理系统 download.action 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247488940&idx=1&sn=ed88e703d586aa3766308140d9a5eb49": "Java综合漏洞平台", "https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247484691&idx=1&sn=95419e2c9d5264ef3cae38b7a8c3b31e": "Tomcat 弱密码检测 与漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492068&idx=1&sn=bb03b038fe74e7465d289991964f9bd3": "漏洞预警 | Aviatrix Controller命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492068&idx=2&sn=772981c8cda216d044abf4d11fd02576": "漏洞预警 | WordPress Plugin Hurrakify SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492068&idx=3&sn=2ea4264d66dca6b6c037f3101d15fb06": "漏洞预警 | go-git参数注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247493280&idx=1&sn=0c9de072c4b55977c5623ecbd68293a6": "专注于软件供应链安全，具备专业的软件成分分析（SCA）、漏洞检测、专业漏洞库。", "https://mp.weixin.qq.com/s?__biz=MzI0NjA3Mzk2NQ==&mid=2247495707&idx=1&sn=fb5fa5579021060d10ad9011e147c66f": "攻防靶场(40)：破壳漏洞利用 Sumo", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522060&idx=1&sn=562313e7f413152c3399933007b147f5&chksm=ea94a666dde32f706b2b66b455dfbe3a9b106e8c0a4a379c3b30ac5c0aa916c5ad8b092cddd1&scene=58&subscene=0": "微软：macOS 漏洞可导致黑客安装恶意内核驱动", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522060&idx=2&sn=77945a6bc936ca2cbd6fe400e106a420&chksm=ea94a666dde32f702c05d9f642f0ea1c7cbc525dd3805a10ce8441a93f2412a10b40fc913587&scene=58&subscene=0": "严重的 Aviatrix Controller RCE 漏洞已遭利用", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588667&idx=3&sn=af4f2eb4bededa0cea574e3cd7963382&chksm=b18c257186fbac670637d659a7511de8c3ead88069367df522ef629a278eaa02c9daf567134d&scene=58&subscene=0": "2025年首个满分漏洞：云攻击者利用Aviatrix Controller漏洞植入恶意软件", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067342&idx=1&sn=533ba142831a3c994e00cb6ec7d6d36c&chksm=f36e7a4ec419f35879a33af360eded6ccc081b3546a86d7a969a48f0eeb7b2f5eecb5be455a9&scene=58&subscene=0": "【安全圈】2025年首个满分漏洞，PoC已公布，可部署后门", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067342&idx=4&sn=380dc9803cf52db7c5d1771d404c4279&chksm=f36e7a4ec419f35821fb42bc3692d2e2ea1220de0c7f64fc0b4a684c0758e137b27573afb929&scene=58&subscene=0": "【安全圈】为网络安全研究人员定制的虚假漏洞利用攻击利用恶意软件", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579028&idx=1&sn=3d580b0d7ca47a7f72c3197a1199540b&chksm=9f8d259ca8faac8a4d409dfed08e3cc488bb728732fb1f7fb2472e8da2de36263fd911a68379&scene=58&subscene=0": "工信部认可！360荣获车联网产品安全漏洞专业库“优秀技术支撑单位”", "https://mp.weixin.qq.com/s?__biz=Mzk0ODY1NzEwMA==&mid=2247485780&idx=1&sn=fe6bca078339d21ec48c776cb91bf35c": "教育SRC邀请码", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513504&idx=1&sn=838af406a4e2aec5e99b37399b5f1a2e": "警惕！近期Fortinet防火墙频遭攻击，疑似零日漏洞被利用", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247525600&idx=2&sn=23e00124c12854cb6304e7288cb06680": "一次简单的五千赏金漏洞挖掘记录", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247431&idx=1&sn=a6081b4026a24d8266ae4134b9d7b0bd": "网络安全不是一场漏洞游戏", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490188&idx=1&sn=32d6ea76d777eab4ef66495f15f2c73b": "杜特网上订单管理系统 getUserImage.ashx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485045&idx=1&sn=5a2c7e17aba8e20ef5e6946f1dca470f": "腾讯云安全中心推出2024年12月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=Mzg2NDc0MjUxMw==&mid=2247486064&idx=1&sn=92fb71427c6a7c2662b4af74ada963fb": "GiveWP 插件发现严重安全漏洞，影响超 100,000 活跃安装", "https://mp.weixin.qq.com/s?__biz=MzkzMDE5OTQyNQ==&mid=2247488262&idx=1&sn=ec9f25c9ffed936584c999474fe4edd8": "漏洞挖掘|还没开始就结束了？行不行啊！毫无体验感", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793859&idx=3&sn=6feb2f42906876e5a265b8ea0c08a1d2": "Google OAuth 漏洞使攻击者可以访问废弃的帐户", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498206&idx=3&sn=a00994d537a5909711eda0e855cf39e6&chksm=fa595733cd2ede25105b711c11316a44649792eaf6c84fe1b800624b877fa63c510961c10820&scene=58&subscene=0": "无独有偶，通过.NET反序列化漏洞实现 Visual Studio 钓鱼攻击", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546762&idx=1&sn=f6235edee8a9ec9a66cb08012d395141": "某公交管理系统简易逻辑漏洞+SQL注入挖掘", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484413&idx=2&sn=44e275abbacd91b885c76cc35ffbbc80": "入选作品公布｜安钥®「漏洞处置标准作业程序（SOP）」征文第十八期", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502769&idx=1&sn=7d06f9d258b0145e52d6fa7cef2430ad": "微软1月补丁日多个产品安全漏洞风险通告：3个在野利用、12个紧急漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTUxMzk2NQ==&mid=2247486055&idx=1&sn=c3a3856c3515f17a7311649acaec0f82": "震惊！OA 系统漏洞竟让 1400 多名学生敏感信息“裸奔”", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486028&idx=1&sn=63cc8acc3287aeb74b0cce36bc0a9450": "一款java漏洞集合工具 - Hyacinth", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067360&idx=3&sn=dd1e289ee05448049f4a12db1949c772": "【安全圈】Windows 远程桌面网关漏洞导致系统遭受 DoS 攻击", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490281&idx=3&sn=f0e14c938102524a28c241ea4cd11ce7": "【风险通告】FortiOS and FortiProxy存在身份验证绕过漏洞（CVE-2024-55591）", "https://mp.weixin.qq.com/s?__biz=MzA5OTk2OTY5MA==&mid=2247485644&idx=1&sn=88b3cd3828c67e43ba86c0cf353e4c8a": "Microsoft 1 月 CVE 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247497068&idx=1&sn=49fbe931deff728264c4219f91c14f28": "内推 | 上海奇安信渗透测试岗火热招聘中", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488851&idx=2&sn=72adc51b645adaa0690545cb0629a826": "【安全更新】微软1月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787737&idx=1&sn=6725317e45de42aa994fa2977db726ae": "强制报告与禁止支付，英国拟立法打击勒索软件", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523990&idx=3&sn=2fce995dcb779b108d4f3f7a3043c743": "CNVD漏洞周报2025年第2期", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496932&idx=1&sn=9181bae32d56d3f63bef793502f84541": "2025年1月微软补丁日多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900030&idx=1&sn=17d56b9e55e22290f5e4b5db44ddb42c": "Ivanti VPN 零日漏洞遭攻击，敏感信息面临风险！", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507683&idx=1&sn=29566d48b96920586ff08527eba2517a": "微步情报局发现Apache Linkis漏洞，再获Apache官方致谢", "https://mp.weixin.qq.com/s?__biz=Mzg4NzQ4MzA4Ng==&mid=2247485142&idx=1&sn=9248b2bec85645f833189256dc099724": "工信部发布关于加强互联网数据中心客户数据安全保护的通知", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502786&idx=1&sn=9c3ec9f73e5c305b28c6848870adc528": "Ivanti Endpoint Manager 多个信息泄露漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500622&idx=2&sn=2416996e9c00d93ee656f46111cca28d": "【漏洞通告】微软1月多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652113945&idx=1&sn=8dea64f5407a935a2d3399a9e5c4700d": "微软2025年1月份于周二补丁日针对161漏洞发布安全补丁", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484413&idx=1&sn=5a913058c41dbc584efcca2e7d0473a4": "安钥®「漏洞防治标准作业程序（SOP）」征文启示 [2025年第3期，总第21期]", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094588&idx=1&sn=22477d94e3cc095b191a3d45b6408d58": "Windows 远程桌面网关漏洞使系统面临 DoS 攻击", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094588&idx=2&sn=d50bc460ab394f7613b6a4a752b5b07d": "Chrome 132 发布，修复了 16 个漏洞，包括远程代码执行", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651312048&idx=2&sn=edf59767d3cde5fb51a5c4cedf4f7ca5": "Windows远程桌面网关出现重大漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488851&idx=1&sn=8bbefd6a3b4790e4dbd4a22948abf009": "【漏洞通告】Fortinet FortiOS&FortiProxy身份验证绕过漏洞(CVE-2024-55591)通告", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650620729&idx=2&sn=9ae566c901d483735134cfae8ae373b3": "涉及161个漏洞！微软发布2025年1月补丁日安全通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522078&idx=1&sn=fed0749158dda91f61f1f60a96b5230c": "微软2025年1月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522078&idx=2&sn=a6a418ea6abb9635205b06203e061801": "Fortinet：注意这个认证绕过0day漏洞可用于劫持防火墙", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247521500&idx=1&sn=dbfbda5d6c733a82e7ba8fea37ab095c": "2025-01微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588686&idx=3&sn=ce937ad7e954fd8fd09c398e4390e7e5": "更新4节！系统0day 安全-企业级网络设备固件漏洞挖掘（第7期）", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523990&idx=2&sn=25be5b60ca7f2aba3a6a82b4164656f5": "【漏洞通告】FortiOS和FortiProxy身份验证绕过漏洞(CVE-2024-55591)", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU0OTQyMg==&mid=2247484318&idx=1&sn=a38565417660cc105376398c8dfcd649": "【漏洞预警】用友nc 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485139&idx=1&sn=54b2149c95610c6fe3934255ce276b75": "Jeecg存在JNDI代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580791&idx=2&sn=3e0e732784e4fc45d8352e89c2f44690": "Adobe 发布带有 PoC 漏洞代码的严重 ColdFusion 错误提醒", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490281&idx=1&sn=0325c7ec2ff2d46851b13f8bf8b78895": "【风险通告】微软1月安全更新补丁和多个高危漏洞风险提示", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490281&idx=2&sn=091bfbb3502c26c5666cea0aab41c9c7": "【风险通告】Ivanti Endpoint Manager存在路径穿越敏感信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651134691&idx=2&sn=8abe952e69d2d777f3d51b3b941be282": "又一BeyondTrust漏洞遭黑客利用；Fortinet修复已被在野利用零日漏洞，可攻破FortiGate防火墙 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247518316&idx=1&sn=b954fbb2f35fff3cfba2f1951d3c827b": "文件包含漏洞从入门到精通", "https://mp.weixin.qq.com/s?__biz=Mzk0OTUwNTU5Nw==&mid=2247488515&idx=1&sn=305bbcdc6b74a5b775bcad8028dbd7f1": "【相关分享】记一次小程序支付逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489927&idx=1&sn=4585f639e37390f637445498148b70f7": "API漏洞挖掘神器API_kit的二开版本|Burp Suite 插件", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499165&idx=2&sn=1bcea16d2d17f234caf752fcf51a3d66": "CTF赛前指导 -- 文件上传漏洞&一句话木马", "https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247505809&idx=1&sn=c07f5dca2e5dd2b96c314afab7cb5947": "华为通过BSI全球首批漏洞管理体系认证", "https://mp.weixin.qq.com/s?__biz=Mzk1NzQwNjQ4Ng==&mid=2247484231&idx=1&sn=ea5d98ddd1243530833e65653ffbd993": "漏洞精讲之SQL注入", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588686&idx=3&sn=ce937ad7e954fd8fd09c398e4390e7e5&chksm=b18c268486fbaf92b82fc5e7057e5bb1db98f28d4a848caacc69c598a5b1aaaf9e0c32438f1d&scene=58&subscene=0": "更新4节！系统0day 安全-企业级网络设备固件漏洞挖掘（第7期）", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488851&idx=1&sn=8bbefd6a3b4790e4dbd4a22948abf009&chksm=c2c64258f5b1cb4e4ea09f9e1653dbbf820bfe174f16bc60f7d11a666bddb072904d3ee124f5&scene=58&subscene=0": "【漏洞通告】Fortinet FortiOS&FortiProxy身份验证绕过漏洞(CVE-2024-55591)通告", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488851&idx=2&sn=72adc51b645adaa0690545cb0629a826&chksm=c2c64258f5b1cb4ec720febcf81ab881c06fc326415629c510aa72067b8f2c97578e7e864640&scene=58&subscene=0": "【安全更新】微软1月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507683&idx=1&sn=29566d48b96920586ff08527eba2517a&chksm=cfcabdf7f8bd34e1ca83fd7941f968ada22248471dd9bbf34b15a1a397430773c6f60ba4ced9&scene=58&subscene=0": "微步情报局发现Apache Linkis漏洞，再获Apache官方致谢", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522078&idx=1&sn=fed0749158dda91f61f1f60a96b5230c&chksm=ea94a674dde32f62ea3ed400292ee76e412bf917e9ab6353b5ab3a366cc9bf33b30ce40f79d3&scene=58&subscene=0": "微软2025年1月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522078&idx=2&sn=a6a418ea6abb9635205b06203e061801&chksm=ea94a674dde32f62e340df7526ae866edd01027763fdd8db25677b2bb7e7c464421387b42417&scene=58&subscene=0": "Fortinet：注意这个认证绕过0day漏洞可用于劫持防火墙", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067360&idx=3&sn=dd1e289ee05448049f4a12db1949c772&chksm=f36e7a60c419f37664451d32533fc9dba66931e403bde86f72a4f7ef3b78553b57dfeeb6e14f&scene=58&subscene=0": "【安全圈】Windows 远程桌面网关漏洞导致系统遭受 DoS 攻击", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513504&idx=1&sn=838af406a4e2aec5e99b37399b5f1a2e&chksm=ebfaf280dc8d7b968ce0db3f897d6f574332777571c283b2da9a2cbafb3599b03550dd229ae3&scene=58&subscene=0": "警惕！近期Fortinet防火墙频遭攻击，疑似零日漏洞被利用", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247521500&idx=1&sn=dbfbda5d6c733a82e7ba8fea37ab095c&chksm=eb704ae3dc07c3f55f54f5e989b6ec0a24c8892bd61203abc7f361460cd9a0541884db86aa4d&scene=58&subscene=0": "2025-01微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523990&idx=2&sn=25be5b60ca7f2aba3a6a82b4164656f5&chksm=ce461586f9319c90b60080bc38d4b323421538400a6d33d5ab80c53d36e43c70bbe62dddbb72&scene=58&subscene=0": "【漏洞通告】FortiOS和FortiProxy身份验证绕过漏洞(CVE-2024-55591)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523990&idx=3&sn=2fce995dcb779b108d4f3f7a3043c743&chksm=ce461586f9319c90c720e6944c39d523aaeb1d6470d92e490976429209d03b330dc6928c10fd&scene=58&subscene=0": "CNVD漏洞周报2025年第2期", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580791&idx=2&sn=3e0e732784e4fc45d8352e89c2f44690&chksm=e9146c4dde63e55b5249f4be18838e67a88b372b998ce763cc396ba2eae000e4a532d5e95311&scene=58&subscene=0": "Adobe 发布带有 PoC 漏洞代码的严重 ColdFusion 错误提醒", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485045&idx=1&sn=5a2c7e17aba8e20ef5e6946f1dca470f&chksm=c2b10403f5c68d15bacf8d35f04232b77eff1e2f6ee56669d305aa9369e9f78fe33d0a4d8af6&scene=58&subscene=0": "腾讯云安全中心推出2024年12月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502769&idx=1&sn=7d06f9d258b0145e52d6fa7cef2430ad&chksm=fe79ef29c90e663ff53242fa005d37436aed5ad942c81d3b48cef872513d967c9d43618ce402&scene=58&subscene=0": "微软1月补丁日多个产品安全漏洞风险通告：3个在野利用、12个紧急漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633819&idx=4&sn=b42f35d0033d76515787da43b6980128": "警惕！近期Fortinet防火墙频遭攻击，疑似零日漏洞被利用", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489470&idx=1&sn=8039e7153319192c8d4d0ed048188aae": "【漏洞预警】Fortinet FortiOS等身份验证缺陷漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247484697&idx=1&sn=41f33dac5bec6ee1a38fe28b75e95977": "哔哩哔哩网页端疑似曝出存储型XSS漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247569765&idx=2&sn=8cdde0bcc80f23fd58938ae6a1b4f361": "实战|拿下了自己学校的大屏幕", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247485723&idx=1&sn=7c957b9f8d1e7a6f0094a12068b8720d": "记某OA系统Ajax旧服务的0day漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496947&idx=1&sn=cfb80fee4820f74fe4d4da502d629282": "【漏洞通告】FortiOS and FortiProxy身份验证绕过漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496947&idx=2&sn=4d5f7bf05f88fe132cade2806d79c596": "【漏洞通告】Ivanti Endpoint Manager多个信息泄露漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU0MjE2Mjk3Ng==&mid=2247488407&idx=1&sn=9f14c87a5bd0069bcb81779ce3d4c4d2": "美国CISA将Fortinet FortiOS列入已知漏洞目录", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489929&idx=1&sn=5a5cb71d997259c5fd89a14ae79f829f": "2025最新Invicti-Professional-V25.1 WEB漏洞扫描器更新|近期漏洞合集更新", "https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247597488&idx=1&sn=b742395aa377ae841d5658003e035f50": "译文｜韩国国家网络安全战略", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588707&idx=2&sn=d8b388917808b4ab77f7526a37a8f228&chksm=b18c26a986fbafbfafefb07442a2524806b1f3c1598ea59eff936f42c6f1d5c9c7346e8eb91e&scene=58&subscene=0": "Palo Alto Networks Expedition 工具曝关键漏洞，明文密码或泄露", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588707&idx=3&sn=e956cfff8deabe1f7326baacac64eef9&chksm=b18c26a986fbafbf0481872368b731450bf7c0dd4efa35180ae1fdcb91d09ff87bfcfda869c7&scene=58&subscene=0": "Windows内核漏洞分析与EXP编写技巧", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513518&idx=2&sn=e3691228661dd921114c81bc336d3c7a&chksm=ebfaf28edc8d7b987cbca67e7facee84ece62bb9db75aeb0b865aafa069342f157193c760e9b&scene=58&subscene=0": "微信支付存漏洞？用户被异地刷脸支付成功，官方回应", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522089&idx=1&sn=a04239b89ce2032e8e28b49d05782135&chksm=ea94a643dde32f55fd65e0ec66115b17b1cfe6c18f35bb55ece3c45dfce09c46bdf368f9009f&scene=58&subscene=0": "Ivanti修复Endpoint Manager中的多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522089&idx=2&sn=46178e7445995e2b3a605d7fd3c37a93&chksm=ea94a643dde32f5500a0b9ba085731e8b6fcd21c96d42f6dbb5597cd5ac92f61c77907616c88&scene=58&subscene=0": "SimpleHelp 多个严重漏洞可导致文件窃取、提权和RCE攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507685&idx=1&sn=f6f13d9e6ca46b986c4c17ce7424d252&chksm=cfcabdf1f8bd34e7a4bb18b1d16702e6a4feb5c65a3c5642728ea446c51edaaba876ffe2c928&scene=58&subscene=0": "Rsync修复数个高危漏洞，两个RCE需要重点关注", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067407&idx=4&sn=0e43cb3c3a8763dcfcbd7b70a9d16464&chksm=f36e7a0fc419f319a7965eec0e32510033e5b2543bbe6ce51c54334af84e58c2c68a4a803549&scene=58&subscene=0": "【安全圈】Fortinet 又被确认存在新的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664234775&idx=3&sn=82b000440fa4c60ceae4b17d4472d670&chksm=8b59fdeebc2e74f8f1e114cc8a17881077bd3708e814560f198b1085ef506d998bb5bd1dec9b&scene=58&subscene=0": "CNNVD | 关于Fortinet FortiOS和FortiProxy安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664234775&idx=4&sn=ec548ccac6f3d80540906533ca87ecf9&chksm=8b59fdeebc2e74f8c64ef4317b09ff932b30314e4bf6a8856a5aa49afbd1509722c124378ab7&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580839&idx=1&sn=9bbf94cef195dc62ef4e9c2767e40736&chksm=e9146c9dde63e58b38dc1102ff184f3f04def7647e879875cf84eea98fd90bd0fb589e54a1ae&scene=58&subscene=0": "Nuclei 漏洞允许恶意模板绕过签名验证", "https://mp.weixin.qq.com/s?__biz=MzU1NTEzODc3MQ==&mid=2247486892&idx=1&sn=a6724b98a3098cb4aafd29db4607bbea&chksm=fbd9a610ccae2f06142212f5bb3152632f1397c33284590d3a060c069821d719e57417138604&scene=58&subscene=0": "Atropos：对Web应用程序服务器端漏洞的模糊测试技术", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793889&idx=2&sn=b498ab3fe02cf49771f55c3772496fac": "新的 UEFI 安全启动漏洞可能允许攻击者加载恶意 Bootkit", "https://mp.weixin.qq.com/s?__biz=MzU4OTg4Nzc4MQ==&mid=2247505535&idx=1&sn=1f991ed49fc06c72e9eb89d151038ee8": "大连中远海运川崎招聘网络安全运行维护", "https://mp.weixin.qq.com/s?__biz=Mzk0OTUwNTU5Nw==&mid=2247488538&idx=1&sn=a97ec9a3e0b0d1426f592ca73c8a0826": "【相关分享】记一次SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492081&idx=1&sn=8f5e671b12dc165c2b101543d51d52b4": "漏洞预警 | Netis Wifi路由器信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247493301&idx=1&sn=14d3843029a33e9ea975e81ed20fab0d": "SimpleIAST- 基于污点追踪的灰盒漏洞扫描工具。", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247490765&idx=1&sn=409b2bcbd5111df2487a2c68cedced21": "能信安：漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI2MDE5MTQxNg==&mid=2649723157&idx=1&sn=aba786ea27b176262df51aaf93816f1b": "14:40到14:45，支付宝20%优惠“Bug”究竟发生了什么？", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247495599&idx=2&sn=f6e97265524b6e0494da95034df04099": "警惕！近期Fortinet防火墙频遭攻击，疑似零日漏洞被利用", "https://mp.weixin.qq.com/s?__biz=Mzg2NzU4MDM0MQ==&mid=2247495653&idx=1&sn=b993cb0bbbcd76d1c022a6d0250dde96": "快手7篇论文入选人工智能领域顶会AAAI 2025", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247502142&idx=2&sn=71658a53c477aae39be23a40f0baa4b7": "立级修补！UEFI安全启动曝出绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyNzc3OTMzNw==&mid=2247485740&idx=1&sn=7322bc46dcb2087c3e62a2e5bac53951": "【工具分享】一个综合性比较强的java漏洞集合工具（集成多种实用小工具）", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487114&idx=1&sn=115e5afefe5e9306bda97c094ba1e09d": "某小说vip破解代码分析", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247506848&idx=2&sn=4918f16f2099d34206ad07e0c67b5a25": "情报经纪人出手：惠普企业（HPE）遭黑！", "https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247527885&idx=1&sn=f3acf7878a0bae0b3cf7b7ab894461e3": "光网络时代的两大核心技术：EPON 与 GPON", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247569798&idx=2&sn=b3d932e186079d318198ca4e3fb47d39": "漏洞扫描工具 -- SBScan", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651134752&idx=2&sn=a71898ac89bc6a622d04a05f120c6232": "2025年值得关注的十大漏洞管理工具", "https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247484514&idx=1&sn=34349f1717c6e792960e75913935ee1d": "27.悬于开发者和安全研究人员头顶的剑 | 一类漏洞让Visual Studio项目变得不再可信", "https://mp.weixin.qq.com/s?__biz=MzkyODYwODkyMA==&mid=2247484974&idx=1&sn=d77f9d549b659cac6a5c9c72040b4bb0": "初级漏洞猎手十大必备网站", "https://mp.weixin.qq.com/s?__biz=MzkzNzg4MTI0NQ==&mid=2247485321&idx=1&sn=b3fd33cb785e9affc26dceaeec07c6b4": "2024Goby红队版工具-附2024年poc合集，支持导入自定义poc库", "https://mp.weixin.qq.com/s?__biz=MzkxNTU5NTI1Ng==&mid=2247487185&idx=1&sn=139315f62af5162df6c20bf93a99917b": "一文解锁网络安全交流群，HW 课提能，漏洞库护航，SXF 内推进阶", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247488192&idx=1&sn=5230537241103a68f2b04683e00e9429": "一款容器镜像漏洞扫描器-Trivy", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522104&idx=2&sn=eb5266f7ac15b9afa33c145e179f4b25": "W3 Total Cache 插件漏洞导致100万WordPress站点遭暴露", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247534414&idx=2&sn=73bf0833c3bb12ee08861ceb729eee8f": "银狐叒进化，溯源不了，清理不掉！", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499191&idx=1&sn=1df42533b3acc04c05ce14167cfb5bc8": "java漏洞集合工具 -- Hyacinth", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491970&idx=1&sn=942362e32fb21fcc10dc1e43eafade1a": "开源漏洞扫描器Nuclei 漏洞可使恶意模板绕过签名验证", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489480&idx=1&sn=94cd72de934fea315c3cda6436f85fd2": "【漏洞预警】NetVision airPASS信息泄露漏洞(CVE-2025-0455)", "https://mp.weixin.qq.com/s?__biz=MzkxNjg3NTQ4NA==&mid=2247485581&idx=1&sn=e6b9fcb1d7395d24b75c2788fe77c394": "pikachu漏洞靶场通关手册（万字图文解析）", "https://mp.weixin.qq.com/s?__biz=Mzg4Njc0Mjc3NQ==&mid=2247486626&idx=1&sn=0b601e90fca3b769a570d7a5576f8cfb": "CVE-2024-3661，又可以考验发行版补丁及时性了", "https://mp.weixin.qq.com/s?__biz=MzUxMjc0MTE3Mw==&mid=2247494902&idx=1&sn=e942a959eb4ef9c69caf9dedbf984b16": "SIP 绕过漏洞允许攻击者在 macOS 上安装 Rootkit（CVE-2024-44243）", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094624&idx=2&sn=7e81f2c4eff7aa2a747ed951a160b652": "针对 Ivanti Connect Secure RCE 漏洞 （CVE-2025-0282） 发布 PoC", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651312407&idx=3&sn=038818ab5651a46363c9fda9f15249d1": "新的UEFI安全启动漏洞可能允许攻击者加载恶意Bootkit", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067425&idx=3&sn=ca5d0f47ca765e96d6aca2175ef92b2a": "【安全圈】新的 UEFI 安全启动绕过漏洞使系统暴露于恶意 Bootkit", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500636&idx=1&sn=689cf133b8d52186aea81c6dc5544f45": "【漏洞通告】Rsync 缓冲区溢出漏洞(CVE-2024-12084)", "https://mp.weixin.qq.com/s?__biz=MzI0MTY5NDQyMw==&mid=2247525402&idx=1&sn=7868570982251b31fc9800aa6e26e17b": "Windows CVE-2023-29360漏洞的研究与分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522104&idx=1&sn=c06ab4d6c64169ea92baf711cd9ca06f": "谷歌OAth 漏洞导致弃用账号遭访问", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553095&idx=1&sn=e139cf48710f64da0487ee89d80064e7": "红队实战之通达OA系统漏洞POC脚本一键编写", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484912&idx=1&sn=a9cf3afb132950a54b3709c905ee9737": "【漏洞通告】疑似CVE-2024-55591POC", "https://mp.weixin.qq.com/s?__biz=Mzg5MDg3OTc0OA==&mid=2247489395&idx=1&sn=6e54d3c664b63cc91f2a731afdd5e39d": "CVE-2023-24860 拒绝服务攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496884&idx=1&sn=d38c05cf3d7a7403c9f249d8ecd87af6": "漏洞挖掘|还没开始就结束了？行不行啊！毫无体验感", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651134752&idx=2&sn=a71898ac89bc6a622d04a05f120c6232&chksm=bd15abf38a6222e533ed0132f7e77a2fbe6dadae33791ddb480978c0dd57c2e79ff8c100c51b&scene=58&subscene=0": "2025年值得关注的十大漏洞管理工具", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522104&idx=1&sn=c06ab4d6c64169ea92baf711cd9ca06f&chksm=ea94a652dde32f443f096355df3c5a3997325d38720f9646c7552c718d40938546c2d64368d6&scene=58&subscene=0": "谷歌OAth 漏洞导致弃用账号遭访问", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522104&idx=2&sn=eb5266f7ac15b9afa33c145e179f4b25&chksm=ea94a652dde32f4477d3c5c788245a1f1ecc01c280aa362dd3674132ba4d864bea67b8230155&scene=58&subscene=0": "W3 Total Cache 插件漏洞导致100万WordPress站点遭暴露", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496884&idx=1&sn=d38c05cf3d7a7403c9f249d8ecd87af6&chksm=e8a5fed7dfd277c164b94e6fcd54793e8ea061a609e3423fe38f6262c15958c980166fad5eb1&scene=58&subscene=0": "漏洞挖掘|还没开始就结束了？行不行啊！毫无体验感", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067425&idx=3&sn=ca5d0f47ca765e96d6aca2175ef92b2a&chksm=f36e7a21c419f33735e1a2f656bff36d74b3e5985a2b7e2a91ea9d174696c43a8489e586be9b&scene=58&subscene=0": "【安全圈】新的 UEFI 安全启动绕过漏洞使系统暴露于恶意 Bootkit", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487115&idx=1&sn=338d1d8129bc7b7f75ae6ad22e4cef7e": "渗透测试 | 某系统垂直越权漏洞的挖掘", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492093&idx=1&sn=b27485da37f7eef604851eddd114d810": "漏洞预警 | Ivanti Connect Secure栈溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492093&idx=2&sn=d34b7d393afa2629d555d68405f5175b": "漏洞预警 | CraftCMS模板注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492093&idx=3&sn=066c072aeb8c8dca5f78f1c1addfe03a": "漏洞预警 | WordPress Plugin Radio Player SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247504688&idx=1&sn=9e1211dcc443c27b4bfc26fc1fb7639c": "掌握现代红队基础设施第 3 部分 — 使用 DNS 记录和 OPSEC 绕过邮件安全网关保护邮件服务", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485250&idx=1&sn=cc481b4d430eb2516b235f762c1047cb": "Graphql内审查询漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU5Njg1NzMyNw==&mid=2247489123&idx=1&sn=228fa0630cebdc58c6b961b96752dc2f": "DataCon2024解题报告WriteUp—漏洞分析赛道", "https://mp.weixin.qq.com/s?__biz=Mzg4MDYwNDc5Nw==&mid=2247486547&idx=2&sn=a6ca41fa15cd7e03ba221df57d0eb859": "影响多数UEFI系统的CVE-2024-7344漏洞可绕过安全启动", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488622&idx=1&sn=baced76f27759525c3de42cb9abd4668": "【代码审计】WeGIA 存在前台任意文件上传漏洞 (RCE)", "https://mp.weixin.qq.com/s?__biz=MzkzNzg4MTI0NQ==&mid=2247485359&idx=1&sn=fc0b810b0174b166b92e61fedd91fe77": "强力工具助你一臂之力：XXECheck–全面提升XML安全，防护XXE漏洞！", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067460&idx=1&sn=7e41cdf5b76e20186089903f7171a588": "【安全圈】高危！rsync被爆出多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjg3NTQ4NA==&mid=2247485767&idx=1&sn=93b546f9ce1febe8901087238dc96ee7": "DVWA漏洞靶场通关手册（万字图文解析）", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490256&idx=1&sn=86fcd7775b4baa4c1dfe975633d73730": "方正畅享全媒体新闻采编系统 reportCenter.do SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485778&idx=1&sn=f2bab6ffd22425efb72f8b20eeeab29b": "CVE-2024-53704｜SonicOS SSLVPN认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485778&idx=2&sn=691f85f7d7a345f2ed5607454b84333b": "CVE-2024-55591｜FortiOS和FortiProxy身份认证绕过漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588749&idx=1&sn=c07163014dddf5e352e4f3683251b0d4": "欢迎报名！​“系统0day安全”系列课程：掌握漏洞挖掘重要技能", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588749&idx=2&sn=6fc809be9ede10a46f7d204c536cd5bf": "PWN入门：误入格式化字符串漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490248&idx=1&sn=1eba3e69ef0279c4fc7796abe9ca32c6": "方正畅享全媒体新闻采编系统 screen.do SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650606788&idx=1&sn=1d92761760abe35316e9dcf0f7bc34f5": "关于利用人工智能技术绕过图形类验证机制新型犯罪手法预警通报；|2025年首个满分漏洞，PoC已公布，可部署后门", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633889&idx=5&sn=0eaed00ffbd92d4c0652fd3e9340e6f4": "微信支付存漏洞？用户被异地刷脸支付成功，官方回应", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5NzMzMA==&mid=2247484176&idx=1&sn=f4be63e1e0f295963d861967f27eb595": "Nuclei POC 管理工具（附POC地址）", "https://mp.weixin.qq.com/s?__biz=MzkxOTI5NzY4MA==&mid=2247486096&idx=1&sn=dee2f6b912c394e375ccb0dc69bb1de5": "strust2_CVE-2024-53677漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499201&idx=1&sn=d479b7a4fca1420e0d84bc8efa5959af": "1314个自定义goby-poc（1月8日更新）", "https://mp.weixin.qq.com/s?__biz=MzkzNTQwNjQ4OA==&mid=2247484053&idx=1&sn=f2f7d10b6cf4337e7ab2212e103f702a": "一次通用cnvd案例分享", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588749&idx=2&sn=6fc809be9ede10a46f7d204c536cd5bf&chksm=b18c26c786fbafd14e4e451e21e415e3d96e93feb517543db94006ba90a0f748c9b78f0cc838&scene=58&subscene=0": "PWN入门：误入格式化字符串漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5Njg1NzMyNw==&mid=2247489123&idx=1&sn=228fa0630cebdc58c6b961b96752dc2f&chksm=fe5d0ee3c92a87f539db8736eee19d3b20b91e5cf731b6a9630bc1339b0cd1dfb5e2e9ecca66&scene=58&subscene=0": "DataCon2024解题报告WriteUp—漏洞分析赛道", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067460&idx=1&sn=7e41cdf5b76e20186089903f7171a588&chksm=f36e7ac4c419f3d2506b8a4fda50d186484d0b429b68fbc2c9fa6a6d793e423ec4e7374d18b2&scene=58&subscene=0": "【安全圈】高危！rsync被爆出多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247510270&idx=1&sn=6e0dfb575d641bc67a2b3f00196df49c&chksm=fa527d40cd25f4569e895e911f8d3e8f3e3bc366ffc8598627f89ba3a175f3b65e348be9866b&scene=58&subscene=0": "2024年度人工智能相关重点安全漏洞盘点", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651312409&idx=1&sn=cb68df3d11a9480a16e2eab801cc662c": "2025年十大最佳漏洞管理工具", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485265&idx=1&sn=cfeefce93d801ab805be4f712eb7925f": "OneThink文件缓存漏洞及日志读取", "https://mp.weixin.qq.com/s?__biz=Mzg4MDYwNDc5Nw==&mid=2247486551&idx=1&sn=ccef527f35f3e3ebe676d7e3916acac0": "ESET发现可绕过UEFI安全启动的严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247489758&idx=1&sn=c26ab657c20bf97835120f44faa38b93": "2025年值得关注的十大漏洞管理工具", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588749&idx=1&sn=c07163014dddf5e352e4f3683251b0d4&chksm=b18c26c786fbafd14670241f07726032e76e13980b4ff50732d34c76fea9f03ae8979ccaba96&scene=58&subscene=0": "欢迎报名！​“系统0day安全”系列课程：掌握漏洞挖掘重要技能", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484259&idx=1&sn=888da6c5443cb2f2ae0c03c3c922dd17": "KONE-通力电梯管理系统-app_show_log_lines.php-任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488641&idx=1&sn=af12c4534abac0d07a82bbdb894ba5a7": "【工具分享】Swagger API Exploit 1.2 - 信息泄露利用工具", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067480&idx=4&sn=8dc7094933166fceeb2e467f38e23545": "【安全圈】CL-UNK-0979 利用 Ivanti Connect Secure 中的零日漏洞获取网络访问权限", "https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247527921&idx=1&sn=63a793fb3dda03d616d12f4df6d2bcfc": "网络工程师：如何在职场中越老越吃香？掌握这几点，你也能越老越牛！", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484268&idx=1&sn=9b38caee54f9f1217b1e27269fc22a09": "锐捷-SSL-VPN-越权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247518348&idx=1&sn=c0faf8a6a240edb462faa9205bd3a22a": "CVE-2024-13025-Codezips 大学管理系统 faculty.php sql 注入分析及拓展", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491972&idx=1&sn=bfd5fb18fdc8cbb6d1b4b232bf172ad5": "易受攻击的 Moxa 设备使工业网络面临攻击", "https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476241&idx=2&sn=f8aa1894f4822ff6449504c5568ac618": "秦安：中美网民会师小红书，TikTok拟周日关停美业务，斗争才会赢", "https://mp.weixin.qq.com/s?__biz=MzkyNDA5NjgyMg==&mid=2247501315&idx=1&sn=d85a30ae678cadbcaa0d69068c18dc6d": "春秋杯WP | 2024春秋杯冬季赛第三天题目部分解析", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490002&idx=2&sn=d5528443216703026dbb5befe50a87c2": "一次通用cnvd案例分享", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247488420&idx=1&sn=08034823ae10fcec92f62940ef7d6e49": "记一次CNNVD通用漏洞证书挖掘", "https://mp.weixin.qq.com/s?__biz=MzkyMDY1MDI3OA==&mid=2247483794&idx=1&sn=31e5bf60bafe8e52c06509a0827328b2": "记一次CNNVD通用漏洞证书挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU0OTQyMg==&mid=2247484324&idx=1&sn=86bc6803db897c208c21fdbf04f469f5": "【漏洞预警】Rsync缓冲区溢出漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454063841&idx=1&sn=d71d882f0aff0331d4d02e32a966d237": "信息安全漏洞周报【第006期】", "https://mp.weixin.qq.com/s?__biz=Mzg2MTc1MjY5OQ==&mid=2247486238&idx=1&sn=0d0e11190ce7cebaf3d1a0e829230713": "中间件安全|Tomcat漏洞汇总", "https://mp.weixin.qq.com/s?__biz=MzkxMDY3MzQyNQ==&mid=2247484792&idx=1&sn=c4cc7279d562c9286b0ab2291a614eeb": "Confluence认证后RCE（CVE-2024-21683）", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492105&idx=1&sn=6b3de2fc54f10c818f7f5d69cf9011df": "漏洞预警 | Apache Linkis任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492105&idx=2&sn=819ec9928f504767b95f35183bdd0a6a": "漏洞预警 | 家装ERP管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247493309&idx=1&sn=c520f39f9b4ac2af95887b6e3492a9a4": "一个支持被动代理的调用 KIMI AI 进行越权漏洞检测的工具", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067480&idx=4&sn=8dc7094933166fceeb2e467f38e23545&chksm=f36e7ad8c419f3ce413fdcd09b7fbf2c3828fe34b5aca8c6a3b0d570a1f213c166b9943c4be8&scene=58&subscene=0": "【安全圈】CL-UNK-0979 利用 Ivanti Connect Secure 中的零日漏洞获取网络访问权限", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484280&idx=1&sn=40cc233e8d31ab8b8f0ce418a1e1f056": "锐捷-云课堂主机-pool-目录遍历漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247488326&idx=1&sn=64bed920635cd5aa06b69d18c24050be": "漏洞挖掘 | 开始既结束？快速挖洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650606873&idx=2&sn=94e58d88c55ad6f451d6a5fdc6fb990e": "2025年十大最佳漏洞管理工具", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650606873&idx=4&sn=73681423b45d2c3ba8f33e5d75587249": "专注于软件供应链安全，具备专业的软件成分分析（SCA）、漏洞检测、专业漏洞库。", "https://mp.weixin.qq.com/s?__biz=Mzk0ODY1NzEwMA==&mid=2247486007&idx=1&sn=754dfb823942baaf0606ffee489adcef": "MS14-068 漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzg4MzU3MTcwNg==&mid=2247486183&idx=1&sn=476ee9505122d0e825cd0976774e74f6": "CVE-2023-33440源码分析", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485719&idx=1&sn=594e1286af1bd496465685b0b9d35ff8": "【漏洞分享】万能门店小程序管理系统存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDg0NTc1NA==&mid=2247510554&idx=1&sn=90cf0b08a77a723fb4ccc149e5e8fe1d": "校企共育 锻造双师 | 启明星辰知白学院网络安全方向“双师型”培训圆满结束", "https://mp.weixin.qq.com/s?__biz=MzIxNjI2NjUzNw==&mid=2247492856&idx=3&sn=11ddf73e872fe0de21d5222f9d314c79": "上周关注度较高的产品安全漏洞(20241230-20250105)", "https://mp.weixin.qq.com/s?__biz=MzA3NDE0NTY0OQ==&mid=2247484065&idx=1&sn=b7ddcbd7887c00397fa213810942dd33": "漏洞情报收集的方法", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492526&idx=1&sn=247ea35cbbd8abee04db13ecd2a84025": "因WordPress新漏洞，全球数百万网站面临被攻击风险", "https://mp.weixin.qq.com/s?__biz=Mzg5OTEzMjc4OA==&mid=2247489027&idx=1&sn=60e2dc88ec5d060e0324c3d237433b41": "Chrome浏览器的Google账户接管研究", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485278&idx=1&sn=d2763b1dec8419157ee3f7234cb8f4f5": "Log4j CVE-2017-5645反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497009&idx=1&sn=70c58fc6187adfcab699f9a29cd91695": "【漏洞通告】Rsync多个漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494414&idx=1&sn=de499009a87f19b7c41e25f0d6d150ba": "近期暗网 0day 售卖情报预警", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247549173&idx=1&sn=0c7333f70cb52cfe2b8da933eea4de06": "150亿造车新势力，宣布停运破产", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247491972&idx=1&sn=1ca23e5d04a0a77875e0689e1e8c2501": "漏洞预警 NetMizer 日志审计 axx.php sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489950&idx=1&sn=8471a28c7c14a45df7f2091f0c5866cd": "Catcher外网打点指纹识别+Nday漏洞验证工具|指纹识别", "https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247486273&idx=1&sn=9a0ebba7a700f0ae0410be83b4b1df00": "如何mongodb未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490011&idx=3&sn=696b18cad8b2a463ec2185c4ac088e12": "【库迪咖啡|全场饮品任选券|多店可用】现价仅需7.9 低至2.3折", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094653&idx=2&sn=c69dfb1b57a25f58f75e9a9f5422bd0c": "严重远程代码执行漏洞（CVE-2024-53691）在QNAP 系统中被发现", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900082&idx=1&sn=dc3053c2d874f9da5853c72c38c7c519": "SimpleHelp远程访问软件曝高危漏洞，可导致文件窃取、权限提升和远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489485&idx=1&sn=e5ea1e03489d9276fac40db96a823bb7": "【漏洞预警】ZZCMS index.php SQL注入漏洞(CVE-2025-0565)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448682463&idx=1&sn=6b0cf0e4166f632f756e6d7185550a0c": "金盾信安 | 网络和数据领域资讯第44期(2025.1.14-2025.1.20)", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094653&idx=1&sn=0a8f46713971d1eae5f9bc98fe0e3049": "利用 Windows 常见日志文件系统零日漏洞 （CVE-2024-49138）", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495715&idx=1&sn=c02f8d40b18ff20468aa338efd776c5d": "CNVD漏洞周报2025年第3期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495715&idx=2&sn=b9b9d870553d36e181ba7d1702fde7da": "上周关注度较高的产品安全漏洞(20250113-20250119)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588763&idx=2&sn=987fea6e7bc8cce2c77f2e2035072ac4": "开源工具 rsync 曝重大漏洞，黑客可越界写入缓冲区远程执行代码", "https://mp.weixin.qq.com/s?__biz=MzkxMDU5MzY0NQ==&mid=2247484461&idx=1&sn=b866a874c1d918dd649f80acfedc093f": "从国赛到西湖论剑：fenjing进阶通杀jinjia2_SSTI", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490287&idx=1&sn=70c96ed0de707107589c47460e4867aa": "【风险通告】Rsync存在多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1NzQ0NTMxMQ==&mid=2247490064&idx=1&sn=9f929a8b28422c1087a84c56aadbbfa1": "公示", "https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651618728&idx=2&sn=904dfe22108a734b8b461c189289de40": "美国候任总统特朗普推出个人加密货币", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490274&idx=1&sn=c5d8baaa4e674daef4881916a48159d0": "泛微-云桥e-Bridge checkMobile SQL注入漏洞(XVE-2024-34435)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518279&idx=1&sn=7d44805e31cccc886d5a926e01ac7338": "意外发现谷歌Slides越权漏洞，获得赏金$3133.70的故事", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522124&idx=1&sn=8b928d650502c3cebc7b2ae0e85282a2": "WGS-804HPT 交换机中存在多个严重漏洞，可导致RCE和网络利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522124&idx=1&sn=8b928d650502c3cebc7b2ae0e85282a2&chksm=ea94a626dde32f303236d54cf10c68cbf25ac8104fe9a6280306ddbcce4f3ce7624240d24d9d&scene=58&subscene=0": "WGS-804HPT 交换机中存在多个严重漏洞，可导致RCE和网络利用", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502869&idx=1&sn=53f5cfd343a3cd7a4e8a32a6fe638138&chksm=fe79e88dc90e619b8c2c010457c1e44f3ff06dd47f4a8abd602deff354192c4b2842a3c0dfc3&scene=58&subscene=0": "安全热点周报：Fortinet 警告利用身份验证绕过零日漏洞劫持防火墙", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588763&idx=2&sn=987fea6e7bc8cce2c77f2e2035072ac4&chksm=b18c26d186fbafc74e6a05aa86e92183c63d2d9a959a88738a9e938d04954b0f5f417afec628&scene=58&subscene=0": "开源工具 rsync 曝重大漏洞，黑客可越界写入缓冲区远程执行代码", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498340&idx=1&sn=f9aecfc3de35b8fac05e7e7d352da9e4&chksm=fa595489cd2edd9f317b3ce1a2e10a23a2a5c3c3fc4a16daa713ac76716cec8ef519e525b37a&scene=58&subscene=0": "举一反三 ，通过 Sharp4SuoPoc 从原理上复现 Visual Studio 投毒事件的来龙去脉", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247534891&idx=1&sn=442f5697287365e019e20cb29c0a8008&chksm=c1443b96f633b280e3859a3441a858dda1412ce36b7957734a73bf3c683102b57bad82ee504a&scene=58&subscene=0": "新西兰跻身云安全漏洞排名前十", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495715&idx=1&sn=c02f8d40b18ff20468aa338efd776c5d&chksm=fd74c0eaca0349fcf48893554150aa62b8d148205e3198526c654194241638eafab9530bc6b5&scene=58&subscene=0": "CNVD漏洞周报2025年第3期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495715&idx=2&sn=b9b9d870553d36e181ba7d1702fde7da&chksm=fd74c0eaca0349fcd7eabae533b4d6bf7f8a8cf66309cb1e93c0c20500d376dc0ac4c5436fe6&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20250113-20250119)", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499617&idx=1&sn=2c0ace8ad777eef414c8c2a9bd88f67a": "CNVD漏洞周报2025年第3期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499617&idx=2&sn=9bc261752d64c6b77c44994df9de434b": "上周关注度较高的产品安全漏洞(20250113-20250119)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502937&idx=1&sn=c80cc1036d35183287d46040fa66d3f2": "年度报告 | 2024年应该知道的漏洞都在这了！", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484275&idx=1&sn=09de46038ff584ab2e4f04beb9323471": "锐捷-Smartweb管理系统-密码信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650607107&idx=4&sn=259fcba73be50f943c126eb6e146fb91": "一个支持被动代理的调用 KIMI AI 进行越权漏洞检测的工具", "https://mp.weixin.qq.com/s?__biz=MzkzOTY1MzcyOQ==&mid=2247490124&idx=1&sn=fe99bee07e59e88ae95e3ffc9d0d2df4": "一款java漏洞集合工具", "https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649870803&idx=1&sn=51f34e28ce598dbb7bf51792487340d3": "盘点 2024 年备受关注的那些高风险漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk1NzI5NzA3NQ==&mid=2247486308&idx=1&sn=601c9ad58c9c5920f7f64cae97900a7b": "靶机复现-pikachu靶场文件包含漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247703&idx=1&sn=8d40046ba2e1a02953c034bae11ae32d": "盘点 2024 年备受关注的那些高风险漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650990290&idx=1&sn=fb9b947f5ea6ca876af9c2159098d8a4": "盘点 2024 年备受关注的那些高风险漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247490767&idx=1&sn=4d50d50ddaaa43b64e68433197559709": "能信安：漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490285&idx=1&sn=1844199c9e5bcd33ef6b29e3ab003f1f": "灵当CRM getMyAmbassador SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247492076&idx=1&sn=e6e2b41dcff2ec1afbc33c4208773ee1": "商混ERP系统 SQL注入漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661298101&idx=3&sn=3a12bf125b82524fb5e14ad1f10f0cea": "山石网科获评“工信部车联网产品安全漏洞专业库支撑单位”", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489492&idx=1&sn=4b8abb9528ef28b6575cae48afa08082": "【漏洞预警】MongoDB Mongoose未授权 代码注入漏洞CVE-2025-2306", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900091&idx=1&sn=caa3319f858b36f09599abe9fb1856e3": "Google Cloud研究人员揭露Rsync文件同步工具中的多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494423&idx=1&sn=c9dbfe5a19a3903f237bfe117646fd8f": "7-Zip高危漏洞预警:关于CVE-2025-0411漏洞的应对指南", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247505&idx=1&sn=86b86c4632ed9f1fb92c4fba01473353": "2025年十大最佳漏洞管理工具", "https://mp.weixin.qq.com/s?__biz=Mzk0MzY3MDE5Mg==&mid=2247483957&idx=1&sn=3feb5e6886dc42f9ee7a4bf5a9f2d088": "SecScan强大的端口扫描与漏洞扫描工具——梭哈！！！", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247485258&idx=1&sn=246608a49aed8e510181444e787070c4": "工具集：BucketVulTools 【存储桶配置不当漏洞检测插件】", "https://mp.weixin.qq.com/s?__biz=MzU0MjE2Mjk3Ng==&mid=2247488426&idx=1&sn=8f7ccadf3ea0c1d45dee38fe83545f64": "Yubico警告Linux和macOS用户，pam-u2f中存在2FA安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4Njg3MDk5Ng==&mid=2247486845&idx=1&sn=8e113d05132b58312fa363d52d996b1b": "电诈保护伞？虚拟号漏洞发现与利用", "https://mp.weixin.qq.com/s?__biz=MzIxNjI2NjUzNw==&mid=2247492868&idx=2&sn=dffeafd5729383586bcb3ea4400a1ac2": "上周关注度较高的产品安全漏洞(20250113-20250119)", "https://mp.weixin.qq.com/s?__biz=Mzg5MDgzOTk2Mg==&mid=2247484650&idx=1&sn=b495f19422c741fe60b7baa982cf5809": "电诈保护伞？虚拟号漏洞发现与利用", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492106&idx=1&sn=24a16b5a8753b2c225c2b40ba13cc668": "漏洞预警 | Fortinet FortiOS与FortiProxy身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492106&idx=2&sn=b34e8532a2316c79e30ac8b4f056ad4c": "漏洞预警 | 飞企互联FE业务协作平台SQL注入、远程代码执行和任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492106&idx=3&sn=09eac68654025a44625cdc87fced6098": "漏洞预警 | 九思OA任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247484742&idx=1&sn=6d549c467e115dc1e740ed698f4fab70": "XXL-job漏洞综合利用工具", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094668&idx=1&sn=162ecc38d487773f0cc1d476a900423c": "OWASP 2025 年 10 大漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094668&idx=2&sn=b4a3efa0f4f65c3bbcf7595b75c318bd": "7-Zip 漏洞允许通过绕过网络标记执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzA5Nzc4Njg1NA==&mid=2247489181&idx=1&sn=7dcb50d0a8af27d1c24feb4eb98aaf44": "关于防范开源文件同步工具rsync多个安全漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247624525&idx=1&sn=7f84b31a4512522433da75e3ef67fcdb": "持续领先！奇安信斩获5个CNNVD漏洞贡献奖", "https://mp.weixin.qq.com/s?__biz=Mzg2MjgwMzIxMA==&mid=2247484807&idx=1&sn=abe41dbf3b287ee6084ee20f4fb0503f": "CTF:Phar反序列化漏洞学习笔记", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579167&idx=3&sn=9adcb35ed05747f7530c83f59de0ea37": "喜讯！360获评2024软件和信息服务业年度领航企业及创新成果两项大奖", "https://mp.weixin.qq.com/s?__biz=MzkyMjM0ODAwNg==&mid=2247488402&idx=1&sn=60dd6d424657d00eb3c9d18f333f261e": "【新年快乐】2024-EXP合集下载链接~随时删", "https://mp.weixin.qq.com/s?__biz=MzUyODQ0MTE2MQ==&mid=2247483749&idx=1&sn=762084442aa00a999fea80eed8b17326": "中小企业及创业公司信息安全建设指南", "https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247506533&idx=1&sn=e0384f942eb95e019890cdd57d901334": "观安信息荣获“铸网2024”暨上海市“铸盾2024”车联网网络安全实战攻防活动优秀支撑单位", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247570185&idx=1&sn=be31eb813a71b58e0f28b8de1d176cb9": "2025年首个满分漏洞，PoC已公布，可部署后门", "https://mp.weixin.qq.com/s?__biz=MzkzNjIyNjM1OA==&mid=2247485035&idx=1&sn=d144d6395901bfcd213ae90752d58504": "蛇年新禧，祥福并济|360漏洞云漏洞众包响应平台放假公告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247502873&idx=3&sn=ab3d8ccd96f17d0a3040c85d24e35be3": "蛇年新禧，祥福并济|360漏洞云平台放假公告", "https://mp.weixin.qq.com/s?__biz=MzU3MTU3NTY2NA==&mid=2247488646&idx=1&sn=55f0e893bbbe3ba7916fcf2c21d94349": "【漏洞速递】PHP 8.1.0-dev RCE &SQLi", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488918&idx=1&sn=158d8df04d4080e7902083a76fd24d26": "【漏洞通告】MongoDB Mongoose搜索注入漏洞（CVE-2025-23061）", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490294&idx=1&sn=361afa1ff2c71de2ba6e7340aace060b": "卓软计量业务管理平台 image.ashx 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522133&idx=1&sn=694ac221193eff02711b6e597610546d": "持续领先！奇安信斩获5个CNNVD漏洞贡献奖", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067526&idx=2&sn=35fd8cf175959d2493340598399f5c01": "【安全圈】梅赛德斯—奔驰信息娱乐系统漏洞详细信息披露", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247624522&idx=1&sn=4a81811d316688b70e550dcedd17e234": "持续领先！奇安信斩获5个CNNVD漏洞贡献奖", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513551&idx=2&sn=f50c04a1adb0a92b26906f0e29ecabdb": "B站员工植入恶意代码报复用户，官方：漏洞已修补，员工已处罚", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589041&idx=3&sn=f23e141f9f2559ffdfdd86d3d8f3ef1f": "报名中！即将开班 | 无人机安全攻防入门：从整体架构到漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkzNzU5MDMxOA==&mid=2247484238&idx=1&sn=1212c4ce350e7d19cf41b8dd512655bd": "SRC技巧分享：某高校未授权访问+XML文件上传引发的XSS", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526949&idx=1&sn=31c547596d860fd22edbb2c5ea3275b5": "Windows 零日漏洞遭利用：CVE-2024-49138 PoC 代码发布", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247502873&idx=2&sn=b244ada36b1a87162f083c5a17af9c04": "《网信自主创新调研报告》表彰大会召开，360漏洞云获多项荣誉", "https://mp.weixin.qq.com/s?__biz=MzkyODY5ODAyOA==&mid=2247489419&idx=1&sn=27d48e4898f7de1f017a5a7bc5bc6a4e": "2024年度漏洞态势大揭秘：你的网络安全防线还稳固吗？（附下载）", "https://mp.weixin.qq.com/s?__biz=Mzg2MzkwNDU1Mw==&mid=2247485410&idx=1&sn=c516da4c5bcf9729e270e70dc0c6e61d": "ViewState反序列化漏洞详解", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652114147&idx=2&sn=0ec2b581bd93714c8ff60c69bcc70f8b": "126个Linux内核漏洞可让攻击者利用78个 Linux子系统", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489961&idx=1&sn=f40f050019a99e6f65fa036bc9a7da16": "1Scan一键渗透扫描器|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzIwNjYwMTMyNQ==&mid=2247492936&idx=1&sn=bb3bb218d18652b9951e26d6cf5f8ab8": "奇安信2024《漏洞态势报告》：新增漏洞再创新高，总体威胁持续加深", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589041&idx=3&sn=f23e141f9f2559ffdfdd86d3d8f3ef1f&chksm=b18c27fb86fbaeede1ae14775b2e06f51d9ff39aea062676c42180f7f320b879996baf3f7ff8&scene=58&subscene=0": "报名中！即将开班 | 无人机安全攻防入门：从整体架构到漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247502873&idx=2&sn=b244ada36b1a87162f083c5a17af9c04&chksm=cfc56b46f8b2e25026712ae5023c6dc56a4c50092057dd3a58850b41c210c29b5bb60a729b85&scene=58&subscene=0": "《网信自主创新调研报告》表彰大会召开，360漏洞云获多项荣誉", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247502873&idx=3&sn=ab3d8ccd96f17d0a3040c85d24e35be3&chksm=cfc56b46f8b2e250435ced6a4be9d9a5c5bd4bd692a7fbe65aed030690c7fddd6791331fd27b&scene=58&subscene=0": "蛇年新禧，祥福并济|360漏洞云平台放假公告", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488918&idx=1&sn=158d8df04d4080e7902083a76fd24d26&chksm=c2c6429df5b1cb8bc86e5d57a7d589ef30a23ca11cd0bb38269afe2125cd10f152606ce4ea98&scene=58&subscene=0": "【漏洞通告】MongoDB Mongoose搜索注入漏洞（CVE-2025-23061）", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502937&idx=1&sn=c80cc1036d35183287d46040fa66d3f2&chksm=fe79e8c1c90e61d7169d6a42f15d0c02941c362881e765d760f9c7317c8bd10f66e565995bb1&scene=58&subscene=0": "年度报告 | 2024年应该知道的漏洞都在这了！", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513551&idx=2&sn=f50c04a1adb0a92b26906f0e29ecabdb&chksm=ebfaf2efdc8d7bf9ab0f5e0cbcbc04e62cceea6c6ef61ed92d88aeb2fc987c5cabce1bd08cec&scene=58&subscene=0": "B站员工植入恶意代码报复用户，官方：漏洞已修补，员工已处罚", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499617&idx=1&sn=2c0ace8ad777eef414c8c2a9bd88f67a&chksm=973acc03a04d45150eee133cf3ae4786f50bc20f2a1af53ec7434b10c80e8f59831a23fd48bc&scene=58&subscene=0": "CNVD漏洞周报2025年第3期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499617&idx=2&sn=9bc261752d64c6b77c44994df9de434b&chksm=973acc03a04d4515f9832db1f4bf68dd1429f5d2152ca1b0fc12e931442a861b7b4043801e92&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20250113-20250119)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067526&idx=2&sn=35fd8cf175959d2493340598399f5c01&chksm=f36e7a86c419f390ae47d611d4f4561da13239e89f5e649487a4ddd152221306aa899f53951d&scene=58&subscene=0": "【安全圈】梅赛德斯—奔驰信息娱乐系统漏洞详细信息披露", "https://mp.weixin.qq.com/s?__biz=MzIzNDIxODkyMg==&mid=2650085835&idx=1&sn=55b9b7d447e31ed5e6a7016fc118aba7": "梅赛德斯—奔驰信息娱乐系统漏洞详细信息披露", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492118&idx=2&sn=0cc8d46b2006a58fe76e0aceeec3f5e3": "漏洞预警 | 叁拾叁OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655264326&idx=2&sn=edd9feb6f1f3d5fb7467e5a4a1bc8ea3": "2024年度网络安全漏洞威胁态势研究报告", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650990290&idx=1&sn=fb9b947f5ea6ca876af9c2159098d8a4&chksm=8079a4e0b70e2df652368fa2253964cd3b67c0ea64d03589c0a70c3560e6fe23ff6337a69fd1&scene=58&subscene=0": "盘点 2024 年备受关注的那些高风险漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247495179&idx=1&sn=0d366655fb6bb139775fc4d4fe333652": "【神兵利器】JAVA JMX漏洞综合利用工具", "https://mp.weixin.qq.com/s?__biz=MzkyMjM4MzY5Ng==&mid=2247486052&idx=1&sn=672267c39bd61c609b8a70aa6fe4dba4": "关于公示2025年工业和信息化部移动互联网APP产品安全漏洞专业库支撑单位的通知", "https://mp.weixin.qq.com/s?__biz=MzkyMjM4MzY5Ng==&mid=2247486052&idx=2&sn=df504e3f60bd71a5f51f6ddfc79ceac2": "支撑单位遴选 | 关于开展2025年工业和信息化部移动互联网APP产品安全漏洞专业库支撑单位遴选工作的通知", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484293&idx=1&sn=cd12f02c20011f8601ff6b85bae5ce45": "奥威亚教育视频云平台VideoCover存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247498303&idx=1&sn=44d1260f2cc91c290e3a07a71e970559": "OWASP 2025年十大漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwNjczOTQwOA==&mid=2247493978&idx=1&sn=ef4fa58f2e534bfa7c9db3f5a3f01f9f": "Burpsuite插件 | 快速探测可能存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489507&idx=1&sn=cdbcc7dac604210a7fa351e96c1bbaa9": "【漏洞预警】pearProjectApi存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489507&idx=2&sn=43309d019012fc2d5146638f21cf4cdb": "【漏洞预警】YesWiki 存在经过身份验证的任意文件删除漏洞(CVE-2025-24019)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490015&idx=2&sn=e906ce0834778a54573549a04e207af6": "CTF:Phar反序列化漏洞学习笔记", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067553&idx=4&sn=2c06e2c2a5011eb86894033a1e6c41fc": "【安全圈】7-Zip 漏洞可让远程攻击者绕过保护并执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzIyNTIyMTU1Nw==&mid=2247485220&idx=5&sn=5c373b4d772f9ce5160eed1cb8773743": "【网安前沿】人数超TikTOK！……", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502951&idx=1&sn=09d5b62b3cc3e71fec3a8595f18318a2&chksm=fe79e8ffc90e61e905225d9918798d40f77be91e0a5961c95f1ab8235b4d42623eb0ecca28ad&scene=58&subscene=0": "【已复现】Rsync 堆缓冲区溢出漏洞(CVE-2024-12084)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502951&idx=2&sn=21655dd26fe10def4a6c6546fdf240d4&chksm=fe79e8ffc90e61e9fd1b2697f079954e6002507bd3d9fe45bf9331fc3c21481d0b14887ce263&scene=58&subscene=0": "Oracle 2025年1月补丁日多产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522153&idx=1&sn=b0d2973a6eb87e554fb62b7ddfa10dfb&chksm=ea94a603dde32f1580de59ef6a2b8fb600c6cbb237024a672b5a02660c7fc1f7184f617fce4c&scene=58&subscene=0": "7-Zip 修复高危的 Windows MoTW 安全告警绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498371&idx=1&sn=d7e51b293b5afd36bf501f82d547e678&chksm=fa59546ecd2edd789772877b71ddaf889a171c0baebaed5bc5d84e1dc59ec80a6efff9da250e&scene=58&subscene=0": ".NET 通过代码审计发现 ERP 系统中两个任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498371&idx=3&sn=81f6211052fdbd84bfa5f5b833c14bea&chksm=fa59546ecd2edd78667ab8745d36715a39fb789abb78742e20b611f6645859db72e35cbd719d&scene=58&subscene=0": "通过 Sharp4SuoPoc 从原理上复现 Visual Studio 投毒事件", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488946&idx=1&sn=64c5620996cc0710ef9e2507f0fc0365&chksm=c2c642b9f5b1cbaf3667d5aae3b668b4e34e0cd89d95893a59c258488748706a1a17b3cd727e&scene=58&subscene=0": "【漏洞通告】Oracle WebLogic Server远程代码执行与拒绝服务漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589076&idx=2&sn=d0f764edebe291ce5b96f036fabe1a56&chksm=b18c271e86fbae08b860c61d822fe9c14f3216204f7890876285cf7d58d7086a9d18b2c2002e&scene=58&subscene=0": "7-Zip高危漏洞曝光！攻击者可绕过安全机制远程执行代码，速升级", "https://mp.weixin.qq.com/s?__biz=Mzk0Mjc2MzQ0Ng==&mid=2247484515&idx=1&sn=7626bbc733c1de7e73a860df756a9589": "7-Zip高危漏洞CVE-2025-0411 poc 攻击者可绕过安全机制远程执行代码", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247491493&idx=1&sn=74fc8816c35069edd449608952df076f": "7-Zip高危漏洞CVE-2025-0411 poc 攻击者可绕过安全机制远程执行代码", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589076&idx=3&sn=07bb4636837dcc2fbabded998321ad6e&chksm=b18c271e86fbae086f08a8628ae493c5626bf7b7941dbf05b7856553b1bd2011fe2f5765c6b1&scene=58&subscene=0": "更新5节！系统0day 安全-企业级网络设备固件漏洞挖掘（第7期）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067553&idx=4&sn=2c06e2c2a5011eb86894033a1e6c41fc&chksm=f36e7aa1c419f3b7663e1033a2b71bafbadf19c12ebb839d8cc5c2a954da81be8f83c2a04925&scene=58&subscene=0": "【安全圈】7-Zip 漏洞可让远程攻击者绕过保护并执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzU4MjEwNzMzMg==&mid=2247494658&idx=1&sn=8ad56c4e6fcaee8eb7353b3cb84e1ed8": "火线安全春节假期安排", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247490773&idx=1&sn=91b80a02103936a79eb2b34f62cc1406": "能信安：漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI4MzA0ODUwNw==&mid=2247487148&idx=1&sn=9a576b6a8e40146970073e74a16cfa51": "2024年12月考试成绩", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462583&idx=1&sn=f496cb38c7bbad55ba627bc0ca6daf7e": "CNNVD关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQ0MTI2MQ==&mid=2247484612&idx=1&sn=9e9a99376f6065f0559ba1bb95a8fa6a": "7-Zip Web标记绕过漏洞[CVE-2025-0411]-POC", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527057&idx=1&sn=dab70d3b1e0f0652b47ff48c1887f826": "7-Zip Mark-of-the-Web 绕过漏洞 [CVE-2025-0411] - POC", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527057&idx=2&sn=47312669754a595392d5a74d28fd6b22": "发现 ClamAV DoS 缺陷的概念验证：CVE-2025-20128", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486493&idx=1&sn=279f1220881fc761c7ad242bc83325f9": "CVE-2024-9593 WordPress 远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247615263&idx=1&sn=a2791470e497439c96cb4a7d2578aaca": "记一次IDOR 和访问控制缺失漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523137&idx=2&sn=32609b0942e7e3b115ff393691ac35d3": "Cisco 会议管理漏洞让攻击者能够将权限提升为管理员", "https://mp.weixin.qq.com/s?__biz=MzI3NjUzOTQ0NQ==&mid=2247517210&idx=1&sn=8c132df913168e9d296ce0321f0904bc": "2024年度网络安全漏洞态势分析与研究报告", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485343&idx=1&sn=ea5f519e9a3972aab9b055a494fc61f3": "Confluence OGNL注入漏洞复现(CVE-2022-26134)", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494462&idx=1&sn=99f5d1ddf9c4af13eb7957896b54b9f0": "目前2025汽车Pwn2Own大会产生16个0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494462&idx=2&sn=592a4ae480ce82910f5c832ea526c166": "【吃瓜】支付巨头万事达卡DNS错误存在多年，还不承认漏洞危害", "https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247484759&idx=1&sn=c4caa7986c85201bb1482edc2c398385": "Tomcat 弱密码检测与漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzI5NjA4NjA3OA==&mid=2652102044&idx=1&sn=ae34ae22750ff74049eabda7ec2ef3bb": "喜讯 | 金盾检测入选为2025年工业和信息化部移动互联网APP产品安全漏洞专业库支撑单位", "https://mp.weixin.qq.com/s?__biz=MzU0MjE2Mjk3Ng==&mid=2247488435&idx=1&sn=fe347684a39fe042876e6a13dd103054": "Cloudflare CDN漏洞泄露用户位置数据，即使是通过安全聊天应用程序", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247517944&idx=1&sn=c9a035ae82d527f2ebe884518dc3e56e": "工具 | 一款替代Frp完美消除网络特征的内网穿透神器", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900135&idx=1&sn=2675c56bb02cacdcbcb554cf291065ce": "高危预警！思科ClamAV漏洞PoC代码公开，多款终端安全产品告急", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492124&idx=2&sn=ac29f876f9b78d99d35ad00ae9c7351e": "漏洞预警 | 广联达Linkworks信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651312640&idx=2&sn=652ed0300126215df5cdfd30b50e7afb": "关于公示2025年工业和信息化部移动互联网APP产品安全漏洞专业库支撑单位的通知", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651312640&idx=3&sn=9904195ae2cf70bd87a4d4dca9ffdcfe": "Pwn2Own 2025首日，16个零日漏洞和200万奖金", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235572&idx=3&sn=fdc022660aa90ba5340b382eee49227a": "CNNVD | 关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651135209&idx=1&sn=63393f68bd3cf2051d22136b780192cf": "梆梆安全发布《2024年Q4移动应用安全风险报告》 全国78.37%以上APP存在中高危漏洞风险", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454063847&idx=1&sn=4fe2c06629d11317089a12ef0f79552d": "信息安全漏洞周报【第007期】", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247488629&idx=1&sn=0e40bfd703c383a6954c90bdb7c0325a": "CVE-2024-49113“LDAP 噩梦”：2025 年首个 PoC 漏洞针对关键 Windows 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTA0MTY2Mw==&mid=2247485791&idx=1&sn=a856f6c4d684f19e115d59fc9035e3d0": "ChatGPT Crawler漏洞可以通过HTTP请求进行DDoS攻击", "https://mp.weixin.qq.com/s?__biz=Mzg4NTA0MzgxNQ==&mid=2247489862&idx=1&sn=4b83e533ed54cf2bdf044047eff9bdb9": "『漏洞复现』XXL-JOB 默认 accessToken 身份绕过 RCE 漏洞分析及复现", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247495647&idx=3&sn=735cc5a7d53697ce267d9c016405b7df": "7-Zip高危漏洞，攻击者可绕过安全机制远程执行代码", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580942&idx=2&sn=c68b08970aacfb2f3445a422c4e35b40": "新的 Cleo 零日 RCE 漏洞在数据盗窃攻击中被利用", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527057&idx=3&sn=634fffd60e2e7360134637a74720981b": "Windows BitLocker 漏洞暴露了 AES-XTS 加密", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490017&idx=3&sn=dc5d3eba018ab7577e00f5d983516dd0": "SSRF漏洞简单练习", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489513&idx=1&sn=a4053925c18ddf9d81d07fda3c0ceb59": "【漏洞预警】AdForest <= 5.1.8 — 身份验证绕过", "https://mp.weixin.qq.com/s?__biz=MzUxMjc0MTE3Mw==&mid=2247494909&idx=1&sn=4a1e102c06f1136d8a4b19f56adf8d80": "SonicWall SMA 1000 系列设备面临严重漏洞，亟需立即修补（CVE-2025-23006）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518295&idx=1&sn=29dba99e1641c1bec1e6ff2582d7c277": "记一次SRC挖掘实战|签约漏洞的意外之喜", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553170&idx=1&sn=1787de3c0d1bdd3f4f78fef06cf7ea28": "从靶场到实战--双一流高校多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTc0NDY2Nw==&mid=2247484600&idx=1&sn=59cc623040da7fc41c0ec693eae05f01": "使用WindTerm工具针对IT运维人员的定向钓鱼样本分析", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094681&idx=1&sn=18f3ea0a72637260c73cc9fc9f9fb166": "Windows 文件资源管理器权限提升漏洞 （CVE-2024-38100）", "https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651148667&idx=1&sn=d180e4864f7fc7caffe5c5bea0629de2": "【资料】理解监控技术：间谍设备的起源与应用", "https://mp.weixin.qq.com/s?__biz=MzkwNjczOTQwOA==&mid=2247493984&idx=1&sn=b8e697fe117a8b2dd2c16cadc819bcd6": "工具推荐 | Redis 漏洞综合利用工具", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247518461&idx=1&sn=7e89ac9c9a252422d055ca79f0cb9808": "JS中的漏洞信息", "https://mp.weixin.qq.com/s?__biz=MzI0NjA3Mzk2NQ==&mid=2247495919&idx=1&sn=051e4b8bda3559a6193e38d1dbe2fd8a": "攻防靶场(49)：EXP不能用怎么办 Lampiao", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522160&idx=1&sn=1b0f6777dc7235311e5c6a6e6f764ee7&chksm=ea94a61adde32f0c9cccf05c3c8859347555a5487387c861b88ed747bec9b8fc951052a6455b&scene=58&subscene=0": "思科提醒注意严重的DoS漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235572&idx=3&sn=fdc022660aa90ba5340b382eee49227a&chksm=8b5800cdbc2f89dbaa822c0da9ccf2d285504b6a46ab5ccd51eca1d1336fa4b5531a52cb1e4a&scene=58&subscene=0": "CNNVD | 关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580942&idx=2&sn=c68b08970aacfb2f3445a422c4e35b40&chksm=e9146d34de63e42253baaf419e39e7d731b76d5137fbe43afb8d2299cfb78587b8067cf9c467&scene=58&subscene=0": "新的 Cleo 零日 RCE 漏洞在数据盗窃攻击中被利用", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489972&idx=1&sn=664772c35844a374fcc1a3e5788dad23": "内网扫描工具Fscan免杀版|漏洞扫描", "https://mp.weixin.qq.com/s?__biz=MzAxMDIwNjg2MA==&mid=2247486181&idx=1&sn=e6544c82c26b0dc320e298bbb1fa97b5": "动态红包封面，限时免费领取（第三波）", "https://mp.weixin.qq.com/s?__biz=MzA5MTYyMDQ0OQ==&mid=2247493538&idx=1&sn=c65b7640d0dd63b357e0138fc10213d6": "保护托管服务提供商及其客户免受网络威胁", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486597&idx=1&sn=4adff9311fb5f458ba301e4c5c226598": "【漏洞通告】通过使用特制文件名导致移动端崩溃(CVE-2025-0476)", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247547524&idx=1&sn=7ac5df0b17b1330bca7210825464a7bb": "某系统webpack接口泄露引发的一系列漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NTY0MjIwNg==&mid=2247485575&idx=1&sn=d70e6f03b4c4364b95475edb267f52e3": "黑客在 Pwn2Own Automotive 2025 第一天利用了 16 个0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094694&idx=1&sn=4585dbd6a2385bcc0d9f83cd29f7b622": "phpMyAdmin 触发 XSS 攻击的安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067590&idx=1&sn=32ea96086da2a1f7d7b7c25530ca8d55": "【安全圈】斯巴鲁汽车漏洞让黑客利用 Starlink 远程控制数百万辆汽车", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067590&idx=3&sn=7379d9127186d37af92f08f7a9ced06e": "【安全圈】思科曝9.9分关键权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651312790&idx=1&sn=f164fbd58d9d173bbc7eae3626f9ab40": "斯巴鲁曝关键漏洞，凭车牌号可远程入侵汽车", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651312790&idx=3&sn=83ffd20b9fd4d5d2da935ff3246e1ce6": "美国前中央情报局分析师承认泄露国防信息", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489518&idx=1&sn=4af05b6c62e451e4665c358a9b06bb24": "【漏洞预警】Elastic Fleet Server信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ2NzQ0Ng==&mid=2247484992&idx=1&sn=32c786903ab1ff5e499415b69a5dfc4b": "【再发一遍】新春抽奖开启！与奉天安全团队 & 禾信智安共迎新年好运!", "https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494044&idx=1&sn=356681967a014551977e5051389b8f15": "每周蓝军技术推送（2025.1.18-1.24）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589258&idx=3&sn=1ee9c0b4428aba7d94dead806b1d1cb1": "特斯拉汽车被“重点关注”，Pwn2Own Automotive 2024首日曝出24个零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513589&idx=1&sn=1b70e6f4b48c39927bb2af1c0178da71": "知名车企漏洞：只需车牌号，就能远程监控劫持数百万辆车", "https://mp.weixin.qq.com/s?__biz=MzIxNTA4OTI5Mg==&mid=2647712815&idx=1&sn=2d3a1abdb2818d828c34a375ffb93e5b": "安全保障不停歇|嘉韦思与您共度安心年", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486597&idx=5&sn=c423e5a5dd67afe6874eb9335352b8a0": "【漏洞通告】字符串定位器 <= 2.6.6 - 未经身份验证的 PHP 对象注入 (CVE-2024-10936)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486597&idx=6&sn=7ac28eba7ee329dd9cef429fd4088c0c": "【漏洞通告】Podman：buildah：竞争条件导致容器突破(CVE-2024-11218)", "https://mp.weixin.qq.com/s?__biz=MzU2MTc4NTEyNw==&mid=2247486441&idx=1&sn=4531aade32e795be54933b9d3a690c03": "7-Zip高危漏洞曝光", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490019&idx=1&sn=8b0ca8a5667607692018751b2e0db53a": "『漏洞复现』XXL-JOB 默认 accessToken 身份绕过 RCE 漏洞分析及复现", "https://mp.weixin.qq.com/s?__biz=Mzk2NDE3NDUwNg==&mid=2247483890&idx=1&sn=00d4c726f5ef79a6a64b08e5c3bf5cca": "黑客攻防演练!!揭秘Sync Breeze缓冲溢出漏洞利用全过程!?", "https://mp.weixin.qq.com/s?__biz=Mzk1NzQwNjQ4Ng==&mid=2247484665&idx=1&sn=55ab331218ce3316953848bc8a134e19": "缓冲区溢出学习及漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247510279&idx=1&sn=06f1e42da19ca8f8da9668d9ed2ee6e4": "山石入选车联网产品安全漏洞专业库CAVD支撑单位", "https://mp.weixin.qq.com/s?__biz=MzkzNzg4MTI0NQ==&mid=2247485426&idx=1&sn=4b2b9a4778352c4a0791090d92cff7cc": "YongYouNcTool-一款高效利用用友NC系列漏洞检测利用工具", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496940&idx=1&sn=a33f04e5fdb7818531eeda42ebf4b6e7": "通用漏洞挖掘技巧", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067590&idx=2&sn=0963e1001cd7415a1987cb9c33807d8c": "【安全圈】GhostGPT – 黑客用来生成恶意软件和漏洞的新型 AI 黑帽工具", "https://mp.weixin.qq.com/s?__biz=MzAwNDUyMjk4MQ==&mid=2454829223&idx=1&sn=f73e544d3d20c83118c0a09feb410ac7": "安全守护，时刻在线丨永信至诚春节放假通知", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247492083&idx=1&sn=32de1c271310b330793fd3aa20af2213": "VulnNodeApp：一款包含大量安全漏洞的Node.js安全练习平台", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553194&idx=2&sn=3f4629f234882e5f46e5adca2331d21e": "【免费领】新手必备！Web安全漏洞实战入门教程", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651134885&idx=1&sn=1a1ed1ea95fed0e6eb76fe4a39386297": "《智能化安全运营中心应用指南（2025年）》报告暨代表性厂商评估调研启动", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651134885&idx=2&sn=b2ed8f09df9e5f6c4850178ee4311397": "ChatGPT又全球大面积宕机，AI助手暂时\"失联\"；斯巴鲁系统漏洞曝光，数百万车辆面临远程解锁并启动风险 | 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5ODI2MTg3Mw==&mid=2649818820&idx=1&sn=b69e6f16ae7e3b9d2c9c6180aaf5045d": "新战略、新生态、新篇章，速来回顾ISC.AI的荣耀一年", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523158&idx=1&sn=bbc5f15525a0e008b85e3497338d48c6": "SonicWall 呼吁立即修补可能被利用的严重 CVE-2025-23006 缺陷", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523158&idx=3&sn=a689073727de3e49818a00ed23a4c052": "新的 Cleo 零日 RCE 漏洞在数据盗窃攻击中被利用", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523158&idx=4&sn=e304292fd5c48e2a5dc5d82c6ddd9302": "新的 UEFI 安全启动漏洞使系统暴露于 bootkit", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522169&idx=1&sn=fce75986029eae4069d3b0638d1202bd": "Oracle 2025年1月补丁日多产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522169&idx=1&sn=fce75986029eae4069d3b0638d1202bd&chksm=ea94a613dde32f05ef7826dcffe2b3decd7b00ebdf610c08b0715fb2887545ac34d0f7f964dc&scene=58&subscene=0": "Oracle 2025年1月补丁日多产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589258&idx=3&sn=1ee9c0b4428aba7d94dead806b1d1cb1&chksm=b18c28c086fba1d68376c00b114728f746f713fc2982b933066eb6ecbdc12c0081c2b3bb1411&scene=58&subscene=0": "特斯拉汽车被“重点关注”，Pwn2Own Automotive 2024首日曝出24个零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067590&idx=1&sn=32ea96086da2a1f7d7b7c25530ca8d55&chksm=f36e7b46c419f2508759cde38a0b63b3f4b1442bc7655fa88acfdb556c1fefa5e78211594fc2&scene=58&subscene=0": "【安全圈】斯巴鲁汽车漏洞让黑客利用 Starlink 远程控制数百万辆汽车", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067590&idx=2&sn=0963e1001cd7415a1987cb9c33807d8c&chksm=f36e7b46c419f2503cd6ccf7191847d24b6e5135071daedb82309bbc01b97545402cc0ff010b&scene=58&subscene=0": "【安全圈】GhostGPT – 黑客用来生成恶意软件和漏洞的新型 AI 黑帽工具", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067590&idx=3&sn=7379d9127186d37af92f08f7a9ced06e&chksm=f36e7b46c419f25055741d6542936063bf1b5787923201949d2998d3f1120257c12deaab9a8f&scene=58&subscene=0": "【安全圈】思科曝9.9分关键权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513589&idx=1&sn=1b70e6f4b48c39927bb2af1c0178da71&chksm=ebfaf2d5dc8d7bc3abdb845b15e34f01c5f9cc9f45c71804e231873a3c9b8be109f58083ea60&scene=58&subscene=0": "知名车企漏洞：只需车牌号，就能远程监控劫持数百万辆车", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580965&idx=2&sn=35ac8cf9ec1bfacb175b8622720863e2&chksm=e9146d1fde63e40910e314cac61af17533c328067d6bd015df8402266ba7692efae9a049c79f&scene=58&subscene=0": "新的 UEFI 安全启动漏洞使系统暴露于 bootkit", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496940&idx=1&sn=a33f04e5fdb7818531eeda42ebf4b6e7&chksm=e8a5fe8fdfd277997c45b33df7177e2c0c39f4bb4e23b55308bf8a8ad59a087cb0ab7dace1d4&scene=58&subscene=0": "通用漏洞挖掘技巧", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507077&idx=2&sn=a77c8b230188d7463b5a1fbe504403f6": "5th域安全微讯早报【20250125】022期", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793986&idx=2&sn=5bd96b403c792589e06daa0964fd0cf2": "RANsacked：LTE 和 5G 网络实施中发现 100 多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492144&idx=1&sn=d68efac5403df1daa1950b60e73e5dcb": "漏洞预警 | 7-Zip Mark-of-the-Web绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492144&idx=2&sn=040fc67f0e0e387db31ee307eb136e25": "漏洞预警 | 红帆OA SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492144&idx=4&sn=7e5ef4c1ae5a1491c1a278b161e197d1": "工具 | GeoServerExploit", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247495745&idx=3&sn=d62bd25906c870e0c8433a02109f5b5a": "知名车企漏洞：只需车牌号，就能远程监控劫持数百万辆车", "https://mp.weixin.qq.com/s?__biz=Mzk0ODY1NzEwMA==&mid=2247486058&idx=1&sn=94c417bfac0de38346155df588db3dd4": "MS17-010漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651312806&idx=1&sn=5a40997e2166b5b730a46ae577b831a1": "思科曝9.9分关键权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793986&idx=3&sn=b951bb5b8e3502708e251c22f873a652": "超过 2,000 台 SonicWall 设备易受严重0day漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492144&idx=3&sn=3b364eb801a05419d2b65c14ce311eb9": "漏洞预警 | 通达OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyNTUyNTA5OQ==&mid=2247484704&idx=1&sn=410d5b5fae6bf9431286297a0a2c6170": "【云安全】云原生-Docker（五）容器逃逸之漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067606&idx=3&sn=6473d53d9a207bfac9888ca3a543bbf8": "【安全圈】新的 Cleo 零日 RCE 漏洞在数据盗窃攻击中被利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067606&idx=4&sn=e8ae1a9dfb9fb649575b0d8a5414a82d": "【安全圈】新的 UEFI 安全启动漏洞使系统暴露于 bootkit", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527185&idx=1&sn=e316e52a9c3df272305888245af343f8": "CVE-2024-43451 Windows NTLM 漏洞，允许攻击者使用恶意快捷方式强制身份验证并捕获 NTLM 哈希", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527185&idx=2&sn=67cbf97affd8106486d5097a7d773cf7": "CVE-2024-43468 ：通过 PoC 代码揭示 Microsoft Configuration Manager 漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589259&idx=2&sn=4356dec55931f1257ae44561ca3f0d3e": "别错过！“系统0day安全”课程，带你精通漏洞挖掘技巧", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490322&idx=1&sn=25c1352e1b349a1302486f7e519f7d5d": "友数聚 CPAS审计管理系统V4 downPlugs 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzg4MTI0NQ==&mid=2247485448&idx=1&sn=5888106f1aed20b020b5c7cf2e2d7d53": "xray图形化工具-Super Xray,支持自定义导入poc库", "https://mp.weixin.qq.com/s?__biz=MzU5NjYwNDIyOQ==&mid=2247484826&idx=1&sn=5f81afa2c8c6ec0ad22c685de58a12d2": "对 404 站点的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499233&idx=1&sn=d7f03a7476f997d37ccdf5683d5a3e67": "内网漏洞自动化扫描工具 -- P1soda", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490021&idx=1&sn=028614c59fd8634bc196652737ddd7a3": "缓冲区溢出学习及漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652317459&idx=4&sn=0d016310221e528e230f05da6f3b14de": "【InForSec 2025年会青年学者论坛回顾】刁文瑞：移动生态安全探索：从系统漏洞到大规模测量", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490331&idx=1&sn=d0bc2a23252891fc43749fa31443df71": "友数聚 CPAS审计管理系统V4 getCurserIfAllowLogin SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067606&idx=3&sn=6473d53d9a207bfac9888ca3a543bbf8&chksm=f36e7b56c419f2407633ba9229c8cb14a4e4458baf67e78d79310f03423449e922b703042bec&scene=58&subscene=0": "【安全圈】新的 Cleo 零日 RCE 漏洞在数据盗窃攻击中被利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067606&idx=4&sn=e8ae1a9dfb9fb649575b0d8a5414a82d&chksm=f36e7b56c419f24087b4c41685f0be88aab339021ceb93dffd537c9df34d2812ec3232317caa&scene=58&subscene=0": "【安全圈】新的 UEFI 安全启动漏洞使系统暴露于 bootkit", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589259&idx=2&sn=4356dec55931f1257ae44561ca3f0d3e&chksm=b18c28c186fba1d7bf12649f11f2f5078f554a99f2e3c5db93d10a68151651e9d90c81e7753d&scene=58&subscene=0": "别错过！“系统0day安全”课程，带你精通漏洞挖掘技巧", "https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652317459&idx=4&sn=0d016310221e528e230f05da6f3b14de&chksm=8bc4ba9dbcb3338bf92e55b964a1f76fb01b91c88ad08ce7333778b972524fd5800ec0f17f97&scene=58&subscene=0": "【InForSec 2025年会青年学者论坛回顾】刁文瑞：移动生态安全探索：从系统漏洞到大规模测量", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247502213&idx=2&sn=a1db79032f510dd21aaa70ed18a597b2": "斯巴鲁惊爆高危漏洞：仅凭车牌即可劫持车辆", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900158&idx=1&sn=808feb817c0f2e6e0f1f47b22abbafd4": "UEFI Secure Boot曝高危漏洞，攻击者可加载恶意Bootkit", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487289&idx=1&sn=16adb2a76b5d959090618ddd2b43dd22": "漏洞挖掘 | 渗透测试之批量刷洞技巧", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247504828&idx=1&sn=14cdbec7967d6e5cb772d6a762a5471f": "一款免费的APP IOS抓包工具 支持Flutter应用抓包|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650607310&idx=1&sn=fd7cbe9d4363d477ead1d88c79cddbc6": "思科曝9.9分关键权限提升漏洞；|知名车企漏洞：只需车牌号，就能远程监控劫持数百万辆车", "https://mp.weixin.qq.com/s?__biz=MzAwOTczODMxMw==&mid=2651017526&idx=1&sn=e452849723ece70271aac0e8c9bba31e": "携程SRC漏洞贡献值排行榜奖励揭晓", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651134990&idx=2&sn=58403bc9b1f187d4eeb8a0040555e426": "航空防务公司Stark被曝遭遇勒索攻击，4TB机密数据疑被窃取；华硕意外泄露AMD处理器漏洞，补丁被提前公开 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzI2NTUyODMwNA==&mid=2247494146&idx=1&sn=f92e0740e89d5b79e20ba17ee33efbcf": "ChatGPT在漏洞管理中的创新应用", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490023&idx=1&sn=846a609d96c5cc54f73d7ed7607539ec": "【云安全】云原生-Docker（五）容器逃逸之漏洞利用", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313204&idx=3&sn=af9e7adb9e7886cc3ec234d15e060a0d": "Pwn2Own Automotive 2025落幕，累计成功利用49个零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652317461&idx=5&sn=7becd6dc617d0acb19f79e2562a68616": "【InForSec 2025年会顶会论文回顾】刘沛宇：探究 ChatGPT 在漏洞管理任务中的能力", "https://mp.weixin.qq.com/s?__biz=MzkzODc4NjE1OQ==&mid=2247483918&idx=1&sn=54c42da49fd35bed728491560deb1a6c": "简单的反调试技术实现", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527239&idx=1&sn=9121f5406d8c67b5a55ce5549891886d": "Spring WebFlux 授权绕过：CVE-2024-38821 详解", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247489833&idx=1&sn=3d00b164b7af585d9c5ea5877e41b19e": "子域名劫持漏洞高阶利用：从发现到利用完整攻略", "https://mp.weixin.qq.com/s?__biz=MzA4MzMzOTQ4Mw==&mid=2453672529&idx=1&sn=cdc7f3d0c6553b9b1c05425ba64820b9": "紧急告警！Meta Llama框架漏洞，AI系统面临远程代码执行风险", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488723&idx=1&sn=b6dcde79af26f7316bf47c73990a2c54": "WordPress CF Link Shortcode 插件存在前台SQL注入漏洞(CVE-2024-12404)", "https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652317461&idx=5&sn=7becd6dc617d0acb19f79e2562a68616&chksm=8bc4ba9bbcb3338d471b5f27bb2983f32ebb8b14c928d3ddbf68b363b2b7a2700e9ca475d8bc&scene=58&subscene=0": "【InForSec 2025年会顶会论文回顾】刘沛宇：探究 ChatGPT 在漏洞管理任务中的能力", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651134996&idx=2&sn=82356d56bcca2787f9016513ed4f3cbf": "LTE和5G网络实现中存在119个安全漏洞，可导致大规模通信中断；调查显示：仅7%受害者在支付勒索软件赎金后成功恢复数据 |牛览", "https://mp.weixin.qq.com/s?__biz=Mzg4MzY2NjEyMQ==&mid=2247485954&idx=1&sn=4afd6ee87cbe00a5909abfde0103953f": "Oracle MySQL Server 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247485569&idx=1&sn=dcdcc1a80c070b6685ae6bd051bc0450": "一次混合双打出来的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507117&idx=2&sn=2b0142722d4a7ab4ac2d0536274592ce": "5th域安全微讯早报【20250127】023期", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484311&idx=1&sn=009372da290f38f7bc6ff482b95c7429": "锐捷EWEBauth远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794002&idx=3&sn=54c10d70c6a93ada65ccf73b58cd558d": "思科修复 ClamAV 拒绝服务 (DoS) 漏洞，专家警告称概念验证 (PoC) 漏洞代码可用", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651134990&idx=2&sn=58403bc9b1f187d4eeb8a0040555e426&chksm=bd15acdd8a6225cb148a4aac712178ac0f5b93c6a31929a25b66f04ad2541cae3e31269ab937&scene=58&subscene=0": "航空防务公司Stark被曝遭遇勒索攻击，4TB机密数据疑被窃取；华硕意外泄露AMD处理器漏洞，补丁被提前公开 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495739&idx=1&sn=70bff0dcfddcafcf645feed59f012888": "CNVD漏洞周报2025年第4期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495739&idx=2&sn=c1eb11a7df482ea02fe0bb114eaa29bc": "上周关注度较高的产品安全漏洞(20250120-20250126)", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523229&idx=2&sn=596a96b2b96c941baeb9a5420fc9bbc2": "GitHub漏洞允许恶意仓库泄露用户凭据", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523229&idx=4&sn=fae6c9befec51a70547603cfc08bdd67": "LTE和5G基础设施中的100多个漏洞导致远程核心泄露", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247489846&idx=1&sn=e482f93c982f9f2c47febe82748759f6": "一个URL参数就能黑掉整个网站？这个漏洞价值10万美金", "https://mp.weixin.qq.com/s?__biz=MzkzMDQwOTg3OQ==&mid=2247484703&idx=1&sn=6ceac299607701f6e5dd0becc89a12d2": "DrayTek Vigor3910 CVE-2024-41592分析", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313205&idx=4&sn=fd39b2e5339a4dbd516501e208e06b3e": "pwndbg：一款专为安全漏洞分析设计的GDB插件", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484429&idx=1&sn=d365c76773989b993a162b0224f21e0f": "紧盯风险，防治漏洞：七步闭环", "https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247491776&idx=1&sn=4e17c660387c6776b88e397c64e7ed57": "运维风险管控、数据安全规范普及与漏洞情报处置：技术与管理并重的综合策略探讨。｜总第278周", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523229&idx=3&sn=741cf9ea3ae359cfcb2e7cafb292b025": "Kubernetes 集群远程代码执行漏洞致攻击者可接管所有 Windows 节点", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527322&idx=3&sn=e655cc619c0bfa0ab8a7f45ea8a2c268": "Spring WebFlux 授权绕过：CVE-2024-38821 详解", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247635825&idx=1&sn=555c70635c9b65303fc907c0c7427c1b": "人物丨悬镜安全张弛：解密悬镜二进制SCA技术背后的黑客大佬", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247620209&idx=1&sn=62fb4f6d697fbc3aeae44911bc309fa8": "车载协议网络安全测试与验证技术", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496957&idx=1&sn=5ef897f46f3bf16bce1a83b45b0611c3": "通过js进行模糊测试所拿到的一次五千漏洞赏金记录", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499246&idx=1&sn=b3c64fa121a3bfdd8b381159735fd815": "某se同综合漏洞利用工具 -- YisaiExploitGUI", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515718&idx=1&sn=b836eef1f80fe69810dabd336bf5c931": "调用 KIMI AI 进行自动化越权漏洞检测的工具 -- PrivHunterAI", "https://mp.weixin.qq.com/s?__biz=MzU0MDc5ODM0Mg==&mid=2247484778&idx=1&sn=9669504997ac29232f840c90dc143100": "企业网络安全文化建设必备(2)：Gartner PIPE(实践|影响|平台|使能)框架", "https://mp.weixin.qq.com/s?__biz=MzU4NDc2MzcwNw==&mid=2247498579&idx=1&sn=90378659a5745a0dccd8ea5617989cfe": "信长星看望慰问院士专家", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484318&idx=1&sn=75bde6101010cd8a3e7efe80dd449ef8": "74cmsRCECVE-2024-2561", "https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247491776&idx=1&sn=4e17c660387c6776b88e397c64e7ed57&chksm=ea484a87dd3fc3919e9026124b6bc0ba8b63b525d5d9b381260922106e0c8fca0d924c4c1bc5&scene=58&subscene=0": "运维风险管控、数据安全规范普及与漏洞情报处置：技术与管理并重的综合策略探讨。｜总第278周", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651134996&idx=2&sn=82356d56bcca2787f9016513ed4f3cbf&chksm=bd15acc78a6225d149fe16de3316f0735ac8eb52adf8cea1638c72eb92dc9122d6eb960a5ce0&scene=58&subscene=0": "LTE和5G网络实现中存在119个安全漏洞，可导致大规模通信中断；调查显示：仅7%受害者在支付勒索软件赎金后成功恢复数据 |牛览", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496957&idx=1&sn=5ef897f46f3bf16bce1a83b45b0611c3&chksm=e8a5fe9edfd27788ba026eddd3fbb4541a0037c8be19dcb77460d206bd14339fb2c1bd0ebf83&scene=58&subscene=0": "通过js进行模糊测试所拿到的一次五千漏洞赏金记录", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485552&idx=1&sn=4f12fa7c096f587688a8f217b3b38267": "fastjson1.2.24 1.2.27漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494549&idx=2&sn=a31765a36a10d95d268b4f4b4c244eee": "多个 Git 漏洞导致凭证泄露", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495739&idx=1&sn=70bff0dcfddcafcf645feed59f012888&chksm=fd74c0f2ca0349e471d5a0cede4e3ed7bdd0d788c211c68cc80dfd224e519f19650dbc8d8c70&scene=58&subscene=0": "CNVD漏洞周报2025年第4期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495739&idx=2&sn=c1eb11a7df482ea02fe0bb114eaa29bc&chksm=fd74c0f2ca0349e47edcfe201c0666f5f1252b026ececf6de03bbe19fda17ce7ae900d728649&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20250120-20250126)", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5Mzk2OQ==&mid=2247486395&idx=1&sn=50dc41dcfced9c9468c1ca4bc8a25dee": "原创工具|Venom-JWT渗透工具 - 针对JWT漏洞和密钥爆破服务渗透测试", "https://mp.weixin.qq.com/s?__biz=MzkzMDg1MzIwNA==&mid=2247487259&idx=1&sn=d2c93ec1be08ddb9cef647f750e66c51": "【burpsuite靶场-服务端2】身份认证漏洞-15个实验（全）", "https://mp.weixin.qq.com/s?__biz=MzIxMDYyNTk3Nw==&mid=2247515161&idx=1&sn=3f2f882686de333d655eeacd52bf2dbc": "白帽一百祝大家除夕快乐 | 文末抽奖", "https://mp.weixin.qq.com/s?__biz=MzA5NzQ0Mjc5NA==&mid=2649766494&idx=1&sn=dec3029bc7658feff85b8fde230df8c3": "春节放假通知 | 漏洞盒子祝大家蛇年大吉！", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247489191&idx=1&sn=97236ff45aedf7c7abef4a24f63ba8d6": "Nuclei GUI POC管理工具", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485788&idx=2&sn=59c472cfeb94443cf01846cf6bdb45b5": "CVE-2025-21535｜Oracle WebLogic Server远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzg0NDkwMw==&mid=2247493212&idx=1&sn=d5ff49e83b16adba13a2b353720f5f6b": "DeepSeek崛起背后的暗流：全球AI技术博弈下的DDoS攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496966&idx=1&sn=c49dbe1213cb5a1afa836901e2c13038": "0day 挖到手软，403 到 getshell", "https://mp.weixin.qq.com/s?__biz=MzU0NDI5NTY4OQ==&mid=2247486261&idx=1&sn=a99fd42137a2c3a4e337746ba8d1c4d7": "新年记", "https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247516969&idx=1&sn=808e750d8993693d7aa298868f1d68f8": "赛博研究院祝您新春快乐！", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494577&idx=2&sn=2a3b9a9481760f2c54d584ed72cf307c": "苹果修补了 2025 年首个被利用的 iOS 0day(CVE-2025-24085)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496966&idx=1&sn=c49dbe1213cb5a1afa836901e2c13038&chksm=e8a5ff65dfd27673a9c0d7fdd99094847b291a7b8434f16f408af60943322f7ba539d1f82082&scene=58&subscene=0": "0day 挖到手软，403 到 getshell", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247547532&idx=1&sn=a25d3179451f39184a2c2306e222d2f5": "记一次SRC利用github搜索拿下中危漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527357&idx=3&sn=a9547ba6b29ff579585ca08ae6e20652": "零日漏洞正在推动 Fortinet 防火墙攻击（CVE-2024-55591 已确认）", "https://mp.weixin.qq.com/s?__biz=Mzk0ODc1MjYyNA==&mid=2247483866&idx=1&sn=b4a7b1a90b8624e68c8e4106eccd2de9": "原创工具|Venom-JWT渗透工具 - 针对JWT漏洞和密钥爆破服务渗透测试", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499276&idx=1&sn=bae5736b9b7a493bc7f7c7f55d540b39": "跨平台漏洞扫描器 -- EZ（V1.9.2）", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492127&idx=1&sn=31c2fc46637844b4f512ae831dc989f1": "W3 Total Cache 插件漏洞导致 100 万个 WordPress 网站遭受攻击", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247620239&idx=1&sn=f618950670cfc9c09175456bfcc15191": "扩展 SAE J1939 的攻击场景：传输协议中已建立和新的漏洞的综合分析", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488743&idx=1&sn=6012eb58be312daa5822e88d4cdb7630": "【代码审计】RGCMS 2.0 存在 phar 反序列化RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485440&idx=1&sn=bd01dcfd0a6df81151e8df8c374c6695": "【项目推荐】PDF FUD 漏洞利用", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488775&idx=1&sn=2b8f2e1154eb0de5e1422589ee7b4f95": "DeepSeek 数据库被攻击，国外团队已公开披露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MDY2NTY5Mw==&mid=2247485665&idx=1&sn=ce7d065feabad43d7bd144eb57ba1115": "可能这就是你deepseek无法访问的原因——deepseek 漏洞（已修复）", "https://mp.weixin.qq.com/s?__biz=MzkzNjczNzEyMw==&mid=2247484157&idx=1&sn=597aa22f30bf086e39d157e7ba9082ad": "（吃瓜）刘农TV之渗透中遇到的神人运维", "https://mp.weixin.qq.com/s?__biz=Mzk0NTg3ODYxNg==&mid=2247485094&idx=1&sn=300233e404ea534282f994bd51e38594": "越权漏洞实战漏洞报告", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247547534&idx=1&sn=89f840ad1397911a18d5776cb54ed32c": "代码审计 | 如何获取CVE漏洞编号", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515759&idx=1&sn=e9782fc3eeea1a312412a0e67944247e": "xxl-job漏洞综合利用工具 -- xxl-job-attack", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650607338&idx=3&sn=d40fb23bebe952ee4310c3f5c51349a0": "瑞斯康达智能网关命令执行漏洞简单分析", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498569&idx=1&sn=a273094850e815c5dccaf5c9fbb7956f": "收藏 | dotNet安全矩阵 2024 年度目标权限维持阶段文章和工具汇总", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496981&idx=1&sn=1b88708a474086d96cf22a9428c93835": "深入浅出API测试｜搜集分析与漏洞挖掘实战", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247489853&idx=1&sn=080eaada0f65b07415f5e8a922bfb1ad": "网络安全不是一场漏洞游戏", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496981&idx=1&sn=1b88708a474086d96cf22a9428c93835&chksm=e8a5ff76dfd276605ae35037c735c6cb3cb39f0962d2b476be2284664584944a6e21d112112a&scene=58&subscene=0": "深入浅出API测试｜搜集分析与漏洞挖掘实战", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247504783&idx=1&sn=0b286a996a793e420114b78a4ab28260": "如何找到更多漏洞赏金的子域？深入了解 Recon", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247500544&idx=1&sn=ebf9f3fcb46a7bcadad135da1b6e8fd8": "DeepSeek 数据库未授权访问漏洞，导致大量数据泄露", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313290&idx=2&sn=44a6a38890bbe1cf23af0cb8162a8362": "新的“双击劫持”漏洞绕过主要网站上的点击劫持保护", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313290&idx=3&sn=c9beec9c5ce5078f2a7e260af8dc140f": "虚假PoC漏洞利用正用来攻击研究人员", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487416&idx=1&sn=3071e9e82d12510b732a50c8e22cd596": "Java反序列化漏洞 | Fastjson反序列化漏洞原理+漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485185&idx=1&sn=b8349c313ac09f29240c61f055433ddd": "CVE-2024-49138 poc windows CLFS.sys提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247493840&idx=1&sn=3482149c0823f566085f61a99735ad9e": "哥斯拉二开从0到1-2(免杀)", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484326&idx=1&sn=ec20d154a16e5fff47cb40da8080cff7": "WVP-GB28181摄像头管理平台user信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650607360&idx=3&sn=cac10cb8e85c07f523764294668f4fec": "经典华为路由器漏洞复现详细分析(包括整个漏洞链)", "https://mp.weixin.qq.com/s?__biz=Mzk0ODYwNjI1NA==&mid=2247484093&idx=1&sn=368784930a6a478e041b84cfcb1d463a": "【安全预警】明源云ERP报表服务GetErpConfig存在信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247492552&idx=1&sn=402d5fb57f89d62a333008877fafe951": "告别命令行！DeepSeek本地运行可视化指南：从安装到交互界面实战", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515803&idx=2&sn=0e8d3509ce68e9d3c751586e26ea08c5": "APP渗透测试 -- 支付逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492129&idx=1&sn=a7625b1a910086ee3bbde9544f055382": "新的 UEFI 安全启动严重漏洞，请立即修补", "https://mp.weixin.qq.com/s?__biz=Mzg3Mzk2MzA3Nw==&mid=2247483863&idx=1&sn=3bad3dd3b64d3812fb4640e91bdf52ea": "创新终端主动防护-多种通用0day漏洞检测方案", "https://mp.weixin.qq.com/s?__biz=MzkzMDg1MzIwNA==&mid=2247487295&idx=1&sn=1d68a219fec3a01ea84c598bf48811fe": "【burpsuite靶场-服务端3】目录遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655264930&idx=1&sn=0a275a5bf702dc56d6a9f833e7aeacdf": "数字取证之数据分析‌", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650607379&idx=2&sn=1a33bc4a7ac127d883ebe4a69affe12b": "新的“双击劫持”漏洞绕过主要网站上的点击劫持保护", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485618&idx=1&sn=83cfbd2aab32a9e8073abb2cd983f27d": "Log4j CVE-2017-5645反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMDY5OTg5OA==&mid=2247493360&idx=1&sn=ac3879690699a5af38b6a86f1cf232a2": "Pwnkit：CVE-2021-4034", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313321&idx=1&sn=0d6cfa7efe94cdf992cd2dcb49139048": "时间强盗漏洞：ChatGPT绕过敏感话题安全防护", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313321&idx=3&sn=2d401e6e743d4029238b04acea892e1b": "OWASP发布2025十大智能合约安全漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313321&idx=4&sn=87670a1665432dda01a0ca651d6f847a": "卡巴斯基公布奔驰汽车十几个漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037464&idx=1&sn=439f05b2a2f5523c148d07a794aff60a": "Android Intent 重定向漏洞分析总结", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527447&idx=2&sn=0ab2f693c54ddb608b553da95edaa698": "CVE-2025-0065：TeamViewer 修补 Windows 客户端中的权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589300&idx=2&sn=e9f874ab1024ce5d7a8a2a424b891a7f": "关于PAN-OS DoS(CVE-2024-3393)的研究", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589300&idx=2&sn=e9f874ab1024ce5d7a8a2a424b891a7f&chksm=b18c28fe86fba1e8336887843dd4ab08afa58ca810f485f7a4efd1b50cb9fd256fc84de3faef&scene=58&subscene=0": "关于PAN-OS DoS(CVE-2024-3393)的研究", "https://mp.weixin.qq.com/s?__biz=MzkxOTYwMDI2OA==&mid=2247484342&idx=1&sn=fbf99114ba0a7734a34ca35d09047003": "[靶场复现计划]CSLAB Thunder", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247485684&idx=1&sn=ca0044c1a5698a1a8bad3d17b325b3a4": "Zyxel CPE 设备遭遇大规模攻击：关键漏洞（CVE-2024-40891）仍未修复！", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650607394&idx=1&sn=387b2dc9dd6ebd7d27288d882c5d9832": "时间强盗漏洞：ChatGPT绕过敏感话题安全防护", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650607394&idx=4&sn=d21b7373ba4514475e76fc1e86673954": "Burpsuite存储桶配置不当漏洞检测插件", "https://mp.weixin.qq.com/s?__biz=MzU2MTc4NTEyNw==&mid=2247486459&idx=1&sn=bdb973718eb5b746ffb36010c1126ab7": "【oscp】SickOS系列全教程", "https://mp.weixin.qq.com/s?__biz=MzkxNzY2MjU2Mg==&mid=2247483819&idx=1&sn=f720e0623daf07c7838527d03dce27e1": "FUZZ出来的一系列漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247549670&idx=2&sn=5f3fb6a0f0d849bdcf52c3b088620c0e": "揭示AUTOSAR中隐藏的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515830&idx=1&sn=e5a9baf92665cd050d7e003448c06174": "帆软bi反序列化漏洞利用工具（V3.0）", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247504845&idx=1&sn=8c8fa9f474d370a021e30aa8209268ac": "500 美元的漏洞：Censys 搜索如何引导我获得快速漏洞赏金", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487001&idx=1&sn=eaae88e6f2b15e26732ca6b90fb5ca69": "Active Directory Domain Services 权限提升漏洞 (CVE-2025-21293)", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499318&idx=1&sn=96bfdd5cb231800f2140600f3986e952": "Redis 漏洞利用工具 -- RedisEXP", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527501&idx=2&sn=737f8a4b724e5ff7d00edcdeb03128cb": "dde-api-proxy：Deepin D-Bus 代理服务中的身份验证绕过（CVE-2025-23222）", "https://mp.weixin.qq.com/s?__biz=MzU0NDc0NTY3OQ==&mid=2247488439&idx=1&sn=98793685608a483e27976abf658cb08f": "微软惊现「零点击」核弹级漏洞！打开邮件就中招？", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313430&idx=2&sn=7388f9c978f61ad866c97f57c21abe6f": "2025年AI网络安全预测", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247547538&idx=1&sn=2de25baa764188f0bd83a351248a40c5": "漏洞挖掘 | 基于mssql数据库的sql注入", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247615413&idx=1&sn=363d6567bfa41a8f33e272e1185da50a": "通过计算机视觉帮助发现隐藏的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247485686&idx=1&sn=6ad3015e97dc52bd69dc9921b81a5f9c": "AI驱动API漏洞激增1205%，企业安全面临空前挑战！", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313430&idx=4&sn=6e74cf5e7a16522cf7f639a52c3789c7": "微软披露macOS漏洞CVE-2024-44243，允许安装Rootkit", "https://mp.weixin.qq.com/s?__biz=MzkzMDg1MzIwNA==&mid=2247487335&idx=1&sn=c230b1063e5abc07d7a340d33329a10e": "【burpsuite靶场-服务端4】命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494738&idx=1&sn=f776c6f5b2c8fbd315f6a6fbb4e83658": "联发科发布公告CVE-2025-20633可能导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MjM5NDM1OTM0Mg==&mid=2651053429&idx=2&sn=52ca024a6e40c3b8bfa8aee1ae304c03": "SecWiki周刊（第569期）", "https://mp.weixin.qq.com/s?__biz=MzU3MzU4NjI4OQ==&mid=2247516498&idx=1&sn=e9790d235440fdc1e5d82fbb21a2ff57": "大年初六 | 辞旧迎新，送穷迎福", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484330&idx=1&sn=8558bf04848af41f0e0f56123fc3ae5d": "日产聆风电动汽车(Leaf-EV)-2018款本地拒绝服务漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494743&idx=1&sn=fd996eb0f9965aed32ada28ebd0e09a3": "网络安全中的人体视角类比图", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498718&idx=1&sn=0bbf3d272f4c72302d21c151106a9275": "最后一天福利 | 2024年度WebShell专题、内存马技术、反序列化漏洞文章和工具汇总", "https://mp.weixin.qq.com/s?__biz=MzkzMTY0MDgzNg==&mid=2247484086&idx=1&sn=cbe0ea15a1e147e99ce09cbc695027cf": "cURL作者怒怼CISA漏洞评级——CVSS已死", "https://mp.weixin.qq.com/s?__biz=Mzg3NTY0MjIwNg==&mid=2247485604&idx=1&sn=7af7078f51ceb95c8c158ffe8245f066": "GitHub Copilot 越狱漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037469&idx=1&sn=aef7ec48f7f73fb2e4636d85c66b59f2": "从SkyWalking历史漏洞学习h2db注入利用", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487542&idx=1&sn=c93b83f06a03d6a97c751abe0a6f99bd": "漏洞挖掘 | 从零开始的路由器漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506086&idx=3&sn=3ef7426560d405d2dd89587e5bb876e1": "【焕新领先】捷普漏洞扫描系统", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527545&idx=1&sn=245f83f5ca6897c7478765b67f6dc5c9": "TRAVERTINE (CVE-2025-24118) macOS 内核中存在绝对疯狂的竞争条件", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487044&idx=1&sn=0c652e63de486d897bafd5a9adfdd016": "Docker API 漏洞利用实战：构建一键式远程代码执行（RCE）链", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247547540&idx=1&sn=7394f6726bf7ce83ddc5e376d3895a7d": "记一次网上阅卷系统漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313472&idx=1&sn=2810e4a377d48e43544c74ac7a2e49e2": "2024年CVE漏洞数据回顾：漏洞等级正在被重塑", "https://mp.weixin.qq.com/s?__biz=Mzk0NzM4NzI1MA==&mid=2247486241&idx=1&sn=42301175cbc8633a71f78d3d218df92b": "无点击钓鱼？微软超高危RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247570696&idx=1&sn=9cc57dc2e85ffaab5367dae31cdb200e": "5款常用的漏洞扫描工具，网安人得会吧~", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499349&idx=1&sn=3656fc6944176d2af4d9b3900b3d897b": "jeecgBoot漏洞利用工具 -- jeecgBootAttack（2月1日更新）", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247493428&idx=1&sn=47039c762156ca739f4badbe020d9d88": "帆软bi反序列化漏洞利用工具更新V3.0", "https://mp.weixin.qq.com/s?__biz=Mzg4MDYwNDc5Nw==&mid=2247486597&idx=1&sn=883c0b328f0619d96e93697b90252de7": "俄罗斯网络犯罪团伙利用7-Zip零日漏洞攻击乌克兰", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900163&idx=1&sn=e0d9d8eb42685d661a0731fa5c7b89a4": "420万台主机面临安全风险！VPN、路由器等设备因隧道协议漏洞暴露", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507284&idx=2&sn=9b36d26dd2b9fe39250305eb1bc2500d": "五眼联盟发布网络边缘设备安全指导，强调取证可见性", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498718&idx=1&sn=0bbf3d272f4c72302d21c151106a9275&chksm=fa595533cd2edc25867405807f8e4bfdee1cf510746683efe669fd6a09f3f08f97c6e86ca47a&scene=58&subscene=0": "最后一天福利 | 2024年度WebShell专题、内存马技术、反序列化漏洞文章和工具汇总", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523273&idx=1&sn=93b3e227d4fa9991192622539f963393": "谷歌修复安卓内核零日漏洞，攻击者已利用该漏洞发起攻击", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523273&idx=3&sn=7f4bba28b5ae9d5b82a1b6fbe59203af": "以色列间谍软件公司Paragon涉嫌利用WhatsApp零点击漏洞发动攻击", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247519424&idx=1&sn=fdbc725551179d2861feca5472776053": "基于DeepSeek AI 代码审计漏洞 v1.0上线！可本地ollama调用 | 工具", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260527&idx=1&sn=eb0df8daaf5798cb9fae2b60346a8e8a": "GitHub Dorking 高级利用-更多自动化、更多发现【部分】", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499626&idx=1&sn=05db5599f68bac92168ecdfd9fd60e6e": "CNVD漏洞周报2025年第4期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499626&idx=2&sn=ee9c229cecafd1cfe426dce51fc7d03a": "上周关注度较高的产品安全漏洞(20250120-20250126)", "https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037473&idx=1&sn=2e6b2a606dfad6754a67fd146cea44c0": "自动化软件漏洞利用技术研究", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247502226&idx=1&sn=b9a3524d17296a87a51d12ae983b2caf": "首款色情应用登录苹果第三方应用商店", "https://mp.weixin.qq.com/s?__biz=Mzk0MjU5NTY2MQ==&mid=2247484347&idx=1&sn=828e443845536de2ad0b2be8f4b236c5": "【漏洞复现】锐明技术Crocus系统存在任意文件读取", "https://mp.weixin.qq.com/s?__biz=Mzk0MjU5NTY2MQ==&mid=2247484342&idx=1&sn=8fe6f034b3a56ecadd6473c3b09f87dd": "【漏洞预警】招标采购平台存在未授权访问", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650607416&idx=4&sn=160178c5674fef2239d1035bb05aacaa": "sqlmap Xplus 基于 sqlmap，对经典的数据库注入漏洞利用工具进行二开！更新V1.6", "https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247484508&idx=1&sn=b705f461a428d8aa34a7aebce836857c": "【漏洞复现】锐明Crocus系统存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794057&idx=1&sn=d2e030673abaffe0a3cbfe291ebcaabb": "7-Zip MotW 绕过漏洞被用于针对乌克兰的0day攻击", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498740&idx=1&sn=16729f4e599a69352876c7c8cc33cbfa": "2025 持续防范 GitHub 投毒，通过 Sharp4SuoExplorer 分析 Visual Studio 隐藏文件", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247615426&idx=1&sn=8445d2d2086336110de24023dea94d56": "一次OSS存储桶的任意数据上传挖掘", "https://mp.weixin.qq.com/s?__biz=Mzk0MDYwMjE3OQ==&mid=2247486115&idx=1&sn=cb43122e33f4dbdf63f15667bda204bb": "7-Zip漏洞遭俄罗斯黑客利用，乌克兰多个政府组织中招！", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484459&idx=1&sn=d14e0510f2c328f0e763085ebef123e6": "安钥®「漏洞防治标准作业程序（SOP）」征文启示 [2025年第5期，总第23期]", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484459&idx=2&sn=19045ae24ac7fcbb4a3334e2855ac1cb": "Apache Commons Fileupload拒绝服务漏洞（CVE-2023-24998）处置标准作业程序（SOP）", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484459&idx=3&sn=ab11543dc260ae956c905b66c6d0309e": "入选作品公布｜安钥®「漏洞处置标准作业程序（SOP）」征文第二十期", "https://mp.weixin.qq.com/s?__biz=Mzk0ODYwNjI1NA==&mid=2247484094&idx=1&sn=15ab769c5bdec630c5d45746069bb451": "【安全预警】浪潮HCM-Cloud云端专业人力资源平台存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247485688&idx=1&sn=ad305e3624e600a9b92530845df693e7": "警惕！黑客利用政府网站漏洞发动钓鱼攻击，全球多国受害", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494810&idx=4&sn=d8efe231b9677487c664e9170885c0e6": "7-Zip MotW 绕过漏洞被用于针对乌克兰的零日攻击", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094719&idx=1&sn=7d28abba5e5d0dd7e155f731b46609f1": "NVIDIA GPU 显示驱动程序漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094719&idx=2&sn=fbf9de723d3bf2f725af407784b81600": "Apache Cassandra 漏洞允许攻击者远程访问数据中心", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067643&idx=3&sn=15fafdc5115ba7e7a871e108304d8284": "【安全圈】Pwn2Own Automotive 2025 黑客因破解 49 个零日漏洞获 886,250 美元奖励", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503038&idx=1&sn=d8681f45d398c0b71d0e3f6e2ce77b43": "【水文章】记录漏洞提交半自动化脚本完善日记", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247546844&idx=1&sn=c69142cbb064f731d7da8241c307ebc5": "新岁启新程 携手共奋进", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589307&idx=2&sn=1e8443c86a1b26b4a73e6078462430a8": "紧急提醒！Netgear 路由器高危漏洞来袭，速更新固件！", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247488981&idx=1&sn=d78b34f028d95c7af7b084c6561c79ef": "Git交互式凭证提示和凭据重定向漏洞CVE-2024-50349 CVE-2024-52006", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489186&idx=1&sn=db9532a3b205fcb2f4b41bca0f65c25f": "支付安全堡垒中的隐藏漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067643&idx=4&sn=cee4f0162f4215b03faa784f2a08ca29": "【安全圈】以色列间谍软件公司Paragon涉嫌利用WhatsApp零点击漏洞发动攻击", "https://mp.weixin.qq.com/s?__biz=MzU1OTc2MzE2Mg==&mid=2247489362&idx=1&sn=1c32dc4896be7f5c2357a63ac383bbc8": "【安全月报】| 1月份因漏洞、黑客和诈骗造成的损失约为9800万美元", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492134&idx=1&sn=68d59f072d4a1ef49284ec15f0c3b1df": "全球超过 660,000 个 Rsync 服务器遭受代码执行漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589307&idx=2&sn=1e8443c86a1b26b4a73e6078462430a8&chksm=b18c28f186fba1e7a28649d6a8fb1c87d7c29365a89398d0ecde7835384df8242d1736b52d38&scene=58&subscene=0": "紧急提醒！Netgear 路由器高危漏洞来袭，速更新固件！", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498740&idx=1&sn=16729f4e599a69352876c7c8cc33cbfa&chksm=fa595519cd2edc0f745a12d51cace66879bf69a7dd8f9d49253179bb5426e85f4d593cee86b9&scene=58&subscene=0": "2025 持续防范 GitHub 投毒，通过 Sharp4SuoExplorer 分析 Visual Studio 隐藏文件", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067643&idx=3&sn=15fafdc5115ba7e7a871e108304d8284&chksm=f36e7b7bc419f26d569f3c4268dfb46a07276cd2ab126e6e16e07a81aacd5d7c66313b916f53&scene=58&subscene=0": "【安全圈】Pwn2Own Automotive 2025 黑客因破解 49 个零日漏洞获 886,250 美元奖励", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067643&idx=4&sn=cee4f0162f4215b03faa784f2a08ca29&chksm=f36e7b7bc419f26d6f8b29e660074eec7afa31ceab45050537a035abfaf9877ed194deecfbca&scene=58&subscene=0": "【安全圈】以色列间谍软件公司Paragon涉嫌利用WhatsApp零点击漏洞发动攻击", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499626&idx=1&sn=05db5599f68bac92168ecdfd9fd60e6e&chksm=973acc08a04d451ed97dce01b77478e936e677958ef090bdb59df5abb7d03b73da59a07658f9&scene=58&subscene=0": "CNVD漏洞周报2025年第4期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499626&idx=2&sn=ee9c229cecafd1cfe426dce51fc7d03a&chksm=973acc08a04d451ebbe28a7c3de5be26ab8afc81b12d158148abbcdbe1dfb673f0508f8e6f4d&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20250120-20250126)", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247500584&idx=1&sn=4654aab4518633538b330c38c3e6b796": "deepseek官方API太卡？DeepSeek本地部署+代码审计，漏洞都是捡的", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652251295&idx=1&sn=911b7c9c3f819ea69b1a9439f65f1d66": "AMD SEV 漏洞允许以管理员身份恶意注入 CPU 微码", "https://mp.weixin.qq.com/s?__biz=Mzg3NDI0MjEwMQ==&mid=2247483769&idx=1&sn=21ca6a1aabb318353828f506e939abb4": "kkFileView漏洞不出网任意文件写入利用", "https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037474&idx=1&sn=f6d98a8574505e387e426f85daf263af": "DCCE MAC1000 PLC漏洞测试总结二", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487600&idx=1&sn=0a049efc835c9a359c81625e4b8cf46e": "漏洞挖掘之再探某园区系统", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650607513&idx=3&sn=e24eb929a25fa3b7151efa46c423cc78": "实战 | 微信小程序EDUSRC渗透漏洞复盘", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650607513&idx=4&sn=a731ed25e18ec4af0a94055c31d72dc8": "帆软bi反序列化漏洞利用工具更新V3.0", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486221&idx=1&sn=b75de0fe4053df9c09fac3b2a0213225": "记录某次APP漏洞挖掘案例", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494918&idx=1&sn=03e864f459539fba30b9d52cb597b5b4": "【真0day】Microsoft Sysinternals 工具中存在0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMDMwNDgwNQ==&mid=2247485642&idx=1&sn=317337ad87d8d251fcf5450748bf9ba8": "使用deepseek进行代码审计漏洞挖掘？", "https://mp.weixin.qq.com/s?__biz=Mzk0MTMzMDUyOA==&mid=2247505159&idx=1&sn=d81474c4e593f7aa9911972823f7daec": "塞讯验证：深度融合 DeepSeek 的智能安全验证平台", "https://mp.weixin.qq.com/s?__biz=MzI5MTIwOTQ5MA==&mid=2247487658&idx=1&sn=d11c6a0dad408e036ecea7ec2966cde6": "同学，XXE漏洞了解一下", "https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649166964&idx=2&sn=983c68b88d2253701787315bd8a0d7b8": "7-Zip零日漏洞在俄乌战争中被利用", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313611&idx=1&sn=fbf2b63c67773103862ba5354d21830d": "带挖2分钟即出高危，百万赏金猎人手把手教你「白嫖」漏洞！", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313611&idx=3&sn=763b74488aea13f582afe4569f509ecb": "思科披露两个严重的身份服务引擎漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMDY5OTg5OA==&mid=2247493381&idx=1&sn=bacc6fa41203d864fe4f84936591daa1": "HVV实战课程与超值福利", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY1NTI5Mw==&mid=2247490855&idx=1&sn=f8ca3ac2fc8c66964e2e804151edac61": "带挖2分钟即出高危，百万赏金猎人手把手教你「白嫖」漏洞！", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247549887&idx=2&sn=085448ab37990cc08993cdc91a7bc226": "基于DeepSeek AI 代码审计漏洞 v1.0上线！可本地ollama调用", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135004&idx=2&sn=c7edbd6741477e964cbf32f7a36b481c": "Elon Musk团队操作引发美国政府数据安全危机与网络安全漏洞担忧；2024 网安（亏损）TOP 10 | 牛览", "https://mp.weixin.qq.com/s?__biz=Mzk0MjU5NTY2MQ==&mid=2247484357&idx=1&sn=f36d725c4e0484477e42c7b751928f06": "CNVD通用证书挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzIzNjU5NDE2MA==&mid=2247490189&idx=1&sn=632f39f8a483a0fe087fb72709ad5dbc": "Grafana 已全面支持 VictoriaMetrics 体系", "https://mp.weixin.qq.com/s?__biz=MzIxNjI2NjUzNw==&mid=2247492891&idx=3&sn=74378d5069b53fe871a0f1321d3eb2b5": "上周关注度较高的产品安全漏洞(20250120-20250126)", "https://mp.weixin.qq.com/s?__biz=Mzk0MDYwMjE3OQ==&mid=2247486128&idx=1&sn=5640e3bb0a6d9bdb06ed46373ae846a4": "DeepSeek用户警觉！恶意软件假冒AI工具入侵存储库", "https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247505379&idx=1&sn=e616f20194786540969e94f4ecefea82": "美政府8000+网页被“抹去”，“信息大清洗”背后有何隐情？", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527578&idx=3&sn=ac7c228a980a068f3b279650215a6152": "CVE-2025-24118：macOS 中的竞争条件漏洞可导致任意凭证获取", "https://mp.weixin.qq.com/s?__biz=Mzk0NzM4NzI1MA==&mid=2247486253&idx=1&sn=a49bda6cf802802fa854206a54ebb938": "Solr 文件上传路径遍历漏洞（CVE-2024-52012）", "https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247492400&idx=1&sn=5c7dc308f10f7c382d3ed8bb0be0ba5f": "没想到，“漏洞”竟然比“脆弱性”小太太太太多！", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489535&idx=1&sn=b3da75dbb9a3a6cd24e4da4308d06cca": "【漏洞预警】libxml2代码执行漏洞(CVE-2022-49043)", "https://mp.weixin.qq.com/s?__biz=MzU5Njc4NjM3NA==&mid=2247496231&idx=1&sn=144e76f1d7add444a1f7e0c82a0ce9a8": "OWASP发布2025十大智能合约安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484341&idx=1&sn=62cf45b5a2524acde5199aca80e542f4": "好视通云会议upLoad2.jsp文件任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515895&idx=2&sn=1e563e94b277c1fa42e577f6bcca38fd": "APP渗透测试 -- janus漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499368&idx=1&sn=a994edf96eccc4c4f6252b01f25668c6": "xss漏洞挖掘插件 -- Jssx（2月6日更新）", "https://mp.weixin.qq.com/s?__biz=Mzk2NDE3NDUwNg==&mid=2247483957&idx=1&sn=2ad699a3f2895d566eab7c2bb52f925e": "实战缓冲区溢出漏洞攻击：从信息收集到成功提权", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490217&idx=1&sn=507f8b70b295803eb96f084dd6f0b379": "思科修补启用 Root CmdExec 和 PrivEsc 的关键 ISE 漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135004&idx=2&sn=c7edbd6741477e964cbf32f7a36b481c&chksm=bd15accf8a6225d93290b88cd648c6600766748e242afc021eb41721345d332dee91f46226e3&scene=58&subscene=0": "Elon Musk团队操作引发美国政府数据安全危机与网络安全漏洞担忧；2024 网安（亏损）TOP 10 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490342&idx=1&sn=f4533ea13d5504bd9c65988afc062689": "安科瑞环保用电监管云平台 GetEnterpriseInfoY SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487601&idx=1&sn=4b10692d978eebaeddabd829e22c0c60": "实战 | 微信小程序EDUSRC渗透漏洞复盘", "https://mp.weixin.qq.com/s?__biz=MzkzMDQ5MDM3NA==&mid=2247488330&idx=1&sn=df35169ec817642389ae70f8e6bdb924": "小技巧 - 文件读取漏洞原来也这么严重", "https://mp.weixin.qq.com/s?__biz=MzkyNDYwNTcyNA==&mid=2247487402&idx=1&sn=5098a7c4ed62e8c58fb26046ff5b6a41": "【漏洞复现】XXL-JOB-Admin 前台api未授权 hessian2反序列化", "https://mp.weixin.qq.com/s?__biz=Mzg2MTg2NzI5OA==&mid=2247484903&idx=1&sn=b11f2f96c0bedc1b456fc48d98e68188": "实战如何通过Druid提升至高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794086&idx=2&sn=271029c6e35f86eee8224f862ac34c8f": "微软Sysinternals工具中的0day漏洞允许攻击者对Windows 发起 DLL 注入攻击", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247490422&idx=1&sn=9e05b648524bd832b5f1a3e20fb67c77": "codeql 之 SSRF 漏洞自动化 寻找", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486523&idx=1&sn=f0c21970b06ddddfdaea1feb43fdd4e2": "实战如何通过Druid提升至高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MDYwNDc5Nw==&mid=2247486601&idx=1&sn=9246562802f2add62594bf3316bd09ef": "如何通过漏洞管理避免被攻击：组织的应对之道", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484468&idx=1&sn=7aef03abb5647fd09257c0c90aa2659a": "01 漏洞从哪里来？——综述", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492179&idx=1&sn=fe28986085d4baab58d0589cb204bfea": "漏洞预警 | Cisco ISE反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492179&idx=3&sn=02795d96b61494f550efb00f94b9931b": "漏洞预警 | 泛微E-Cology信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247493505&idx=1&sn=43863913422ebc87a720632851afd46c": "XSS漏洞挖掘插件", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247486970&idx=1&sn=3c3508dbc9a2c2a77db16909ac542f54": "Ivanti Connect Secure栈溢出漏洞（CVE-2025-0282）分析与复现", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500683&idx=2&sn=cc194056e905ff1a83543dc27fff20ae": "【漏洞通告】Go Darwin 构建代码执行漏洞(CVE-2025-22867)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500683&idx=3&sn=b8571e991f337df62bddb6152c26b658": "【漏洞通告】Apache James拒绝服务漏洞(CVE-2024-37358)", "https://mp.weixin.qq.com/s?__biz=MzIwMjE2NTM5Mg==&mid=2247485475&idx=1&sn=274fbf94e0436d90e770974fd38f57cd": "实战登录框漏洞测试", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490352&idx=1&sn=1f18084ae697169a41ce41e8164b399b": "赛诸葛数字化智能中台系统 login SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488889&idx=1&sn=32ce7e8b631ad9bdbb746484d4a5ec62": "某渐变头像合成网站系统存在任意文件上传漏洞(RCE)", "https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247532996&idx=3&sn=1d02961a612db601d05420c562deb8f0": "上周关注度较高的产品安全漏洞(20250120-20250126)", "https://mp.weixin.qq.com/s?__biz=Mzk0OTM5MTk0OA==&mid=2247496728&idx=1&sn=01adce867262b6b78f37a6cbc0b3e4a7": "AnyDesk本地提权漏洞：CVE-2024-12754", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492179&idx=2&sn=9ab63e92cd4f8ac91a67fec0698a2e02": "漏洞预警 | 通达OA未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094746&idx=2&sn=317abb4981260b599c7f515e9d3c1e3b": "微软Outlook严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489550&idx=1&sn=ceacf239a0181cc84ea4827f600a1ce6": "【漏洞预警】Apache Struts2代码注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313675&idx=3&sn=f746885f658ca0d1f5c02ae5e71dbed2": "Zyxel多款旧DSL设备存在2个零日漏洞，无修复措施", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313675&idx=4&sn=e34312e7836613491b513d0e8160e100": "CISA将Microsoft Outlook等漏洞列入已知被利用漏洞目录", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067692&idx=4&sn=76887cf1be0295b8075d662f2451e94d": "【安全圈】CISA将Microsoft Outlook、Sophos XG Firewall等漏洞列入已知被利用漏洞目录", "https://mp.weixin.qq.com/s?__biz=MzU2OTcxNjE4Mw==&mid=2247486013&idx=1&sn=92709dc9add6e0b7ad6f9e3283711575": "DeepSeek 相关安全事件分析报告", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527611&idx=2&sn=5e2150104f131c85b1d196c791697ff3": "CVE-2024-6387 OpenSSH 任意代码执行漏洞 PoC 漏洞发布", "https://mp.weixin.qq.com/s?__biz=Mzg3MjE1NjQ0NA==&mid=2247514183&idx=1&sn=e2338623e805f43a817166209014c938": "盘古石取证12款产品再度入围公安部警用取证设备框架协议采购项目", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589336&idx=2&sn=71772d009fe80e5339e6925f517765da": "微软示警 ASP.NET 重大安全漏洞，超3000公开密钥恐致服务器沦陷", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589336&idx=3&sn=6bb091b8297338121511850425838973": "本周更新：虚拟机镜像调试 | 系统0day安全（第7期）", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247496352&idx=1&sn=0a2c89e7fa30bf859d137d0f56375ee0": "sqlmap Xplus 基于 sqlmap，对经典的数据库注入漏洞利用工具进行二开！V1.6版本", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487081&idx=1&sn=c5ac65576e36d6b75ccf5146d8628600": "Google Project Zero 的 Windows 漏洞研究：通过 IDispatch 访问受困 COM 对象的漏洞模式", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523327&idx=3&sn=4e33113f92591aa05af6697be895f856": "CISA将Microsoft Outlook、Sophos XG Firewall等漏洞列入已知被利用漏洞目录", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484354&idx=1&sn=650a15a82bb7b4367ab6c54c21b1a5a4": "宏景eHRDisplayFiles存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MDk4MzkyMA==&mid=2247484537&idx=1&sn=a88144bf56d786c19865fdc9154c54eb": "深入了解宽字节注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODkzNjU4NA==&mid=2247485669&idx=1&sn=20e7f986f8347c84be154fd1405464e5": "Microsoft Outlook高危在野漏洞正被积极利用", "https://mp.weixin.qq.com/s?__biz=Mzk0MTI4NTIzNQ==&mid=2247492477&idx=1&sn=16c26ef230f9404e60d06bb5e07f1749": "我问deepseek，程序员会被AI取代吗？", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247488445&idx=1&sn=3da2540bcb060b11a566b3d21f81ab1d": "【2025-02-07】黑客新闻摘要——“Cisco漏洞修复：Java序列化的‘坑’填平了！”", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY2ODE1NA==&mid=2247484984&idx=1&sn=6ac5afdceada749543cbe5edc56b08d8": "来角色互换吧", "https://mp.weixin.qq.com/s?__biz=Mzk0ODY5NjQ0OQ==&mid=2247483727&idx=1&sn=5204b4ac8620c49effc035e503f0611c": "Solr 文件上传路径遍历漏洞（CVE-2024-52012）分析漏洞成因", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499377&idx=1&sn=5a2949aa2988b69b635b859da8c6be21": "网络摄像头漏洞审计 -- ipcsuite（2月6日更新）", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499377&idx=2&sn=6034b6ee7cf6e893c7cc3babf0df2049": "APP渗透测试 -- ZipEntry漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492136&idx=1&sn=a64994323b497dfaf7d398189de8e839": "黑客利用 Aviatrix Controller RCE 关键漏洞发起攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589336&idx=3&sn=6bb091b8297338121511850425838973&chksm=b18c281286fba1045630eefd0381d9c40f980abae3d9886ef414683b7341785cfb2624d23f5d&scene=58&subscene=0": "本周更新：虚拟机镜像调试 | 系统0day安全（第7期）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067692&idx=4&sn=76887cf1be0295b8075d662f2451e94d&chksm=f36e7b2cc419f23ad385d4f1bb5daf905b462f9d61cf8091e3ceaa1d78b77eccb6abc6d07299&scene=58&subscene=0": "【安全圈】CISA将Microsoft Outlook、Sophos XG Firewall等漏洞列入已知被利用漏洞目录", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484021&idx=1&sn=d6c8d46d68afea44f3465437139ff4e1&chksm=c006ca85f7714393548eb1eac7158adf7ccbb19b0a2e3e47e6e139da340ddaeb1cab1bef276c&scene=58&subscene=0": "Google 是如何做漏洞管理的？", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589336&idx=2&sn=71772d009fe80e5339e6925f517765da&chksm=b18c281286fba104fefc248eff29454d426e3b33dfce1cbf82b6862933f414c4a29875564fb8&scene=58&subscene=0": "微软示警 ASP.NET 重大安全漏洞，超3000公开密钥恐致服务器沦陷", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247486970&idx=1&sn=3c3508dbc9a2c2a77db16909ac542f54&chksm=c2229503f5551c15d15b4914ba9e91955dbbac2888af47ce318db18cc6a098e4403aee423053&scene=58&subscene=0": "Ivanti Connect Secure栈溢出漏洞（CVE-2025-0282）分析与复现", "https://mp.weixin.qq.com/s?__biz=Mzk0NDU5NTc4OA==&mid=2247484349&idx=1&sn=93befd867b94a6c03f728c1126e52932": "一次JDBC反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMzU4ODU2MQ==&mid=2247484079&idx=1&sn=ea9f08d10aba0cb384df26d1f0b16c5b": "每日情报速递20250208", "https://mp.weixin.qq.com/s?__biz=MzkyMDY5OTg5OA==&mid=2247493382&idx=1&sn=d7bb6be408b7dd5ab57ad79176a375db": "春秋云镜靶场Initial_WP", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462592&idx=1&sn=61a62624dc59548febe3df59e9e1169b": "信息安全漏洞周报（2025年第5期）", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462592&idx=2&sn=f3eb9545d622bc8625bf7da4c009b050": "信息安全漏洞周报（2025年第4期）", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650607653&idx=4&sn=4418340544e24061ea544fcf4216b586": "XSS漏洞挖掘插件", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247497004&idx=1&sn=29fd94e4fcc55ef35b5a1dadf65317cf": "【吃瓜】码农的钱也敢吞？RNM还钱", "https://mp.weixin.qq.com/s?__biz=MzIwMjE2NTM5Mg==&mid=2247485540&idx=1&sn=a4d30f9b543736e2cbf14c5ba61c0970": "XSS漏洞挖掘上", "https://mp.weixin.qq.com/s?__biz=MzkxOTYwMDI2OA==&mid=2247484365&idx=1&sn=bd389742d0058e6d868964312ee9897f": "[随手分享]Web-Chains在Java赛题中的利用", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488908&idx=1&sn=6be719bc1b836c10eb9b58d27fd8527b": "【0day】码支付系统存在前台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODYwNjI1NA==&mid=2247484104&idx=1&sn=6bf9964b84f0c6ce4adc38891b81233f": "【安全预警】NUUO网络视频录像机upload.php 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247491753&idx=1&sn=2b40bf77bc285505d90081fc9eb64c3e": "国内瓜吃腻了？来吃洋瓜：老外也整F12漏洞交src的骚操作", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247547627&idx=1&sn=c84a1b271075e5536aad39934b371d07": "某系统webpack接口泄露引发的一系列漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MzMzOTQ4Mw==&mid=2453672565&idx=1&sn=b3422707594be2ec229b3c620988435d": "从《哪吒之魔童闹海》看生物特征识别技术在网络安全中的应用", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518417&idx=1&sn=6720a0ca33b0bf77c14d49be25fe7dd2": "DeepSeek+本地知识库 = 离线安全专家", "https://mp.weixin.qq.com/s?__biz=MzkzNTQwNjQ4OA==&mid=2247484080&idx=1&sn=5a16a5264cf25a4c9463bb2777aa44bb": "0到实战案例(CSRF漏洞)", "https://mp.weixin.qq.com/s?__biz=MzIzMDQwMjg5NA==&mid=2247506611&idx=1&sn=2744457e60f94ce0d02e4941db6f9424": "【一周安全资讯0208】国家数据局《数据领域常用名词解释 (第二批)》公开征求意见；微软 Outlook 被曝高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490371&idx=1&sn=a18a023606ec472f74ddc883d8e02f9d": "西联软件-移动门店管理系统 StreamToFile 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497101&idx=1&sn=ebf99e6acfcac9980d5a9bfcd46d2ae1": "【漏洞通告】Apache James拒绝服务漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484602&idx=1&sn=8fa0aba336e362d60c79adf4636ee3a5": "锐捷系统auth接口处存在远程命令执行漏洞【漏洞复现|附nuclei-POC】", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523351&idx=3&sn=ab59d644aab797f28a1bf4ddb7ec8b21": "黑客利用SimpleHelp RMM漏洞实现持久访问并部署勒索软件", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247484866&idx=1&sn=c56e917f9bf1bcb86747367ea420b489": "2025我希望大家的钱包更充实一点 SRC漏洞挖掘培训", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490361&idx=1&sn=e491617f60571ab0acecf33074409214": "网神SecFox运维安全管理与审计系统 FastJson反序列化RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498815&idx=3&sn=9a01cd47406b7a4683da0dae1b3e9b18": ".NET 通过代码审计发现 ERP 系统中两个任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487624&idx=1&sn=52e4ea3ad5d5263e640fe438f917efe1": "渗透测试 | 文件读取漏洞实战利用", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794098&idx=3&sn=18d36461a067e7227ea280973a7b2236": "黑客利用 Cityworks RCE 漏洞入侵 Microsoft IIS 服务器", "https://mp.weixin.qq.com/s?__biz=MzIxODIzNzgwMw==&mid=2654070950&idx=1&sn=0a5a18cb92e7da5843b4ed6c132c9107": "漏洞盒子助力 | 5悔向未来 五家SRC联合众测限时启动！", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067706&idx=3&sn=42ec007bcefb5e73b814bbd77c03cb62": "【安全圈】微软示警 ASP.NET 重大安全漏洞，超3000公开密钥恐致服务器沦陷", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527663&idx=1&sn=c61589afbe6298288ec3b55c34a82b09": "CVE-2024-21413 (CVSS 9.8)：严重 Outlook 漏洞正受到主动攻击，PoC 可用", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247549979&idx=1&sn=cd757d14820a6ed3eb2630fffa7adcea": "UWB技术在汽车安全中的应用", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236274&idx=1&sn=e91ce8b77df27a2dfb590365ca94976d": "启明星辰全面对接DeepSeek大模型，全场景智能化安全再升级", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589341&idx=1&sn=c57db95a9d3d5f4d3d5993b9e4d2398e": "关于PAN-OS DoS(CVE-2024-3393)的研究", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589341&idx=2&sn=698cf3be8150d9f8778afdf43da1a5ae": "打开邮件即中招！Outlook高危漏洞曝光：黑客可远程执行代码", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247491868&idx=1&sn=108dda7ebeb54263191f1ddc5a0c2ba4": "正在报名中 | “网谷杯”信创应用软件网络安全攻防大赛", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553470&idx=1&sn=9740b45e98425b1696b01c0ce2519656": "Apache Calcite Avatica 远程代码执行 CVE-2022-36364", "https://mp.weixin.qq.com/s?__biz=Mzg4NTA0MzgxNQ==&mid=2247489875&idx=1&sn=01592903da90c10d03164e08b997d14c": "『杂项』SSH公私钥认证原理及相关漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MTExMjYwMA==&mid=2247485714&idx=1&sn=d2721f2a3ceb2471b5a257e93513b64f": "jeecg boot queryFieldBySql RCE漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247535347&idx=1&sn=0808616c79a4ed7ba6480d99bbb327f5": "调查显示：75%的员工被要求为网络安全漏洞“背锅”", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487082&idx=1&sn=4fee65e10e0adea5361defe45d5d66f9": "漏洞赏金实战：AFL++ 挖掘 GNOME libsoup 高危漏洞技术解析", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489556&idx=1&sn=7ffd3a3094b235cf9c4546ebb372eb72": "【漏洞预警】JeecgBoot SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247499332&idx=1&sn=7ab742338c5b85eb391ae3bc5380243d": "【oscp】JOY，ProFTPd拷贝漏洞提权", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589341&idx=3&sn=93b6b8d3c44c60ab4582c45b60e2897c": "招生中！系统0day安全-IOT设备漏洞挖掘（第6期）", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489211&idx=1&sn=361a8df65a6ca8e0b7368eff5178da6c": "Confluence未授权漏洞分析（CVE-2023-22515）", "https://mp.weixin.qq.com/s?__biz=MzA4NDQ5NTU0MA==&mid=2647690607&idx=1&sn=2db22efb8870c3b8e8277ad8cddea19b": "0026. 管理面板漏洞—访问罗技管理后台", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247498473&idx=2&sn=b6da33081772c4dfa4cc55df265c0b4c": "人工智能和云漏洞并不是当今CISO 面临的唯一威胁", "https://mp.weixin.qq.com/s?__biz=MzkxMTYzMjIwNQ==&mid=2247496904&idx=1&sn=c777a7fc689c87dda03b125280d42a76": "新一代商用密码算法全球征集启动", "https://mp.weixin.qq.com/s?__biz=MzA3NDE0NTY0OQ==&mid=2247484425&idx=3&sn=94a5a80093b8dea9ce8dcc03c82e1f80": "快速上手渗透测试报告写作：从WP到甲方报告的一站式指南", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094759&idx=1&sn=227da65909f44fef215dcd2b6251cf3e": "微软 Edge 存在允许攻击者执行远程代码漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498815&idx=3&sn=9a01cd47406b7a4683da0dae1b3e9b18&chksm=fa5952d2cd2edbc442b759c403bdf0a059de4fa968c34f1b0caf0c87bbef6cd428d5f73435b5&scene=58&subscene=0": ".NET 通过代码审计发现 ERP 系统中两个任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MTExMjYwMA==&mid=2247485714&idx=1&sn=d2721f2a3ceb2471b5a257e93513b64f&chksm=fe32b9e5c94530f35ade04d90f80611efc881e3e30cb0e2ec02661c6e253734c31c0b5e2062d&scene=58&subscene=0": "jeecg boot queryFieldBySql RCE漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589341&idx=1&sn=c57db95a9d3d5f4d3d5993b9e4d2398e&chksm=b18c281786fba101700fc813e084e65b0cbcf50b8690c4c0193b006c0228dc298b9dfb187189&scene=58&subscene=0": "关于PAN-OS DoS(CVE-2024-3393)的研究", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589341&idx=3&sn=93b6b8d3c44c60ab4582c45b60e2897c&chksm=b18c281786fba10123550320b55552ba721f86ea5f81ef616fca26681ceb7184764156e8d489&scene=58&subscene=0": "招生中！系统0day安全-IOT设备漏洞挖掘（第6期）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067706&idx=3&sn=42ec007bcefb5e73b814bbd77c03cb62&chksm=f36e7b3ac419f22c0aa5f3c78e3e31516b294c0da5d9a1a774b2f775fabec0b7b1f7b067ad5d&scene=58&subscene=0": "【安全圈】微软示警 ASP.NET 重大安全漏洞，超3000公开密钥恐致服务器沦陷", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247535347&idx=1&sn=0808616c79a4ed7ba6480d99bbb327f5&chksm=c144384ef633b158e939ba678d6f41044991803e662527a37e16277b07549c6729a87271e18b&scene=58&subscene=0": "调查显示：75%的员工被要求为网络安全漏洞“背锅”", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497102&idx=1&sn=874c6c307b4935d0a06c833df9de5362": "【漏洞通告】Go Darwin 构建代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589341&idx=2&sn=698cf3be8150d9f8778afdf43da1a5ae&chksm=b18c281786fba10119471d2669a6ee3e5ea59ed667e0f945a2b14c65bca52e844932e4e21204&scene=58&subscene=0": "打开邮件即中招！Outlook高危漏洞曝光：黑客可远程执行代码", "https://mp.weixin.qq.com/s?__biz=Mzk0ODYwNjI1NA==&mid=2247484105&idx=1&sn=0385781cc613eaf899e81dd04c04eb4b": "【安全预警】万户ezoffice协同办公平台SignatureEditFrm存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247488458&idx=1&sn=06f5e7c2a2da232dd0e71e5e696e5f6c": "【2025-02-09】黑客新闻摘要——黑客新招数！利用pickle文件漏洞，Hugging Face平台被攻陷？", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492137&idx=1&sn=129692b1cf9a1c276a935851ae6e6600": "英国域名注册局 Nominet 确认遭 Ivanti VPN零日漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491496&idx=1&sn=78b401fef93cacf90def378d04473b80": "实战如何通过Druid提升至高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653931508&idx=1&sn=490a2501fdd930ea66587e6f13860220": "中信银行收罚单，因未及时处置数据安全漏洞风险等", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490381&idx=1&sn=668e66e20525eb06027401e4485177cf": "朗速ERP FileUploadApi.ashx 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247491543&idx=1&sn=fdd2ab29e1c8feebb02ea202f932be76": "Tabby 2.0 自动化代码静态审计：CVE-2024-53675&53676 HPE IRS XXE&RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518431&idx=1&sn=03e6a3602604449229d1091ca1fcde2a": "漏洞公开——从弱口令到通杀", "https://mp.weixin.qq.com/s?__biz=Mzg5MDQyMzg3NQ==&mid=2247484043&idx=1&sn=96bf6bf50d540b15f8f7b8f412940054": "告别无效训练！Marathons.Tools AI助手定制你的最佳马拉松策略！（限时体验）", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499399&idx=2&sn=b3a8c71712777b57a6602bd52681479b": "APP渗透测试 -- 从代码讲逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490025&idx=2&sn=d48634acbe317177798e82e15744d887": "0到实战案例(CSRF漏洞)", "https://mp.weixin.qq.com/s?__biz=MzA4MzMzOTQ4Mw==&mid=2453672578&idx=1&sn=dcbec0da46783f7e4cdac74f3cdc128f": "DeepSeek 又被攻击，本地化部署是否安全？", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247488364&idx=1&sn=d70484c00688139cf0df3c8c4b83549e": "渗透实战 | 微信小程序EDUSRC渗透漏洞复盘", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247490098&idx=1&sn=8c449d31148e731bad71c0711b86ad9a": "记SRC中漏洞挖掘从任意文件读取到Getshell|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247491543&idx=1&sn=fdd2ab29e1c8feebb02ea202f932be76&chksm=c31250b6f465d9a02969ec3c011f12efec9dd17ce0803a4e62053f8d444aaeb8e6665fb715b3&scene=58&subscene=0": "Tabby 2.0 自动化代码静态审计：CVE-2024-53675&53676 HPE IRS XXE&RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488945&idx=1&sn=667813a0b75646bd895968ada0e04ac5": "【0day】码支付系统存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMjg0MjM5OQ==&mid=2247487974&idx=1&sn=3cafa9e32c6d953488826d18cbdf7ebe": "一次JDBC反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462599&idx=1&sn=ea2521859b56b81ab63d4ae44709be95": "信息安全漏洞月报（2025年1月）", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487682&idx=1&sn=3632a34aa50199abd9fcdf292778aa4f": "用友NC 漏洞分析--cartabletimeline存在SQL注入", "https://mp.weixin.qq.com/s?__biz=MzkzMDcxNzg4MA==&mid=2247484514&idx=1&sn=4af86ec87a1ce3c14ccfe289ae28f901": "[工具推荐]jeecgBoot漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkzMDQ0NzQwNA==&mid=2247485971&idx=1&sn=a32cbb842ad50d26aec1b4da11054d03": "修复 Rsync 漏洞 CVE-2024-12084", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650607748&idx=3&sn=d07f78159a157bd8d952dbb04cae6ecb": "『杂项』SSH公私钥认证原理及相关漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247518581&idx=1&sn=b1c53ae68fd4b0ed06d5530be30acae1": "Bombon 方法论：我将如何测试Web缓存漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247486987&idx=1&sn=4fb50aefa5785393e944f832b3694a9d": "DayDayPoc-2024十大漏洞盘点", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484366&idx=1&sn=24e25e66ad89c2f14234dd765efcbc22": "宏景eHRview存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247490873&idx=1&sn=ead63f2369f52b1dbbf7ba6addd59a5e": "能信安：漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkxODY0NjE5MA==&mid=2247485013&idx=1&sn=284df912da27de8052737eb12ebf3199": "2025《L师傅SRC业务逻辑漏洞课程》全线升级！！！", "https://mp.weixin.qq.com/s?__biz=Mzg5NDY0NTM2Nw==&mid=2247492258&idx=1&sn=f3ba4eed5a1fc4cc0d2e084e4136cff7": "从数据看风险，从趋势寻策略 | 2024年网络安全漏洞趋势", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527698&idx=1&sn=8cdce138dd5361420a2a8fc552205a2f": "滥用 libxml2 特性绕过 GitHub Enterprise 上的 SAML 身份验证 (CVE-2025-23369)", "https://mp.weixin.qq.com/s?__biz=Mzg4MjcxMTAwMQ==&mid=2247488676&idx=1&sn=94458e94fc2dceeea5eb0b33208af2bb": "网络安全人速领！整理了八大方向AI提示词+思维导图", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247501979&idx=1&sn=5fa7a1296da73415206e2d1f485314ae": "【霄享·安全】任意文件读取漏洞简介（第49期月刊）", "https://mp.weixin.qq.com/s?__biz=MzI5MTIwOTQ5MA==&mid=2247487693&idx=1&sn=d914d313721ba2d7800c618fb52051ac": "JWT漏洞初步了解", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067739&idx=4&sn=65fa68bc1e46fca3f10c639f4af8d698": "【安全圈】未修补的漫威游戏RCE漏洞可能会让黑客接管PC和PS5", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247493942&idx=1&sn=fea97070c0745023670857e716372e19": "一次JDBC反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247502921&idx=1&sn=1e96fdab98871933e723fecf7991bb8f": "全年披露40000+漏洞，《2024年度网络安全漏洞分析报告》解码漏洞风险", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522190&idx=1&sn=40eea5abf5bc17c52eb2a437e540b55f": "合勤不打算修复已达生命周期路由器中的已遭利用漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NTg3ODYxNg==&mid=2247485103&idx=1&sn=0eb4a61003fbb89975181a92f38f2b13": "web接口漏洞 - 水平越权", "https://mp.weixin.qq.com/s?__biz=Mzg3OTcxMjE2NQ==&mid=2247487196&idx=1&sn=9b2618ff5922a5dc835b1946a9b5ef07": "【漏洞实战研磨】之细说log4j2", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY1NTI5Mw==&mid=2247490931&idx=1&sn=ddb4ffea822ad8ac739b6378318e43e4": "月神漏洞实战分享| 推广系统的“隐秘高危漏洞”", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579500&idx=1&sn=ec7ccd0444ca7b16e149f96a4f892d40": "全年披露40000+漏洞，《2024年度网络安全漏洞分析报告》解码漏洞风险", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU1MjgwNA==&mid=2247487209&idx=1&sn=a6660dcdb1f9f562e4d7799704e36aa3": "Java代码审计 || 通过某博客系统实战学习一个有趣的 SSRF 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247549664&idx=1&sn=10c694c8488b49c6c9ce0e5e02d8fa5f": "【资讯】央行等六部门发布《关于规范供应链金融业务 引导供应链信息服务机构更好服务中小企业融资有关事宜的通知（征求意见稿）》", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495763&idx=1&sn=b5525b4ff6a7145ad745acde332b1058": "CNVD漏洞周报2025年第5期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495763&idx=2&sn=81dbf95c95307188cb89cd1961d46621": "上周关注度较高的产品安全漏洞(20250127-20250209)", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503311&idx=1&sn=cc1b030ee4e0aa887458dd2d42b6e1f7": "雷神众测漏洞周报2024.1.20-2024.2.9", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650620998&idx=1&sn=038833fbf100b99ba44221dcd1c84582": "数字世界危机四伏，谁是云上安全的“齐天大圣”？", "https://mp.weixin.qq.com/s?__biz=Mzg5MDg3OTc0OA==&mid=2247489459&idx=1&sn=ca8ad552ca94bf47604c2bc682aef1e9": "通过符号链接致盲EDR复现", "https://mp.weixin.qq.com/s?__biz=Mzk1NzQwNjQ4Ng==&mid=2247485013&idx=1&sn=be0d1fb46c8bc3e033b38a5074dcad48": "经典漏洞复现：CrossFire老版本缓冲区溢出漏洞GetShell全解析", "https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247529040&idx=1&sn=30c75f230f8a0d1382be803f6e605fe1": "从量子威胁到人工智能防御：2025年网络安全将如何发展", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247485780&idx=1&sn=13897dbb76848e06e02f82ceeb9f02f9": "用友U8Cloud FileTransportServlet 反序列化漏洞（附利用脚本地址）", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490027&idx=2&sn=e8ca69fcaa971711d4cc7da69be5f51f": "DayDayPoc-2024十大漏洞盘点", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486607&idx=1&sn=a941f758474e8e5434b59e39022ad320": "【漏洞通告】gzip 整数溢出(CVE-2025-0725)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486607&idx=2&sn=dc419e38b478f0c76636a664037140ff": "【漏洞通告】eventfd 双重关闭(CVE-2025-0665)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486607&idx=3&sn=33d4818fde869574b0d39c35f90a9229": "【漏洞通告】Adobe Experience Manager | 跨站点脚本(存储型 XSS)(CVE-2024-53966)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486607&idx=4&sn=c3e95d6c5c1122bb4ffa63f29cceb3c3": "【漏洞通告】IBM Cloud Pak for Business Automation跨站点脚本(CVE-2024-52364)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486607&idx=5&sn=3366e40713e490852fbe74db093b0b5b": "【漏洞通告】IBM Cognos Anaytics XML 外部实体注入(CVE-2024-49352)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486607&idx=6&sn=92fafbc939585f16bcf6ae82adef8c1c": "【漏洞通告】IBM 安全验证目录命令执行 (CVE-2024-51450)", "https://mp.weixin.qq.com/s?__biz=Mzk0OTUwNTU5Nw==&mid=2247489059&idx=1&sn=8f2e05660dcd8edef098cf5f50fb16cb": "【相关分享】记两份逻辑漏洞(重码)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497063&idx=1&sn=04369f8cd24a50a4e95af97f3349dee0": "一次十分详细的漏洞挖掘记录,新思路+多个高危", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313856&idx=1&sn=ed039a6940a4a920030ae6e8af7e94d0": "月神漏洞实战分享 | 推广系统的“隐秘高危漏洞”", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522190&idx=2&sn=9702cf83b7bdb3ee94d30829bea9f51b": "思科ISE严重漏洞导致攻击者以root权限运行命令", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484373&idx=1&sn=ad6eee9c2e3fb1cd9e629dd0cab89a90": "富通天下外贸ERPUploadEmailAttr存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489561&idx=1&sn=4d41cddc1c57f90001393fad9353a7e3": "【漏洞预警】CoinRemitter SQL注入漏洞(CVE-2025-1117)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490027&idx=1&sn=959d43f81ac390197794b45f3986dbc6": "Java代码审计 || 通过某博客系统实战学习一个有趣的 SSRF 漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247496474&idx=1&sn=3b7f619a49b28f35d8362dd8109d4f10": "转载 | 浅析K8S各种未授权攻击方法", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492209&idx=2&sn=9f33ec3430e70393ecead209206df7d1": "漏洞预警 | ZZCMS SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492209&idx=3&sn=d54d9827c9e695dad0d4d3c178134397": "漏洞预警 | NetMizer日志管理系统远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655265865&idx=2&sn=23a49bb9e1b422277e2ed6ce0398f72e": "2024年度网络安全漏洞分析报告", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247495507&idx=1&sn=5a8a3becd07c159f375f9643f540e071": "【AI专栏】DeepSeek崩了，又能奈我何？因为我有备选", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2NTQxOA==&mid=2247496211&idx=1&sn=2571b5ff9fc0d109c6c406be334e8d21": "山西公安“净网2024”专项行动打击网络违法犯罪10起典型案例", "https://mp.weixin.qq.com/s?__biz=MzI2NTUyODMwNA==&mid=2247494176&idx=1&sn=b49c47712ff07c10d1d75f0490030c8f": "数缘科技推出商用密码产品定制、测试与全流程认证咨询服务", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503311&idx=1&sn=cc1b030ee4e0aa887458dd2d42b6e1f7&chksm=f2585ebcc52fd7aa4d82d20a9ef09136ddac0ff4df3edf2b70a31db2c5d95779e706bd74ba38&scene=58&subscene=0": "雷神众测漏洞周报2024.1.20-2024.2.9", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247502921&idx=1&sn=1e96fdab98871933e723fecf7991bb8f&chksm=cfc56b16f8b2e20095503d83e2cba5979953490f76c3937d53d382dce0fbc233f90e8543439d&scene=58&subscene=0": "全年披露40000+漏洞，《2024年度网络安全漏洞分析报告》解码漏洞风险", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522190&idx=1&sn=40eea5abf5bc17c52eb2a437e540b55f&chksm=ea94a6e4dde32ff2f4ec282b05304a0d93d7ab50ac3ce93ac8784e0e436c4d038760d6b381fc&scene=58&subscene=0": "合勤不打算修复已达生命周期路由器中的已遭利用漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522190&idx=2&sn=9702cf83b7bdb3ee94d30829bea9f51b&chksm=ea94a6e4dde32ff2ead18532d0983a961d5ab1a8d419e4eb9a5af0518079eff0959f4c6c3532&scene=58&subscene=0": "思科ISE严重漏洞导致攻击者以root权限运行命令", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067739&idx=4&sn=65fa68bc1e46fca3f10c639f4af8d698&chksm=f36e7bdbc419f2cdc385b87f1057e3f32d0a23634967f3caaa03400bae0b595037c0ea7db312&scene=58&subscene=0": "【安全圈】未修补的漫威游戏RCE漏洞可能会让黑客接管PC和PS5", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495763&idx=1&sn=b5525b4ff6a7145ad745acde332b1058&chksm=fd74c09aca03498c87631d567727eeef9efcddcafe2c74b7359c0b731c77a961c40ad354a186&scene=58&subscene=0": "CNVD漏洞周报2025年第5期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495763&idx=2&sn=81dbf95c95307188cb89cd1961d46621&chksm=fd74c09aca03498c245623786665abccf86eb0ef5d7c1f4078f7efca8ef7af929bdd88bb8718&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20250127-20250209)", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579500&idx=1&sn=ec7ccd0444ca7b16e149f96a4f892d40&chksm=9f8d2764a8faae72c9d4b66f963a1bd5e90fae25dd62352ba785c30533f2e84090f8f8ca02c5&scene=58&subscene=0": "全年披露40000+漏洞，《2024年度网络安全漏洞分析报告》解码漏洞风险", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247486987&idx=1&sn=4fb50aefa5785393e944f832b3694a9d&chksm=c22296f2f5551fe429bfefb377aaeb4ecf476ac444456e832bb870d275bbc4bae201bfd04f86&scene=58&subscene=0": "DayDayPoc-2024十大漏洞盘点", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497063&idx=1&sn=04369f8cd24a50a4e95af97f3349dee0&chksm=e8a5ff04dfd27612386255464d7569b1d8cba05d52203e5a7a0026b312c25d62a2a97ab7e45a&scene=58&subscene=0": "一次十分详细的漏洞挖掘记录,新思路+多个高危", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247519430&idx=2&sn=2ed62234f558bc0a538ee0adabc19978": "天狐渗透工具箱-社区版V1.1正式发布（附最新工具包版）！", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5NzkwNw==&mid=2247485604&idx=1&sn=c6dcab5521c29d40107a29306a515022": "CVE-2024-52046 Apache mina 反序列化漏洞简单分析", "https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651148961&idx=2&sn=ba5e02330b9a40fb5c9a31cf1b322201": "​【论文】情报和恐怖分子的“心脏”：发现和应对恐怖战术的管理系统", "https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652997301&idx=1&sn=09bd4de58c5c588576a09927ad5248f8": "先知通用软件漏洞收集及奖励计划第六期 正式开始！", "https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247487223&idx=1&sn=678ded11173db2f34686f861d3e16f63": "从漏洞到Shell：堆溢出漏洞利用实战指南", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493160&idx=1&sn=d79ca3718fd78e834d9a0ee7aecf50de": "苹果修复了iPhone和iPad中被“极其复杂的攻击”利用的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493160&idx=2&sn=9f12aca8306b8f8a6b9ceeea4988749a": "XE组织已从信用卡盗刷转向利用零日漏洞。", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652251332&idx=1&sn=7060e151c0a64d76c7e312a01ce36f5d": "网络攻击者利用SimpleHelp RMM漏洞实现持久访问和勒索软件攻击", "https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247490224&idx=1&sn=10fae486a12b3fd3e882d4e9813e304b": "DeepSeek黑客工具箱！代码审计POC 漏洞报告输出 支持第三方API～拒绝卡顿！！", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794123&idx=2&sn=82c948e476d4322789951cf3cc1598dc": "AnyDesk 漏洞PoC发布，利用该漏洞通过壁纸获取管理员权限", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498871&idx=1&sn=d261fad92b90cc79e3796f377d25a658": ".NET 代码审计：发现某企业级 OA 系统中任意文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492209&idx=1&sn=851eff1bb5abd8ecfcda680e2c883570": "漏洞预警 | 金和OA任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484058&idx=1&sn=cfe2ad79afdd3f682accafcda1c3b65d&chksm=c006ca6af771437cd4852c9478fad118191e5d4f92714f30d11bd4a602af0bb5caf2936723f4&scene=58&subscene=0": "漏洞可达性分析：安全工程师的“手术刀”，精准切除90%无效漏洞 - 重构漏洞治理新范式", "https://mp.weixin.qq.com/s?__biz=MzkzMDg1MzIwNA==&mid=2247487404&idx=1&sn=98afb1b34a5b3d5d74ec5eb6a8bf3cd4": "【burpsuite靶场-服务端】XXE注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247490957&idx=1&sn=2b71f6ad9d8e9c61cc4c3cbda3769f45": "国内瓜吃腻了？来吃洋瓜：老外也整F12漏洞交src的骚操作", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247490874&idx=1&sn=d7d5aa365df7408ec399e069796bac33": "泄露近600万客户敏感数据，这家金融机构被罚超1.4亿元", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486608&idx=1&sn=21d09d8534333f8cb6520e1b6328fa1a": "【漏洞通告】Bharti Airtel Xstream Fiber WiFi 密码弱凭证(CVE-2025-1081)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486608&idx=2&sn=568d9e7d729e12ae07144b29df4f520c": "【漏洞通告】IBM EntireX 拒绝服务(CVE-2025-0158)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486608&idx=3&sn=d11b77ec6194e5c66b399e21ff213dbf": "【漏洞通告】IBM Jazz for Service Management 跨站点脚本 (CVE-2024-52892)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486608&idx=4&sn=1805f6008b39a3173b8f1ecb9ec0ac17": "【漏洞通告】页面插件中的WordPress RSS 存储的跨站点脚本(XSS)漏洞(CVE-2025-25096)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486608&idx=5&sn=39fde4657c0a7d5721dbb71b81a8aee2": "【漏洞通告】RT-Thread信息泄露(CVE-2025-1115)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486608&idx=6&sn=54c90d1295f4b77846fbde3238cd269c": "【漏洞通告】newbee-mall 代码注入漏洞(CVE-2025-1114)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486608&idx=7&sn=6aae1a2d07773b5dc9cc58bedc92be53": "【漏洞通告】OpenCart CoinRemitter SQL注入(CVE-2025-1117)", "https://mp.weixin.qq.com/s?__biz=Mzk1NzE0ODk3Nw==&mid=2247491260&idx=1&sn=1faa2488bf6e19fbeefc315dcedb1fa1": "Enhanced BurpGPT | AI分析安全漏洞，支持DeepSeek、OpenAI、Google、Anthropic等等", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581088&idx=1&sn=6f659e38152e18f130196a1c00b075df": "新型 Aquabotv3 勒索软件利用 Mitel 命令注入漏洞发起攻击", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500720&idx=2&sn=ec3370ff287646f73a73fcefea2e2557": "【漏洞通告】Trimble Cityworks反序列化漏洞(CVE-2025-0994)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500720&idx=3&sn=e460fa55b42b5b3383570845e2839de3": "【漏洞通告】IBM Security Verify Directory命令执行漏洞(CVE-2024-51450)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500720&idx=4&sn=2a14af10cabc0002b9081454b197b8aa": "【漏洞通告】iPhone&iPad USB限制模式绕过漏洞(CVE-2025-24200)", "https://mp.weixin.qq.com/s?__biz=Mzg5NTkxNzg4MA==&mid=2247489976&idx=1&sn=33536be8b38f84509f71074a646fd952": "记一次ssrf漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495032&idx=3&sn=a795cc5e80a0ecc937a7f5a4fce5ec1e": "由于CVE-2025-24200被应用到针对特定人极其复杂的攻击，苹果更新了iOS 18.3.1", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490401&idx=1&sn=b75abc0ace7c4cb105337ae5c7eb0ef8": "虹安Heimdall DLP数据泄漏防护系统 pushSetup.do SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNjI2NjUzNw==&mid=2247492929&idx=3&sn=1de220ea50cdc4fc0a70f524e90355b6": "上周关注度较高的产品安全漏洞(20250127-20250209)", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247620738&idx=1&sn=895c4e67c640da2b28f6ea62f0d47e86": "车辆漏洞管理 - 从设计开始有效保护软件定义车辆", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067763&idx=2&sn=6f436c8b629c5b79837b0940cb025969": "【安全圈】苹果修复了在“极其复杂”的攻击中被利用的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247546875&idx=1&sn=d9b18c05b05ea8484c12487babb3a2d5": "一月漏洞信息简报", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553533&idx=1&sn=de7628d92873de621ebb993a6d7810f5": "Mysql LOAD DATA 读取客户端任意文件", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247541526&idx=1&sn=91a08aea7ee6248f5917836862a46872": "黑客承认劫持 SEC 社媒账户以散播虚拟货币谣言，面临最高5年监禁", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489231&idx=1&sn=1673c57affefad636063799dce6a79ad": "Nftables整型溢出分析（CVE-2023-0179）", "https://mp.weixin.qq.com/s?__biz=Mzg4OTI0MDk5MQ==&mid=2247493344&idx=1&sn=21f8996426ad7ba73456c05e578e92b9": "【干货资源分享 】CNVD捡证书小技巧", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247486838&idx=1&sn=2eaf81a0e3a11a2a5a3aa79ff165f19d": "「深蓝洞察」2024年度最狂躁不安的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492139&idx=1&sn=b07468143e486aa2834f249402b59156": "Fortinet 警告黑客利用身份验证绕过零日漏洞可劫持防火墙", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489569&idx=1&sn=6a7922cf90fae39507c7be1ef4ac1c88": "【漏洞预警】Trimble Cityworks需授权反序列化漏洞 (CVE-2025-0994)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489569&idx=2&sn=9edca56049be68398ae6382b8440cb0f": "【漏洞预警】Apache James未授权输入验证不当漏洞可导致拒绝服务", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488011&idx=1&sn=efb1aeec73cf9a20254c5e9d6bbf4752": "锐捷网络-EWEB系统auth接口存在远程命令执行漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzU2MTc4NTEyNw==&mid=2247486527&idx=1&sn=5eb827911e56f33fa2de3029c2a1b225": "【oscp】JOY，ProFTPd拷贝漏洞提权", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247490015&idx=1&sn=9f25bb09138615022f6300c237d3ee27": "一个参数就能控制全站：IDOR漏洞深度剖析", "https://mp.weixin.qq.com/s?__biz=MzkyMjM0ODAwNg==&mid=2247488457&idx=1&sn=918fff81c542afba3c62ed6ab597737a": "一次渗透过程中的CVE-2022-45460撞洞RCE", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313909&idx=3&sn=2590df76d28cb088d070b9119d34bb02": "苹果0-Day漏洞被用于“极其复杂”的特性攻击中", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135067&idx=2&sn=032f618504363a24b36aa09bcb1de2a2": "AI驱动的安全漏洞发现正在重塑网络安全新模式", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485495&idx=1&sn=7adc25b7ef40b89ca08e3f70ca43aff5": "iOS 18.3.1 紧急更新发布：两大安全漏洞修复，iPhone 用户必升！", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515966&idx=1&sn=48ff535f701ee7bb4f5909debc29da6a": "重点系统指纹漏洞验证工具 -- Catcher", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515966&idx=2&sn=8c0391d1bd952362e009e4d04044d4d1": "APP渗透测试 -- 越权漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492140&idx=1&sn=18c1953b65a305fa321b66bd107120e0": "GitHub 上的虚假 LDAPNightmware 漏洞传播信息窃取恶意软件", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522200&idx=1&sn=7bf07566564fbc663142355517974f16": "微软扩展Copilot AI漏洞奖励计划范围，提高赏金", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522200&idx=2&sn=a8084137286ce6cbebda935ab8c0d5c2": "苹果紧急修复被用于“极其复杂”攻击中的0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247505212&idx=1&sn=9ea0b7b0b273b4166f85a23df443ac12": "漏洞挖掘之再探某园区系统", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492218&idx=1&sn=2ba4087ac374012aa5be38eb48fbd224": "漏洞预警 | 灵当CRM任意文件上传和信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492218&idx=2&sn=01f993448e638ce032e21cda5989fff4": "漏洞预警 | 亿华人力资源管理系统目录遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492218&idx=3&sn=6ffa797bb856083c6bc1d5cb8e36c423": "漏洞预警 | LED屏信息发布系统信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247493547&idx=1&sn=155a6666a83262fde491030d6f110c94": "自动化扫描利器，指纹识别更精准，漏洞扫描更全面", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655266070&idx=1&sn=cf3934c00ce67ec9ef931c36c1211418": "Kali Linux 高级渗透测试+Web安全漏洞汇总", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900172&idx=1&sn=b52d5388bd7c9ab14ea4c528e2d440a0": "高危！Palo Alto防火墙曝供应链级漏洞，Secure Boot绕过+固件篡改风险激增", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247485804&idx=1&sn=85c1af9e936f0d23839ec6b4201d09fc": "手把手教你审计金和OA系统漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MzkwNDU1Mw==&mid=2247485423&idx=1&sn=e6286ca6cd90c4d2a801eedafbe80d71": "常见编辑器漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135067&idx=2&sn=032f618504363a24b36aa09bcb1de2a2&chksm=bd15ac888a62259e61b14206dac39f8a213fb4031c342f061005fb16700abd7913ab52bd129e&scene=58&subscene=0": "AI驱动的安全漏洞发现正在重塑网络安全新模式", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522200&idx=1&sn=7bf07566564fbc663142355517974f16&chksm=ea94a6f2dde32fe494139aa68b283b850ad2abbaccfe22f1ead83704b179669c431a4e4e3f47&scene=58&subscene=0": "微软扩展Copilot AI漏洞奖励计划范围，提高赏金", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522200&idx=2&sn=a8084137286ce6cbebda935ab8c0d5c2&chksm=ea94a6f2dde32fe49daed48eb8edd329d603e903408e746f6d6d111473da1914de662d214989&scene=58&subscene=0": "苹果紧急修复被用于“极其复杂”攻击中的0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652997301&idx=1&sn=09bd4de58c5c588576a09927ad5248f8&chksm=8c9e09e2bbe980f403539ec52854902747f4f3f5a614d45ecf4d0c81b11d322260a0270339b3&scene=58&subscene=0": "先知通用软件漏洞收集及奖励计划第六期 正式开始！", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067763&idx=2&sn=6f436c8b629c5b79837b0940cb025969&chksm=f36e7bf3c419f2e5f88fddf5bf9e3baa0788caae324cc1abe361faee4d27bcb20472812e22dd&scene=58&subscene=0": "【安全圈】苹果修复了在“极其复杂”的攻击中被利用的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247486838&idx=1&sn=2eaf81a0e3a11a2a5a3aa79ff165f19d&chksm=c1f449bef683c0a89858e91ff419da0a8b461d180aedcb33a2a25b3984d067dd401255bacadf&scene=58&subscene=0": "「深蓝洞察」2024年度最狂躁不安的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495050&idx=1&sn=aeb41c42996e75edb09cb2581c27e87c": "openssl出现严重漏洞CVE-2024-12797", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495050&idx=2&sn=a7069a3e23b2388dc3b2ee2229884f51": "微软 2025 年 2 月补丁星期二修复了 4 个0day和 55 个漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3MTUxNzQxMQ==&mid=2453885774&idx=1&sn=b4782eb064a80e1c6130cde4671128b5": "从 0 到 1：Linux 服务器应急排查实战指南", "https://mp.weixin.qq.com/s?__biz=Mzk0OTU2ODQ4Mw==&mid=2247486797&idx=1&sn=417a91fe12eb7b233f1ac2370ee64f2b": "探索协程世界：原理、实现与漏洞模式（上篇）", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523434&idx=1&sn=db2d557002cc5961c9e46222fba68336": "苹果紧急修复iOS零日漏洞CVE-2025-24200，已遭黑客利用", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490411&idx=1&sn=84eb2b76ab7713cd4ad89cd639d7aed2": "月子会所ERP管理云平台 GetData.ashx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247487248&idx=1&sn=78f79715919610d6b3b89e8af529c0d4": "“挖漏洞换酒钱？通过信息收集挖到企业的严重漏洞全纪录思路分享", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247493944&idx=1&sn=37bfa1a09e3e4052f15186a8d79afe86": "元宵福利 | WebShell、内存马技术、反序列化漏洞文章和工具汇总", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247488986&idx=1&sn=b89b053ab5e89414b112f4f64d1928e7": "微软最新多个高危漏洞预警", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493178&idx=2&sn=f8bf79797d8cf7d6d507d17b81a29411": "OpenSSL修复了高危漏洞CVE-2024-12797", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493178&idx=3&sn=beac0721a88ec306ba8b2ab356e17b3c": "Progress Software修复了多个高严重性的LoadMaster漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MzkwNzI1OQ==&mid=2247485754&idx=1&sn=2ddadac1735b535a164f294a4a1451d9": "记一次某大型系统前台RCE(0day)审计经历", "https://mp.weixin.qq.com/s?__biz=MzI1NzQ0NTMxMQ==&mid=2247490124&idx=1&sn=5f65d929382ce98aedc91cb0ff579731": "注册信息安全专业人员恭祝大家元宵节快乐", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794136&idx=2&sn=d727d46353335fe5169b04494784bad5": "微软补丁日修复4个0Day和一共55个缺陷", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794136&idx=3&sn=a4f36c84353564f51c9bb2bdd6ad5735": "Apple 发现高危 OpenSSL 漏洞可导致中间人攻击", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502959&idx=1&sn=a89ad8c08deff62ef0aa67b1bb869142": "微软2月补丁日多个产品安全漏洞风险通告：2个在野利用、4个紧急漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDYwNTcyNA==&mid=2247487411&idx=1&sn=b3d8f81f6a2464f421ce720b913fe364": "【工具分享】xxl-job漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491502&idx=1&sn=fdc8f11a7eb0d5d69fa54437ec3239b4": "Java代码审计 || 通过某博客系统实战学习一个有趣的 SSRF 漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487739&idx=1&sn=e8c6a1fc9394062227ec738d42b45b15": "【漏洞挖掘】记一次985证书站Oracle注入绕WAF", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486522&idx=1&sn=4c039df49d5b5873996cb2bb12a8d423": "DeepSeek黑客工具箱！代码审计POC 漏洞报告输出 支持第三方API～拒绝卡顿！！", "https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247484866&idx=1&sn=0fb888f9a480e196ff34876713b14f54": "赏金猎人| 我利用文件上传功能利用存储型XSS漏洞导致网站访问者凭证被盗，并因此获得了1000美元的赏金。", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498871&idx=1&sn=d261fad92b90cc79e3796f377d25a658&chksm=fa59529acd2edb8c7e6332dfcada6233d17fd489271cb6a618488ca71747042ade56663166af&scene=58&subscene=0": ".NET 代码审计：发现某企业级 OA 系统中任意文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581088&idx=1&sn=6f659e38152e18f130196a1c00b075df&chksm=e9146d9ade63e48ca17d4b701dad4ace777dd6c60ca7e49f2b1d7ed66e41688ff1922c4e54dd&scene=58&subscene=0": "新型 Aquabotv3 勒索软件利用 Mitel 命令注入漏洞发起攻击", "https://mp.weixin.qq.com/s?__biz=MzI5NTA0MTY2Mw==&mid=2247485833&idx=1&sn=27fc8a4b3b278bf09913088150d1b2bf": "苹果在紧急更新中修复了正被积极利用的 iOS 零日漏洞 CVE-2025-24200", "https://mp.weixin.qq.com/s?__biz=MzkxNTY4NTQwMg==&mid=2247484319&idx=1&sn=656b410014770196baf6dbf51fefbe0b": "deepseek教程人手一份", "https://mp.weixin.qq.com/s?__biz=MzkyMjM4MzY5Ng==&mid=2247486068&idx=1&sn=3773ea922388fc24bc03e627f961cdac": "月圆人团圆 良宵更美好 | CAPPVD漏洞库祝您元宵节快乐", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581104&idx=2&sn=ef02cf62b1f0fc89d48703f2180f4c74": "NetGear发布安全公告提醒用户修补关键WiFi路由器漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484485&idx=1&sn=be2d001a5df43ea33c32243a990db863": "安钥®「漏洞防治标准作业程序（SOP）」征文启示 [2025年第6期，总第24期]", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484485&idx=2&sn=2b52496fc85fe21d1728d0daddd85c30": "Apache Tomcat文件包含漏洞（CVE-2020-1938）处置标准作业程序（SOP）", "https://mp.weixin.qq.com/s?__biz=MzI4ODQzMzk3MA==&mid=2247489635&idx=1&sn=2cc00bb7187a285176e6ced59cf399a2": "美国政府首度披露根据漏洞公平程序披露零日漏洞情况", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247615450&idx=1&sn=7a402800b38095d0468c6a26ecdb2a0a": "【15万$】通过阅读文档发现Evmos中的高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493178&idx=1&sn=7e0aa2b04704010941843bfb2dd0ebd3": "攻击者利用新的零日漏洞劫持Fortinet防火墙", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094783&idx=1&sn=2e13e445612b4d43fc940aaa27f8ef15": "OpenSSL高危安全漏洞 CVE-2024-12797", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492632&idx=1&sn=f6588bf1c1fb7de7777cdc7ce5b4c0c7": "漏洞复现 || DATAGerry 终端节点接口敏感信息泄露", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487286&idx=1&sn=9805f62da7e79276a785586ab3e3720a": "一次JDBC反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067786&idx=4&sn=290289ab17f0f8e7dea5feaad426fb1b": "【安全圈】Microsoft补丁积极利用零时缺陷-CVE-2025-21418 & CVE-2025-21391", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313961&idx=1&sn=4e6aff5796c7c32b68f269fc47d57411": "OpenSSL软件库曝高危漏洞，可实施中间人攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313961&idx=2&sn=2c65efb6b7c43158bdd51a5ec5fbd5b5": "攻击者利用新零日漏洞劫持Fortinet防火墙", "https://mp.weixin.qq.com/s?__biz=Mzk0MzYyMjEzMQ==&mid=2247487360&idx=1&sn=9b2c8ebc3826025578701e82a6e2962b": "博客更新：SSRF漏洞详细讲解（多个实验场景复现），别再SSRF文件下载了", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490300&idx=1&sn=5a0ef6e7c47150e595120882b8d00d3b": "【风险通告】微软2月安全更新补丁和多个高危漏洞风险提示", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500729&idx=2&sn=972e60ad21deca601a8cef2a20f84638": "【漏洞通告】微软2月多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU1MjgwNA==&mid=2247487230&idx=1&sn=aa85cc6c676afb2430d8504b3e1a81ae": "拿到了 SpringBoot 开发的系统，该如何代码审计分析漏洞？分享下我的一二三步的思路。", "https://mp.weixin.qq.com/s?__biz=MzI0NDgxMzgxNA==&mid=2247496618&idx=1&sn=5794658e6ad27d8f221a6c5551ce3164": "CNVD漏洞周报2025年第5期", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247625020&idx=1&sn=37c838f5c73124972b055f988b39585d": "奇安信与东方国信达成战略合作 筑牢AI安全底座", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522210&idx=1&sn=05cf8501f67197b21b3eb5ce8849477c": "微软2月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522210&idx=2&sn=98a6271cd5d293a67b756477a83dfab3": "OpenSSL 高危漏洞可用于中间人攻击", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236537&idx=4&sn=8d064e64087b18574f08e21495f7c20b": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523998&idx=2&sn=4f01bc599b04f754babeb8262f7c2cc6": "【漏洞通告】Ivanti CSA远程命令执行漏洞(CVE-2024-47908)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523998&idx=3&sn=afbb700c040110f32c702d5c6ab84345": "CNVD漏洞周报2025年第5期", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524286&idx=2&sn=a33977671c38eff660fad4096fa3f9ae": "2025-02微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488964&idx=1&sn=5c9f88f88b6352a5f7228166b197151c": "【安全更新】微软2月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462608&idx=1&sn=1493cf1f1e068c644c55ac02d47b6182": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462608&idx=2&sn=bb7717a397d4fb7d06626e907d254b79": "信息安全漏洞周报（2025年第6期）", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489242&idx=1&sn=97336de5da8017c565b14e6075329edc": "Nftables整型溢出提权利用（CVE-2023-0179）", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634294&idx=3&sn=7a815fd526eea90c6ccf81873a35cd7a": "OpenSSL软件库曝高危漏洞，可实施中间人攻击", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489574&idx=1&sn=75ecacddccc20c979ffa81423deae9ce": "【漏洞预警】WinZip 7Z 文件解析越界写入远程代码执行漏洞 (CVE-2025-1240)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497076&idx=1&sn=32e9b394b57251b8176752acb816e6af": "从云服务器 SSRF 漏洞到接管你的阿里云控制台", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527787&idx=1&sn=7cfa7b7e910e6b385f935a6371e0e701": "CVE-2024-29510 – 使用格式字符串利用 Ghostscript", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067786&idx=2&sn=c497b609a80250b639e05ac4c19e5d69": "【安全圈】OpenSSL 修补了高严重性漏洞 CVE-2024-12797", "https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649170729&idx=1&sn=3537c5685ac0d672104eea3d559eaf64": "汽车供应链攻击、0day漏洞攻击……2024年网络安全领域呈现这些态势", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247518627&idx=1&sn=f016e24f5e2b7700f035fd83e69d0a77": "Beanshell 反序列化分析（CVE-2016-2510）", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515986&idx=1&sn=485cc5fa917fc24da3e447fc7b7e044d": "【漏洞挖掘】记一次985证书站Oracle注入绕WAF", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527787&idx=2&sn=40e61a0596f3a5df8025c00e03865215": "CVE-2024-29509：Artifex Ghostscript PDFPassword 处理期间的堆缓冲区溢出 _", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247493558&idx=1&sn=23d7c3e78b51010ffc987a9b6d6ef37c": "基于 BurpSuite 新版 MontoyaAPI 的 SSRF 漏洞自动探测插件", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492238&idx=1&sn=f4dd6b56870cd96f2536f6fd8399207e": "漏洞预警 | Trimble Cityworks反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492238&idx=3&sn=d3881794d5a1600669b53b7a88bcbded": "漏洞预警 | ALR-F800远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MjQ4MjM4OA==&mid=2247523926&idx=1&sn=554311fc0961ff14bb7a0de017496ce9": "国内外网络安全政策动态（2025年1月）", "https://mp.weixin.qq.com/s?__biz=MzkwNjczOTQwOA==&mid=2247494038&idx=1&sn=ef2356ee2c5ea685686b153951a47a27": "BurpSuite插件 | 自动化漏洞POC探测", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522210&idx=1&sn=05cf8501f67197b21b3eb5ce8849477c&chksm=ea94a6c8dde32fde00dd878628fa66b89bbdc7b1c1ae1c14dc49835b9760dbe2452224b7acf9&scene=58&subscene=0": "微软2月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522210&idx=2&sn=98a6271cd5d293a67b756477a83dfab3&chksm=ea94a6c8dde32fde30498e076c2a0a2bbb7d67be4c5997fcfe7bb831840a9bf6b09dcaf8800e&scene=58&subscene=0": "OpenSSL 高危漏洞可用于中间人攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067786&idx=2&sn=c497b609a80250b639e05ac4c19e5d69&chksm=f36e7b8ac419f29ccb4d29ef2d4f719b2036458c6e5d6f77f27da247c63606a9064eaad5b54a&scene=58&subscene=0": "【安全圈】OpenSSL 修补了高严重性漏洞 CVE-2024-12797", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067786&idx=4&sn=290289ab17f0f8e7dea5feaad426fb1b&chksm=f36e7b8ac419f29c9d20c64b6aa9bf30dadf3432590a12029f5c905c94354bbbf1bb4a9c8b2e&scene=58&subscene=0": "【安全圈】Microsoft补丁积极利用零时缺陷-CVE-2025-21418 & CVE-2025-21391", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581104&idx=2&sn=ef02cf62b1f0fc89d48703f2180f4c74&chksm=e9146d8ade63e49c4fb2dfb426fe0e764340df9e135519ff7f49b610df18b255e7533ae40d1c&scene=58&subscene=0": "NetGear发布安全公告提醒用户修补关键WiFi路由器漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236537&idx=4&sn=8d064e64087b18574f08e21495f7c20b&chksm=8b580700bc2f8e166e99b1fc5b7fa9629e428ae724de01f805382cf9e1eca1e7324e90c1e58b&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524286&idx=2&sn=a33977671c38eff660fad4096fa3f9ae&chksm=eb704181dc07c89710cfe4bd8778e1e029cfad801b8fa82ad815854b1c200818a3b1aec1c23e&scene=58&subscene=0": "2025-02微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502959&idx=1&sn=a89ad8c08deff62ef0aa67b1bb869142&chksm=fe79e8f7c90e61e177fe250f38856eaca87a6c351506c6525f491d0ba3c8878211cac3b82cf9&scene=58&subscene=0": "微软2月补丁日多个产品安全漏洞风险通告：2个在野利用、4个紧急漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523998&idx=2&sn=4f01bc599b04f754babeb8262f7c2cc6&chksm=ce46158ef9319c98a87c1d9311ed51c2727eaffdd38bf0a140554bb1724d312e298a7120bfc1&scene=58&subscene=0": "【漏洞通告】Ivanti CSA远程命令执行漏洞(CVE-2024-47908)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523998&idx=3&sn=afbb700c040110f32c702d5c6ab84345&chksm=ce46158ef9319c98017d41e7822905275be7e3e096d2098469250fdb4d6d2781c795e588ab96&scene=58&subscene=0": "CNVD漏洞周报2025年第5期", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497076&idx=1&sn=32e9b394b57251b8176752acb816e6af&chksm=e8a5ff17dfd27601b73ebcac08d4f7fc9755ba5a05a2b98e54b8b06439bf63f995736fab3a48&scene=58&subscene=0": "从云服务器 SSRF 漏洞到接管你的阿里云控制台", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495120&idx=4&sn=cfc9bdb364e53376daeb6f2259d21245": "价值 10000$的可查看任何 YouTube 用户的电子邮件漏洞披露", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495120&idx=8&sn=9f96489b67c1fd1ed23116769351016c": "Nvidia 严重漏洞可能威胁 AI 系统", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502983&idx=1&sn=193e4bb2d3d87a5c4ff9a65953e88b49": "【已复现】Palo Alto Networks PAN-OS 身份验证绕过漏洞(CVE-2025-0108)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486610&idx=1&sn=6186f4fa16a68721f5080ffc57fcdcb9": "【漏洞通告】WP DirectoryBox Manager 身份验证旁路(CVE-2025-0316)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486610&idx=2&sn=2581532a5837d572837c8048d34f2b90": "【漏洞通告】Dreamvention Live Ajax搜索免费Live_search.SearchResults搜索SQL注入", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486610&idx=3&sn=a0375c03f088a819f9ca1cd5c422179a": "【漏洞通告】DWT-目录和列表WordPress主题 验证通过短代码(CVE-2025-0169)存储的跨站点脚本", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486610&idx=4&sn=71aa6332a9955c6afd54b718fd746bbc": "【漏洞通告】JeecgBoot 安全漏洞(CVE-2024-57606)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486610&idx=6&sn=818bf4afbc43f7d6a606cd2d31d15fb9": "【漏洞通告】OpenProject存储的HTML注入脆弱性(CVE-2025-24892)", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523459&idx=1&sn=6699d81291647382f67521972250c787": "Windows存储系统现0day漏洞，攻击者可远程删除目标文件", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487740&idx=1&sn=d1d59cbab455964fa901dadccd8b8c63": "支付类漏洞挖掘技巧总结", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260567&idx=1&sn=de59d9f03d07c65fde900c5aeb955eb6": "【CVE-2025-23359】研究人员发现绕过NVIDIA容器工具包修补后的新漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490420&idx=1&sn=10202fa69c87b977ae0cf972681e3fc1": "方正畅享全媒体新闻采编系统 imageProxy.do 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4OTI0MDk5MQ==&mid=2247493368&idx=1&sn=7864a4b2183ce16732d4f0b33d371bb9": "【安全工具分享】GPTLens智能合约漏洞检测", "https://mp.weixin.qq.com/s?__biz=Mzg2NzY0MzM3Ng==&mid=2247484062&idx=1&sn=dc06539021441b7149610eed955cce08": "Gemini安全漏洞曝光：诱导式钓鱼攻击如何突破谷歌防御", "https://mp.weixin.qq.com/s?__biz=MzU3MDA0MTE2Mg==&mid=2247492593&idx=1&sn=18e2833e3b56b10cdb3e439088d3f3f9": "安全快报 | 俄罗斯黑客针对乌克兰政府和私营机构的7-Zip程序持续发起0day漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900181&idx=1&sn=63be4d65122403ccf041f1c642f85566": "微软 2 月份安全更新：修复 4 个零日漏洞，55 个安全缺陷！", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652251346&idx=1&sn=7ac383d7e3690a4c2df004c7f0a83538": "超1.2万台KerioControl防火墙暴露于远程代码执行漏洞威胁之下", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247493950&idx=1&sn=b11d87f7b5875b7a66cc56eaa30f1705": "DeepSeek黑客工具箱！代码审计POC 漏洞报告输出 支持第三方API～拒绝卡顿！！", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247497136&idx=1&sn=b67382c4466bda77361707b38f9fa5ea": "CVE-2024-50379：Apache Tomcat远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247490519&idx=1&sn=e57bd95fbcf35f18a0ec00e60577c858": "漏洞挖掘之再探某园区系统", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497167&idx=1&sn=fd1100718daded96ae40541b05f61e3d": "2025年2月微软补丁日多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497167&idx=2&sn=f9e6ae6b326c6d68d72a718670c40128": "【漏洞通告】iPhone&iPad USB限制模式绕过漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497167&idx=3&sn=369b86d1da2f505afa10761b12cb8adb": "【漏洞通告】Trimble Cityworks反序列化漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497167&idx=4&sn=5d593989fb7beda78f5f86f0bd543591": "【漏洞通告】IBM Security Verify Directory命令执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492238&idx=2&sn=4463eba0669de844db1b00e50e83363f": "漏洞预警 | 视频话机设备信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488964&idx=1&sn=5c9f88f88b6352a5f7228166b197151c&chksm=c2c642cff5b1cbd9c7666dcb0fadf92f57c3869762078c3bc3e9e1feeb1b67141c5fbfcc5cfb&scene=58&subscene=0": "【安全更新】微软2月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454063928&idx=1&sn=b264dbdf71d2950c59bfa9e0307f59b2": "信息安全漏洞周报【第009期】", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500740&idx=2&sn=2939c49e8bb0231cd34cbd3b2a3ae1d4": "【漏洞通告】Palo Alto Networks PAN-OS管理界面认证绕过漏洞(CVE-2025-0108)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500740&idx=3&sn=99b5f73b93c1efe5c9cb814100a07c95": "【漏洞通告】Ivanti CSA管理控制台命令注入漏洞(CVE-2024-47908)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODY3NDYxNA==&mid=2247485948&idx=1&sn=133364b6eb92e6c4ab3ced4329a740eb": "手把手教你构建企业级本地AI漏洞文库：基于Ollama + DeepSeek R1+ Anything LLM 完整指南", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489584&idx=1&sn=8f38f1b4888f62f56d92a034996d972d": "【高危漏洞预警】Palo Alto Networks PAN-OS身份验证绕过漏洞CVE-2025-0108", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247490876&idx=1&sn=207c131f116c7e9fec181ea13a703b9e": "能信安：漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI4NTYwMzc5OQ==&mid=2247500730&idx=1&sn=ea2c3ad10d4c8db36d2505d91d6f6432": "分享两个漏洞，含$3133 Google IDOR", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493189&idx=1&sn=86e0c579d46ccd91b3ef83ddf0346f5d": "2025年2月微软补丁星期二安全更新修复了2个被积极利用的漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489629&idx=1&sn=c6f781b20ff35b2d1d19e4a4b61b261a": "Ollama 远程代码执行漏洞 CVE-2024-37032", "https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247484598&idx=1&sn=9b702765222da3a104987fb5ae98ead4": "【漏洞预警】Palo Alto Networks PAN-OS 身份验证绕过漏洞(CVE-2025-0108)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486610&idx=5&sn=b55276c212815c172696415648e34207": "【漏洞通告】QingScan 安全漏洞(CVE-2024-57278)", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247598&idx=1&sn=79fd58e6ca4a35bd46d233ea66b410b5": "OpenSSL软件库曝高危漏洞，可实施中间人攻击 | 微软：生成式AI可导致人类认知能力下降", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650607914&idx=4&sn=b2cdf087af5e06f3cdb6328668060dc8": "自动化扫描利器，指纹识别更精准，漏洞扫描更全面", "https://mp.weixin.qq.com/s?__biz=Mzg4MzE1MTQzNw==&mid=2247491778&idx=1&sn=fd736a204e78369aca87d2c1b1be52a9": "综述导读 | 推荐系统的图基础模型", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314047&idx=2&sn=847279fdf8de4e66a7f4f7fd994a6a15": "特朗普政府拉长0day漏洞披露时间", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314047&idx=4&sn=299b0685f45d0992c27c5998c25440b0": "Windows存储系统现0day漏洞，攻击者可远程删除目标文件", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522224&idx=1&sn=671c73813c868c4819c48a9b54ab1b8c": "Ivanti 修复 Connect Secure & Policy Secure 中的三个严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488973&idx=1&sn=feee940c27412ea94086cdbf97ef6208": "【漏洞通告】Palo Alto Networks PAN-OS身份验证绕过漏洞(CVE-2025-0108)", "https://mp.weixin.qq.com/s?__biz=MzI0MTY5NDQyMw==&mid=2247525477&idx=1&sn=8625f0419bc871098271566762f61337": "开工纳福 | 每日福袋限定开启，提交漏洞福气开奖！", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524008&idx=1&sn=849e37134e6bdeb9f90145812297a26f": "【漏洞通告】Palo Alto Networks PAN-OS 身份验证绕过漏洞(CVE-2025-0108)", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650621021&idx=1&sn=5af15ca70447e4754a7581411f64889f": "涉及67个漏洞！微软发布2025年2月补丁日安全通告", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247495873&idx=1&sn=059b6f320204da5222a5e0d8add6cfc9": "【论文速读】| CleanVul：利用大语言模型启发式方法在代码提交中进行自动的函数级漏洞检测", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135088&idx=2&sn=b3e7b1d94c192ca5610f346b402f8a00": "字节跳动因代码侵权被判赔8266.8万元；私募股权巨头竞相“抢购”，趋势科技或将私有化 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247490492&idx=1&sn=29d3c3b95a3c8ac0a97aa898de368efb": "创宇安全智脑 | 网心云设备管理平台未授权访问等130个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553613&idx=1&sn=8601dbaec2dff6f45a92dafcbff4c197": "禅道后台命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499770&idx=1&sn=f303a687ebe9206f9735cb7e9d60641a": "让 Deepseek 帮我写 POC，又快又准确！", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU0OTQyMg==&mid=2247484329&idx=1&sn=a7bf52780d272141894aa95d9382a988": "【漏洞预警】Github Enterprise Server 身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247510342&idx=1&sn=ff685c0b9a8b1eb4a953e98851a0e210": "微软2025年2月补丁日重点漏洞安全预警", "https://mp.weixin.qq.com/s?__biz=MzkyNzg4NTU0NQ==&mid=2247485005&idx=1&sn=4a6aeeddc0d40782e325c9956a678801": "Zer0 Sec团队2025新年首次开班 | 一起解锁技术新高度", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489251&idx=1&sn=0426db63fe3eca49229189fb6bd895f6": "Django SQL注入漏洞（CVE-2022-28346）", "https://mp.weixin.qq.com/s?__biz=Mzg4Njc0Mjc3NQ==&mid=2247486642&idx=1&sn=2a4412e22514eb07569751c0fa0362af": "随机数、XKCD 漫画与 ZEN 系列最新 CPU 漏洞 CVE-2024-56161", "https://mp.weixin.qq.com/s?__biz=Mzg5MDQyMzg3NQ==&mid=2247484049&idx=1&sn=1b8ee0ba2139231aae6a1105ead8a6d4": "AI 抢安全工程师饭碗？这款工具让 POC 自动生成，支持DeepSeek等多模型！", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518586&idx=1&sn=2b3b596e3315f87fc11e82432b96214f": "利用js挖掘漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTAxMjA5Mg==&mid=2247484483&idx=1&sn=9dc0439726aa3ef90edd12c0aa58ba49": "首个GPU容器逃逸: NVIDIA Container Toolkit CVE-2024-0132 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487292&idx=2&sn=2eff3ed132d0a5b8a788a029441600a6": "Java实战篇-XXE漏洞利用从潜到深", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067800&idx=4&sn=ff3f3221472a2c3db7a23c81342c355a": "【安全圈】微软提高了Copilot AI漏洞赏金计划的奖励", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462614&idx=1&sn=cf6b570afb40e3bb45a01990c83da9a6": "CNNVD关于Palo Alto Networks PAN-OS 安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247490190&idx=1&sn=bf3b832d82d575fb64000a004b6afd4d": "Z0SCAN一款基于Python3的主、被动扫描器|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260573&idx=1&sn=ae97094d57e6ca2ce1dcbd45d56b6076": "一个价值$100的漏洞发现", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247485370&idx=1&sn=d25624fafddb6daf098c27bc55c8c8c6": "漏洞利用-可绕过已修复的NVIDIA容器工具包漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247493559&idx=1&sn=6dec9fba6cdf6c92543df30c61371e0a": "JeecgBoot漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492249&idx=1&sn=2a8ad35b68ea767f281b27c83bdbf6f0": "漏洞预警 | IBM Security Verify Directory命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492249&idx=2&sn=ff479e9991791e89ca2af10254abafdc": "漏洞预警 | 大为知识产权协同创新管理系统未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492249&idx=3&sn=4279eb326b695d9759fc35959bc29627": "漏洞预警 | 平升电子水库安全监管平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507470&idx=2&sn=2d6ee715c6ec0a9fc4d7b86617b1dbb4": "暗网情报4则：又见SS7漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MDA5Mzg1Nw==&mid=2247486918&idx=1&sn=0bd313862a866fe51cf12882abdbafd8": "网安60秒丨文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488973&idx=1&sn=feee940c27412ea94086cdbf97ef6208&chksm=c2c642c6f5b1cbd043c657f359444a7d9b8f4d5994b2bd1f7530eb9cde31381af1959134aabc&scene=58&subscene=0": "【漏洞通告】Palo Alto Networks PAN-OS身份验证绕过漏洞(CVE-2025-0108)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522224&idx=1&sn=671c73813c868c4819c48a9b54ab1b8c&chksm=ea94a6dadde32fccbdd41325f91efdd1c4ec286a388c08a1ede020c3367c7438561f706f6826&scene=58&subscene=0": "Ivanti 修复 Connect Secure & Policy Secure 中的三个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067800&idx=4&sn=ff3f3221472a2c3db7a23c81342c355a&chksm=f36e7b98c419f28ee6fb5f7539c5351b06fa037a348694fe72d912414074bddde74c33b0cd12&scene=58&subscene=0": "【安全圈】微软提高了Copilot AI漏洞赏金计划的奖励", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247510342&idx=1&sn=ff685c0b9a8b1eb4a953e98851a0e210&chksm=fa527cf8cd25f5ee1839a876a5e087f0d4a120db596765c8e931b4bd7de310f1e89d1bd6212c&scene=58&subscene=0": "微软2025年2月补丁日重点漏洞安全预警", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489629&idx=1&sn=c6f781b20ff35b2d1d19e4a4b61b261a&chksm=fb029505cc751c130ab76b6442d35176b7c4ea4fcc9e84e72daac64d1d83fff2a1036a2f73f9&scene=58&subscene=0": "Ollama 远程代码执行漏洞 CVE-2024-37032", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524008&idx=1&sn=849e37134e6bdeb9f90145812297a26f&chksm=ce4615b8f9319cae308fa556935833377d4f60238dd38b193d69c566d2636766cd56c6c1e434&scene=58&subscene=0": "【漏洞通告】Palo Alto Networks PAN-OS 身份验证绕过漏洞(CVE-2025-0108)", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495138&idx=1&sn=d38688cdf0ab432e603a39fe158c40be": "近期暗网 0day 威胁情报预警", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513734&idx=2&sn=950086d8fed7b88398537c94f251f1bc": "DeepSeek与OpenAI隐私政策对比：数据安全与用户权益的平衡考虑", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499780&idx=1&sn=e4354abba5ca24eaf695664592528fea": "Deepseek 有多强？延时注入检测 POC 只需一步，即可获取完美 POC 模板！", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727844111&idx=1&sn=1ded95f6c8b62f80377dbb25fabb5124": "浪漫来袭，单个漏洞达3w+，为你的恋爱基金添砖加瓦！", "https://mp.weixin.qq.com/s?__biz=MzkyOTQyOTk3Mg==&mid=2247485080&idx=1&sn=d6b096febd48fe0e88e0fccdd1f78146": "Ollama 目录遍历致代码执行漏洞 CVE-2024-37032", "https://mp.weixin.qq.com/s?__biz=MzUzNTI2MzU0OQ==&mid=2247497624&idx=6&sn=f81282855880d0400cfc10b6971f3fb5": "【网安洞察】漏洞利用分析：大众汽车近百万用户位置信息泄露事件", "https://mp.weixin.qq.com/s?__biz=MzkzMDQ0NzQwNA==&mid=2247486015&idx=1&sn=dc02d7fa037fb872aa70e73b0dadb162": "CVE-2024-12797 修复指南", "https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037493&idx=1&sn=2946b3235a67d3e132aa11077a0ffa41": "手机短信轰炸与群发漏洞防御总结", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487766&idx=1&sn=bc34cb6287036636aacba0bc250ed36c": "EDUSRC漏洞挖掘技巧汇总+信息收集各种姿势", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490429&idx=1&sn=2ab0287fe70757abcc0b6b0802b9bba2": "郑州时空-TMS运输管理系统 GetDataBase 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzM2MjM0OQ==&mid=2247495722&idx=1&sn=893e66971463f7661828ab04451e1212": "LLM 提高 SAST 的代审效率的思考方向", "https://mp.weixin.qq.com/s?__biz=Mzk0ODY1NzEwMA==&mid=2247486936&idx=1&sn=62a7d979e9c737398d16067065173053": "DeepSeek 大火下的本地部署问题：Ollama + 暴露端口 = 安全漏洞？", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247485834&idx=1&sn=c40fa31994263b8762d85e6b500f7453": "手把手教你审计PHP CMS漏洞 | 某腾CMS漏洞实战案例分析", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247500635&idx=1&sn=3c3d582f04eee3e1dc7388c4509d9e1f": "【高危】AI大模型部署软件Ollama 未授权访问漏洞，警惕你部署的大模型被别人使用。", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502983&idx=1&sn=193e4bb2d3d87a5c4ff9a65953e88b49&chksm=fe79e81fc90e6109745c95265119dc1eff73587d94844b038a36c42632175edc0d6ede0c1767&scene=58&subscene=0": "【已复现】Palo Alto Networks PAN-OS 身份验证绕过漏洞(CVE-2025-0108)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247501146&idx=1&sn=90497fe1fb951860c7927052f13be74d": "连环作案｜zkLend 被黑深度分析，关联 EraLend 事件", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247490877&idx=1&sn=935ce4d49048978d07a6d6b6e366d4d9": "能信安：漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkwMDMwNDgwNQ==&mid=2247485658&idx=1&sn=4cde13c89f470e234da4fb928192b9e2": "如何使用AI进行漏洞挖掘？完结！", "https://mp.weixin.qq.com/s?__biz=MzIwNjQ4OTU3NA==&mid=2247510118&idx=1&sn=f017ba4c2496a969dc6ca729f1a57426": "关于天际友盟", "https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247486403&idx=1&sn=9d92e338d6da7fa3703918469be653c3": "今日推荐容器漏洞扫描器：Trivy", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794168&idx=1&sn=d30fb9948566c2faef3b286cf3e6cd46": "Salt Typhoon 威胁组织利用较旧的漏洞破坏了思科边缘设备", "https://mp.weixin.qq.com/s?__biz=Mzk1NzI5NzA3NQ==&mid=2247486560&idx=1&sn=ed76a81669a91887f9db51dfd0ea0ef4": "漏洞扫描工具：AWVS", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236773&idx=5&sn=17ed6c5d762f56355e082bcd5ff357cb": "CNNVD | 关于Palo Alto Networks PAN-OS安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094810&idx=1&sn=709cf4406367e974093c79b82a78f932": "WinZip 存在远程攻击者执行任意代码漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650621058&idx=1&sn=814edd4d94d2d4d5828586bc8833897f": "已复现！Palo Alto Networks PAN-OS 身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522232&idx=1&sn=cb025b96489e2100ef0f614b779833d4": "斯巴鲁Starlink漏洞可导致汽车遭劫持，主要影响美加日三国", "https://mp.weixin.qq.com/s?__biz=Mzk0NTg3ODYxNg==&mid=2247485123&idx=1&sn=d12fd7b9d4a9b2736ac64a452d866bb1": "支付漏洞四舍五入", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489589&idx=1&sn=ec59249fd16d4bf096fe03c2284fe995": "【漏洞预警】Orthanc身份认证绕过漏洞(CVE-2025-0896)", "https://mp.weixin.qq.com/s?__biz=MzIyMjQwMTQ3Ng==&mid=2247491083&idx=1&sn=bd75366a99a44d73b6ebf64acd3824ad": "【国际视野】美国网络安全和基础设施安全局和联邦调查局联合发布《设计安全警报：消除缓冲区溢出漏洞》", "https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247492393&idx=2&sn=1ab4e7a169bb4e9d0bc14e13b44af581": "全新改版！ISC2云概要证书上线", "https://mp.weixin.qq.com/s?__biz=MzkyNDUyNzU1MQ==&mid=2247486815&idx=1&sn=3284ddeee179003ec71c466d57ddfb5a": "长亭X魅族：All in AI与多云安全擦出火花", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247501999&idx=1&sn=e17d9f9642717ffc7fa622dcfb5417a3": "Microsoft Excel 资源控制不当漏洞 可导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247501999&idx=2&sn=b2fa2128cbc00826d9f4799ea38254c3": "Microsoft Windows Storage 需授权 解析缺陷漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247501999&idx=3&sn=d3b84a8fc9064cddb1e550fab0e81b0b": "Microsoft Windows 缓冲区溢出漏洞 可导致权限提升", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247501999&idx=4&sn=7a6994da926b697ec8f30c485db1661f": "Trimble Cityworks 需授权 反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247501999&idx=5&sn=759e01e16b89d41a25716b5c5619971f": "Google Goland 代码注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247501999&idx=6&sn=7cdbacb059f6dd73f824304d42ea6217": "Apple iOS等 安全缺陷漏洞 可导致功能失控", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247501999&idx=8&sn=f7686cd3dff5c4052e5a8c6973829ed8": "用友网络 GRP-U8Cloud 逻辑缺陷漏洞 可导致敏感信息泄露", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484095&idx=1&sn=4291f26d60d708ee44796c81558c2a91": "Gen AI 如何将漏洞分析效率提升 9.3 倍", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484384&idx=1&sn=6b9ac958f8cda1f1eff9d636e24f9ee5": "IDocView在线文档预览qJvqhFt.json任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247496492&idx=1&sn=e1f08ec0aa1aa4a2a11eaed5ffa5d888": "一款基于 BurpSuite 新版 MontoyaAPI 的 SSRF 漏洞自动探测插件", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314211&idx=1&sn=08c8f322b781afd8c36557acc5c18407": "WinZip高危漏洞曝光：远程攻击者可任意执行代码", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314211&idx=4&sn=0409ead48650099d21cf3c406df480bd": "黑客利用Pyramid渗透测试工具进行隐蔽的C2通信", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094810&idx=2&sn=656be39cd85d609346a7d34be32580d1": "30,000个WordPress网站因文件上传漏洞暴露于攻击风险", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522232&idx=2&sn=3bc7a4466c3c33ff643ca604524fa401": "Palo Alto Networks 修复PAN-OS 中的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495157&idx=1&sn=9a828441f89b4ab116ea1f4a6b143732": "【吃瓜】疑似国内某 oa系统存在 0day rce", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495157&idx=2&sn=eb45716106d7be7e660cc5d1bb272c55": "美国政府效率部网站 doge 存在漏洞，任何人都能推送内容到网站上", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247518674&idx=1&sn=8a5839f4bd6aea08c59543e1fc84b3b8": "WinZip高危漏洞曝光：远程攻击者可任意执行代码", "https://mp.weixin.qq.com/s?__biz=MzU3OTYxNDY1NA==&mid=2247485016&idx=1&sn=3f8f30a52b34bb167cd7d0fafcd990c2": "一次十分详细的漏洞挖掘记录,新思路+多个高危", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492244&idx=1&sn=cd102439425274e98b1ecb56a3899bea": "PostgreSQL 漏洞与 BeyondTrust 零日漏洞一起被利用进行针对性攻击", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247501999&idx=7&sn=d14025c2eb40663492236ab68aaa73af": "Apache James 未授权 输入验证不当漏洞 可导致拒绝服务", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492261&idx=1&sn=15542626bc61f3c2d79fd1e2ad622101": "漏洞预警 | Palo Alto Networks PAN-OS管理界面身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492261&idx=2&sn=38f4cc5c746eb7fe09e36ad29e85710a": "漏洞预警 | Ivanti CSA管理控制台命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492261&idx=3&sn=90e0d9a96c3684327bddafcb1b4acefe": "漏洞预警 | 思迅商旗商业管理系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247571037&idx=1&sn=a4c20709fcd4e91ee6dc2c0bca97864b": "2025年全新网络安全大师班培训（Web安全、攻防渗透、代码审计、云安全等）", "https://mp.weixin.qq.com/s?__biz=MzkyMjY1NjI2MQ==&mid=2247483972&idx=1&sn=95cc21cf1d38bb9e9b6468de8580c3cc": "jeecgBoot漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522232&idx=1&sn=cb025b96489e2100ef0f614b779833d4&chksm=ea94a6d2dde32fc4881deaa6fe80b16f9fb9423766568a24dd3e955367ff92ff773531a49a84&scene=58&subscene=0": "斯巴鲁Starlink漏洞可导致汽车遭劫持，主要影响美加日三国", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522232&idx=2&sn=3bc7a4466c3c33ff643ca604524fa401&chksm=ea94a6d2dde32fc44365c182de4b7d412b22857b005666e0a04d2e8302f064eab2a2baa037d6&scene=58&subscene=0": "Palo Alto Networks 修复PAN-OS 中的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499780&idx=1&sn=e4354abba5ca24eaf695664592528fea&chksm=ec1df02cdb6a793a54bb368bf79e0da3163647e9d2b1d4783547193caaf21633120acb60ef13&scene=58&subscene=0": "Deepseek 有多强？延时注入检测 POC 只需一步，即可获取完美 POC 模板！", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489640&idx=1&sn=e57ea32bd4a7e9114628507c2d6e8d87&chksm=fb029530cc751c263986fd9ab93607d64eb1341f2b764780f3f5f69306e7b32e29f5b645bd47&scene=58&subscene=0": "Ollama zipslip 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727844111&idx=1&sn=1ded95f6c8b62f80377dbb25fabb5124&chksm=80504e87b727c7918e8e9aaea57fad6779dc790c53037ca8cb0c028817d857bba077cb58dab3&scene=58&subscene=0": "浪漫来袭，单个漏洞达3w+，为你的恋爱基金添砖加瓦！", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314214&idx=1&sn=a1056bf9ab3938cd65066bb748645eab": "超大规模物联网漏洞事件曝光：27亿条数据泄露，含WiFi密码", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314214&idx=2&sn=ef30c6d1e6b611c95807734158569fb1": "FreeBuf周报 | 全球VPN设备遭遇大规模暴力破解攻击；OpenSSL 软件库曝高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491524&idx=1&sn=8f7c279bc6618681ec27b68cbc6ebec5": "DeepSeek 大火下的本地部署问题：Ollama + 暴露端口 = 安全漏洞？", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650608048&idx=4&sn=da8eb02ada2d9899ca9e2d88a50bba9e": "基于 BurpSuite 新版 MontoyaAPI 的 SSRF 漏洞自动探测插件", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794184&idx=1&sn=b981b65c831b421f1865a13d8f41a3ce": "以色列威胁情报公司ClearSky发现 APT 组织利用 Windows 新0day漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484503&idx=1&sn=d029caaad7130a3108019d9dd2f044f4": "03 漏洞从哪里来？——编程习惯", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652114483&idx=2&sn=d435e59c50209ae74c02eb71ae61b191": "SonicWall防火墙漏洞PoC发布后遭利用", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247488699&idx=1&sn=1a44249f9b678443b61af9340436bcf9": "2025 最佳漏洞赏金书籍和网站", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247496500&idx=1&sn=7b4515108049356788359df518ec0a68": "自动化扫描利器，指纹识别更精准，漏洞扫描更全面", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527809&idx=2&sn=2d61b3262a97ddc66b583f26e7636c73": "CVE-2025-1240：Winzip漏洞打开了远程代码执行的门", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485812&idx=2&sn=75ac3bc6111bd2c99e9f112d5230b51b": "CVE-2025-0108｜Palo Alto Networks PAN-OS管理界面认证绕过漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485812&idx=3&sn=59502076ba73b38962af8c4347429207": "CVE-2025-25064｜Zimbra存在SQL注入漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589653&idx=1&sn=433781729a15abe45f89994393707a90": "PWN入门：异常变漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484095&idx=1&sn=4291f26d60d708ee44796c81558c2a91&chksm=c006ca4ff771435967a52c3bc89a5f6d4765067a03d5b26f5187e7731299e0c9549df93d839d&scene=58&subscene=0": "Gen AI 如何将漏洞分析效率提升 9.3 倍", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499437&idx=1&sn=bbbbf3016991c2b228c54ce492fae81a": "Palo Alto Networks PAN-OS 身份验证绕过漏洞批量检测脚本(CVE-2025-0108)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492245&idx=1&sn=5c3da14e0619b953b786741ae36ed742": "黑客利用 Cityworks RCE 漏洞入侵 Microsoft IIS 服务器", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502017&idx=1&sn=a2d8c702dc1223d85a28e0f7b4c9932a": "Rsync Rsync 未授权 缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502017&idx=2&sn=b8fb248bcb0171caf5d15b3c2a71241f": "Fortinet FortiSwitch 凭证管理不当漏洞 可导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502017&idx=3&sn=75531a889717b200ac12ddb226e86d3d": "SAP NetWeaver Application Server 身份验证缺陷漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502017&idx=4&sn=fa110e1c88ed8ea6e80dbf638f172b83": "Fortinet FortiOS等 身份验证缺陷漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502017&idx=5&sn=499042d799975b7f2a9e114d995895e3": "蓝凌软件 EKP系统 sysTagWebService 未授权 外部资源引用不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502017&idx=6&sn=41e072b192f7fc3e34c3f8f06adf6e85": "蓝凌软件 EKP系统 sysNotifyTodoWebService 未授权 外部资源引用不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502017&idx=7&sn=652391caae54e84b6dd500006e9f9ba5": "蓝凌软件 EKP系统 kmImeetingBookWebService 未授权 外部资源引用不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502017&idx=8&sn=9bc958d15dc346ade48637d500a2a65f": "用友网络 用友NC linkVoucher 未授权 SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484106&idx=1&sn=f398b5755112251a67ba7163915a09b7": "2024年CVE漏洞数量激增38%：2024年CVE漏洞数据全景分析", "https://mp.weixin.qq.com/s?__biz=Mzg4NDc0Njk1MQ==&mid=2247487208&idx=1&sn=fdbfc3e75595ab7e36245db8e8891bcf": "网络安全中的“人性漏洞”：如何解决员工安全意识问题？", "https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649166981&idx=2&sn=be8aa9a973159960c5a2529b3646bc08": "OpenAI 用于对抗高度依赖英伟达芯片的秘密武器成形", "https://mp.weixin.qq.com/s?__biz=MzkzODc4NjE1OQ==&mid=2247483939&idx=1&sn=45a4d08a8f56870c03669742f5e13133": "攻防技战术动态一周更新 - 20250210", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527809&idx=1&sn=4c9a289c886b612b0aa4b0d377e9ace3": "首次分析 Apple 的 USB 限制模式绕过 (CVE-2025-24200)", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513743&idx=1&sn=bbb290f45690884b2d92cb3ec0bf760f": "美国政府未来四年或加大零日漏洞储备以支持网络攻击", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490033&idx=2&sn=71953f038039a18002695d97ccd51608": "EDUSRC漏洞挖掘技巧汇总+信息收集各种姿势", "https://mp.weixin.qq.com/s?__biz=Mzg4NzkwMDA5NQ==&mid=2247484669&idx=1&sn=7c6b41aedde69a2619f562070e07bc05": "海莲花对MSI文件滥用的新手法——MST文件白加黑复现", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589653&idx=1&sn=433781729a15abe45f89994393707a90&chksm=b18c295f86fba049f7d3a9a651c1a29212fd93ba75177fa85cf5d761f8cb9ad75936c62a81b0&scene=58&subscene=0": "PWN入门：异常变漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484106&idx=1&sn=f398b5755112251a67ba7163915a09b7&chksm=c006ca3af771432c0af0c5d10250b43373383a354df878b38e50aa2bf42603c9ec05fe68cfa3&scene=58&subscene=0": "2024年CVE漏洞数量激增38%：2024年CVE漏洞数据全景分析", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247548165&idx=1&sn=68a28b957dc7395812be3ae38d92cb36": "新手小白如何挖掘cnvd通用漏洞之存储xss漏洞（利用xss钓鱼）", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247487151&idx=1&sn=6437eeee03cd6a0c9213f5e797660259": "「深蓝洞察」2024年度最憋屈的漏洞披露", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507519&idx=1&sn=7e42ceddcbd7c67038c422aaa62f0b1a": "马斯克麻烦缠身！DOGE官网现重大安全漏洞被黑客发布警告信息", "https://mp.weixin.qq.com/s?__biz=Mzg2MDA5Mzg1Nw==&mid=2247486937&idx=1&sn=5b7d1aedf705dfb321294a44ee9248e5": "网安60秒丨反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493266&idx=1&sn=ae6720ec4068838a582b90f62c4f281d": "研究生必读：贸易经济论文搜集文献100%全攻略，高分秘籍独家解析！", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094828&idx=2&sn=e00b73792c6010bafd694f144669bc0c": "NVIDIA Container Toolkit 执行代码攻击漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067846&idx=2&sn=cd94ea7cada0daf8d439805d2653a055": "【安全圈】PostgreSQL漏洞与BeyondTrust零日漏洞被联合利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067846&idx=3&sn=4a1a9e96de810a8e68ea6951a76de7f0": "【安全圈】黑客利用智能合约漏洞盗取价值950万美元以太币", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487199&idx=1&sn=d06894113d47469c531261fc1e859ab0": "PowerShell 漏洞利用 — 现代 APT 组织及其恶意脚本战术", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485743&idx=1&sn=60e704c3d5508664425da33ec5bdaff5": "S2-007远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650608065&idx=3&sn=c7d34eae06f416be4c6d10c950b6ec07": "利用js挖掘漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650608065&idx=4&sn=9ed3b6993146eb17d459b44de92badb4": "JeecgBoot漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527833&idx=1&sn=dc636474fb5e3a741caa55302a0cfb0a": "AMD贴片会影响EPYC和RYZEN处理器的高度SMM漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495192&idx=3&sn=ededea1ced7cf9f38255b6d817b81182": "SonicWall 防火墙身份验证绕过漏洞在 PoC 发布后遭广泛利用", "https://mp.weixin.qq.com/s?__biz=MzkzMDY3ODg5MQ==&mid=2247484027&idx=1&sn=b1625984432833d38ddd1cb19a0da306": "Deepseek 有多强？延时注入检测 POC 只需一步，即可获取完美 POC 模板", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247514781&idx=1&sn=1b7c5c1a2812367b70f1b070ebed172a": "DeepSeek代码审计技术解析：从模型革新到漏洞挖掘实战", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247490243&idx=1&sn=cf746a0875a33ba4fd3c919e3ed69c15": "让Druid未授权访问漏洞危害最大化案例和利用工具|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=MzkzMDY1Nzc5MQ==&mid=2247483815&idx=1&sn=70578fd573bed32f8b903487d3956a95": "CVE-2025-1127 严重漏洞：利用非特权用户执行和未经授权的数据修改", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527833&idx=2&sn=55af17a0449fcbd2f2f16d0de9034c6a": "PowerShell 漏洞 - 现代 APT 及其恶意脚本策略", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247491560&idx=1&sn=38207e5d3b964e6a72dc91d14270d4fe": "CVE-2024-49194 Databricks JDBC 驱动 JNDI 注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkzNzQyMDkxMQ==&mid=2247487857&idx=1&sn=9d9297fb500f70d8a12d8b11faed976c": "根据POC分析代码", "https://mp.weixin.qq.com/s?__biz=MzA3NDUzMjc5Ng==&mid=2650202986&idx=1&sn=346bd2891d42c7e51096fb18ce5a628e": "御话资讯|一周安全要闻（02.10-02.14）", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655266683&idx=1&sn=fb0dc6533ecce9a02b65d58bb4a60e19": "逻辑漏洞挖掘思路与总结", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655266683&idx=4&sn=62a2c4bb4589aa1aeb0d421aaf7fedf7": "扫码下载今日更新：运营者漏洞管理、企业安全战略", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652114488&idx=1&sn=f989ba630707e123288f15ece4aa1875": "Meta支付230万美元的漏洞赏金，美一检察长办公室遭网络攻击", "https://mp.weixin.qq.com/s?__biz=Mzg3NTUzOTg3NA==&mid=2247515217&idx=1&sn=3184598c7d5433e44c347ae4582437ac": "企业漏洞全生命周期闭环管理框架与DeepSeek技术赋能实践", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2NTQxOA==&mid=2247496266&idx=2&sn=5002e0a3e9ac066d9c7320a3c9256b6b": "美国CISA敦促开发人员消除缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493216&idx=3&sn=7f08465fc9a6ad10cdb766a2a6986184": "专家发现PostgreSQL漏洞与BeyondTrust零日漏洞在针对性攻击中被串联利用", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493216&idx=4&sn=58f19b6b973f5738f83d2dae141e44b0": "CISA已将Apple iOS和iPadOS以及Mitel SIP电话的漏洞添加到其已知被利用漏洞目录中", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507535&idx=2&sn=291601681d4a5ee3b757d32d4ee44478": "全球谍影扫描【20250217】007期", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513743&idx=1&sn=bbb290f45690884b2d92cb3ec0bf760f&chksm=ebfaf1afdc8d78b92f3fb8b13ebc111cdad67d8be35c9a874ee997f4c9d499be3a46bd60a3bd&scene=58&subscene=0": "美国政府未来四年或加大零日漏洞储备以支持网络攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067846&idx=2&sn=cd94ea7cada0daf8d439805d2653a055&chksm=f36e7446c419fd50cde0d3757dc46b33e360ae50088fab68c8f1bf59a63968103fa017346904&scene=58&subscene=0": "【安全圈】PostgreSQL漏洞与BeyondTrust零日漏洞被联合利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067846&idx=3&sn=4a1a9e96de810a8e68ea6951a76de7f0&chksm=f36e7446c419fd504982da27ae887c04989ac69ea58bb83a114c6f744af86431bbbc9d786afe&scene=58&subscene=0": "【安全圈】黑客利用智能合约漏洞盗取价值950万美元以太币", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247487151&idx=1&sn=6437eeee03cd6a0c9213f5e797660259&chksm=c1f44a67f683c371aaaf437521f445b7dd0eba5ee90307695745c9edfa0ac424789b37c0091b&scene=58&subscene=0": "「深蓝洞察」2024年度最憋屈的漏洞披露", "https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037499&idx=1&sn=ab6f919570228078e38934b31cb0b23e": "Android-Webview中的漏洞利用总结", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650608108&idx=3&sn=48fbe58add90888e5fcf96de6a81dab2": "让 Deepseek 帮我写 POC，又快又准确！", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492273&idx=1&sn=079cc9a5565d053368fb80e9eeb88f8a": "漏洞预警 | 福建科立讯通信指挥调度管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260587&idx=1&sn=96691b525746ca862a4236f44e77b573": "【未经核实】Zabbix RCE PoC 公布", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486534&idx=1&sn=1a37dd48a06207e3a729a10594112ca4": "探索|DeepSeek免杀-弱道德限制的AI才是网络安全的顶流", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247540851&idx=2&sn=383851ac8ce307efc3652c13c8f2ad61": "网络安全中的“人性漏洞”：如何解决员工安全意识问题？", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MjAwNQ==&mid=2247486793&idx=1&sn=90f5f24e0bb7d2b3f4e1b5fad6542844": "软件供应链攻击：一次价值50,500美元的重大漏洞发现", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493216&idx=1&sn=f41b256657a71a23085921b184805b40": "攻击者利用最近披露的Palo Alto Networks PAN-OS防火墙漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&mid=2247484106&idx=1&sn=b4be72b27886e7eb52c4f279aba397a9": "Cacti网络流量监测图形分析工具 任意文件写入漏洞 CVE-2025-22604", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650990591&idx=1&sn=a1f162313bc06603add4797b30daeba3": "原创 Paper | Zyxel Telnet 漏洞分析(CVE-2025-0890、CVE‑2024‑40891)", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487200&idx=1&sn=75d5511b69c66295a44d7dfea4278cf1": "AD CS ESC15 漏洞实例的特殊案例及其手动利用", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314280&idx=3&sn=a9b3d5d667c3070496a5c806eb3afffd": "SonicWall防火墙认证绕过漏洞正遭大规模利用", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495778&idx=1&sn=336bdb3940503b48c6b589da97ae2ffe": "CNVD漏洞周报2025年第6期", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506108&idx=1&sn=e3f2546270213664751742608420b0db": "每周网安资讯 （2.11-2.17）|Jsish存在跨界内存写漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247541600&idx=1&sn=5c1c54f70df3464f6242215a65e64af9": "OmniGPT遭黑客入侵，3400万用户聊天记录外泄，信息安全敲响警钟！", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589660&idx=3&sn=a91d86cb6388b5fca042190152a82a3b": "今日更新第2章！系统0day安全-Windows平台漏洞挖掘（第5期）", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247717&idx=1&sn=6c555c7c98615814a6535053c5cd3756": "原创 Paper | Zyxel Telnet 漏洞分析(CVE-2025-0890、CVE‑2024‑40891)", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513752&idx=1&sn=39cc6a0e87b2d70d65cdc8731d42f1e2": "Palo Alto防火墙又被黑：最新漏洞披露后第二天就遭利用", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553673&idx=1&sn=3add3da2f52d88ebdbc62a26d27b3674": "pocsuites安全工具源码分析", "https://mp.weixin.qq.com/s?__biz=MzkwNjY1Mzc0Nw==&mid=2247486797&idx=1&sn=b662e0785cd134a8fd2f452daaeaa250": "腾讯偷偷接入了DeepSeek，也偷偷公布了大模型框架的漏洞和CVE", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484504&idx=1&sn=4cf348cbcf3e32b569ae015c5083896b": "04 漏洞从哪里来？——认知局限", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489278&idx=1&sn=3fd21ea40cd96b88b034e0f9dd207dad": "Hoverfly 任意文件读取漏洞（CVE-2024-45388）", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247536265&idx=1&sn=e73697b8bc66609c73db9ca14c3de805": "24%的网络漏洞在被修补前已被利用", "https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559751&idx=1&sn=1e7783138cc61d431734aca6abae2854": "如何借助开源情报实时洞察北约军舰轨迹", "https://mp.weixin.qq.com/s?__biz=Mzk0NTMyNzI4MQ==&mid=2247484818&idx=1&sn=96464e8d385841931659d60467213cbd": "[小记] 共享其他人使用Ollama部署的AI模型", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247490878&idx=1&sn=8b098b9dc0a64f9816d9cc15871f75d1": "能信安：漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581171&idx=3&sn=404de23a42d642551b4263a4ef5e5e03": "安全动态回顾|国家网络安全通报中心通报重点防范境外恶意网址和恶意IP 微软2月补丁星期二发布多个漏洞安全更新", "https://mp.weixin.qq.com/s?__biz=MzA5MTYyMDQ0OQ==&mid=2247493695&idx=1&sn=a2b364d43e5f2d83ca3fefd3f12fa0f5": "医疗行业数据安全风险评估实践指南（4.3）", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489662&idx=1&sn=9edd69a151d726cc1fb0956037207142": "揭秘NVIDIA AI安全漏洞：CVE-2024-0132深度剖析", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499795&idx=1&sn=0e6f5223c5dcf3b6c27eb6bda791e21d": "AI 的加持下，不懂代码，也能完成 POC 编写！多种语言 POC 一键转换！", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488025&idx=1&sn=c363ba5ade07c0ff910cb675933e817a": "锐明Crocus系统Service.do接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490037&idx=1&sn=75ac0191e779b60a0a67beee4b37b6ef": "S2-007远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247496511&idx=1&sn=092c1a55a23f5c7c0c8de0d40107c128": "Apache Tomcat 条件竞争致远程代码执行漏洞（CVE-2024-50379）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489604&idx=1&sn=b2c28b868e4f74ee12cccc280fb80df7": "【漏洞预警】jsonpath-plus存在远程代码执行漏洞(CVE-2025-1302)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495778&idx=2&sn=5301a0f00db8f69567b6be8758e4b7e1": "上周关注度较高的产品安全漏洞(20250210-20250216)", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516050&idx=1&sn=643f1d46fcb1881ecbd4e91a6798dfd5": "Aboutxxl-job最新漏洞利用工具（2月14日更新）", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247518721&idx=1&sn=2cfe5c67aa07e392ab707e85320267eb": "Go语言ssti漏洞", "https://mp.weixin.qq.com/s/wmr9SyAr06iEGdQrWIFwKQ": "Tips | 提取java应用内存从而直接获取明文密码和配置信息的方法", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589660&idx=3&sn=a91d86cb6388b5fca042190152a82a3b&chksm=b18c295686fba0405028d21d01ca475c2f5977e443c1390564f6e2ed0f90e748e3bbebb4c5d6&scene=58&subscene=0": "今日更新第2章！系统0day安全-Windows平台漏洞挖掘（第5期）", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650990591&idx=1&sn=a1f162313bc06603add4797b30daeba3&chksm=8079a5cdb70e2cdbf24d9224c9e37cd8f28d322fd0c0105e52a6df2eb03d42b32330d0deef5b&scene=58&subscene=0": "原创 Paper | Zyxel Telnet 漏洞分析(CVE-2025-0890、CVE‑2024‑40891)", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513752&idx=1&sn=39cc6a0e87b2d70d65cdc8731d42f1e2&chksm=ebfaf1b8dc8d78aed3b262ebed3c3e9207675e5c248f4b6c714f4f7c338ca163c87d2b47751b&scene=58&subscene=0": "Palo Alto防火墙又被黑：最新漏洞披露后第二天就遭利用", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247536265&idx=1&sn=e73697b8bc66609c73db9ca14c3de805&chksm=c1443c34f633b5224f04715d99a20822536d3836e947fc0147f42487b54dabea4d09d081df97&scene=58&subscene=0": "24%的网络漏洞在被修补前已被利用", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581171&idx=1&sn=322267dfcff7b72c9907e1bfeb0e3ac5&chksm=e9146dc9de63e4dff4e79f5350c061c75033f964a32277104652b1f9f46fcf63f657ace60f6d&scene=58&subscene=0": "利用旧的ThinkPHP和ownCloud漏洞的攻击事件激增", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581171&idx=3&sn=404de23a42d642551b4263a4ef5e5e03&chksm=e9146dc9de63e4dfda7d02413c4532741be6c8ffd08d34059dd420df09540650f37aa97b115c&scene=58&subscene=0": "安全动态回顾|国家网络安全通报中心通报重点防范境外恶意网址和恶意IP 微软2月补丁星期二发布多个漏洞安全更新", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489662&idx=1&sn=9edd69a151d726cc1fb0956037207142&chksm=fb029526cc751c30d264d60549dab39848c3ad5272da09129cab78331d34a98ff89c61c88e6a&scene=58&subscene=0": "揭秘NVIDIA AI安全漏洞：CVE-2024-0132深度剖析", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495778&idx=1&sn=336bdb3940503b48c6b589da97ae2ffe&chksm=fd74c0abca0349bd2a6819953409e46e022bb025703e71c337791d57486835fae0820371fc05&scene=58&subscene=0": "CNVD漏洞周报2025年第6期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495778&idx=2&sn=5301a0f00db8f69567b6be8758e4b7e1&chksm=fd74c0abca0349bda00cbecfd10c863cbfe595e618aa28168db0a4d932bba1204870ce418fa8&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20250210-20250216)", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247491560&idx=1&sn=38207e5d3b964e6a72dc91d14270d4fe&chksm=c3125089f465d99fffe85999e70840ee74fbd39c746d4e0535aabf91042cea36fdd25c061eea&scene=58&subscene=0": "CVE-2024-49194 Databricks JDBC 驱动 JNDI 注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498952&idx=1&sn=a08ebc1ce872683b07a16218dbcbc8e9": ".NET 通过代码审计发现某 OA 系统全局性权限访问绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499795&idx=1&sn=0e6f5223c5dcf3b6c27eb6bda791e21d&chksm=ec1df03bdb6a792d27b470d2e16d8cde9fbe2b8d7ee530b8f2806a87d0f88503c534444453f1&scene=58&subscene=0": "AI 的加持下，不懂代码，也能完成 POC 编写！多种语言 POC 一键转换！", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484408&idx=1&sn=716847d5f5891d0ccd9b5f2e5cad2384": "快排CMS-Socket.php-日志信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247490879&idx=1&sn=863d65ed09d2832930606de282400cbd": "能信安：漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkyOTQ0MjE1NQ==&mid=2247497471&idx=1&sn=72d14df7eae39f856c3cf1f0173ab801": "【漏洞与预防】远程代码执行漏洞预防", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247502270&idx=1&sn=e2e779dd3d5fe78788bccb1077b4190a": "不要只卷Web安全，硬件安全值得推荐", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489059&idx=1&sn=82637234f8498bd6055b10420c3494c9": "【安全研究】如何用 DeepSeek AI 去跟进最新的CVE漏洞研究", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523514&idx=1&sn=6848591f9dfcc44bed2e900350e55518": "SonicWall防火墙认证绕过漏洞正遭大规模利用", "https://mp.weixin.qq.com/s?__biz=MzI5MTIwOTQ5MA==&mid=2247487711&idx=1&sn=961d2d080a4b6959439f9c600e9bf75d": "同源策略漏洞初步学习", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247548196&idx=1&sn=7dbc0c78363e224b31b64408b0706a2f": "记一次src通杀漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247615502&idx=1&sn=e22533c3ad06135297edbbe475a22477": "漏洞赏金实战分享 | 发现并利用开放的 SMB 服务", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247617&idx=1&sn=2f352d21f8ddb8241554fd23142026b2": "Palo Alto防火墙又被黑：最新漏洞披露后第二天就遭利用", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485049&idx=1&sn=2c3c26e2c4796c0f8af116747bc1187b": "腾讯云安全中心推出2025年1月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247490119&idx=1&sn=f98b8b918117932c3314605fcd00097c": "Docker容器5大致命配置错误，一个疏忽就是大规模漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490469&idx=1&sn=2861f809267604c82b092a6c7617beb3": "用友NC checkekey SQL 注入漏洞(XVE-2024-37013)", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247519469&idx=2&sn=43a03341f38553bba3c4f126f3686c21": "“挖漏洞换酒钱？通过信息收集挖到企业的严重漏洞全纪录思路分享 | 干货", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499808&idx=1&sn=1c6724f7a6565b221b60843413d36b8a": "高效检测 SQL 注入漏洞，自动化实战经验分享", "https://mp.weixin.qq.com/s?__biz=Mzk0MTUxNzAxMg==&mid=2247484168&idx=1&sn=62f27fd16580b67a0032af61075f7153": "Catcher外网打点指纹识别+Nday漏洞验证工具|指纹识别", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490459&idx=1&sn=4a8e82f6583b5e64626d1303f8cc7f5f": "蓝凌EIS智慧协同平台 fi_message_receiver.aspx SQL注入漏洞(CVE-2025-22214)", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247484873&idx=1&sn=f3cbed791a94bce03ddb2345d14d0b9f": "如何找到越权漏洞？", "https://mp.weixin.qq.com/s?__biz=Mzg2NzUzNzk1Mw==&mid=2247497243&idx=1&sn=879f91b4f2ea241542436c8b724747a4": "本地部署DeepSeek-R1", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU0OTQyMg==&mid=2247484334&idx=1&sn=f4599ad3ed50659f274d2b35c7589312": "【漏洞预警】Cisco Meeting Management客户端-服务器权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNTYwMTk4Mw==&mid=2247488289&idx=1&sn=4adfd4de8707c7989afa203de3cd49f2": "常见WEB漏洞—SQL 注入", "https://mp.weixin.qq.com/s?__biz=MzkxMzQyMzUwMg==&mid=2247486443&idx=1&sn=9bf618a3a424cefc958f0ca4a7a0c934": "SRC实战系列-记某次大学漏洞挖掘经过", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314351&idx=1&sn=a008bd32d4ac4e5ba959a13e6714c501": "ChatGPT Operator 遭提示注入攻击，泄露用户隐私数据", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=2&sn=634853ba2d9852cc240a7d5d46ce82c5": "【安全圈】俄罗斯黑客利用 7-Zip 零日漏洞攻击乌克兰", "https://mp.weixin.qq.com/s?__biz=MzAxMDQxODk4NQ==&mid=2247484364&idx=1&sn=6e261738ce559083feb198bd1fcef489": "继上次ollama自由后，又一次自由……", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522257&idx=1&sn=f4ba8096e5c48add46aab6c9f0f9b6db": "美国政府：开发人员应停止制造“不可原谅的”缓冲溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522257&idx=2&sn=9b28d0ae22a8aee011365d83bbe3e244": "VeraCore 两个0day漏洞被用于实施供应链攻击", "https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653931568&idx=1&sn=717c83d99ebeb4b1ad0806e4de9f8f6d": "《科学数据安全分类分级指南》等5项国家标准发布", "https://mp.weixin.qq.com/s?__biz=Mzk0MDYwMjE3OQ==&mid=2247486178&idx=1&sn=0582e8fd5a1c4aa57ec6fab589ffa06d": "埃隆·马斯克的政府网站漏洞曝光，黑客留下嘲讽信息", "https://mp.weixin.qq.com/s?__biz=Mzk1NzI5MTc0Nw==&mid=2247485048&idx=1&sn=70c9a4aed11e2474656cc9141ff44488": "【渗透测试Top10漏洞详解·萌新友好版（上）】黑客最爱的5大漏洞竟是这些？", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503318&idx=1&sn=b5b13cfc554a840876a561de454e8f7e": "雷神众测漏洞周报2024.2.10-2024.2.16", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500752&idx=1&sn=aee35d6ecb95122bbaa6dd9b86ee7c72": "安全简讯（2025.02.18）", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495247&idx=1&sn=66b1de6e05fb8550eed34aec7d7f156b": "【已关闭】香港：96,000 条 ETAXI 数据暴露于不安全的 Google 存储中", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489623&idx=1&sn=0eb82923c11d936eda41661733bab356": "【漏洞预警】ChurchCRM系统中通过EditEventTypes.php文件的newCountName参数进行SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527921&idx=2&sn=15dd9f4e59983a9c588916d3058ae171": "无休止的漏洞：macOS 漏洞被利用九次", "https://mp.weixin.qq.com/s?__biz=MzU1MzEzMzAxMA==&mid=2247499921&idx=1&sn=dd53eca4974397a099fb2c0461221fc0": "网络安全动态 - 2025.02.18", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650621078&idx=1&sn=da289a9ddcd5331afac177cfbef1d7eb": "CVSS评分9.8！亚信安全率先发现大模型关联Ray架构高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484415&idx=1&sn=768fbab36a3a8a77bd3a61a03f3b85db": "快排CMS-后台XSS漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652114499&idx=2&sn=db67506c69d25d3cedf1fe676cd469b3": "安全设计警报：消除缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516066&idx=2&sn=3a67f704ae6f8bdb1dc089aa86160a0d": "APP渗透测试 -- 支付逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499486&idx=1&sn=f1288ef1eda52db67635c3cfdb6af90f": "备案查询、空间测绘、漏洞测试、编码及加解密工具 -- MoonLight", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499486&idx=2&sn=e314f580efe2e6b6c2e655555e9f1e0d": "APP渗透测试 -- 文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503318&idx=1&sn=b5b13cfc554a840876a561de454e8f7e&chksm=f2585ea5c52fd7b368ebc5c86a95e6425d2a601f7df5519e543aa82f70e7d68e5de1882a350e&scene=58&subscene=0": "雷神众测漏洞周报2024.2.10-2024.2.16", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499808&idx=1&sn=1c6724f7a6565b221b60843413d36b8a&chksm=ec1df008db6a791e8fc2c1cc0d8c4d81737f1e79e1f95761924835b7161ff5f21f80c0724268&scene=58&subscene=0": "高效检测 SQL 注入漏洞，自动化实战经验分享", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498952&idx=1&sn=a08ebc1ce872683b07a16218dbcbc8e9&chksm=fa595225cd2edb33e2e0624ce93a8e1ad168afdaa762794a6062913e3d523289e1c16b3749af&scene=58&subscene=0": ".NET 通过代码审计发现某 OA 系统全局性权限访问绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=2&sn=634853ba2d9852cc240a7d5d46ce82c5&chksm=f36e7462c419fd74d29690ade86cd94c8f1353765e594a85d6f64779b2262b4aad515e3ff40c&scene=58&subscene=0": "【安全圈】俄罗斯黑客利用 7-Zip 零日漏洞攻击乌克兰", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522257&idx=1&sn=f4ba8096e5c48add46aab6c9f0f9b6db&chksm=ea94a6bbdde32fad212f6cefd231e991e6b3aa181b89c3c4f8942edda2b8c87b959349dba3ab&scene=58&subscene=0": "美国政府：开发人员应停止制造“不可原谅的”缓冲溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522257&idx=2&sn=9b28d0ae22a8aee011365d83bbe3e244&chksm=ea94a6bbdde32fad583ad06bb5abe8c191b454c50e40661e1fbba804d5ae0e3a6d9cc4164ad8&scene=58&subscene=0": "VeraCore 两个0day漏洞被用于实施供应链攻击", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485049&idx=1&sn=2c3c26e2c4796c0f8af116747bc1187b&chksm=c2b1040ff5c68d1908d6d0b9c78e0d0ecc9ac81fef4dbf443c42b396962becfe491f85323aaa&scene=58&subscene=0": "腾讯云安全中心推出2025年1月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzIxOTQ1OTY4OQ==&mid=2247486550&idx=1&sn=767fc770ad44864d7b3c4b445d59f817": "想本地化部署DeepSeek？这些漏洞要注意！", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247505145&idx=1&sn=f3f6f2766d76d987ba42cffb94bc77f9": "PowerShell 漏洞 — 现代 APT 及其恶意脚本策略", "https://mp.weixin.qq.com/s?__biz=MzkxMjczNzAzMA==&mid=2247485478&idx=1&sn=53eda1c680e45837913c4ff850011941": "漏洞扫描 · 详解", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507561&idx=1&sn=4a2a2cdf4b27de7e5b3515dd1530f63f": "黑客批量售卖多国VPN权限：漏洞利用+社会工程威胁多国关键行业", "https://mp.weixin.qq.com/s?__biz=Mzg4MzkwNzI1OQ==&mid=2247485812&idx=1&sn=9c8041ef6f81b259d3610b44ec4ac76b": "JAVA代审-publiccms_V4_2024_6", "https://mp.weixin.qq.com/s?__biz=Mzk0MDQzNzY5NQ==&mid=2247493215&idx=1&sn=1f6dfb712932a51bf044a0154d86867d": "【红队】geoserver图形化漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzU2NzIzNzU4Mg==&mid=2247489662&idx=1&sn=bf35f2a58e1a6121e3f3ab5e20886407": "带你解锁编码新世界！--随波逐流CTF编码工具使用教程53 --汤姆码Tomtom密码", "https://mp.weixin.qq.com/s?__biz=Mzk0OTU2ODQ4Mw==&mid=2247486837&idx=1&sn=873504acffe5b721cad8340ba89cff36": "探索协程世界：原理、现实与漏洞模式（下篇）", "https://mp.weixin.qq.com/s?__biz=MzkyNzM2MjM0OQ==&mid=2247495879&idx=1&sn=e854ce6f524f5e693ed5c29a51437c34": "Neat Reader存在命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462621&idx=1&sn=aca0dcf45b6a35456297791968051abb": "信息安全漏洞周报（2025年第7期）", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507692&idx=1&sn=7311ec648e06da0783dc83eec9aba48f&chksm=cfcabdf8f8bd34ee59ae8a8d4d1d23ee9224edae49635d0a8ac5b4a6c828c18248f443cc9aad&scene=58&subscene=0": "永洪BI远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787902&idx=1&sn=71b8270b1a8d55b1d42e0de55fd7e386&chksm=8893bd91bfe4348780e7243fe4eb695ee9392d77466acc10faa16ee4244d947aa83e80320feb&scene=58&subscene=0": "时空穿越攻击！新型LLM漏洞让ChatGPT秒变黑客助手", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522278&idx=1&sn=7cfb4b23ad311c542e16a6d9517313ce&chksm=ea94a68cdde32f9ac833afa12536d7b2cd2202b3e8d1fa6d9863779bcceec652fa2982c74202&scene=58&subscene=0": "OpenSSH 新漏洞使SSH服务器易受中间人和DoS 攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522278&idx=2&sn=076acb12a1297f5e59b788217253c1ac&chksm=ea94a68cdde32f9aa2f9b837e6ff7718aa5648f24cb5db327e106bce3c5c39c85665a423c9eb&scene=58&subscene=0": "Juniper 修复Session Smart 路由器中严重的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498958&idx=3&sn=a202f6c10e14360aa0b343b40d662a81&chksm=fa595223cd2edb356ea7e34c3324cdb436e25efdda6694e0c079923c8fb7df17a44a545a2a95&scene=58&subscene=0": ".NET 通过代码审计发现某 OA 系统全局性权限访问绕过漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524012&idx=1&sn=c5a57f9f670e64b0338dd911fc145b72&chksm=ce4615bcf9319caa2877c00492c66700cb5302296a6f250e91f324c2d81ad2001bb2510cd20c&scene=58&subscene=0": "【漏洞通告】Google Chrome浏览器缓冲区溢出漏洞(CVE-2025-0999)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524012&idx=2&sn=9e872e2099b2a438b9e52ddd8f4e0ab7&chksm=ce4615bcf9319caa5caf74fa1b4d125d509dae73e7a802d8975cb8c18c7088a1855c39ada976&scene=58&subscene=0": "CNVD漏洞周报2025年第6期", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067894&idx=3&sn=b32c1ab569fca6e572624325f39c97ba&chksm=f36e7476c419fd60d6c90e1fe3b4a358f007fcdae3939c304c0695cbdcda2a5adc7d383310c4&scene=58&subscene=0": "【安全圈】施乐打印机漏洞危及数据防线，Versalink C7025 用户凭证面临窃取风险", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067894&idx=4&sn=85a6a4431ee456852c1e21ec6d1e5c65&chksm=f36e7476c419fd6000d9d45304d2355d038ef135174afcc1f809e8523cd87ae9ff867c33af28&scene=58&subscene=0": "【安全圈】CISA 警告Palo Alto PAN-OS漏洞正在被积极利用", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500758&idx=2&sn=116f8a348755831b0d3b723dfc334945": "【漏洞通告】Apache Ignite远程代码执行漏洞(CVE-2024-52577)", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247495915&idx=1&sn=c9215e3d5bcce9991783502f40eb59c1": "【论文速读】| EnStack：一种用于增强源代码漏洞检测的大语言模型集成堆叠框架", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787902&idx=1&sn=71b8270b1a8d55b1d42e0de55fd7e386": "时空穿越攻击！新型LLM漏洞让ChatGPT秒变黑客助手", "https://mp.weixin.qq.com/s?__biz=MzA4MzMzOTQ4Mw==&mid=2453672588&idx=1&sn=e738d8f6ccdd8f084839e810caabd3f8": "速看！OpenSSH 新漏洞来袭，不更新补丁后果很严重", "https://mp.weixin.qq.com/s?__biz=Mzg5MDk4MzkyMA==&mid=2247484544&idx=1&sn=beaee29c49361713503a737687bbe35d": "什么？你还不会代码审计？点进来！", "https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247531754&idx=2&sn=5b9bd6832a1f4db809f9cff35c5cd16e": "荐读丨即将过气的五大网络安全技术", "https://mp.weixin.qq.com/s?__biz=MzUyMjk4NzExMA==&mid=2247505583&idx=1&sn=8ed8a00690db7f06260546c6a5142380": "APT-C-28（ScarCruft）组织利用无文件方式投递RokRat的攻击活动分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522278&idx=2&sn=076acb12a1297f5e59b788217253c1ac": "Juniper 修复Session Smart 路由器中严重的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247550593&idx=2&sn=0e9833637df9ed5e657cd330c9fc3409": "高效检测 SQL 注入漏洞，自动化实战经验分享", "https://mp.weixin.qq.com/s?__biz=MzIxNTM3NDE2Nw==&mid=2247490346&idx=1&sn=f560ce4ed2559190090871179945ef2d": "试用完 deepseek，感觉到了恐惧，谁来阻止我的胡思乱想？", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484540&idx=2&sn=08af3b7e078ae95b11a9cf488cace84a": "【漏洞处置SOP】Python安全漏洞（CVE-2019-9636、CVE-2023-24329）", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497180&idx=1&sn=8de7c7676f3325422ce674661d8c437d": "【漏洞通告】Apache Ignite远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524012&idx=1&sn=c5a57f9f670e64b0338dd911fc145b72": "【漏洞通告】Google Chrome浏览器缓冲区溢出漏洞(CVE-2025-0999)", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyOTk0NA==&mid=2247488541&idx=1&sn=24d7360957cc7f39ac03a08a4e813833": "BlueKeep远程桌面代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314480&idx=2&sn=8ae67145b646b2f9e3573535a142a7ff": "黑客通过漏洞组合攻击获得Palo Alto防火墙的root权限", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067911&idx=4&sn=dc16ae2f429d6a98d49cbc1c5cc21999": "【安全圈】Windows磁盘清理工具漏洞被利用获取系统权限，PoC已公开（CVE-2025-21420）", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488985&idx=1&sn=b62cb34bf017a9a433ab68cdb21937e7": "【漏洞通告】PostgreSQL SQL注入漏洞（CVE-2025-1094）", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247493964&idx=1&sn=63a64ee576d2b3a60107a65348a1f3f6": "springboot actuator漏洞总结", "https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650277734&idx=1&sn=1de216b8561221dabd6a33ba117b3d61": "盛邦安全入选国家工业信息安全漏洞库（CICSVD）成员单位，助力工控安全漏洞治理", "https://mp.weixin.qq.com/s?__biz=MzI0MTY5NDQyMw==&mid=2247525529&idx=1&sn=b6164d03dd246e1f646619334f822f32": "Ubuntu24.04 提权漏洞实例分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522291&idx=1&sn=2de019743764d5d0f412d9060724fdad": "施乐打印机存在多个漏洞，可导致凭据被盗", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522291&idx=2&sn=d8279f609eb439d7d723557c865748fe": "Apache Ignite 严重漏洞可导致RCE", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247490521&idx=1&sn=8e552558b2259edc5d6f4be9dd510ccb": "创宇安全智脑 | 科立讯指挥调度管理平台 set_extension_status.php SQL注入等88个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247571209&idx=1&sn=832936ecfbfba882b9b91688b3adf0a4": "漏洞挖掘 | 从零开始的路由器漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500764&idx=2&sn=27634f716b1374a9a22d6ea89b125687": "【漏洞通告】Google Chrome V8堆缓冲区溢出漏洞(CVE-2025-0999)", "https://mp.weixin.qq.com/s?__biz=Mzk0MDYwMjE3OQ==&mid=2247486192&idx=1&sn=dce90cd29038d97d163fcb7fccd8ca31": "10美元便可购买访问权限，美国军事和国防凭证泄露", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489304&idx=1&sn=41fbee2422c7667f537e36ddd831c182": "cPanel XSS漏洞分析研究（CVE-2023-29489 ）", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490489&idx=1&sn=183b8c37229b670e76ef68266f5ba356": "用友NC FormulaViewAction SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495318&idx=1&sn=e8d1084e98af2c9cc5bb276077c18d3b": "关于 office 内存损坏漏洞利用的最新情报", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495318&idx=3&sn=334299558f90f3a006f59363a3aa1df7": "Sliver C2 SSRF 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495318&idx=4&sn=f9b877b4807f64e8a65d7407f0fcdd77": "【PoC】CVE-2025-21420：利用 Windows 磁盘清理工具漏洞获取系统权限", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495318&idx=5&sn=923974a055355dbc92a2b0ff69e050c4": "Microsoft Bing 漏洞使攻击者能够远程执行代码", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495318&idx=8&sn=377ed29fa036b84186881736727f82d3": "边缘设备漏洞引发 2024 年攻击狂潮", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527944&idx=1&sn=37118bb57429964b615e9e8d3433cf60": "【漏洞预警】CVE-2025-21355：Microsoft Bing 漏洞暴露远程代码执行风险", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527944&idx=3&sn=ba471c29ee364e1f1b5a101125242f0f": "CVE-2025-21420：Windows Disk清理工具漏洞被利用以获得系统特权，POC发布", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc2MDQyMg==&mid=2247486497&idx=1&sn=b6699a63779636dfdbb736ce74f9ef07": "深度修复 DeepSeek 云端部署潜在威胁漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503060&idx=1&sn=3a5570a5f7c2b81a23c0df999dd5f7b8": "【水文章】自动化漏洞验证日记：每天的进步与发现", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581221&idx=1&sn=a58c1531f1796814173c3ec02e2d75ee": "超过12000个KerioControl防火墙暴露于被利用的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MzA0ODUwNw==&mid=2247487153&idx=1&sn=b859e9fb7ddd736a259222d2a545d591": "2025年1月考试成绩", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247490303&idx=1&sn=0cf97d3df2509c3607132cac86990998": "基于BurpSuite MontoyaApi的自动SSRF漏洞探测插件|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516076&idx=1&sn=5a3e8111bf52b68d9909ea1fa8cb836e": "Apache Druid 远程代码执行 漏洞检测和利用工具 -- CVE-2021-25646-exp", "https://mp.weixin.qq.com/s?__biz=Mzk1NzQwNjQ4Ng==&mid=2247485248&idx=1&sn=a75fe515c6351305920279a9ac9bba05": "DVWA靶场保姆级通关教学", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489642&idx=1&sn=6064face8a43bfbd44bb352849d43c27": "【漏洞预警】Citrix NetScaler控制台认证权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492639&idx=1&sn=c6b920e5f54817df1df5840de70ac89e": "漏洞复现 || Palo Alto Networks PAN-OS Management 管理端权限绕过", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488048&idx=1&sn=6a4503bd7111e4c49102df95342ccf2a": "泛微e-cology 9 x.FileDownloadLocation接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkzNzU5MDMxOA==&mid=2247484258&idx=1&sn=5ae6363b4f7ed200faa6bae001de4bb9": "Cloudflare + IP白名单仍被绕过？伪造X-Forwarded-For绕过IP白名单漏洞实战", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094840&idx=2&sn=ecc022d7717f5159d2ecb8d5dd385c3c": "Microsoft Bing 远程代码执行漏洞 CVE-2025-21355", "https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659211348&idx=1&sn=a1bbb57d4065a6539e329c6d33c2704d": "Goby工具分享——2250个POC等你来拿！", "https://mp.weixin.qq.com/s?__biz=MzkwNDI0MjkzOA==&mid=2247485878&idx=1&sn=140b24e60ec33962f14d916f17c5908b": "2025HW选手大量招募", "https://mp.weixin.qq.com/s?__biz=MzUzNDMyNjI3Mg==&mid=2247487285&idx=1&sn=39b5ae82c68a7a4e6c428a720d9acbb5": "springboot actuator漏洞总结", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553801&idx=1&sn=99ae54f86adaca86af608a1c81bc699a": "Mongoose 搜索注入漏洞 CVE-2024-53900 到 CVE-2025-23061", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489642&idx=2&sn=92ccce4678d894b8ff4f615634950927": "【漏洞预警】Hitachi Vantara Pentaho未经信任的数据反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NzU4NjkyMw==&mid=2650748026&idx=1&sn=23d88ffbc7950fb789ecde9e1ed8facb": "数据安全风险评估服务：筑牢企业数据安全的铜墙铁壁", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247519387&idx=1&sn=cb3c7e7dbc846a3f7100321de886c823": "从deepseek未授权探索clickhouse命令执行", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247500172&idx=2&sn=8e6a82ef8bfcc689310f3416058b2948": "FOFA API KEY 拼嘻嘻来啦", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507587&idx=2&sn=878473d56c32c8a3835a4393bbcebfd9": "5th域安全微讯早报【20250221】045期", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488985&idx=1&sn=b62cb34bf017a9a433ab68cdb21937e7&chksm=c2c642d2f5b1cbc48cf5257b459d8294e87a1f6c8edc25716ae7c64d347cbc8f76b502fb87ca&scene=58&subscene=0": "【漏洞通告】PostgreSQL SQL注入漏洞（CVE-2025-1094）", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503030&idx=1&sn=0ab060e1af22e4d3a4dac36f832ed14d&chksm=fe79e82ec90e6138ff406fd5c9a16c94d345f47a1983ba0c406a4f2dbf6397ce682893e7bdc0&scene=58&subscene=0": "【已复现】Ivanti Endpoint Manager 多个信息泄露漏洞安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522291&idx=1&sn=2de019743764d5d0f412d9060724fdad&chksm=ea94a699dde32f8fd9eeeb67e49f496feb39c2c46f8d62d6024b0dab183cf3c2e77700ac39f8&scene=58&subscene=0": "施乐打印机存在多个漏洞，可导致凭据被盗", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522291&idx=2&sn=d8279f609eb439d7d723557c865748fe&chksm=ea94a699dde32f8f9e9b9d3aaac222bda40330bdf9fc5ea405cd1231cf670ee3c154e41d89e1&scene=58&subscene=0": "Apache Ignite 严重漏洞可导致RCE", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650990698&idx=1&sn=9c120d2f2a1822e13abc8143a6b07f38&chksm=8079aa58b70e234e7a0c943f76adad606a4b20f473b96e8e8749f2a5e5f35f9c21226b28549c&scene=58&subscene=0": "原创 Paper | 基于污点分析的 AI 自动化漏洞挖掘尝试", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067911&idx=4&sn=dc16ae2f429d6a98d49cbc1c5cc21999&chksm=f36e7407c419fd1196a58b105fa5b30c3de21247a4b78a90055f53889859c5adda473b671537&scene=58&subscene=0": "【安全圈】Windows磁盘清理工具漏洞被利用获取系统权限，PoC已公开（CVE-2025-21420）", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498967&idx=3&sn=0409d42dae09be1c6a39ef74eb5b3c4f&chksm=fa59523acd2edb2cdc91665e5be91bb0f0f0bb956e67d7d46f627153df25c2c012f774a22a59&scene=58&subscene=0": ".NET 通过代码审计发现某 OA 系统全局性权限访问绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581221&idx=1&sn=a58c1531f1796814173c3ec02e2d75ee&chksm=e9146e1fde63e70900cb9d3328d0d963588dbe46cc9e92e34946c63fda7a01f7c93ab67c1336&scene=58&subscene=0": "超过12000个KerioControl防火墙暴露于被利用的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247489369&idx=1&sn=354272cc8ef4aaea23428d7d748748d4": "SQL注入漏洞批量检查工具", "https://mp.weixin.qq.com/s?__biz=MzkzMDUxNzU3MQ==&mid=2247483990&idx=1&sn=3e92098c973be99444cbd11877511c9b": "2025首波福利，大牛们速度码住！", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495333&idx=1&sn=a06739d7f0087af4742dacc2b56eed4b": "【真 0day】Parallels Desktop Repack提权0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMzcxNTQyNw==&mid=2247485847&idx=2&sn=66e03b3d28688a1a67714c47c33fe648": "25年HVV中的0day防护手法", "https://mp.weixin.qq.com/s?__biz=MzI3NDEzMDgzNw==&mid=2247485126&idx=1&sn=c77d681b3e0d8cfb12669017f6db4f50": "CVE-2024-49112 Windos LDAP 整数溢出分析", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490498&idx=1&sn=d805cfcaceac08ad6730b4f52181df4e": "用友NC importPml SQL注入漏洞(XVE-2023-29120)", "https://mp.weixin.qq.com/s?__biz=MzkxNTczMjA1Ng==&mid=2247483999&idx=1&sn=a9a5e8463d5f1228bb7ebc1d676bcd27": "圈内漏洞文库类公众号疑似上所", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247502411&idx=1&sn=9bfcbe3eba0c751e5bf590e19e885b45": "“万模裸奔”，DeepSeek正颠覆网络安全行业游戏规则", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650608292&idx=4&sn=50c019c3778782a4cdc6731de818d2c7": "sqlmap_gui是一款图形界面化的 SQL 注入漏洞测试工具", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454063951&idx=1&sn=d53cb1073731a3e9748eec66177fc60a": "信息安全漏洞周报【第010期】", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794252&idx=1&sn=6902b69e4fbc1f3242d6b19dd6550cac": "Salt Typhoon 使用定制恶意软件 JumbledPath 监视美国电信服务商", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794252&idx=3&sn=1e4659cba6cadc88a970fdf426f6cf76": "攻击者利用 Check Point 漏洞部署 ShadowPad 和勒索软件", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247518111&idx=1&sn=45b416a0a738520fe25fb20c54dbfe5d": "CNVD证书挖掘：20大技巧，一网打尽安全漏洞！", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492324&idx=1&sn=ad5f9d43df379b94caeac2ab68159764": "漏洞预警 | Apache Ignite远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492324&idx=2&sn=7be8d8428e41c435c552080c21419f48": "漏洞预警 | 浙大恩特客户资源管理系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492324&idx=3&sn=a94856c66b2b7ab250a805f353c37882": "漏洞预警 | 上邦电子文档安全管理系统任意文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484541&idx=1&sn=57e4d0c60cf1cb54008e73f1b4751545": "05 漏洞从哪里来？——体系痼疾（制度化）", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492250&idx=1&sn=52b54f19c92224f00106f3bf69708220": "超过 12,000 个 KerioControl 防火墙暴露于 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzg4MTI0NQ==&mid=2247485642&idx=1&sn=4913c9f2f95530a8ed76be40ce7c439d": "Slack渗透工具箱-一款安全服务集成化工具平台，内置多工具集，支持导入自定义poc", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237172&idx=1&sn=6df6fbe0aeb012eaff194d61f8c490f4": "中国信息安全测评中心主任彭涛：筑牢网络安全漏洞人才基石，打造漏洞治理新范式", "https://mp.weixin.qq.com/s?__biz=MzU2MjcwOTY1Mg==&mid=2247521219&idx=1&sn=0e9681632d0404edbe4ce2e136a3e441": "每周网络安全简讯 ( 2025年 第8周 )", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247490882&idx=1&sn=0219f691c40fe35f57f0388fe89127e0": "能信安：漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500770&idx=2&sn=2dbbedd5963caecd1e47a1772b256644": "【漏洞通告】PostgreSQL SQL注入漏洞(CVE-2025-1094)", "https://mp.weixin.qq.com/s?__biz=Mzg3MzUxNDQwNg==&mid=2247483861&idx=1&sn=ca8fc5e2159d6341dff7ffbe48977ce6": "深入浅出反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NDc3NDQ3NA==&mid=2247484643&idx=1&sn=f5f0bc71c2820d1abfb99295fb71fd6d": "漏洞预警 | 安美数字酒店宽带运营系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493243&idx=1&sn=5fa0cd4be8a6c6ea2f2c7f0d52469989": "微软修复了Power Pages中一个被积极利用的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493243&idx=2&sn=fe29f47ba3be810f2d40a88d8889f204": "Citrix 修复了 NetScaler 控制台权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581239&idx=2&sn=b73500f09beeb8531922e5bbe60b7afe": "苹果修复“极端复杂”攻击中被利用的零日漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247496612&idx=1&sn=538a40dba7b3ec6190fbf1f6447bfc16": "sqlmap_gui是一款图形界面化的 SQL 注入漏洞测试工具", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499777&idx=1&sn=2cb418ec8937da5c3cdd427f2b8dbabf": "G.O.S.S.I.P 阅读推荐 2025-02-21 通往漏洞自动化修复的漫漫长路", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260612&idx=1&sn=21aceafabcc9782891588a07f82d4126": "【$200】一个速率限制不当的漏洞故事", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484194&idx=1&sn=ba76460d3a11bacb42d7e202d16181ae": "[开源 Prompt] AI 增强的漏洞优先级排序", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527966&idx=3&sn=1ceb766907bcba985016112e740222cc": "Google 发布 PAN-OS 防火墙中 CVE-2025-0110 命令注入漏洞的 PoC", "https://mp.weixin.qq.com/s?__biz=MzkwNjY1Mzc0Nw==&mid=2247486910&idx=1&sn=82bd6a405a7ee9f666350d0de1195733": "25年HVV中的0day防护手法", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314586&idx=4&sn=6ca9620e382e1a47895284ec9113cab7": "9万个WordPress站点面临本地文件包含漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067926&idx=3&sn=2d131a8cb6509a43ec57dad0ce5b7216": "【安全圈】赛门铁克诊断工具漏洞可让攻击者提升权限", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067926&idx=4&sn=0caef5e797b3df5141d039002092ba83": "【安全圈】Citrix 发布 NetScaler 控制台权限提升漏洞的安全修复程序", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247514174&idx=2&sn=baa07aa5fdf6fdee68a0f4271e488d58": "每周高级威胁情报解读(2025.02.14~02.20)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522309&idx=1&sn=edcb7974ccf436c421f7900223071912": "微软修复已遭利用的 Power Pages 0day", "https://mp.weixin.qq.com/s?__biz=MzU0Mzk0NDQyOA==&mid=2247521523&idx=1&sn=bdd34e6543bb83fd592e4e740e73f74c": "新标准！广东省网络空间安全工程技术人才职称评价标准条件", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492251&idx=1&sn=55ed4203d52448e747edd2dcf099d415": "SonicWall 防火墙漏洞可让黑客劫持 VPN 会话，请立即修补", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489647&idx=1&sn=ff0868c8b3b5f4e5ef6172a12d318e2f": "【高危漏洞预警】Ivanti Connect Secure外部控制文件名漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxODIzNzgwMw==&mid=2654070954&idx=1&sn=4778afa8d89c6f2236a8b5e8fa8a80e1": "【公告】漏洞盒子服务器升级通知", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499514&idx=1&sn=e2808f2a9b468980a02bc0c19b1836d4": "Fastjson漏洞探测插件 -- FastjsonScan4Burp（2月20日更新）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522309&idx=2&sn=75d35854eb171a70fb22bd76ed1b2cf4": "Atlassian 修复Confluence 和 Crowd 中的多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499777&idx=1&sn=2cb418ec8937da5c3cdd427f2b8dbabf&chksm=c063eed8f71467ce419d37c31a6fb4680cb5c0faf3e8390e0eec6de0ca711e668073865eca6e&scene=58&subscene=0": "G.O.S.S.I.P 阅读推荐 2025-02-21 通往漏洞自动化修复的漫漫长路", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522309&idx=1&sn=edcb7974ccf436c421f7900223071912&chksm=ea94a96fdde32079df45122f0a57cbf5b416cd2fe68a478a8b0e3a1dd710bcbe0821712d0361&scene=58&subscene=0": "微软修复已遭利用的 Power Pages 0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522309&idx=2&sn=75d35854eb171a70fb22bd76ed1b2cf4&chksm=ea94a96fdde3207948c68f87487a34df9e852e8664ef0cccbe5cc612764daf702c7b52598f27&scene=58&subscene=0": "Atlassian 修复Confluence 和 Crowd 中的多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237172&idx=1&sn=6df6fbe0aeb012eaff194d61f8c490f4&chksm=8b580a8dbc2f839be4dbc4d88f46896299b25aea3483debe7fe69b5eed8f4ab14dbd5f22aa53&scene=58&subscene=0": "中国信息安全测评中心主任彭涛：筑牢网络安全漏洞人才基石，打造漏洞治理新范式", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067926&idx=3&sn=2d131a8cb6509a43ec57dad0ce5b7216&chksm=f36e7416c419fd00e623758485b719ae76cf7343378c7e8d644744090186b0a814d81bef07e0&scene=58&subscene=0": "【安全圈】赛门铁克诊断工具漏洞可让攻击者提升权限", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067926&idx=4&sn=0caef5e797b3df5141d039002092ba83&chksm=f36e7416c419fd00723e1f3194bd59381a229e4856a99f755ce8b3534ef54f025b33b154a77d&scene=58&subscene=0": "【安全圈】Citrix 发布 NetScaler 控制台权限提升漏洞的安全修复程序", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581239&idx=2&sn=b73500f09beeb8531922e5bbe60b7afe&chksm=e9146e0dde63e71b6dffe7f965fa172c280849088aa9bec160f3d2804373f0e6ce56e038e5b7&scene=58&subscene=0": "苹果修复“极端复杂”攻击中被利用的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486228&idx=1&sn=99cda49883c13096c6a7c7f112ce9574": "SRC实战系列-记某次大学漏洞挖掘经过", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491577&idx=1&sn=5054be93b27132f8e1a7886df1e9dffb": "支付漏洞四舍五入", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650608338&idx=3&sn=4ff6d6b4347f64571169abb17894ff21": "高效检测 SQL 注入漏洞，自动化实战经验分享", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492340&idx=2&sn=b8655f909cd3a92aa77c81b8a97ab8f0": "漏洞预警 | 云出行后台管理系统未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492340&idx=3&sn=cf354202ac70a768414367482ede90c9": "漏洞预警 | 月子会所ERP管理云平台任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507603&idx=2&sn=bcdb38a497786cc33166dae408d4fb8c": "5th域安全微讯早报【20250222】046期", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484194&idx=1&sn=ba76460d3a11bacb42d7e202d16181ae&chksm=c006cbd2f77142c41e4a49452be7eec286310a5de92e5470abe17c4d70060461949dbc0f45cb&scene=58&subscene=0": "[开源 Prompt] AI 增强的漏洞优先级排序", "https://mp.weixin.qq.com/s?__biz=MzkzMzcxNTQyNw==&mid=2247485857&idx=1&sn=898d8c8593363359aad19d29e85ae037": "高危：Ollama远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247490216&idx=1&sn=e5cc9f4d191703e6067bc26d0ae0a343": "弱权限目录成漏洞温床！3 个真实案例教你如何防范文件劫持！", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492340&idx=1&sn=095a542c437a13ab4926d06cbba74bdd": "漏洞预警 | jolokia JNDI远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497178&idx=1&sn=6f788f65837fb6ca1cbe920215c81bb7": "命令注入漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484218&idx=1&sn=798de36b9ce61a02dfbbd11529d91ff6": "[已开源] 基于大语言模型的自动化漏洞修复技术实践", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068081&idx=3&sn=6d7fd58dc0942e6b518c29bfda1a134e": "【安全圈】微软Power Pages权限提升漏洞被黑客利用，紧急修复中", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314636&idx=2&sn=2c12b60203f66c0022ea31909d0d2253": "FreeBuf周报 | 马斯克DOGE网站数据库存在漏洞；OpenSSH曝高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247571270&idx=1&sn=fbf06decc398ffe50ab9ae13933fb767": "记一次“安全扫描工具联动”自动化扫描漏洞流程", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498983&idx=3&sn=30752156e4a2a93c6dd37ef5296630cc": "ViewStates 漏洞，利用 .NET 机器密钥实施代码注入攻击", "https://mp.weixin.qq.com/s?__biz=MzI4NTE1NDMwMA==&mid=2247485256&idx=1&sn=98be3097618a87721f6b3b9ec4d3c3d1": "某红书Shield算法Chomper黑盒调用", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516098&idx=1&sn=ab5b62b94514dded20a6ffd2156df714": "若依Vue漏洞检测工具(2月21日更新)", "https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247492457&idx=1&sn=884a4bedfde17cd6e1e2dd3b403dbac9": "风险评估架构，终于让风险露脸了！", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068081&idx=3&sn=6d7fd58dc0942e6b518c29bfda1a134e&chksm=f36e74b1c419fda7f96d8f80f1629c532499358501c51808dabfa2b893809f0be21da93b5bc8&scene=58&subscene=0": "【安全圈】微软Power Pages权限提升漏洞被黑客利用，紧急修复中", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484218&idx=1&sn=798de36b9ce61a02dfbbd11529d91ff6&chksm=c006cbcaf77142dc7bde37c43bbb2960b02b68e3d95bda0dfb1f432a8319c62337ab2f62c84f&scene=58&subscene=0": "[已开源] 基于大语言模型的自动化漏洞修复技术实践", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497178&idx=1&sn=6f788f65837fb6ca1cbe920215c81bb7&chksm=e8a5ffb9dfd276afb25562e0817cfaa6ff4344d83f0aa3d82680724d240bb1d96a2d1888848b&scene=58&subscene=0": "命令注入漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068092&idx=1&sn=2aaad093096f88adba585911871847bd&chksm=f36e74bcc419fdaa044ff4055328159a66579d42cbbbda1577b8e0e97d0077812fe4f0f44877&scene=58&subscene=0": "【安全圈】马斯克DOGE网站数据库存在漏洞，任何人可随意篡改内容", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068092&idx=2&sn=07ceda3a43b852c9147f82cc1ed039fa&chksm=f36e74bcc419fdaac195c826bdb0acc22ee49a2e1a959765c9c3405ad72d8f3cb5509157f596&scene=58&subscene=0": "【安全圈】Atos旗下Eviden公司紧急发布安全公告：IDPKI解决方案曝出高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522317&idx=1&sn=679554b806b7e1fcda5f5a1f19b270d7&chksm=ea94a967dde320710d1dd5fbd642d47741d406b21f64d8dafd7d0345062b52d42a50ee9dd341&scene=58&subscene=0": "MongoDB库中存在多个漏洞，可用于在Node.js服务器上实现RCE", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522317&idx=2&sn=3a958d05dc2598229ad1eb7da729f090&chksm=ea94a967dde320714cf55a2c58671be12fa1315bb5640ff597c526191eb23aa7e61a8fc542ad&scene=58&subscene=0": "CISA：Craft CMS代码注入漏洞已遭利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068120&idx=4&sn=d542bcb895565396eeb06f3dd27a9809&chksm=f36e7558c419fc4e47365c9ac74ee849d679cf402628faefbb4eb0797133a5c6f1c29728b35e&scene=58&subscene=0": "【安全圈】CVE-2024-56000（CVSS9.8）：KLEO WordPress 主题中存在的账户接管漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495793&idx=1&sn=a9d3ba527b75b54449cd133f15bd15c2&chksm=fd74c0b8ca0349aebb27ab08b9c3493a90fa65c118783dbe7121e0e9d664eaa77661810ea906&scene=58&subscene=0": "CNVD漏洞周报2025年第7期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495793&idx=2&sn=82330f2ae7a0b3481cae459d604b6b4b&chksm=fd74c0b8ca0349aed222ab1262a24463beb77dcef3efbd39c92424f4ae1bd159ba9f9723949c&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20250217-20250223)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503036&idx=1&sn=b53989b1f1d19404316138e3efb8d976&chksm=fe79e824c90e613231b36d1289d873a06ac8a140c180348b3f4d373786f198f2905fb1274ece&scene=58&subscene=0": "安全热点周报：Microsoft Power Pages 零日漏洞遭在野利用", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579638&idx=1&sn=4eb70b16b4f465338ffd109688c9916d&chksm=9f8d27fea8faaee8bbbf94ba27dde01c04ce77031ed7b6061d649828195f10e84619abb9b30f&scene=58&subscene=0": "漏洞致大模型遭“零元购”？360全方位守护企业AI系统安全", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503327&idx=1&sn=cfd618f99ead03c5e379fba583590fb5&chksm=f2585eacc52fd7ba4e88461a705ae2d58432f9e08f9fd46fb0b0e974a14535d5fb316661a97f&scene=58&subscene=0": "雷神众测漏洞周报2024.2.17-2024.2.23", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589963&idx=3&sn=24f46a4871064e20eae0124440b646d7&chksm=b18c2b8186fba29760071b5e7e885fe89940d18102965ecbfd954a022db2c0599c8ccdd7ec6f&scene=58&subscene=0": "今日更新：虚拟机镜像磁盘解密 | 系统0day安全（第7期）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522334&idx=2&sn=474bb8a99d7a850a95b1ba847ff41044&chksm=ea94a974dde32062c02dec1281a683b8abd8c00fcda80eb383e8ae5b015673dcd949cffc9973&scene=58&subscene=0": "MongoDB库中存在多个漏洞，可用于在Node.js服务器上实现RCE", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522334&idx=3&sn=f5c15f723d85e58e935d673891c323e3&chksm=ea94a974dde32062deaa7a995cad497c8687d3ed1373842bcc662824544918475c1ebf48d2cc&scene=58&subscene=0": "CISA：Craft CMS代码注入漏洞已遭利用", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135207&idx=2&sn=fe9fd7cda8c8e759d23a78e5f2bcc243&chksm=bd15ac348a6225224e1cf74ba026bfd1f67c08cafcd68e38e1d81716e85a00ff077493c07592&scene=58&subscene=0": "特朗普“跪舔”马斯克虚假视频惊现美国政府部门大楼；CISA紧急警告：Oracle Agile高危反序列化漏洞正被活跃利用 |牛览", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247491596&idx=1&sn=9170509322096fbfaa92ba72346a68ab&chksm=c311af6df466267ba122fafd1e99a000d38493b92858068fcee7d437aaf234c29eb68e9ff5d0&scene=58&subscene=0": "CVE-2024-56145 Craft CMS 变量覆盖导致 Twig SSTI 漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499005&idx=2&sn=9c47da3e24414169e02a6c2294740935&chksm=fa595210cd2edb06d588fc0bb09c1c0b69c020b0c666f089bf17f53a28b8e2c719690e980d27&scene=58&subscene=0": "碰撞 .NET machineKey 实现远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484256&idx=1&sn=00e13d100666be48e18a69bc0611d063&chksm=c006cb90f7714286e194b9827c65e3f8716ce56b6e458ac167cdcda027109c57f54ab40064b0&scene=58&subscene=0": "数据驱动的终端漏洞治理", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489675&idx=1&sn=3b9c039bf25516fff7f55dd46f35d1dd": "【漏洞预警】Estatik代码执行漏洞(CVE-2025-26905)", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486114&idx=1&sn=5bc2a481b91fd4f6ad611627abc5f6d4": "jeecgBoot漏洞利用工具 - jeecgBootAttack", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497191&idx=1&sn=baaac6b3670ac5a8aae14c92c45e6bbe": "一个挖掘权限类漏洞的神器", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485848&idx=1&sn=e52da92201a82ff09e6115d1b2afd15b": "Log4j CVE-2021-44228远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUxNTQxMzUxMw==&mid=2247525214&idx=1&sn=dca01c9d03af27a6e497e97963bf985d": "安全通告丨网络安全漏洞通告（2025年2月）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522340&idx=1&sn=857f619293015f92aad6d9622d926c9b": "MITRE Caldera所有版本皆存在满分RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486232&idx=1&sn=7ab74584a0de2d86790dcb172bbac6b1": "审计分析 | 一套\"组合拳\"造成文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzE0NjcwMg==&mid=2650199810&idx=1&sn=f082f7a793bd6e080327538ec9460241": "立省110亿！百度完成重大收购", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247488607&idx=1&sn=6a48968640f88948a770a6718c8a1d17": "朴实无华的3.5w美金漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553945&idx=1&sn=38b7fada5ce5565890cd42a52c455b17": "漏洞赏金多，有些东西千万别碰", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486670&idx=1&sn=b0dcd95f49211359657dca45283ee825": "【漏洞通告】PostgreSQL SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486670&idx=2&sn=fde2e76203b5735bb390f5876ce4a6f5": "【漏洞通告】Google Chrome V8堆缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486670&idx=3&sn=00be7bcfb1dd33ac76a31a49b01bdfbb": "【漏洞通告】深信服EasyConnect 客户端存在本地提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462638&idx=1&sn=b9005ecb68e41b0186d218d424f3954e": "中国信息安全测评中心主任彭涛：筑牢网络安全漏洞人才基石，打造漏洞治理新范式", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247664&idx=1&sn=85ca095106b78ad319fc988a7287d4b2": "Fluent Bit 0-day漏洞使数十亿生产环境面临网络攻击威胁", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485228&idx=1&sn=300d4fe094e069ac035715a6a4be31a2": "紧急预警！CVE-2025-21298高危漏洞曝光，双击文件秒变“肉鸡”！", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485228&idx=2&sn=eb6493f3f9f8f92ae91083d797feee00": "紧急！7-Zip惊现高危漏洞[CVE-2025-0411]，解压文件=打开潘多拉魔盒？", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507680&idx=1&sn=580396b07c1a36ca961383760f8498bb": "AI安全防线崩塌？H-CoT攻击揭示大型推理模型严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247490368&idx=1&sn=e2d5a499e383a670e0c1a1e01817105a": "Sql注入漏洞批量检测工具一键排查SQL注入漏洞|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516139&idx=1&sn=b5e760fdeaf9cd3494eddff70ec62994": "XWiki SolrSearchMacros 远程代码执行漏洞PoC（CVE-2025-24893）", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzODA3Ng==&mid=2247484799&idx=1&sn=da5eb9198eb23803c64e9592d31a33bf": "百万赏金漏洞猎人带挖,零基础解锁美刀收入！(3月3日开课)", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486113&idx=1&sn=562b89948be6846c1dc033d8929fd391": "被动流量漏洞扫描器 - fizz-poc", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518639&idx=1&sn=6045c1dffaa09f03dfeac95c5cf02183": "SRC中的重置密码漏洞及案例", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489670&idx=1&sn=3c52fbfee0fce95d32789534caf6cc5e": "【漏洞预警】Lumsoft ERP 8无限制文件上传漏洞 (CVE-2025-1646)", "https://mp.weixin.qq.com/s?__biz=MzkwMDMwNDgwNQ==&mid=2247485669&idx=1&sn=c5c5aac25660a7007a041269156698b6": "如何使用AI进行漏洞挖掘(最终版本)", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503327&idx=1&sn=cfd618f99ead03c5e379fba583590fb5": "雷神众测漏洞周报2024.2.17-2024.2.23", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247488586&idx=1&sn=76a22894f1536830f02415de1a4493c1": "勒索病毒\"三步上篮\"？别等数据被\"锁喉\"才喊暂停！", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516148&idx=1&sn=aab94bbe5beec98918553275a3efcdd1": "锐捷RCE漏洞检测工具 -- RuijieRCE(2月26日更新)", "https://mp.weixin.qq.com/s?__biz=Mzk0NDI2MTQzMw==&mid=2247484637&idx=1&sn=44877e35ef515b89336284007c639eca": "之前写的一些工具", "https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247492468&idx=1&sn=d8713a79b21270e5efd6d8930751e06a": "“后大航海时代”，网络安全行业转型思考", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487366&idx=1&sn=a4ed96c104b7cc2fae4fc500cc45b477": "价值3.5W美元的账户接管漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487443&idx=1&sn=30acba9103a0b62da6a7a2fdea10838a": "Windows 内核模式 Shadow Stack 漏洞利用开发研究", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528029&idx=1&sn=401d6ce39283de298cb3743102c3347a": "CVE-2025-20029：F5 Big-IP限制性CLI中的TMSH CLI注入命令注入", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528029&idx=3&sn=e6c881aee33576f9e91f21955a35d166": "0day漏洞：Parallels Desktop Repack Root权限提升", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486670&idx=4&sn=1f86da08882aa6790b84134bb8641b45": "【漏洞通告】Exim存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247491909&idx=1&sn=f5fd8fd25e6516d8db8c5f8798229f38": "大量岗位招聘！护网、等保-密评内推、实习、渗透测试工程师", "https://mp.weixin.qq.com/s?__biz=MzA3NzgzNDM0OQ==&mid=2664993472&idx=1&sn=54ded258b136f6faa8af30fe8ba49892": "洞察 | 从恶搞名人到诈骗作恶，AI换脸背后谨防技术失控", "https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247521962&idx=2&sn=7a7801d113b5fab44d3c0c1f1c531151": "公开课预告 | OffSec OSEE（EXP-401）高级 Windows 漏洞利用开发", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247485535&idx=1&sn=9353f37816943231d9288b3379447b41": "工具集：AppMessenger【一款适用于以APP病毒分析、APP漏洞挖掘等场景的Android、iOS、鸿蒙辅助分析工具】", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499017&idx=1&sn=c17b802fed118434bf2134310fadc29e": ".NET 通过代码审计发现某办公系统逻辑绕过漏洞可泄露管理员账户和密码", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650183236&idx=1&sn=1727469ff3beeb950542f8ae4d57d40b": "黑客最不想让你看到的，2024年漏洞攻击数据真相", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492383&idx=1&sn=468fb4f7517fc0a6e0d34fce61a7dfec": "漏洞预警 | 金和OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492383&idx=2&sn=aa2a6ffb5f21dcdc7967d3f6c1d8f30f": "漏洞预警 | NUUO摄像头远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492383&idx=3&sn=3aafe209e0546cfe321f5deded92ca4e": "漏洞预警 | 锐明技术Crocus系统信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NDc3NDQ3NA==&mid=2247484683&idx=1&sn=c7a8d6ddd718f3548f93acb0adbccb24": "(0day)漏洞预警 | 安美数字酒店宽带运营系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247493675&idx=1&sn=c30e8ce14ecba5195f62ef4fb2e67516": "CyberMatrix 是一个基于 AI 的代码安全分析工具，专注于自动化检测和分析代码中的潜在安全漏洞。", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488070&idx=1&sn=9fac9fc0db517b9c376769c882a60626": "灵当CRM Ambassador接口处存在SQL注入漏洞 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522340&idx=1&sn=857f619293015f92aad6d9622d926c9b&chksm=ea94a94edde320585b86625a84d36857679e8f005ff31ac322eea8d3c6e5a0a2530f060326a1&scene=58&subscene=0": "MITRE Caldera所有版本皆存在满分RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650183220&idx=1&sn=34be8b0d76bc7cd59409ffa3f4f79089&chksm=f4486d88c33fe49e8719753d5ddbafc48d90bc9b5f47766313acf66966eee9fad87a5218edd3&scene=58&subscene=0": "漏洞攻击？拦了！数据呢？丢了！", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497191&idx=1&sn=baaac6b3670ac5a8aae14c92c45e6bbe&chksm=e8a5ff84dfd27692c948fb80e131ec9667801556ad1f048b6564646f9efd29c3041cf6dc8123&scene=58&subscene=0": "一个挖掘权限类漏洞的神器", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503053&idx=1&sn=5fed028268e1c246223907f8312cd7ab": "【已复现】NAKIVO Backup & Replication任意文件读取漏洞(CVE-2024-48248)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650608698&idx=4&sn=de507df2d357c4b2dee963005b2438c4": "若依Vue框架漏洞检测工具，包括 Swagger、Druid、文件下载漏洞、SQL 注入、定时任务漏洞和任意密码修改漏洞等", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491608&idx=1&sn=9914279290b9661d3de7dec861bdbd99": "实战纪实 | 真实HW漏洞流量告警分析", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495551&idx=1&sn=9507c61ecf0dc83c0bb76c22d055671c": "苹果CVE-2025-24104漏洞未完全修复，可以读取沙盒外的文件", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247488546&idx=1&sn=f2302057910e6f3a6440bc67ba1703ed": "审计分析02 | 无鉴权路径拿下文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247490390&idx=1&sn=ca485accbb6584c105b9c249cb55d5a4": "安全服务集成化工具平台，希望能帮助你少开几个应用测试|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzU5Mjg0NzA5Mw==&mid=2247494005&idx=1&sn=5524efb1bad095022152fff4f5441be2": "众智维发布｜天巢SkyNest R1多模态版本 - 网络安全风险的睿智“听风者”", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486676&idx=1&sn=27cc3db5988b3258f4da361b685a1eab": "【漏洞通告】NAKIVO Backup & Replication任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NzkxMDUyNg==&mid=2247492129&idx=1&sn=483d21c406053478013a0aada7145b74": "通过DeepSeek和通义千问AI，实现越权漏洞检测", "https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247484616&idx=1&sn=75700b8df64f2127eaa8cf2e840d09f3": "【漏洞预警】NAKIVO Backup & Replication任意文件读取漏洞(CVE-2024-48248)", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497213&idx=1&sn=ec9aa0b5d5985a796ae487d9a7430c96": "【漏洞通告】NAKIVO Backup & Replication任意文件读取漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5Njg5ODM0OQ==&mid=2247485997&idx=1&sn=55f4733683a9a17eeefdcc98d83f961d": "漏洞分析 | Apache SkyWalking从SQL注入到RCE", "https://mp.weixin.qq.com/s?__biz=Mzg3NzIxMDYxMw==&mid=2247504375&idx=1&sn=1321d8f000691b7091c52ccfe42b3bc8": "一次JDBC反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTY5NTc2NQ==&mid=2247484149&idx=1&sn=5d4bbf203965b23c9cc8c9d32115c702": "上海企业福利来袭：免费漏洞检测，守护您的数据安全！", "https://mp.weixin.qq.com/s?__biz=MzU4NDExNDQwNA==&mid=2247490030&idx=1&sn=599e9314b2be9d0fee4c225aceed856e": "邀您参加 | OffSec OSEE（EXP-401）高级 Windows 漏洞利用开发", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650608698&idx=3&sn=3c47568230148e36b48a767f67b83009": "【挖洞之旅】一种验证码爆破漏洞的全新思路 | 简单实用", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495551&idx=2&sn=0eb24102813c3af395ce85334889cd16": "暗网 0day 漏洞售卖预警", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489105&idx=1&sn=224715ee4e240f98617531d910c0e58c": "【0day漏洞分析】WordPress Yawave插件存在前台SQL注入漏洞(CVE-2025-1648)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068179&idx=4&sn=39b4a77aebadbd2051b65b5c2aeac879": "【安全圈】CVE-2025-20029：F5 BIG-IP系统发现命令注入漏洞，概念验证已发布", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237530&idx=1&sn=d7efd3424f1b0073011b56155937fd1e": "专题·漏洞人才培养 | 网络安全实战人才培养的难点和对策", "https://mp.weixin.qq.com/s?__biz=Mzg4MTcyMTc5Nw==&mid=2247488493&idx=1&sn=a33b931700102ae3ce9eef7de2021cc8": "实战案例分享:微信小程序抓包（简单详细易上手版）", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135261&idx=2&sn=74d6fa6c49fbd2630c460749eb487fd3": "9.9分漏洞或导致2850多台Ivanti设备系统完全受损；三星系统推出业界首款后量子加密芯片S3SSE2A | 牛览", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489731&idx=1&sn=2186b5230165ffa81d5b3f73d659278c": "2,500 美元漏洞报告-通过未认领的 Node 包进行远程代码执行 (RCE)", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247490550&idx=1&sn=7bcda616277b8dc37ec062c199225436": "创宇安全智脑 | NUUO 网络录像机 handle_site_config.php 远程命令执行等67个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523576&idx=2&sn=5a572048a9e1cb46cbb1e8117f7a27c9": "GitLab漏洞让攻击者绕过安全控制并执行任意代码", "https://mp.weixin.qq.com/s?__biz=Mzg4OTkwMDc1Mg==&mid=2247484821&idx=1&sn=a5ce5d492958d3926abe275e3169f620": "锐明技术Crocus系统 RepairRecord.do SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247490804&idx=1&sn=ca1966f08da9001c172756d604a7b57b": "记一次实战小程序漏洞测试到严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523576&idx=4&sn=9ca39af0d0b4423c729b0d33d57f7c9e": "Cisco Nexus 交换机漏洞允许攻击者触发 DoS 条件", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247490978&idx=1&sn=0603f40b2f130b53e05b709248fb079c": "能信安：漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzA3NzgzNDM0OQ==&mid=2664993521&idx=3&sn=ee026e4cb14df1e7019825637039d325": "【业界动态】黑客最不想让你看到的，2024年漏洞攻击数据真相", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247490405&idx=1&sn=c411a6e8d31365647016b6219ddc98a8": "RuoYi若依 Vue综合漏洞检测工具支持二开或修改|漏洞探测", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247490405&idx=2&sn=b6ab192d3fc3ec2bad8933a82c3c565e": "紧跟网安前沿：获取最新资源与漏洞POC库助你快速成长！", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247490405&idx=3&sn=628802b5ca3ef3436daae552654e1362": "分布式自动化信息收集、漏洞扫描-V1.6", "https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650465690&idx=1&sn=650234777d3690854a7df522c77a89ff": "风云卫×DeepSeek-R1（四）：当AI侦探团遇上“漏洞迷案”", "https://mp.weixin.qq.com/s?__biz=Mzk0MjM1MDg2Mg==&mid=2247502987&idx=1&sn=0be14c8d2ba66c5b6e6a678036e46aba": "标准研讨 | 《软件供应链漏洞管理平台能力要求》第一次标准研讨会通知", "https://mp.weixin.qq.com/s?__biz=MzUzNjg1OTY3Mg==&mid=2247491833&idx=1&sn=65aaa807093bcf808072079ee26ce664": "告别CVE焦虑！KEV：已知被利用漏洞才是真威胁!", "https://mp.weixin.qq.com/s?__biz=MzIxNTM4NDY2MQ==&mid=2247516236&idx=1&sn=b6c7cfed1dd7e9d9460525fdb3364fb8": "免费公开课预告 | OffSec OSEE（EXP-401）高级 Windows 漏洞利用开发", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484590&idx=1&sn=baa8349e59cd2bd8ebde309628c78c2c": "07 漏洞从哪里来？——引狼入室", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247488638&idx=1&sn=3070b6431948cbbaaf02ab14ec9267cc": "SRC挖掘 | 文件下载漏洞getshell", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135261&idx=2&sn=74d6fa6c49fbd2630c460749eb487fd3&chksm=bd15adce8a6224d8f352f7e193e568e119a11c3b858b9a9e079e69d1a356958e6c2d3f57eb5a&scene=58&subscene=0": "9.9分漏洞或导致2850多台Ivanti设备系统完全受损；三星系统推出业界首款后量子加密芯片S3SSE2A | 牛览", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499017&idx=1&sn=c17b802fed118434bf2134310fadc29e&chksm=fa5953e4cd2edaf2ec66ff6e982d6bf1f1641351ca4a8a43050c08709373f498234341967b72&scene=58&subscene=0": ".NET 通过代码审计发现某办公系统逻辑绕过漏洞可泄露管理员账户和密码", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503053&idx=1&sn=5fed028268e1c246223907f8312cd7ab&chksm=fe79e855c90e6143cede127f668f9ea87228c8bec618e4030297ec513afdda8336db0fed9cb0&scene=58&subscene=0": "【已复现】NAKIVO Backup & Replication任意文件读取漏洞(CVE-2024-48248)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650183236&idx=1&sn=1727469ff3beeb950542f8ae4d57d40b&chksm=f4486df8c33fe4ee0c7b62cb59b891067c87fa74029bd45738251b05b59d16d2e9084b8193d7&scene=58&subscene=0": "黑客最不想让你看到的，2024年漏洞攻击数据真相", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068179&idx=4&sn=39b4a77aebadbd2051b65b5c2aeac879&chksm=f36e7513c419fc05845b92a5fb7cff138e2e09657b7fe582ef29b3781db1761fb8b7d3cfd22a&scene=58&subscene=0": "【安全圈】CVE-2025-20029：F5 BIG-IP系统发现命令注入漏洞，概念验证已发布", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489731&idx=1&sn=2186b5230165ffa81d5b3f73d659278c&chksm=fb02959bcc751c8d15bbf41d5159696428c4d9c6d9fa2c6f2e13309b74cf59d2aa80cbe4d426&scene=58&subscene=0": "2,500 美元漏洞报告-通过未认领的 Node 包进行远程代码执行 (RCE)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237530&idx=1&sn=d7efd3424f1b0073011b56155937fd1e&chksm=8b580b23bc2f82354fbd0c8555767c4e05518b5ea8eeb32524d1c26203d76b6906aa88a457b6&scene=58&subscene=0": "专题·漏洞人才培养 | 网络安全实战人才培养的难点和对策", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247488235&idx=1&sn=37eab098858f4cbdad36610c5a653f67": "74cms 最新 getshell 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247491201&idx=1&sn=88d1b6116dec0dca018f70fdd055e958": "棉花糖居然被开盒了！", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499023&idx=3&sn=cb6f9513abf9c16bdd07066ec58c2663": ".NET 逻辑绕过漏洞审计思路和挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg3NDc3NDQ3NA==&mid=2247484689&idx=1&sn=94527504b2e448aa423093d2f2140618": "(0day)漏洞预警 | 时空智友企业信息管理系统任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900240&idx=1&sn=78dd5740a9bf7c9073a43d0f957c7414": "警惕！全景框架Krpano漏洞遭大规模利用，350+网站被植入垃圾广告", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492396&idx=1&sn=ed27f2ed5b2592447ae166e604933cca": "漏洞预警 | JEEWMS JDBC反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492396&idx=2&sn=e9a5f92ff815052b895b38a29688b87a": "漏洞预警 | 金盘移动图书馆系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492396&idx=3&sn=3302046c21f8615dc58f12ee09881c79": "漏洞预警 | 竞优商业租赁管理系统信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMjczNzAzMA==&mid=2247485516&idx=1&sn=b21abb2c517402ce94496c99bb1bcd52": "网络安全事件分级分类", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247491987&idx=1&sn=4318ab61b6ed26115cf9b92eb5afa6f8": "关于举办“数据安全技能能手”和移动互联网安全工程师（CAPPSEC）2025年第1期培训班的通知", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495649&idx=3&sn=a78b2e70528300c78288e36b7ff0631a": "【吃瓜】gitlab 出现一个有手就行的漏洞，获取34,000 美元的赏金", "https://mp.weixin.qq.com/s?__biz=MzU3ODQ4NjA3Mg==&mid=2247565776&idx=1&sn=9f2e3e0870b849b79993d8e936b06a54": "0Day CNVD-2025-00727 某路由器未授权命令执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247502469&idx=1&sn=29cf28e93c6f19b1db42ec9821aff233": "大模型微调爆出致命漏洞：可导致模型“黑化”", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485238&idx=1&sn=14262b3d99bbb6abdf91c4570388feb8": "Auto SSRF BurpSuite自动化SSRF漏洞探测插件", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485238&idx=2&sn=322ffad55ffa06b05fb5df664b89d5a4": "紧急预警！Windows磁盘清理工具惊现高危漏洞，你的电脑可能面临被控制风险！", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488082&idx=1&sn=117c18babe6945dac69504227343a44b": "瑞友天翼应用虚拟化系统RAPAgent.XGI接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzk0Mjg4MTQxMw==&mid=2247486456&idx=1&sn=aea4e78228a6dc1cea47a6183efa579b": "渗透测试新利器！EZ漏洞扫描器全面解析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522363&idx=2&sn=30341de9895d38b4b0408b086cf54477": "报告：89%的企业生成式AI使用不可见，或造成严重风险", "https://mp.weixin.qq.com/s?__biz=MzkyOTI4NTY4MQ==&mid=2247491173&idx=1&sn=b9ab5a914f6021d8d6413a9918fd7220": "2025鱼影安全SRC精品课程第一期重磅来袭！《0基础到高级SRC漏洞赏金猎人！》", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237597&idx=1&sn=ac246e2e2252c07dfd03b7757a6b724b": "专题·漏洞人才培养 | 以CTF学科竞赛为抓手的漏洞人才培养探索与实践", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727844161&idx=1&sn=922ae5543dc979d89fee696210936a08": "城堡的小门：v8类型混淆漏洞CVE-2024-4761分析", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495649&idx=2&sn=242368d99a4bfaa3bcd2af56491c1405": "【PoC】Windows Hyper-V NT 内核集成 VSP 提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247496264&idx=1&sn=9a1a67f0fecf0b9f4c5afe51f253f839": "2024漏洞风险启示录：在攻防的螺旋中寻找【治愈】之道", "https://mp.weixin.qq.com/s?__biz=MzkzNjM4OTM1Ng==&mid=2247484080&idx=1&sn=1f8dc22338cd58512721297db9b477d1": "POC 管理工具AI版", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484441&idx=1&sn=f515a679c8eccd2f9698e3c566632e4f": "DVR-登录绕过漏洞-CVE-2018-9995", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484436&idx=1&sn=1eb39ebd2440e86d300f887aba8b4c10": "DT-高清车牌识别摄像机存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247541657&idx=1&sn=a93d9fcd2d271eafbd57bf563e4e4be1": "苹果 Find My 网络漏洞让黑客可以悄无声息地追踪任何蓝牙设备", "https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247506995&idx=1&sn=f7b2a679150c1e6d0892c4c0f69476b4": "强国之路｜网络强国 加“数”前行", "https://mp.weixin.qq.com/s?__biz=MzkxMTMyOTg4NQ==&mid=2247484117&idx=1&sn=67d5f69d1ee2df37f4cf112d0d5e4b9f": "PbootCMS最新代码注入漏洞（CNVD-2025-01710、CVE-2024-12789）", "https://mp.weixin.qq.com/s?__biz=Mzg4MzY5NjIyMg==&mid=2247483836&idx=1&sn=337d60ac261c7d9b3f9502d461eb2da1": "分享一次组合漏洞挖掘拿下目标", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzODA3Ng==&mid=2247484804&idx=1&sn=b170440f0a649057257155e770b161c5": "百万赏金漏洞猎人带挖,进阶解锁美刀收入（3月10日开课）", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491633&idx=1&sn=03d6a3f8d696ac65dfed03504c18209a": "记一次实战小程序漏洞测试到严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NDc3NDQ3NA==&mid=2247484700&idx=1&sn=35f4cdbcfc63fdbd774e14e4a033d88d": "记录一个src挖掘的骚思路", "https://mp.weixin.qq.com/s?__biz=MzA4NzA5OTYzNw==&mid=2247484559&idx=1&sn=87f9d38120eb1812acdf9d467b0086fc": "如何修复常见的WEB漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489687&idx=1&sn=bacf6474bf5e8f17cc9924c660a0c8c0": "【漏洞预警】Apache InLong任意文件读取漏洞(CVE-2025-27531)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503061&idx=1&sn=d35bc82adb76b97ee71ebd660128a85d&chksm=fe79e84dc90e615b14715455df9ec7a0e2bd9fe219cbe0c114bef033092b8ebd014e8e51a106&scene=58&subscene=0": "【风险提示】 DeepSeek等大模型私有化服务器部署近九成在“裸奔”，已知漏洞赶紧处理！", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247496264&idx=1&sn=9a1a67f0fecf0b9f4c5afe51f253f839&chksm=fd790ececa0e87d821b6e0eb1f24df5af730c5d940230e87501b6d4d4cf3830022db37e494ba&scene=58&subscene=0": "2024漏洞风险启示录：在攻防的螺旋中寻找【治愈】之道", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492715&idx=1&sn=d7bae998bce7c8a9f1c6db0d49b80710&chksm=96f7fb06a1807210413176f7d16cd222ef6f5822c05c0e4303601397e050deb411274caac59c&scene=58&subscene=0": "【已复现】Ollama 未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499023&idx=3&sn=cb6f9513abf9c16bdd07066ec58c2663&chksm=fa5953e2cd2edaf4336314ee1697f11dc6c7f214afb025742eaba7cce78ab41a51bebc6328fe&scene=58&subscene=0": ".NET 逻辑绕过漏洞审计思路和挖掘", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237597&idx=1&sn=ac246e2e2252c07dfd03b7757a6b724b&chksm=8b5808e4bc2f81f284ef78d907e70d3f48adc497dba6906b2288e18ca146658b3c86008bb446&scene=58&subscene=0": "专题·漏洞人才培养 | 以CTF学科竞赛为抓手的漏洞人才培养探索与实践", "https://mp.weixin.qq.com/s?__biz=MzU5NTEwMTMxMw==&mid=2247485692&idx=1&sn=4d9815de776a858efcd4aca02abca123": "【漏洞复现】可以白嫖别人的AI模型了？你的被白嫖了吗（Ollama）", "https://mp.weixin.qq.com/s?__biz=MzkwODY2MzMyMA==&mid=2247484544&idx=1&sn=2716c322ed455d4953daf0191a514256": "【6-2w$赏金】我的微软漏洞赏金 - 大结局", "https://mp.weixin.qq.com/s?__biz=Mzg4OTI0MDk5MQ==&mid=2247493462&idx=1&sn=18148cbb374422b1f16cd84f282338cf": "十几万个漏洞POC，直接梭哈", "https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247526517&idx=1&sn=1d00946ea3bf689b279f9318670cb530": "2024漏洞风险启示录：在攻防的螺旋中寻找「治愈」之道", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247484936&idx=1&sn=e11d6be021cee243d816d35d640e03d7": "《DOM型XSS漏洞之document.write触发》", "https://mp.weixin.qq.com/s?__biz=Mzk0ODYwNjI1NA==&mid=2247484127&idx=1&sn=b41d7cbe71aab9b99bc66d03d7ce3373": "【安全预警】Hisense-智能公交企业管理系统 AdjustWorkHours.aspx 存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655268382&idx=2&sn=cef18979a72b90617f3c78aba7eb7a8e": "2024年网络安全漏洞态势报告", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492428&idx=1&sn=2ebcb311652d637fd46dfcc2daf80bff": "漏洞预警 | 金和OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492428&idx=2&sn=ee3dc0c2aea7c750168589599345d0b3": "漏洞预警 | Elber Wayber模拟数字音频密码重置漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492428&idx=3&sn=a054f58b95507991612d1c65d3524a5a": "漏洞预警 | 脸爱云一脸通智慧平台信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651131331&idx=1&sn=92f69ee2ad9b4a15f5e1e2fdc40821ff": "法国电信公司数据泄露，黑客利用PayPal发送钓鱼邮件 | 一周特辑", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488106&idx=1&sn=60e1182848316c9eb674edd5fd5e221c": "Check Point Security Gateways 安全网关存在任意文件读取漏洞CVE-2024-24919 【老洞】", "https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651149259&idx=1&sn=25073b9cc9f17d9285b1f19d308595c5": "【工具】一个综合类型的AI大模型应用网站：Monica", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490056&idx=1&sn=821dd0c7466bfbe68f43b399f2df1c2a": "关于Ollama存在未授权访问漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528181&idx=1&sn=fb54712d1d893db735ce00240a585d0e": "黑客正在利用数百个网站的“Krpano”VR库中的反射型XSS漏洞，注入恶意脚本来劫持谷歌的搜索索引并大规模分发垃圾广告", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485852&idx=1&sn=c3fc83276d19ddfe2002d32b5259b653": "CVE-2025-25065｜Zimbra存在SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485852&idx=2&sn=36c8d60ef3214c4f6ef3be41d60eade7": "CVE-2025-26794｜Exim存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590214&idx=2&sn=4d97d38157c7fb6f120215fc38895100": "更新第3章！系统0day安全-Windows平台漏洞挖掘（第5期）", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495797&idx=1&sn=405ff36b426052ed5994f6793b38063c": "关于Ollama存在未授权访问漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=Mzk0NTUwNzAyOA==&mid=2247484385&idx=1&sn=5e16fc3b3c6efcf460aa8e2383e92c03": "Caldera：CVE-2025–27364，你给个不能用的POC，把我们这些脚本小子都给气笑了", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485855&idx=1&sn=bf7c11f2b7878744e030858acc9bf7f5": "S2-005远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491635&idx=1&sn=42f997786d8e018ee17b019358be714f": "审计分析 | 一套\"组合拳\"造成文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247485583&idx=1&sn=1afa1bacbbb165749e7af11bc78c7b0a": "工具集：Java Chains【 Java 漏洞利用综合生成平台】", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247488237&idx=1&sn=3fa4065ac094b4b882d68ee860bba6cf": "针对Swagger接口泄露未授权访问的各种姿势", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499572&idx=1&sn=e4824768075e17e8dfe1c4e27b79b484": "被动扫描的fastjson漏洞探测插件 -- FastjsonScan4Burp（2月28日更新）", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516181&idx=1&sn=1ec5998b9fa1bfc44a867f56d6c13d20": "漏洞挖掘小工具 -- SeeMore（3月1日更新）", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492258&idx=1&sn=396c310a2a0c548856625c3ddaa03185": "黑客利用旧版 ThinkPHP 和 ownCloud 漏洞攻击量激增", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590214&idx=2&sn=4d97d38157c7fb6f120215fc38895100&chksm=b18c2c8c86fba59abc8115212f29cd95491601b0b928b94c97cfc69b365e7509001061c1a9b6&scene=58&subscene=0": "更新第3章！系统0day安全-Windows平台漏洞挖掘（第5期）", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495797&idx=1&sn=405ff36b426052ed5994f6793b38063c&chksm=fd74c0bcca0349aa01515105ac52bece7179a4bf2df9578d84c8e1dec5cf48b729349935bf04&scene=58&subscene=0": "关于Ollama存在未授权访问漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484341&idx=1&sn=a46a82777c2e17a48608a61876ca6b8b": "应用安全不仅仅是漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247510936&idx=1&sn=900e317a8277593e850658cd395d3cc5": "Apache MINA CVE-2024-52046漏洞复现分析", "https://mp.weixin.qq.com/s?__biz=MzU3OTYxNDY1NA==&mid=2247485213&idx=1&sn=c5693b5143b8fd0d9555d3dad848fbc9": "第106篇：深入分析自己曾经挖掘到的有趣的XSS漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247488577&idx=1&sn=7d82d779f8e22d546884384515247021": "实战一次完整的博彩渗透测试", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528194&idx=1&sn=c0cb9d7652c465c56ac345557868869d": "利用 AIxCC Nginx 漏洞：第一部分", "https://mp.weixin.qq.com/s?__biz=MjM5OTc5MjM4Nw==&mid=2457387398&idx=1&sn=3d6587e468dc6af99dfce3d688192a29": "别让更新变麻烦：Python脚本助你一键获取修复操作系统漏洞补丁包！", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247548410&idx=1&sn=77869ae7623c7e36bb980d5d28a186e5": "记一次某大学的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485582&idx=1&sn=afd08b843fd9e1b16081dfef5ee4df91": "URL 重定向：利用开放 URL 重定向漏洞的完整指南", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094892&idx=1&sn=44e4965782b459d63c3b2a6c668883aa": "PingAM Java存在未经授权的访问权限漏洞CVE-2025-20059", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094892&idx=2&sn=d896a5e9d72b1a5304fca2653f5f3113": "关于Ollama存在未授权访问漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490058&idx=1&sn=4fe091301529b6310456eeaca63e01f8": "Ollama未授权漏洞简单复现", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490058&idx=3&sn=abbfc9d3decab498075139a7195cf7ac": "EatPoc - 简单的POC捕获工具", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247525831&idx=1&sn=bcb977022fb49925580f765c3080e21c": "DeepSeek 出现严重漏洞！一个问题直接导致无限循环！", "https://mp.weixin.qq.com/s?__biz=Mzk0NjE0NDc5OQ==&mid=2247524924&idx=1&sn=b6493f2c3004123f94eba1e8e5e2e797": "EatPoc - 简单的POC捕获工具", "https://mp.weixin.qq.com/s?__biz=Mzg5OTY2NjUxMw==&mid=2247513056&idx=1&sn=89c0d614ab23f79cddf414ebf0178e58": "EatPoc - 简单的POC捕获工具", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247490136&idx=1&sn=fae0081ae370ef57ed83d22fb827953c": "周末来一场网安迷必看的纪录片", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497210&idx=1&sn=ccc4160591fb0b69fea00023035d6b2e": "【漏洞挖掘技巧】新手师傅从0到1如何挖洞", "https://mp.weixin.qq.com/s?__biz=MzkwOTQ4MzQ4Ng==&mid=2247484090&idx=1&sn=fe36dcaea5e05eb4bda4f16c36d89987": "Ollama未授权漏洞简单复现", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247519129&idx=1&sn=c73d3d9f20a15483db5d946e0a3522eb": "VxWorks设备分析与漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzUyMTA0MjQ4NA==&mid=2247551285&idx=1&sn=cc174b95a4ff4adedb6bb3743ac75d19": "EatPoc - 简单的POC捕获工具", "https://mp.weixin.qq.com/s?__biz=MzkwMzI1ODUwNA==&mid=2247487898&idx=1&sn=3795064d3c0df13534d1a6bb57ab1d9a": "俄友秒变乌友，狂冲乌克兰制造直播间，这比直接捐钱更爆炸", "https://mp.weixin.qq.com/s?__biz=Mzg3NDc3NDQ3NA==&mid=2247484732&idx=1&sn=99212d42b82dbaff92aaf2d90b79588f": "(0day)漏洞预警 | 资产管理运营系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNTg1MDYxNA==&mid=2247489808&idx=1&sn=208350639cf3aef1842e49e6162a94a8": "vulnhub靶场之【digitalworld.local系列】的bravery靶机", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247485627&idx=1&sn=1d71cf04564480fc1f06240efce648c1": "工具集：F-vuln【集合了信息收集、漏洞扫描、暴力破解等功能的自动化工具】", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499044&idx=1&sn=b28ca172001ac4635fa12424bf8cf07b": "ViewState再现漏洞：行业内又一款知名的 .NET 分析工具爆出反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492438&idx=1&sn=d5276e882c0ab5fc5de5486e0b7953c7": "漏洞预警 | DocsGPT远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492438&idx=2&sn=bdc617dc147d9923d545100a995157bd": "漏洞预警 | SeaCMS海洋影视管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492438&idx=3&sn=5c90f6d998b193e7b233bb72430988c0": "漏洞预警 | 竞优商业租赁管理系统信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MDgzOTk2Mg==&mid=2247484748&idx=1&sn=55f9031ae4f50734505f69dd5b863111": "【漏洞复现】 Ollama未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489924&idx=1&sn=b95f33cfe879c52a31516b8a9ddb7cad": "【漏洞预警】Langflow code代码执行漏洞（CVE-2025-3248）", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488343&idx=1&sn=123f95e731f9f3c18497b41770a1bafd": "Vite vite-project接口存在任意文件读取漏洞CNNVD-202504-684 附POC", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488343&idx=2&sn=69f21b0b8d700cdab4a4ccabf10ab050": "YesWiki知识库edit接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzA3NDE0NTY0OQ==&mid=2247485283&idx=3&sn=8d1af54cb617abf4d3a8740ddb8d2828": "卷不动Web渗透？世界500强导师带你用逻辑分析仪挖电网0day，薪资翻倍打卫星！", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497389&idx=1&sn=f935beb9ecf91aa86b9fdafc8a425aad": "打造自己专属的漏洞赏金搜索引擎", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489257&idx=1&sn=8b5f000c969e8e6090a24db990ee98e6": "【新原创漏洞】Vite任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489257&idx=1&sn=8b5f000c969e8e6090a24db990ee98e6&subscene=0": "【新原创漏洞】Vite任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522701&idx=2&sn=0b8f46ac41b6d62102b7ec1c02b25f60&subscene=0": "CISA：速修复已遭利用的 CentreStack 和 Windows 0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068998&idx=4&sn=cdb2e49e21463c18beaaff3dc62243f0&subscene=0": "【安全圈】Adobe 紧急发布安全更新，修复十二款产品多项漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247514638&idx=1&sn=50fbc3fd492cbc86f28b28b7550870dc&subscene=0": "Foxmail 官方致谢！APT-Q-12 利用邮件客户端高危漏洞瞄准国内企业用户", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487090&idx=1&sn=a6a64abc12059dd495b3b54f61e2318e&subscene=0": "漏洞预警 ∣ CrushFTP 存在身份验证绕过漏洞(CVE-2025-2825)", "https://mp.weixin.qq.com/s?__biz=MzkzNjI2MzgzOA==&mid=2247485230&idx=1&sn=ad2f64d796e9f77a10027f69cf8c601f&subscene=0": "【大模型与安全】第三弹：LLM与 Fuzzing 技术在漏洞挖掘中的应用", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495902&idx=1&sn=6e409a9779bb62f3a8a6127d2db75045&subscene=0": "关于Foxmail邮件客户端存在跨站脚本攻击漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247580245&idx=1&sn=7f3819091ef57c75e9a9f20747c775d0&subscene=0": "智能体连续发现汽车漏洞！360登Black Hat演示高危利用链", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497389&idx=1&sn=f935beb9ecf91aa86b9fdafc8a425aad&subscene=0": "打造自己专属的漏洞赏金搜索引擎", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247545741&idx=1&sn=695994498ae1d291bfc9398a5d54ca94&subscene=0": "AI大模型安全漏洞预警！Langflow高危远程代码执行漏洞（CVE-2025-3248）", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492776&idx=1&sn=286e0d8a590f350cb3d58e1071ef4b57": "【已复现】Vite 任意文件读取漏洞（CVE-2025-32395）", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503309&idx=2&sn=d2d68c02256db122161080d7fe2713f9": "【已复现】Vite 任意文件读取漏洞(CVE-2025-32395)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247759&idx=1&sn=47b9a3e6c630a769d32766bd744badf0": "CVE-2025-30208&31125：Vite任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247497374&idx=1&sn=f6d4cc19ed3b7333066d88b7fc8eb619": "CVE-2025-30208&31125：Vite任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247492161&idx=1&sn=5b12d3d38a43c9aa86efb187997acb21": "漏洞预警 Optilink 管理系统 upgrade.php 任意命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMDQ0NzQwNA==&mid=2247486423&idx=1&sn=4d6999d5d8777a9de0c401c9f02746d1": "Tomcat 漏洞分析与修复（2）CVE-2024-21733", "https://mp.weixin.qq.com/s?__biz=MzAxMjE1MDY0NA==&mid=2247509218&idx=1&sn=a50150a1cc526f9d202126e072d96ec5": "数据泄露频发，看中孚终端安全沙箱如何见招拆招！", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458591290&idx=2&sn=223c178dd8c527a98c3157bcec39a1ac&chksm=b0ad1e0ae369e6485cbb652726f7c5b48d6b8785756a7af7699f0006d39d231beafa1f2ee956&scene=58&subscene=0": "佳能打印机驱动曝高危漏洞，请及时更新", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514121&idx=1&sn=70289620d4c12396c7fb519604f6a12e&chksm=ea1feceb9e3b4697492f8ce73299c9d023f43f1aa1255f26ec61ae70c604526408d507e20b65&scene=58&subscene=0": "AI赋能代码审计：利用微软Security Copilot辅助挖出20个漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489777&idx=2&sn=749b788f108092b8702005d09fe0baef&chksm=fb0295a9cc751cbff0b797a5c1cc1bfa7d9c408b786b403fbbd8577f61e86f17bb5e3195ee55&scene=58&subscene=0": "已复现】Vite 任意文件读取漏洞（CVE-2025-30208）", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503198&idx=1&sn=8b5fdcae994700ffdf393dccfc6008b1&chksm=fe79e9c6c90e60d0ecb11cdf2c257ac709c141b1bf383752eb40c953e0bc9a5f5dd0fd9dcf93&scene=58&subscene=0": "【已复现】Next.js Middleware鉴权绕过漏洞(CVE-2025-29927)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247505954&idx=1&sn=1546566c8ca34a9947e05d793949e87c": "我发现了HTTP请求走私并获得了巨大的漏洞赏金！", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524207&idx=3&sn=43f6ea64d7f39b9a5a0342f1f1dda341": "新发现的Ubuntu安全绕过漏洞使攻击者可利用内核漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495826&idx=2&sn=3bcf79d212bc76bc6466a16623626b7f&chksm=fd74c05bca03494d994a2e466dee462fcd4563c7d4e0ce844de0ba6ecb630a51d7fb685861b4&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20250303-20250309)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491052&idx=1&sn=e19606568b7c038ce43ee58b379c9065": "Crushftp 认证绕过漏洞（CVE-2025-2825）", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503142&idx=1&sn=f4f47cabc55a311159daa2ca4cca64e4&chksm=fe79e9bec90e60a85e97f731b274b26c3cc17015ef8c1a979957b1c82c53ac998a1e16658bbb&scene=58&subscene=0": "微软3月补丁日多个产品安全漏洞风险通告：6个在野利用、6个紧急漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488273&idx=1&sn=0604d9ee59e568cd5b1c5eb1b19ec414": "Vite存在任意文件读取漏洞CVE-2025-30208 附POC", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522399&idx=1&sn=f2a16f697c5c7d7824f2f78d5b4b6148&chksm=ea94a935dde3202383547ee0d30d51758f21b98905e1a92f764da94b7a4f3388c67cef668c60&scene=58&subscene=0": "CISA 提醒注意已遭利用的 Windows 和思科漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581470&idx=2&sn=62d9ad4ddd6e96922be1ddcaed49dfb7&chksm=e9146f24de63e632322527aaf0723002cb70f32cf2e5ec66cb40e13d634819c2b0d7bcc2851f&scene=58&subscene=0": "超 4300 万 Python 安装有代码执行漏洞隐患", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490065&idx=4&sn=e6dd20d2247732b0e5e73f6e9ae93343": "车载Android系统破解工具和漏洞挖掘浅析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068293&idx=2&sn=fab921fefe8673f13fcda40d2f2a8a58&chksm=f36e7585c419fc93777f66d5dc6d0cab3c6eef6c192ccbcb909d9e932e498d3bfcbf3a14e4e3&scene=58&subscene=0": "【安全圈】CISA 警告 VMware 漏洞正被积极利用，并敦促立即修补", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068486&idx=2&sn=a1a3a144476d291506c6e2ada3ac4e29": "【安全圈】Tenda AC7 路由器漏洞使攻击者能够通过恶意负载获取 Root Shell", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489211&idx=2&sn=a0ef31186a0567544e0b85d13cc33ee3&chksm=c2c641b0f5b1c8a64bedf66710c041dd20c197fd4aadc4f21f05749f10ea2825b66aa3db3b06&scene=58&subscene=0": "【处置手册】Kubernetes Ingress-nginx远程代码执行漏洞(CVE-2025-1974)", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485781&idx=1&sn=a6202f04b9554277d414118b861adaed": "【高危漏洞】Tenda AC15命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499319&idx=3&sn=b49ca67187bfbbf8794bb07879ddddab&chksm=fa5950dacd2ed9cc499c98c8a2b77b8cd0a5cdcf2d66c4d8ade7d38ae2f6ac0cf46667db06c4&scene=58&subscene=0": "实战+分析 | .NET 分布式事务反序列化漏洞插件", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495812&idx=2&sn=b080544563672f0f09d01e1fcf6684c9&chksm=fd74c04dca03495bb0367a73ea7853e0a5b5c15b56384e4f76506483fb7fc9a47c873ca01228&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20250224-20250302)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590589&idx=1&sn=9a4e01c36963a74c187f2be20cbc75a8": "VNCTF-2025-赛后复现", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068976&idx=2&sn=9430325038d82c9d54b40e83a162b8e8&subscene=0": "【安全圈】Adobe 修复了 11 个 ColdFusion 严重漏洞，共发现 30 个漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NzY3OTA3OA==&mid=2247483964&idx=1&sn=37181e495181e9282850930fa781683a": "Ollama被爆DDOS攻击漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514099&idx=2&sn=287feb9a3757aec9d22df6fe26cb241e": "CNCERT：关于Google Chrome存在沙箱逃逸漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651317729&idx=3&sn=d17f83be602d42c821f5dd08dc304360": "CrushFTP 漏洞概念验证代码公开后遭攻击者利用", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538251&idx=2&sn=cefa0334db76252a4ad7f4bd3dca1876&chksm=c14424f6f633ade0e67c3ab7016594ba89c945a1cfd63f204e73631baa1e56dfbb3119d48e97&scene=58&subscene=0": "CAPEC 漏洞管理的“真”攻击者视角", "https://mp.weixin.qq.com/s?__biz=Mzk0NzE4MDE2NA==&mid=2247487883&idx=1&sn=8b5e310998a127501bad2c7335e21c38&chksm=c37b9660f40c1f76ba24d173a1a54aefd3feb334b7763789bbb400ccddf8a3639df7586b26cd&scene=58&subscene=0": "Vite 任意文件读取漏洞（CVE-2025-30208）全网测绘分析", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507734&idx=1&sn=514b7da1383cc81be32f1ac9544ad94b&chksm=cfcabc02f8bd3514c8a3415fe23d0b45bb8c7ad9dfd7c73a5958a3204c9724429b833c19f593&scene=58&subscene=0": "漏洞通告 | Next.js middleware 权限绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495894&idx=1&sn=561f117bd70f01a2cba0615333648030&subscene=0": "CNVD漏洞周报2025年第13期", "https://mp.weixin.qq.com/s?__biz=MzI5MDcyODIzNg==&mid=2247484884&idx=1&sn=1de88330caacf1c4b1a69e1e539d188e": "地图大师SRC漏洞挖掘课程学员突破800人！感恩回馈，免费再加一套DLC课程，助你挖洞无忧！", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492725&idx=1&sn=de0f08e06363a7386f762ff89911fa2f&chksm=96f7fb18a180720ebf4fc3a9847cbae47c513332d35b81c4111e4bb0b4cbbdfc8b40446bbfb0&scene=58&subscene=0": "【风险提示】VMware ESXi新型漏洞利用链已出现在野利用", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490065&idx=1&sn=141b292fc69ff9d745e021ad98999ec2": "记一次小程序漏洞打包", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486956&idx=1&sn=7a0035fe012a08d75dbf22199a4ff975": "GitLab 紧急修补关键身份验证绕过漏洞 – CVE-2025-25291 和 CVE-2025-25292", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238645&idx=1&sn=540ff6beddde6e5966cace2a2d5353f5&chksm=8b580cccbc2f85da1ae4aa63203aa4f547c7391cc232e28fdc44f373ba4b0dd1dac705b61808&scene=58&subscene=0": "专题·漏洞人才培养 | 聚焦漏洞技术研究 探索实战型网安人才培养的实践路径", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489247&idx=1&sn=5126551864f27513e7f6f92d72a6922f&subscene=0": "【安全更新】微软4月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247496213&idx=1&sn=6a854c286f0cea1f3e5bea8feec61654": "风险研究 | AI 安全警钟响起：Manus AI 漏洞暴露的背后真相", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522418&idx=1&sn=6414a084ddce5639ed66ee1cdf5970cb&chksm=ea94a918dde3200e4957c6c238db663d0186415de3557b205951842801e465f313189d312680&scene=58&subscene=0": "谷歌修复已遭利用的安卓0day", "https://mp.weixin.qq.com/s?__biz=MzI1MDU5NjYwNg==&mid=2247496785&idx=1&sn=8dbf882c43e6a0cfac31a262bcb44b29&subscene=0": "MCP漏洞被利用，你的聊天记录可能已被泄露！", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490909&idx=1&sn=425a6f7bd1e945f3595d734220d07803": "百易云资产管理运营系统 admin.ticket.close.php SQL注入漏洞(CVE-2025-1535)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522579&idx=2&sn=df3fca1672e67390925fdec6d6a9c0b7&chksm=ea94a879dde3216fbad11021af2c64c92e975cbe78054dae1caeb2563b73d2b2ed4079923e49&scene=58&subscene=0": "Ingress NGINX 控制器中存在严重漏洞可导致RCE", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524111&idx=1&sn=09d5d3dd317a20c1cec8733f787b4520&chksm=ce46141ff9319d09540d9b68bf6d65b4f01b6eb9fe895c471ba92960c8eb1c46e2002d023c4a&scene=58&subscene=0": "Google Chrome 沙箱逃逸漏洞(CVE-2025-2783)", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484780&idx=1&sn=ad00b83656791606550d4b52900781f0": "Nuclei Yaml各类漏洞模版汇总项目", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635161&idx=4&sn=9d6a82b3ba1b5dc30baf706260800387": "工控漏洞 | mySCADA myPRO或被攻击者掌控工业控制系统", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068550&idx=2&sn=a11b6f875b76d50d5ffce23fbd07880f": "【安全圈】Apache Tomcat 漏洞在公开披露后仅 30 小时就被积极利用", "https://mp.weixin.qq.com/s?__biz=Mzg5MTM5ODU2Mg==&mid=2247501701&idx=1&sn=17fc2d3e2f113ad0d445841150aae09a&chksm=cfcf7748f8b8fe5e9065c1c2cf3dbd8b2fba1fae9b584aaa668ef27e51ca6bdbd4220f960d46&scene=58&subscene=0": "[安全开源分享] Datacon24漏洞赛道冠军分享：vuln_wp——大模型赋能的漏洞自动化分析全解析（武大）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068670&idx=2&sn=4baddc750849fe08ccb334318a0ebcd0&chksm=f36e777ec419fe68e58105923fda4e2802bd4c66385ebfb351a2292cd0b0d03909a61ad04bcc&scene=58&subscene=0": "【安全圈】俄罗斯零日漏洞卖家开价 400 万美元出售全链 Telegram 漏洞经过 古鲁巴兰- 2025 年 3 月 21 日", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068433&idx=3&sn=70253a351fb115e049a9d256c1390052": "【安全圈】Apache Tomcat 中的 CVE-2025-24813 漏洞导致服务器遭受 RCE 和数据泄露：立即更新", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485906&idx=1&sn=8e1112c7cba5ac13edf23572157167bd": "CVE-2023-24205｜Clash for Windows远程代码执行漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490267&idx=1&sn=13fa8ca9c91d7011be5fe43cd455c12e": "Moxa 问题修复 PT 交换机中的关键身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTA0MTY2Mw==&mid=2247485862&idx=1&sn=4483993602cd05191eb301edeba1b1e7": "思科警告公开披露cve -2025- 2015 - BGP漏洞使网络处于危险之中", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068467&idx=3&sn=a464bcdd8889a7e0e65921296df9fdd8&chksm=f36e7633c419ff25cb190652f57379ceebf2022a9c9068abce3cc38be20fe7f2fbd61fdf65b1&scene=58&subscene=0": "【安全圈】施乐打印机漏洞使攻击者能够从 LDAP 和 SMB 中获取身份验证数据", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485726&idx=1&sn=37f437eebac8a11ad3807bca34d5cd75": "锐捷 EWEB auth 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247496296&idx=1&sn=d5b907a532eae6ea54717b1fc1a12c97": "逆变器僵尸网络？全球三大光伏逆变器产品曝出数十个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485057&idx=1&sn=d185daa7ca11c442e787715c84c83682&chksm=c2b104f7f5c68de16c19df45ac696b74c45204829a237de7dd5b2cfd96387d525e017e503e24&scene=58&subscene=0": "腾讯云安全中心推出2025年2月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651317483&idx=3&sn=6085ec1328d90fbb8fcbfd9bf1ee0cea": "惠普HPE CMU曝高危漏洞：攻击者可绕过认证执行远程命令", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489804&idx=1&sn=98813150a2c0c4efc42ee2b776402997": "【漏洞预警】FortiSOAR代码注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590532&idx=3&sn=64c9bf27d9ed81ec82e0506b47b8d3cc&chksm=b18c2dce86fba4d89b9c96e5a591d6a3253d659e5c9cfe03f638e6fda35228fc96840fd97a35&scene=58&subscene=0": "第22周更新： 反序列化漏洞（三）ThinkPHP反序列链分析 | CTF训练营-Web篇", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518872&idx=1&sn=d8a9fedeea1a6ab5a74c75008869818c": "抖音刷出来的天降漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458591290&idx=3&sn=a9e692b6aeb10baa6c4753f4edcde22e&chksm=b0b6694717dddcdf388d78c7c08de52b7c2afbcb84c22984f17654a3f2b8fb4acb5e30f47545&scene=58&subscene=0": "今日更新！系统0day安全-二进制漏洞攻防（第4期）", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524207&idx=1&sn=f65dc31eb2a38abc269db7a7756db40d": "Cannon Printer 漏洞让攻击者可以执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635280&idx=3&sn=fe7e1f64c98f54c491825f79333c3078": "Mozilla紧急修复Firefox高危漏洞 与Chrome零日漏洞原理相似", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068293&idx=3&sn=c28c7a09130437d1363a6b34dc11bdcf&chksm=f36e7585c419fc93f0d6435efa2025a8433255864c2df71c0fc5a4c4a74991faaecce0f85f3f&scene=58&subscene=0": "【安全圈】Windows KDC 代理 RCE 漏洞让攻击者远程控制服务器", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497341&idx=1&sn=353bf45187d56042ddb590cdd022bb81": "利用js挖掘漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068486&idx=4&sn=0c958e3ed4260fbf4a7e0e8de17dafc3&chksm=f36e76c6c419ffd0e7004cb3d9cbe96c2d9513d7e4d91404ebaaea0958be25260fe93339268e&scene=58&subscene=0": "【安全圈】SuperBlack 攻击者利用两个 Fortinet 漏洞部署勒索软件", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581623&idx=2&sn=ed65317702ca19322ce299614071d10d&chksm=e9146f8dde63e69b12b35daead3fc81c3829490c492b5f9ff856c0d6c35ae6f601360d08dae6&scene=58&subscene=0": "PHP XXE 注入漏洞允许攻击者访问配置文件和私钥", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458592233&idx=3&sn=0fdc4fcb62923943df34ddd535ab89b3&subscene=0": "WhatsApp惊现漏洞！黑客可借此执行恶意代码，Windows用户赶紧更新", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524218&idx=1&sn=beb40faf6117ad25cdcedd03f1d9dfa4&subscene=0": "【漏洞通告】Vite 任意文件读取漏洞(CVE-2025-31486)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507736&idx=1&sn=1b6ad4565d22c8799d1f26db65dc05bd&chksm=cfcabc0cf8bd351ad950bbfe57e9cb4bcde555d02d83cb3bece5acd72d9fb05d08f9e647b9a7&scene=58&subscene=0": "在野！谷歌Chrome沙箱逃逸漏洞， 被APT高度武器化", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135800&idx=2&sn=2d44a7244307ff61986d8b4e8a871ec6&chksm=bd15afeb8a6226fddedd8869139a1fb4e0052c0c4142a3f400c67c2ae9395e4a47bd901ef458&scene=58&subscene=0": "中消协提示：谨防“免密支付”盗刷漏洞；Kubernetes“噩梦”：Ingress NGINX控制器漏洞威胁6500个集群|牛览", "https://mp.weixin.qq.com/s?__biz=MzU5Njg1NzMyNw==&mid=2247489217&idx=1&sn=a32a6e0c14c025e0663591226b8b83f9&chksm=fe5d0e41c92a8757dce02d28d059dcdd0d58d648be6c7dc516a67e9eac79119f102ce889c15e&scene=58&subscene=0": "DataCon24漏洞赛道冠军分享：vuln_wp——大模型赋能的漏洞自动化分析全解析", "https://mp.weixin.qq.com/s?__biz=MzkyMzcyMjgwNA==&mid=2247483864&idx=1&sn=eaf0d54456e96445a3d8631fae219d46": "nakivo-任意文件读取（CVE-2024-48248）", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247580053&idx=2&sn=f0326cff16ca89a3e6e4c10841b54946&chksm=9f8d299da8faa08bc0d94656d2ec8f010c4bcb09a694e915e87d46d997c35b426f935996f8f2&scene=58&subscene=0": "360入选2024年度移动互联网APP产品安全漏洞治理优秀案例", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634902&idx=3&sn=87c638841df320c816ef0a7d421ea324": "Sitecore 曝零日漏洞，可执行任意代码攻击", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237662&idx=2&sn=2deff5b6bd62f8dd20a62eb3510d400f&chksm=8b5808a7bc2f81b17f418934d36c8b8136e6d4feffde7376fd5ef51fa52d2c4615e6bd01a178&scene=58&subscene=0": "CNNVD | 关于Ollama安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489028&idx=2&sn=acdcd9105653b3dfe1eb03d48cf3bdd3&chksm=c2c6410ff5b1c819fcc80c2c0b6d4fa2175d93cb297e3e64fdb828b5d143815241270699ea7e&scene=58&subscene=0": "【已支持识别检测】Ollama配置不当未授权访问漏洞（CNVD-2025-04094）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489812&idx=1&sn=a934a03b1973580ab86c37b4fecde9cf": "【高危漏洞预警】ollama 0.1.37 ZipSlip远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MDU4NjYwOQ==&mid=2247484245&idx=1&sn=72e76c0d95fc37a646ebd834a39e1be3": "ThinkPHP 多语言本地文件包含漏洞(lang-rce)复现", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490868&idx=1&sn=8f4d6eae59046767cfa5bc05505c9889": "速达软件 doSavePrintTpl sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503086&idx=1&sn=54b69bd61f8b821652d16322e589e4d0&chksm=fe79e876c90e61605089205fed1cd9b9c046434058f58982e7e8a76e785ecdd9b8869f510bc0&scene=58&subscene=0": "Elastic Kibana 原型污染致任意代码执行漏洞(CVE-2025-25012)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610018&idx=3&sn=86b4c5ac3506c0922b207e9698ebcacd": "漏洞挖掘之从开发者视角解析Gin框架中的逻辑漏洞与越权问题", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486250&idx=1&sn=b8f33f2e96b66ff78c9914144f77d10b": "记录一次JAVA前台漏洞审计", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522450&idx=2&sn=07fb2382932a5afdd7e28086180274bc&chksm=ea94a9f8dde320eec3eed53ed3ea157df8ec294315dc7a8b460e0bda2fe0f64ecfd361d6bc0f&scene=58&subscene=0": "谷歌2024年发放1200万美元漏洞赏金", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489799&idx=1&sn=1cb0fef30c653dde429246b6a21a0eb8": "【漏洞预警】MongoDB BSON缓冲区溢出漏洞 (CVE-2025-0755)", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487062&idx=1&sn=2f68aa136a3f1b995aa02894b17831f8&chksm=c22296aff5551fb9986f3e16c405651b2e0cca48c94d9d83445ca4903b52acd64287de885fc4&scene=58&subscene=0": "漏洞预警 | Windows 文件资源管理器欺骗漏洞（CVE-2025-24071、CVE-2025-24054）", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247485172&idx=1&sn=6fc4d990ea049bfe9cc961a764b15a80": "Sitecore几年前的洞CVE-2019-9874：反序列化实现的未经认证的 RCE（CVSS 9.8）", "https://mp.weixin.qq.com/s?__biz=MzIwNDYwMDcyNQ==&mid=2247488956&idx=1&sn=7ff677c108fa9acc0c1135eb61a08aab": "【漏洞速递】Google Chrome 沙箱逃逸漏洞(CVE-2025-2783)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651316861&idx=2&sn=f11a61ca7c79b39287a08843bb723201": "FreeBuf周报 | “人肉开盒”再调查；ChatGPT SSRF漏洞迅速成为热门攻击向量", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068550&idx=2&sn=a11b6f875b76d50d5ffce23fbd07880f&chksm=f36e7686c419ff906a9bb292a69dbf5f6c4b7dcf6bda81db3ae13ddc0d5f53cfc22d1f541977&scene=58&subscene=0": "【安全圈】Apache Tomcat 漏洞在公开披露后仅 30 小时就被积极利用", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462668&idx=1&sn=26885cbdc84ff23e350a6e29b79636ac": "专题·漏洞人才培养 | 实战化漏洞安全人才培养 为新质生产力保驾护航", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135498&idx=1&sn=e6172af9fbd2e65fbc9f54109fde301b&chksm=bd15aed98a6227cf7cc4588a7b37775b925fdd9b5ae318790cc89ca8c4d605fecc9a1f983774&scene=58&subscene=0": "顶流明星在澳门输了10亿？一男子用AI造谣被行拘8天；多平台SSRF漏洞遭遇协同攻击，逾400个IP同时启动 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506150&idx=1&sn=717af63b8afecffa2e7f4d48e4f3040b": "每周网安资讯 （3.25-3.31）|Zte Goldendb存在特权管理不恰当漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MDU4NjYwOQ==&mid=2247484232&idx=1&sn=00bc01f6b175e96b6f09c2fdbf3ef5d0": "SRC漏洞挖掘之越权漏洞挖掘实战指南", "https://mp.weixin.qq.com/s?__biz=Mzg2NTA4OTI5NA==&mid=2247520591&idx=1&sn=09408e28e3286c2cfd405487e0f3950c&chksm=ce5db32ef92a3a38ecd1ca641509b925c3cede747f10949b7f398cfcf43d62fe17914bea2224&scene=58&subscene=0": "Jeecg漏洞总结及tscan poc分享", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068262&idx=1&sn=78dbf5467c924dcc1d55c9dbf6f78eca&chksm=f36e75e6c419fcf0d3b907f7583e56d4aa77a1cdbcd68a948618c67a3ca9fab09a768067b723&scene=58&subscene=0": "【安全圈】WordPress 第三方表单插件 Everest Forms 曝远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247517086&idx=1&sn=18d66c1e7fafedb491d9a303e6837d3f": "漏洞预警｜金蝶 Apusic IIOP 反序列化远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507729&idx=1&sn=91c4104007c3995d939d644e4ff42c84&chksm=cfcabc05f8bd35130dfba5ee7c87d29483aef7fbced030dac399e85887b467d46217374db022&scene=58&subscene=0": "漏洞通告 | Apache Tomcat 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484741&idx=1&sn=a06c60b346f570564cf9d464eafc9344": "MSA-互联网管理网关-msa-任意文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486339&idx=3&sn=fcb0bdb0e0372f9798c50d7134bbe2cb": "\"0day\"漏洞裤", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485775&idx=1&sn=d1c19900739911f714b50fe75216702b": "【高危漏洞】【POC公开】Apache Camel 任意命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495859&idx=2&sn=cfcd917711ed3f44d0c8ae652b423a8f&chksm=fd74c07aca03496c3de41a60fe2a0e74720a5ceb3ac1d17699c4f9849d9f7eb4dd55f009333c&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20250317-20250323)", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247488851&idx=1&sn=a43c907623ec3b71e29230f3e545ff68": "某开源cms 0day挖掘", "https://mp.weixin.qq.com/s?__biz=MzkyMzcyMjgwNA==&mid=2247483882&idx=1&sn=b5e4c934610b742b1a66c27dfdabc7a6": "poc难找？无问AI来帮你", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488123&idx=1&sn=b7aee73a916b84dc4c9b5119f1328c45": "Ollama未授权访问，白嫖AI服务 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524160&idx=1&sn=0a8fb96dd0d113225dc1ef266445f821&chksm=ce461450f9319d4601c0690cca59db779835f4e51d364c0fff3f6dbb9deab0e46e7627beeed3&scene=58&subscene=0": "【漏洞通告】Mozilla Firefox 沙箱逃逸漏洞(CVE-2025-2857)", "https://mp.weixin.qq.com/s?__biz=Mzk1NzE0ODk3Nw==&mid=2247492095&idx=1&sn=e05a2c434938ea37ab25bfec6f2995b2": "CVE-2025-30208，资产巨多（中国域名资产：12635+），附POC+批量检测脚本", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489028&idx=1&sn=2093ce6762f3251c9e9d9b6de632ad98&chksm=c2c6410ff5b1c819362fdf10a6e0acbea0001f6ca2dd2cdbac4ca1496af3aeda46869a3fa4dc&scene=58&subscene=0": "【漏洞通告】VMware ESXi&Workstation&Fusion多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489695&idx=1&sn=44e2f9c413c2cf08cdf02cd902212561": "【漏洞预警】Git 终端提示信息注入+信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135571&idx=1&sn=451a4d09d4e99c41227f7e738fd922de&chksm=bd15ae808a622796d75d85bb9e4abfd791d085b27f1b32cc8b1b6bc4ad1f2390e5a4ce4c3175&scene=58&subscene=0": "百度对“开盒”事件发布声明，已报案；美国西部联盟银行遭遇第三方供应商零日漏洞攻击，2.2万客户数据遭泄露 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499832&idx=1&sn=ebbb038d6dec77960f88e5a0af45fecb&chksm=ec1df010db6a79065ba5e20918e2613774bfd8c2889e4e5a69aeddbb2c809a98d0f1951db552&scene=58&subscene=0": "记一次 RCE 0day 的审计过程", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488238&idx=1&sn=9ac7927dbdd44832a9f0af3f156378ce": "Mitel企业协作平台存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484722&idx=1&sn=84d734d15904650106cf6f3ba5b4af22": "管好IT资产，高效防治漏洞（1）", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497319&idx=1&sn=77aea8b0dc390b45f367b1edccaa56f7": "【漏洞挖掘案例】RCE", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524536&idx=1&sn=fe1a221c3018811a521d058549750ce5&chksm=eb70be87dc07379174ddbb0b779981b4c3e9b5b51a28f443dedb84b98e3ab3fb6f44063ae962&scene=58&subscene=0": "2025-03微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068690&idx=2&sn=98e895fbed9215819bc54876b78c409d&chksm=f36e7712c419fe0424b6ab37b13a32cfa1b379c514d4ca9bfaaa6d34e116b71548d60ca56d4a&scene=58&subscene=0": "【安全圈】JumpServer漏洞使攻击者可绕过认证并获取完全控制权", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489211&idx=1&sn=2545a4465b323bce728685e5258167b0&chksm=c2c641b0f5b1c8a6caa338aa94f4eb98241e1be29c59d25214c1bf60d93e64b68a84625c2b76&scene=58&subscene=0": "【漏洞通告】CrushFTP身份验证绕过漏洞(CVE-2025-2825)", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247496682&idx=1&sn=e4643091842bb9fe7d576a85fe1e129a&chksm=ce96bed4f9e137c2d0a34d7f1aaad207f3a7e812cdf4e0f091b7d0a30d94463914b35014189e&scene=58&subscene=0": "天融信发布《大模型组件漏洞与应用威胁安全研究报告》​", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651316826&idx=3&sn=0cc4af02352183b198b12bda854a860a": "Veeam与IBM发布备份和AIX系统高危漏洞补丁", "https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486337&idx=1&sn=8923fda8c1f614d59101254e61f3bdcb&subscene=0": "美国政府只囤积几十个零日漏洞，你信吗？", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068467&idx=2&sn=8209e2048ee474d6b91f16029aa9c134&chksm=f36e7633c419ff25d6e98a532a0be210b5f282f06c12a405f3e5a178eeaa0ce3f664e58b2fab&scene=58&subscene=0": "【安全圈】PHP XXE 注入漏洞让攻击者读取配置文件和私钥", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490358&idx=1&sn=6b611d9ca7e3011a38f481ba7d429dda": "高危 PHP 漏洞可绕过验证加载恶意内容", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068486&idx=4&sn=0c958e3ed4260fbf4a7e0e8de17dafc3": "【安全圈】SuperBlack 攻击者利用两个 Fortinet 漏洞部署勒索软件", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503244&idx=1&sn=53fa39779f86846ff49c41cc68228e3e&chksm=fe79e914c90e6002e34dd3ba99521bdfeba0aca1e686b66e26cd67a8a1f4be0f3359ec564ffd&scene=58&subscene=0": "【已复现】CrushFTP 身份验证绕过漏洞(CVE-2025-2825)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487022&idx=1&sn=be6d4d80fd50ee781458871cfc1eef6f": "漏洞预警 | VMware ESXi 存在缓冲区溢出漏洞（CVE-2025-22224）", "https://mp.weixin.qq.com/s?__biz=Mzg2MDc0NTIxOQ==&mid=2247484725&idx=1&sn=743dcff5d5db215c7484ca210b88caa7": "用大模型探寻补丁代码的秘密 - 从漏洞挖掘到POC构建之旅", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522638&idx=1&sn=15b5a925b5a9f1eecca2dc4a721a63a9": "微软利用AI从开源引导加载器中找到20个0day漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485777&idx=1&sn=56f21b15e2595b14428f21c900388f04": "【高危漏洞】NC importTemplate 接口存在XML实体注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247505968&idx=1&sn=7c06c6abf44523c8ede64d6b1f322962": "MWC2025 | 华为网络安全产品通过全球权威标准机构BSI首批漏洞管理体系认证", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064050&idx=1&sn=e5cfd0999539184202ac68f658f7a870": "信息安全漏洞周报【第014期】", "https://mp.weixin.qq.com/s?__biz=Mzg4NjY3OTQ3NA==&mid=2247486842&idx=1&sn=e2839892a4c331387be5a704bf28bb61": "玲珑安全第六期漏洞挖掘培训开启！福利多多，速来围观！", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068386&idx=1&sn=1b7561dc90e9ac7086e4648fbc108a8c": "【安全圈】紧急预警｜Elastic Kibana 高危漏洞，可远程执行代码，速修复", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522555&idx=1&sn=46e012bb1770fd23ba35da839b60f669&chksm=ea94a991dde32087103cc41735938435faba038d9213a40c0d5778cc6a30e8d7541a8aed1d9b&scene=58&subscene=0": "Veeam 修复Backup & Replication 中的严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NDg0ODkwMQ==&mid=2247486182&idx=1&sn=2add35c4bee30176cb7ea2ab9814d136": "高危逻辑漏洞-Web3+Web2前端结合的ABI任意调用实现链上交易免gas", "https://mp.weixin.qq.com/s?__biz=MzUzNDMyNjI3Mg==&mid=2247487315&idx=1&sn=4a145deeb3c9c632593bb92f6a88d217": "CVE-2025-21548(mysql客户端RCE)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651317729&idx=2&sn=26cffa974cc791aae1afb86227ead8ec": "CISO 视角下的十大漏洞管理最佳实践", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068486&idx=3&sn=49a253062081aae290f02f07ac4704a2&chksm=f36e76c6c419ffd05cc7840422d46afd31629c21afe551122f0f4e6e9e6578d0f0304a26ae04&scene=58&subscene=0": "【安全圈】GitLab 警告多个漏洞可让攻击者以有效用户身份登录", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514099&idx=1&sn=8104d7f7e60e4828b66cb6cc30bf9fd3": "运营商巨头赔偿超2.3亿元：因系统漏洞令用户损失巨额资金", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490771&idx=1&sn=3ea948dc94da7cd2c0665bf5db8aa2ac": "深科特LEAN MES系统SMTLoadingMaterial SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503229&idx=1&sn=5f984b9cab97f883a7b92dad91e49ce4": "【已复现】Ingress NGINX Controller 远程代码执行漏洞(CVE-2025-1974)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489887&idx=2&sn=d1b44ebd3e9bc50f4110fcef5e0ccbc6": "【漏洞预警】Apache Parquet 代码执行漏洞(CVE-2025-30065)", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511217&idx=1&sn=f10cd6cccb88b27e6e00c232e8ca763c&chksm=fa52790fcd25f019358bbd12fe8671ab15c4414350450f773162f0b32549ca6aacea0f71d8ad&scene=58&subscene=0": "山石网科入选国家工业信息安全漏洞库CICSVD技术组成员单位", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490841&idx=1&sn=5b49fc5bd1f685c1483839448ca9aabc": "万能门店小程序管理系统 doPageGuiz SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514089&idx=1&sn=550fb0382e88cba964e12c3b23e25302&chksm=ebfaf0c9dc8d79df27e925935435e7b0c6fe6519771bfeb584b995d7bed8af635b83e5cb8995&scene=58&subscene=0": "OA系统漏洞致使数据泄露，青海一公司被罚5万元", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513903&idx=1&sn=308d37d9afc7b9c1bbeee150d0f27040&chksm=ebfaf00fdc8d7919d2e65ff851ff3fda13a8b220549b349bdd8005e97ee30656717595112fd2&scene=58&subscene=0": "虚拟机逃逸！VMware高危漏洞正被积极利用，国内公网暴露面最大", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581542&idx=1&sn=ad77c2d4beeea39629018a1de47c3ffc&chksm=e9146f5cde63e64a694399fcee5658e6f7e0a49cc4137740dda2cd89820ffe9ea1fcc500af08&scene=58&subscene=0": "Mirai 恶意软件借 Edimax 相机 RCE 漏洞大肆传播", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522612&idx=2&sn=50c7ad88e87b485a09c7ae916f9d9677&chksm=ea94a85edde321481936eccbf1e530b0eee10a5fd74e50d13bb997d738c7bd7e4ffdda0ee941&scene=58&subscene=0": "Firefox 存在严重漏洞，类似于 Chrome 已遭利用0day", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490949&idx=1&sn=b036b7fd087877a1c1e35107ec8667c3": "OLLAMA 未授权访问（CNVD-2025-04094）", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247492018&idx=1&sn=f6c2fa64faec6989678c3b5f676fa6ae": "网安笑传之《最新情报》TG 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490705&idx=1&sn=f5a167bb5a411f732d7f86b842591ff4": "网康科技 NS-ASG 应用安全网关 add_ikev2.php SQL注入漏洞(CVE-2024-3458)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488194&idx=1&sn=4fa7fb362dcd714adccbfaa020aec1e8": "顺景ERP TMScmQuote∕GetFile接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581542&idx=2&sn=ef5fe7c8ee3aa63d8f53067527f9797a&chksm=e9146f5cde63e64a33e419d1eb7d8ab1071dad1b6d4eca0d0f2a761e8d3a0463b40b63f01517&scene=58&subscene=0": "安全动态回顾|警惕 Apache Camel 漏洞，Windows NTFS 漏洞可能被用于数据窃取", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497319&idx=1&sn=77aea8b0dc390b45f367b1edccaa56f7&chksm=e8a5fc04dfd275124534f85730352d2cdf90ea28d18c9f1ff6d1ede5c1214a22bcddc11fe723&scene=58&subscene=0": "【漏洞挖掘案例】RCE", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652095005&idx=1&sn=7e5eda40022a6ecf6f39094eabc755fe": "新的 Windows 0day漏洞让远程攻击者窃取 NTLM 凭据", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579828&idx=1&sn=ae2245f2dadec2e5b2e181707bda93ef&chksm=9f8d28bca8faa1aa78c9627eccffd883155204692354a292c7b190c2ddaf354d034a5b984b56&scene=58&subscene=0": "实力认证！360入选国家工业信息安全漏洞库技术组成员单位", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486667&idx=1&sn=0aa6e0b666110b7eb82210b769e8e216": "【已复现】Vite 任意文件读取漏洞(CVE-2025-31486) 附POC", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522429&idx=1&sn=7d99cddabc388a3013ca34f627942e4a&chksm=ea94a917dde320011006f5e679bedfd31fd32d393bb995f4908d5696e704d35dea9b2b6b602a&scene=58&subscene=0": "速修复Kibana 中严重的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502184&idx=3&sn=e02b98d5c8bb81b2b22fb7d663f4ee30": "安全内参｜面向漏洞编程：如何让AI编程助手生成带后门的代码", "https://mp.weixin.qq.com/s?__biz=Mzk3NTIyOTA0OQ==&mid=2247484755&idx=1&sn=bcf3bc12db7657b17728d7d4aac6529a": "Metasploitable2-Linux。关于老师给了任务，一位彦祖返回家无私奉献，打穿靶场的故事。手搓+msf提权漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068838&idx=4&sn=002ce9534343b99abd03634daa05b2ff": "【安全圈】Dell Unity 企业存储系统现严重漏洞，攻击者借此可实现 root 权限接管", "https://mp.weixin.qq.com/s?__biz=MzkyMzcyMjgwNA==&mid=2247483872&idx=1&sn=31b810718d480ba119f67d3e1712ba07": "Wazuh RCE漏洞CVE-2025-24016", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135460&idx=1&sn=a13284cb4a851616277053291d51988d&chksm=bd15ad378a622421a956dc238b66c97ba05efe1d8b33368f13012f4ff3352b9771b0d034c27d&scene=58&subscene=0": "警惕！黑客组织 Lazarus 在 npm 平台投放恶意软件包；SolarWinds网络帮助台漏洞曝光：攻击者可解密敏感密码", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068550&idx=4&sn=2c40ebea61f1937556e695b2be5f2873&chksm=f36e7686c419ff90e224cfc0527bf8094f545ccfac663b9591a26199291ac165402523d02161&scene=58&subscene=0": "【安全圈】PHP 遭多重安全漏洞 “围攻”，应用程序风险骤增", "https://mp.weixin.qq.com/s?__biz=MzA4NDQ5NTU0MA==&mid=2647690664&idx=1&sn=522e16b0585b1398c84014d2d0ab2333": "0033. JS 漏洞赏金 2.0 Extreme Edition 2024", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503341&idx=1&sn=ce0710dc3a6918c74ef22d5044654abb&chksm=f2585e9ec52fd788ce5eb3c560d9ebc90e3fbb16171190237dccd816bd01536b50b5b12e73fe&scene=58&subscene=0": "雷神众测漏洞周报2025.3.3-2024.3.9", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485737&idx=1&sn=ccc400e1ade315a305c66d36b8adce27": "蓝凌EIS平台UniformEntry.aspx sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068486&idx=2&sn=a1a3a144476d291506c6e2ada3ac4e29&chksm=f36e76c6c419ffd0cc51701496ed3bb58d3d7338caf641f109e32d9849dc453b87b1c0365d5e&scene=58&subscene=0": "【安全圈】Tenda AC7 路由器漏洞使攻击者能够通过恶意负载获取 Root Shell", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651317105&idx=2&sn=b72ae8277dbeb6be4e8ad59d982be965": "1小时思维蜕变！手把手教你挖出别人看不见的宝藏漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487016&idx=1&sn=dd6858c6275804be5e5f65f1068b7b16": "流行的 Python 日志库存在远程代码执行漏洞 (CVE-2025-27607)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528850&idx=2&sn=a92b4c381dcf89e40f17e7e410854589": "CVE-2025-31334：WinRAR 漏洞可导致绕过 Web 标记并执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490970&idx=1&sn=2897516a06b90533bff2c3097842c8a1": "用友U8CRM biztype.php sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MDU4NjYwOQ==&mid=2247484215&idx=1&sn=b3b4f0dd8ffc562c078ac4fe6cd3a90f": "SRC漏洞挖掘之SQL注入漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU0NDk4MTM0OA==&mid=2247488251&idx=1&sn=a0ff69f59017991bb27131c5e19d9dac": "金蝶云星空K3Cloud反序列化漏洞(老洞新遇)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651317105&idx=3&sn=bc1394021f4b824172f1f7cac528f7f8": "Next.js 严重漏洞：攻击者可绕过中间件授权检查", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484772&idx=3&sn=00f8b99f517f20975d9bfb09336649aa": "SAP_EEM_CVE-2020-6207-PoC", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247485167&idx=1&sn=e589a6e71a843af60fa3c86007e6177a": "Linux提权漏洞CVE-2025-27591", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503212&idx=1&sn=0b14bc32a6c2846c590bae64986309cc&chksm=fe79e9f4c90e60e20bc345c610a1a75e79dca3b5c7fe389c1d8c5f06560d38051e7ca12d8378&scene=58&subscene=0": "【已发现在野利用】Google Chrome沙箱逃逸漏洞(CVE-2025-2783)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497377&idx=1&sn=3fd371ed2ade0ad74770f2e789a2d099&subscene=0": "赏金$10000的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581756&idx=1&sn=233a6168db1e7d093bfe515851283fdb&chksm=e9145006de63d910d6ba07704fe573a00724fd03085482864aecc4369de0434abdb1c4caa92b&scene=58&subscene=0": "Android Zygote 注入漏洞曝光：攻击者可借此执行代码获提权", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522661&idx=2&sn=1f24df87fa44c9b3c92d7a7cdb139dd8&chksm=eb52102cb47a165cc6172ef95b6d1805e4b54eb30d1125734b3a58aeefdb2ff55c72ae952cb6&scene=58&subscene=0": "谷歌修复GCP Cloud Run 中的提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487016&idx=1&sn=2e54fafefdfe86ddaedd7dad16058baf&chksm=c22296d1f5551fc732f22ff2a4ba78de517f402c0831a2f381ccf12cad6bd3f37691c828388e&scene=58&subscene=0": "漏洞预警 | OLLAMA 存在未授权访问漏洞（CNVD-2025-04094）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522499&idx=1&sn=6f07e20fe9fdb9cd65f9d65f779e0e37": "Meta：FreeType 0day漏洞已遭活跃利用", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247496690&idx=1&sn=6010f3a0a91bb3e0546c20a0e004fdd1": "【风险提示】天融信关于Vite任意文件读取漏洞(CVE-2025-30208)的风险提示", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485894&idx=2&sn=4430d0363e1ec98d7f78691dc17745c1": "CVE-2025-24813｜Apache Tomcat远程代码执行漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514106&idx=1&sn=ce1556ee1970bc492d3185f1b9c3046b&chksm=ebfaf0dadc8d79cc2fa28d6291ceee2690d919a0c32a8f5f5ad4ede411fd6647c8656d260654&scene=58&subscene=0": "疑似NSA网攻行动曝光：神秘零日漏洞利用链 目标针对俄媒体科研机构", "https://mp.weixin.qq.com/s?__biz=Mzg2MjU2MjY4Mw==&mid=2247484933&idx=1&sn=64b9e26e7b7557dedc22cb286ebdefb7": "next.js再出严重安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487053&idx=1&sn=b9d22ca7bd7a1055a77e9be1ed28fcaf&chksm=c22296b4f5551fa2b86ae68c0ba9850ffe65cd3856cedfaa831fac42008140a40a26bed54099&scene=58&subscene=0": "漏洞预警 | Ruby-Saml∕GitLab存在身份认证绕过漏洞（CVE-2025-25291、CVE-2025-25292）", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635280&idx=4&sn=167a335f04f28d92d3d1fa32644ab9dd": "OA系统漏洞致使数据泄露，青海一公司被罚5万元", "https://mp.weixin.qq.com/s?__biz=MzIzMDM2MjY5NA==&mid=2247484147&idx=1&sn=0939e9dd2be26e16a02de544fd6d7072": "金融业“隐藏content-type”漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651317483&idx=2&sn=324b63cffc87610aa3dd0406f72e079f": "Ubuntu安全限制遭突破：攻击者可利用内核漏洞提权", "https://mp.weixin.qq.com/s?__biz=MzkyMzI3OTY4Mg==&mid=2247486871&idx=1&sn=7682083f99382971099682257e097d0a": "0Day｜Telegram Mac客户端RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495843&idx=2&sn=3b77c90392efb207416c67e1fe0d85e8&chksm=fd74c06aca03497c648fcf713e58a7a6fc33dac6b532f9e91dae64b91a8e95394f5e069ba62b&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20250310-20250316)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495859&idx=1&sn=dd2bd48d4d9a3957d72e6c22ef2c981a&chksm=fd74c07aca03496c494eaf5bcbb9654842ac3bda890fda75180646b9124f9228315d48375a20&scene=58&subscene=0": "CNVD漏洞周报2025年第11期", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513939&idx=1&sn=174ed08d5a6c7985103d8537cbcc9346&chksm=ebfaf073dc8d79659e21b1bf00aa5bcf21b6868436740aab2bffdf7adebc9c7c03cb0d3df7dc&scene=58&subscene=0": "谷歌2024年发放了8500万元漏洞赏金，单个漏洞最高奖励72万元", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522661&idx=1&sn=234e6d8db3a2e78f2339f4951303f508": "Jan AI 系统中存在多个漏洞，可遭远程操纵", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135582&idx=2&sn=ac32564a4acce1bf67c2f14f346fd876&chksm=bd15ae8d8a62279bb919422313fa40df59f4553e4d7f990d6118c3391231f83835a4a6751909&scene=58&subscene=0": "国家互联网信息办公室、公安部联合公布《人脸识别技术应用安全管理办法》；​IBM AIX曝满分高危漏洞，可导致系统完全沦陷 |牛览", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247488621&idx=1&sn=a5074e3b1cd69f308361704ca9286056": "一次0Day漏洞Rce审计流程", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511471&idx=1&sn=32bd67757c2cbd6a79189bf1477d235b&chksm=fa527811cd25f107c9c9199292c9f0a93ad38ab2182c46f4066d25a5220f2f60f25701767127&scene=58&subscene=0": "Deep Java Library (DJL) CVE-2025-0851 漏洞复现与深度剖析", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489859&idx=2&sn=879bb903b2b9b5ea318af022c40e3724": "【漏洞预警】Google Chrome沙箱逃逸漏洞(CVE-2025-2783)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590984&idx=4&sn=2044b458d80ee0788c018e803e567e04&chksm=b18c2f8286fba694e564da0d5533bd62c3ba613b2578311a499c92ee9844005979547e166d4f&scene=58&subscene=0": "更新小节：syscallfuzz | 系统0day安全-Windows平台漏洞挖掘（第5期）", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581723&idx=2&sn=a731992d8e99a45bfa48d2d2b7fb2090&chksm=e9145021de63d937fe9060a3bae70a87d1d63db083c029fc8fbed96781a26ee24782a6608d18&scene=58&subscene=0": "研究人员揭露 macOS 漏洞可导致系统密码泄露", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650609940&idx=3&sn=f77b5ceebb4c1b1584c1c909097b47e4": "某云盘系统 API 端点无限制上传漏洞解析", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528683&idx=1&sn=2120705cacf11ce8965ac57f3a6b68f5": "GLPI 中的预认证 SQL 注入到 RCE（CVE-2025-24799∕CVE-2025-24801）", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511462&idx=1&sn=dbf6cff295b957c2286575c5505be012&chksm=fa527818cd25f10e52b8a962818a01594298abb7a5b1c6c341ec6dac09d2cb920a403c24e87e&scene=58&subscene=0": "Apache ERP开源框架OFBiz高危RCE 漏洞复现分析", "https://mp.weixin.qq.com/s?__biz=Mzg5MTM5ODU2Mg==&mid=2247501701&idx=1&sn=17fc2d3e2f113ad0d445841150aae09a": "[安全开源分享] Datacon24漏洞赛道冠军分享：vuln_wp——大模型赋能的漏洞自动化分析全解析（武大）", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489242&idx=1&sn=32afe35463f7452bceb936685fdc41d7&subscene=0": "【原创漏洞】Vite任意文件读取漏洞（CVE-2025-31486）", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511207&idx=1&sn=58a902a17a6203abce97ae77816a3818": "打印机变间谍？揭秘施乐设备中的致命漏洞！", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489887&idx=1&sn=52d7f6fcc01b08c1262f13722684690b": "【漏洞预警】MongoDB Server 证书验证不当漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524017&idx=1&sn=1eee483c71f1b398696a1d224d767b12&chksm=ce4615a1f9319cb7c52e9731ee8e24dcd9f34b47a048b0a5ff2af0f2bee17afdd1723624ae07&scene=58&subscene=0": "【漏洞通告】VMware ESXi 等多款产品缓冲区溢出漏洞(CVE-2025-22224)", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489140&idx=1&sn=005ca73eac41c7c2b4d4cfd7fdb27989&chksm=c2c6417ff5b1c869c97d858ad5662a530cbb866b0b9cc70f278f36020e2cbb915fb8b52bd8ae&scene=58&subscene=0": "【处置手册】Next.js中间件权限绕过漏洞（CVE-2025-29927）", "https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486325&idx=1&sn=b007e2a16f16a368992e9a04becefb3d&chksm=fb04c81dcc73410b989b4cc614e455803aa48f6f21978d65381410aa3b32f39e2e8ec797b473&scene=58&subscene=0": "NSA的零日漏洞使用策略", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485590&idx=1&sn=2a71486a3b138f40f066e4f8b80bafd4": "【最新情报】新 Telegram 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522518&idx=3&sn=6117e55c1a630be2784ce1a5033b2094": "思科修复 IOS XR 中的10个漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486300&idx=1&sn=5f149bb937a0d97f3d955d16139b09eb": "\"0day\"漏洞裤", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522555&idx=1&sn=46e012bb1770fd23ba35da839b60f669": "Veeam 修复Backup & Replication 中的严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497345&idx=1&sn=2a8ed1271cffebf6ef88cfb93c778cb4": "【SRC实战】支付逻辑漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487069&idx=1&sn=d79bf576f44253634e79f89adf4dc837&chksm=c22296a4f5551fb206bdfc5cd48995e8e6e2de51e7c02bbf332ab359d163bc98802ad54824a2&scene=58&subscene=0": "漏洞预警 | Next.js 中间件鉴权绕过漏洞 (CVE-2025-29927)", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489172&idx=2&sn=6be35b296e5724047a1f7ff186aeff7d&chksm=c2c6419ff5b1c889b0e3e27e4f5e769c364a5b4300eee92161ef4b951a18cc97859554217877&scene=58&subscene=0": "【支持排查与检测】Vite任意文件读取漏洞(CVE-2025-30208)", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499067&idx=3&sn=d404c85abd8bdb6c3324f5d84e25183b&chksm=fa5953d6cd2edac0bf20f8d0a542507a3fb18563e87f08d2eb20d047b52c6077acc8bdf500e3&scene=58&subscene=0": "利用 3000 条大字典 MachineKeys 爆破 ViewState 反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484741&idx=2&sn=624995e43a19954bde28260f6fde500b": "MagicFlow-防火墙网关-main.xp-任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650277881&idx=1&sn=102cc0320f7027e82f03573ff2f16045": "携手国家级平台共建防线，盛邦安全获CNNVD漏洞库权威认证", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491008&idx=1&sn=a12cad183ebe681d7dec3021e816e928": "安美酒店管理系统 ∕list_qry.php接口 sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247488725&idx=1&sn=52287f1233a6787ea3e5deb34f55ac58": "【RCE】Dedecms V5.7.115 存在命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484669&idx=2&sn=c1b532838dd0610644a601decaa5b2f7": "Intelbras-Wireless-未授权与密码泄露-CVE-2021-3017", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513903&idx=2&sn=d68ae359b40edf3e65dd1d1f91932450&chksm=ebfaf00fdc8d79190748dd029b296c34afa7aeb0ed691b2d90dd42e5f014115ce7ff664ef20b&scene=58&subscene=0": "美国众议院通过法案：强制政府供应商设立漏洞披露计划", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484827&idx=1&sn=7e51f4747d161bec4842b4f0a2c5cc54": "CVE-2025-24071：通过RAR∕ZIP做到解压就传输NTLM哈希", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522579&idx=2&sn=df3fca1672e67390925fdec6d6a9c0b7": "Ingress NGINX 控制器中存在严重漏洞可导致RCE", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499044&idx=1&sn=b28ca172001ac4635fa12424bf8cf07b&chksm=fa5953c9cd2edadfa318d435c7461a368445f6f48c7b7650bfcf86f9c41a92fa47e7f0aa82b0&scene=58&subscene=0": "ViewState再现漏洞：行业内又一款知名的 .NET 分析工具爆出反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY1NTI5Mw==&mid=2247491570&idx=1&sn=2ee1fbfeebd277c3f51e39b15bc57c11": "1小时思维蜕变，手把手教你挖出别人看不见的宝藏漏洞！", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492754&idx=1&sn=9f437f4b0b3d4edced726f996430121a": "【已复现】Ingress NGINX Controller 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484655&idx=1&sn=44fe474b21b77e33f82994275c1e6b1d": "H3C多系列路由器存在任意用户登录漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494581&idx=1&sn=ad0145d6eed35548fb11eb39f7e438aa": "大模型如何挖漏洞 | 攻防视角下的AI安全", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485750&idx=1&sn=74f395c1171e6c9c874d7dd8c51669ad": "致远AnalyticsCloud 分析云任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135404&idx=1&sn=ec610c9e2c9d065f22a50abb851c7e68&chksm=bd15ad7f8a622469164870228249dc49efc800ab43dba9d5f29535505b2ddcb34a8e78e63c7f&scene=58&subscene=0": "公安部网安局提醒：警惕5种个税汇算骗局；新型勒索团伙SecP0出新招：威胁公开未披露软件漏洞 | 牛览", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247503042&idx=1&sn=20c19508c68cffb26c4b60f89bc1d381&chksm=ced9bed73923f615c7ca290ff333b80360e5d9f20262dd2ae6f9c3b08fe0ba542b4baf4b7460&scene=58&subscene=0": "600+历年攻防演练漏洞汇编！千起实战案例还原漏洞攻击链", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490666&idx=1&sn=5a6a46702a3c37dcdd57e12f37761f3e": "金盘移动图书馆系统download.jsp存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499049&idx=3&sn=4b97ee9cc0ae49cd67b78af29c0b5465&chksm=fa5953c4cd2edad224380f18ca2a769864bc1ac11a25a2452b27440670602b83a81dacc32a24&scene=58&subscene=0": "行业内又一款知名的 .NET 分析工具爆出反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484338&idx=1&sn=acf61d3d2e657954c7a599c74548d96d": "XSS漏洞利用工具之BeEF", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522548&idx=1&sn=665e87c79bcffb3144bfddbfa30f4941&chksm=ea94a99edde320886f01c758120a332a410814be0670c5949a7a78a617537558f68748989bb1&scene=58&subscene=0": "mySCADA myPRO中存在多个严重漏洞，可导致攻击者接管工控系统", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503112&idx=1&sn=c893698042b8152f244f955f31183141": "【成功复现】Vite任意文件读取漏洞(CVE-2025-30208)", "https://mp.weixin.qq.com/s?__biz=Mzk3NTIxNzEzNA==&mid=2247489747&idx=1&sn=3ab64e4747733dd4b3d0dc1751603d7e": "【漏洞挖掘案例】不是哥们，北大被\"RCE\"了？", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487924&idx=1&sn=0e4cb23d4bf3788912144ba166947fcf": "漏洞利用 第二集 - 进入矩阵", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538336&idx=1&sn=9b2772d6dcefe1955b7581aa28773808&chksm=c144241df633ad0b63d46cbd1023a2b25ca5ff8486efbd89fa501d4ff371f40475db58dfc7de&scene=58&subscene=0": "OpenAI 漏洞赏金计划将最高奖励提高至 10 万美元", "https://mp.weixin.qq.com/s?__biz=Mzg5MDU4NjYwOQ==&mid=2247484236&idx=1&sn=5193c349b28c2433ae1e1c9799effd64": "SRC漏洞挖掘之并发漏洞挖掘实战指南", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651317727&idx=3&sn=c54d28a8a7e6dc5d3f6f82727e218720": "微软AI工具发现GRUB2和U-boot引导程序高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522429&idx=2&sn=de12997404efb67be58ceb4d9f00b64c&chksm=ea94a917dde320018285f560a02a66ff19ca665a4ce5ccef57f73129106406792248c5ba2b87&scene=58&subscene=0": "Jenkins 修复CSRF和开放重定向等多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247506809&idx=1&sn=ec7c10de7e838754fc826ef2cd48b719": "WinRAR新漏洞：绕过Web标记，恶意代码悄悄运行，快更新！", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514023&idx=1&sn=381518eb509e476f3685c6908382a09a&chksm=ebfaf087dc8d7991b71a2196a788febe30c7e0370632a1f53eebc61ca677b5d55e0b4881a499&scene=58&subscene=0": "面向漏洞编程：如何让AI编程助手生成带后门的代码", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590893&idx=2&sn=af328a87e3b03b7ab64985167f61aadc&chksm=b18c2e2786fba731c9fd24a85ac66edc22f20580eb8cf8f4f8e6726836d9de793298bba21684&scene=58&subscene=0": "Apache Tomcat漏洞在被公开披露30小时后就被黑客用来展开攻击", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503334&idx=1&sn=c4e505bf12eabcf1f82af6e83b7b56a9&chksm=f2585e95c52fd783e8109ca24c97183197b1ab9ce706d245ad7ea1c431e08184b2752e467415&scene=58&subscene=0": "雷神众测漏洞周报2025.2.24-2024.3.2", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507742&idx=1&sn=b7ccd3b0c1a65d6e8d62b80f4e20a150&chksm=cfcabc0af8bd351c34cb4c878fe7fbd7a29db26e7a02ac762c35c0a2366edabcdb81c2d4f0e6&scene=58&subscene=0": "漏洞通告 | Kubernetes Ingress-nginx 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522472&idx=2&sn=634e39e2522108a7d73cce0437f95b34&chksm=ea94a9c2dde320d4cca1664a0acf35b1db71939405a13d0836aced66c411095f4704a7aa3dc9&scene=58&subscene=0": "Moxa 修复PT 交换机中严重的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247497266&idx=1&sn=5dcee01769e4b74ec8c673c1e920ddde": "telegram小0day， .m3u格式会暴露ip地址", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068768&idx=3&sn=bce77deed6ad8035e8531d60d82059f8&chksm=f36e77e0c419fef63b274e9a485370a13053ddceca8e38cd1be7499a6f961bd9441ecda66f41&scene=58&subscene=0": "【安全圈】针对近期 Chrome 零日漏洞的利用，Mozilla 向 Windows 用户发布紧急补丁", "https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247484958&idx=1&sn=a5fdef6b47f9f1774734be2fec7da2bb": "从CVE-2025-30208看网络空间安全专业", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247623117&idx=1&sn=46c175a5f7fdf95af936bf30599cba76": "汽车.工控和物联网行业的.0Day.漏洞主动挖掘技术", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581481&idx=2&sn=2a2b8413424b32da5743ddb9a2b5d0aa&chksm=e9146f13de63e6057096876ddbef6879d3b48aab956596d0c6457f950bb9fc9ccd55c068b527&scene=58&subscene=0": "警惕 Apache Camel 漏洞 攻击者借此能注入任意标头", "https://mp.weixin.qq.com/s?__biz=MzA3NzE2ODk1Mg==&mid=2647796090&idx=1&sn=d40321b3521f3b372257e0808346b7ba&chksm=8770a12db007283be4aab4b99cec391d73b79be34ce93228c2d2def1669ed25b5c9be1b5c9c7&scene=58&subscene=0": "悬镜入选“移动互联网APP产品安全漏洞治理”十大优秀案例", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485906&idx=2&sn=c0c80270b0a1a48f5f56c0501a6e948d": "CVE-2025-24071｜Windows 文件资源管理器欺骗漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247498559&idx=1&sn=af48481d4b2e0ab2512792a0148d1423": "当风云卫拥抱DeepSeek发生了哪些？ --从漏洞验证到自动修复的优化之路", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651316826&idx=1&sn=68a582db0aaeae73798dfecdb67bf96b": "Cisco智能许可工具漏洞遭利用，内置后门账户曝光", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487541&idx=1&sn=c628c51dfc39e091a6aa66c67807f1c9": "紧急预警：谷歌Chrome高危零日漏洞CVE-2025-2783遭APT组织利用！速更新！", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503178&idx=1&sn=3ac27daa001c706a40779721de3bf861&chksm=fe79e9d2c90e60c46785fcc107dc4f83985b7e2a5b4fc065c10562793198059272ec27181c91&scene=58&subscene=0": "【已复现】Windows 文件资源管理器欺骗漏洞(CVE-2025-24071)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522535&idx=1&sn=10fdb76beac0cf6d704c962fd3bc29a0&chksm=ea94a98ddde3209ba980b64632a182a7bb7e2abfb406f94bc1852dd2bf88cd66c2e7fb101bbf&scene=58&subscene=0": "ChatGPT 漏洞被用于攻击美国政府组织机构", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484861&idx=2&sn=f09d5bd239874d98b7f4518ba642a8c9": "Web应用程序渗透测试和漏洞赏金狩猎的综合指南", "https://mp.weixin.qq.com/s?__biz=MzI2NzI2OTExNA==&mid=2247518027&idx=1&sn=32dc85072594e95e1c10986972ae569b": "MiSRC「白帽赏金挑战赛」上线！提交漏洞赢多重奖励~", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490065&idx=3&sn=e70df2122c3094a8037fd3096b81ed74": "近期暗网 0day 售卖情报预警", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499132&idx=3&sn=bad7a801742081d9c36d408ad807c37c&chksm=fa595391cd2eda87375fa2afd6a738675f4f674de783b1ff7c3fad8f601a11014040430a1832&scene=58&subscene=0": ".NET v2.0 框架不用愁，通过 ysoserial_frmv2 触发反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3NDE0NTY0OQ==&mid=2247485041&idx=1&sn=ffd20bf2c8976c39ce10046760dfddfb": "卷不动Web渗透？世界500强导师带你用逻辑分析仪挖电网0day，薪资翻倍打卫星！", "https://mp.weixin.qq.com/s?__biz=MzU4MjYxNTYwNA==&mid=2247487642&idx=1&sn=71bb88df2d862259f4efa6b11b283efe": "GraphQL API 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247532694&idx=1&sn=0b8479b7a8d4db2d951234c650073a18": "专家观点丨油气管网工控漏洞识别技术发展态势分析", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247527877&idx=1&sn=e2f3cafb8ca5483d93b9636780003d5d&chksm=c2d11161f5a6987783bd107c9c0bca13161e6efde1b5ff480a723a8d0cb559f35d696689751b&scene=58&subscene=0": "SyntaxFlow实战CVE漏洞？那很好了", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484787&idx=3&sn=39f45efdd3874b5e4cf161a0de9d1c02": "Selea-OCR-ANPR摄像机-SeleaCamera-任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487050&idx=1&sn=f9c64f527e1dd43ae3fe8ad15bff0a80": "CVE-2025-24813 - Apache Tomcat RCE", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135353&idx=1&sn=eb05a450f5afe4bed0ad4fdf164d822b&chksm=bd15adaa8a6224bc47c2f0fc18b52fe5c1ddbbf69c10bd0cd9fa2b949ae25f4884dbdf9f61dd&scene=58&subscene=0": "CISA漏洞目录竟成勒索攻击“灵感”？28%漏洞被利用；新型网络钓鱼活动滥用微软SharePoint部署Havoc后门 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522669&idx=2&sn=3ecf5b6b7a463eeb4a8a469b68643184&subscene=0": "WinRAR 漏洞可绕过Windows MotW安全警报", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247496690&idx=1&sn=6010f3a0a91bb3e0546c20a0e004fdd1&chksm=ce96beccf9e137dac784e2601bb16241d8829eb676aae1a6aba6227f08cfdb300ab086d1a6fa&scene=58&subscene=0": "【风险提示】天融信关于Vite任意文件读取漏洞(CVE-2025-30208)的风险提示", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247484846&idx=1&sn=c3dd1824489ff000dd85c05c1ef51275": "某高校GPT漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwNDgwMzA2Mw==&mid=2247483916&idx=1&sn=321b7646c67224e2fe07bd1bd4cd08ee": "【漏洞复现】用友 GRP-U8-obr_zdybxd_check等四个SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522638&idx=1&sn=15b5a925b5a9f1eecca2dc4a721a63a9&chksm=ea94a824dde32132fe8f411e2418ff3302db1a3a542f516f5f37c70b2726c605ace07034ae1a&scene=58&subscene=0": "微软利用AI从开源引导加载器中找到20个0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503274&idx=2&sn=e9f6ffc56c3234e8596eb265b88a679a&subscene=0": "安全热点周报：Apache Tomcat RCE 漏洞遭两步利用", "https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247491226&idx=1&sn=b26b748a724ec62868a06f96977a84bc&chksm=902fb1b2a75838a4dc04a89505a63a014896f181443466007e9d1038dbd6378716afcc09bcf3&scene=58&subscene=0": "利用Fortinet漏洞LockBit Black勒索病毒样本分析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068293&idx=1&sn=4072ff26a5a85713e31cd4cf30212887&chksm=f36e7585c419fc9356a7046dc54fb206e322422b5731c4ab60f59fb6313a63c15c4c84191994&scene=58&subscene=0": "【安全圈】VMware 修复了 ESX 产品中三个被积极利用的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NDI0NzY3Mg==&mid=2247484850&idx=1&sn=74bfa68c6f1d096528a42672eb55c9c0": "nuclei扫描漏洞实操及漏洞模版收集", "https://mp.weixin.qq.com/s?__biz=MzkxMzY0MzAxMw==&mid=2247487470&idx=1&sn=031725f5e223aa1b49fadebbc0092b16": "EDU实战 | 某大学证书站漏洞打包", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490063&idx=2&sn=241437b974f35a6c3a28268481490310": "记某大学智慧云平台存在弱口令爆破∕水平越权信息泄露∕Wx_SessionKey篡改 任意用户登录漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490647&idx=1&sn=79a47f349f15755a1ac9615096a65d29": "金和OA-C6系统接口IncentivePlanFulfillAppprove.aspx存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538064&idx=1&sn=36865c16bae5fc4a460a0ea6115bab19&chksm=c144272df633ae3b2eebeb86193aee8ec918ee1bba78a9bb2f1e9564f2a51110aa99e7581bca&scene=58&subscene=0": "美杜莎勒索软件攻击300个关键基础设施，漏洞修复刻不容缓！", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487076&idx=1&sn=ca829b6f7c3b0c2f5b3e6132d81a40cb&chksm=c222969df5551f8b0ac104a8dd194558c93c795b6c4d68fd9257cb67d2118ff41777841aa406&scene=58&subscene=0": "漏洞预警 | Vite 存在任意文件读取漏洞（CVE-2025-30208）", "https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247501364&idx=1&sn=086338f5631ba5b9edbfad56351ced61&chksm=fddeb8b3caa931a5456bde902fabfa96936a3c49ea3b5f1757dab3eb24436a0436ec407e0bb5&scene=58&subscene=0": "ECDSA 签名中的私钥泄露：elliptic 库畸形输入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068802&idx=2&sn=6d43320c00ad321311bbe8ccf4c0cfef&chksm=f36e7782c419fe947ef2d92844fc54bf63f1cbd341987f376b281d783acadba61a670f350643&scene=58&subscene=0": "【安全圈】黑客技术自学成“提款机”，00后利用漏洞盗刷金豆非法套现10万", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528798&idx=1&sn=1c167839a88f0354525471243f8605bf": "OpenResty∕lua-nginx-module HEAD 请求中的 HTTP 请求走私 - CVE-2024-33452", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490081&idx=2&sn=c3a6d85279198a3d9597ca8b45a36fcc": "JAVA 代码审计第一课：环境搭建与SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522499&idx=1&sn=6f07e20fe9fdb9cd65f9d65f779e0e37&chksm=ea94a9a9dde320bf384198f650ba99108dc0df4acdbe19ff116f7cac68cb2314b236de4cb12e&scene=58&subscene=0": "Meta：FreeType 0day漏洞已遭活跃利用", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503162&idx=2&sn=8cdebf57c6043395f1047ecde66a85e1&chksm=fe79e9a2c90e60b4e4da14481800d5a05b9334556a4f6f8f62eeb04669e28aecd293a6207286&scene=58&subscene=0": "ruby-saml 身份认证绕过漏洞(CVE-2025-25291、CVE-2025-25292)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484741&idx=3&sn=962e945483978cf1e07e32b538b73213": "NETGEAR-R7000-缓冲区溢出漏洞（CVE-2021-31802）", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788436&idx=1&sn=978fe93496bf395d0e2e273b681a5e2a&subscene=0": "国家级黑客瞄准公用事业基础设施，致命漏洞潜伏70%水系统", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458591102&idx=2&sn=accc297b5a24cdc6b8979ef427e3e833&chksm=b18c2ff486fba6e20f2ef9b6a03739b20949b0d71c712a6939317fa449f42c783b05cbe57d03&scene=58&subscene=0": "Next.js 框架惊现致命漏洞，黑客可轻松绕过授权", "https://mp.weixin.qq.com/s?__biz=MzA5NzQ0Mjc5NA==&mid=2649766761&idx=1&sn=cff7fce88b4f8e509c5f82223fd2e3f6": "漏洞盒子商城上线｜挖洞战袍，限量预售！", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511207&idx=1&sn=58a902a17a6203abce97ae77816a3818&chksm=fa527919cd25f00f59a6c3c9a205624dbae3933296ae2a0565331ad7aa6e4ed0388e3f8fe962&scene=58&subscene=0": "打印机变间谍？揭秘施乐设备中的致命漏洞！", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484802&idx=1&sn=4b21440507d4ccbf947bd9b7c79ca6eb": "CVE-2025-24813-PoC：Apache Tomcat 远程代码执行漏洞批量检测脚本", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247516982&idx=1&sn=a506e5bf30c3428da3f626f62a649560": "漏洞预警｜Apache Tomcat 远程代码执行漏洞(CVE-2025-24813)", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247493901&idx=1&sn=871290719a78a954580cecf05bb1f934": "一款基于绿盟漏扫系统漏扫结果的数据提取工具，实现更多维度数据提取以便于进一步分析漏洞情况，有助于高效化扩展其它方面的报告", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490859&idx=1&sn=5c7fc28cdddb3219f54e5fa1d0772581": "NUUO网络视频录像机 handle_config.php 远程命令执行漏洞(CVE-2025-1338)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497377&idx=1&sn=3fd371ed2ade0ad74770f2e789a2d099": "赏金$10000的漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491303&idx=1&sn=7241c22dc3795d24d626afb4f0081efc": "vite 任意文件读取漏洞 CVE-2025-30208", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484669&idx=1&sn=82a9a982ee9d4f43c3290d5d51ccc4ee": "白帽子的 “挖宝游戏”：一篇文章搞懂 SRC 漏洞挖掘！小白必看！", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522450&idx=1&sn=d780d2de95939199fea4d699bb1d2080&chksm=ea94a9f8dde320eeb301ff7f49732cf2941422f8c1638d73d2ad535ffe50153356e5e23a63af&scene=58&subscene=0": "这个严重的PHP漏洞正遭大规模利用", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489859&idx=1&sn=c5bd152543926ed7b3eddd9af782757c": "【漏洞预警】Splunk远程代码执行漏洞(CVE-2025-20229)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503253&idx=1&sn=4097b8627e1a4e2b99e50ae829dae77a&chksm=fe79e90dc90e601b8a56ef8a1bb21b31321814d76524af3dd50c69089e719db9f2197d3ca8c7&scene=58&subscene=0": "【已复现】Vite 任意文件读取漏洞(CVE-2025-31125)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489041&idx=1&sn=4e296b6bc36202ea679b904adb098521&chksm=c2c6411af5b1c80cb5fdadb70c72996472b91948a75c00b2e1d57f706e28f6e6c050c6100680&scene=58&subscene=0": "【已复现】Apache Tomcat远程代码执行漏洞（CVE-2025-24813）", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247501222&idx=1&sn=c67ffa9d6f898a97be73218b7cc8d19e": "【漏洞工具】某路由器Golang图形化跨平台利用工具", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458591044&idx=1&sn=77634b553ea2449ef601654c336e3958&chksm=b18c2fce86fba6d8c675ac2bf8d73240506d91ca5a0faf688fe6531983abe30d1466da87974a&scene=58&subscene=0": "CVE-2023-2598 内核提权详细分析", "https://mp.weixin.qq.com/s?__biz=Mzg4MTgyOTY5MQ==&mid=2247484427&idx=1&sn=47e5bc58ad9e3af7bec270f4936d44a8": "国外漏洞赏金交流群（2）", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247519869&idx=1&sn=9dcb5e8592b1c687b44a1fe878a77e6f": "深入Vite任意文件读取与分析复现", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487041&idx=1&sn=fb038aa4f1e439a4799309bf67f1c0e1&chksm=c22296b8f5551fae1f5f314d9269a1f3f9b456602fed225a076affb51fcfbe52d3f221a79e3a&scene=58&subscene=0": "漏洞预警 | Apache Tomcat 存在远程代码执行漏洞（CVE-2025-24813）", "https://mp.weixin.qq.com/s?__biz=MzI5NTA0MTY2Mw==&mid=2247485872&idx=1&sn=e446122d80801f63da1adaa219dc9b71": "WordPress安全插件WP Ghost有远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503348&idx=1&sn=5ee2b3b8231527b88b6db57f3b018bfc&chksm=f2585e87c52fd7915e7026233da7fe8efb7af033a923c6073b88c7651cfdd85ec8e6e0acb507&scene=58&subscene=0": "雷神众测漏洞周报2025.3.10-2024.3.16", "https://mp.weixin.qq.com/s?__biz=MzkxNTM0OTQyMA==&mid=2247492128&idx=1&sn=09f9cfbceceb8ab2d8b4c7680f8a151b": "600+历年攻防演练漏洞汇编！千起实战案例还原漏洞攻击链", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247537996&idx=1&sn=fdcf381e7c40c8ecd8bebbd855c987ba&chksm=c14427f1f633aee7d974cbc8383746ff4c5a2dbc2c24c7a653886d084fdffb58147af6b5d8c7&scene=58&subscene=0": "谷歌 2024 年漏洞赏金计划，1200 万美元奖励安全研究人员，诚邀白帽黑客找bug", "https://mp.weixin.qq.com/s?__biz=Mzg3Mzg3OTU4OQ==&mid=2247493148&idx=1&sn=a0c9b24413bec09b5757dd7b1a63a421": "你以为的未授权漏洞VS我挖的未授权漏洞 | 一场与开发博弈的头脑风暴", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486448&idx=5&sn=43a1c97a96d25f7cc74bd61a0a2da84b": "\"0day\"漏洞裤", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497331&idx=1&sn=5043646c8c8773f885a1dc9dedd9bc34": "海外SRC漏洞挖掘｜助你快速成为百万赏金猎人", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247486231&idx=1&sn=6686650016dce8bd074f902ac63f8b81": "Miaoo朋友圈程序存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524207&idx=2&sn=63d46eaae65ecd516e9234ea9413ce94": "Microsoft 使用 Copilot 在 GRUB2、U-Boot、Barebox 引导加载程序中发现了多个漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518881&idx=1&sn=6abd5222d13c67e835b43771eb3d7f18": "在ChatGPT中挖掘XSS漏洞实现任意账户接管", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495826&idx=1&sn=692ccce7930cf1208205ff791c73fda0&chksm=fd74c05bca03494dd94380a552c1693cb4752d612d37aa0b2d1a60d7832e80e6c1757d90df73&scene=58&subscene=0": "CNVD漏洞周报2025年第9期", "https://mp.weixin.qq.com/s?__biz=MzkyMjUzNTM1Mw==&mid=2247487249&idx=1&sn=4f9d8e7d9d607b5ad48075a71f26e95f": "云安全(九)：容器逃逸—披露漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590760&idx=2&sn=0a7aeb5d4d57669042d37bf081806d7e&chksm=b18c2ea286fba7b419756a4c459e19762ac07b24d2bd8c3c96a4fe5ffa7a30e4286874880f20&scene=58&subscene=0": "Zoom客户端惊现高危漏洞，数百万用户数据或泄露！", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247508078&idx=1&sn=bac5f762ea43f7010a2f1142375fcb31&subscene=0": "专项活动第一期|单个漏洞1w元起的活动！", "https://mp.weixin.qq.com/s?__biz=Mzg2NzUzNzk1Mw==&mid=2247497837&idx=2&sn=a8c94479ae2b2dcff935713b4b5d1b19": "CrushFTP存在认证绕过漏洞(CVE-2025-2825)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522648&idx=1&sn=8642efdcfe877619e821e6fa74e779b7&chksm=eb8fe64c90bd747ea5473eb626206bd7a8fffdbb0dfe0ed84e565885ba00da456efdba11770a&scene=58&subscene=0": "Apache Parquet Java 中存在CVSS满分漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489774&idx=1&sn=397602da78c16240b8861b53c804bfaf": "【漏洞预警】Kubernetes Windows命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458591102&idx=2&sn=accc297b5a24cdc6b8979ef427e3e833": "Next.js 框架惊现致命漏洞，黑客可轻松绕过授权", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522693&idx=1&sn=451ddba96a307165862e9536bdf8b1eb&subscene=0": "FortiSwitch 严重漏洞可用于越权修改密码", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650609630&idx=1&sn=4454c4aee17f50f096bc0ec99c7d6656": "菜鸟驿站，在线辟谣；|3名“00后”利用平台App漏洞盗刷“金豆”提现近10万元", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247491674&idx=1&sn=2886124e0e2f8e9f0d50835197515ecf&chksm=c311af3bf466262d598c6cf3d3e1e3dda7643c21546242a96498d29bb394d2b052ecbe234a0a&scene=58&subscene=0": "CVE-2024-40711&CVE-2025-23120 Veeam Backup .NET 二次反序列化触发及绕过分析", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651131504&idx=1&sn=5e88a52481eb1913179f18f588709fd9&chksm=80e714c0b7909dd6e6604d4ce68a9e2fe396221f8d765521113d54f7e6f12294d257fe258f8d&scene=58&subscene=0": "VMware ESXi 报告新漏洞，波兰航天局遭受网络攻击 | 一周特辑", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495812&idx=1&sn=c0ee1f33a40c40d4e6a1ea0e36184317&chksm=fd74c04dca03495b2a3b6e889deece16586475e3d80c74bd293e0956235e0002e363d4366a68&scene=58&subscene=0": "CNVD漏洞周报2025年第8期", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494619&idx=1&sn=36c118acb8150acbc0137a85d7d564b5&chksm=fa9d108dcdea999bd1d8335ffb1c37c12f0433cb8e01f00e980ec38b7310f4579889451d3dc6&scene=58&subscene=0": "大模型如何挖漏洞 | 正在直播", "https://mp.weixin.qq.com/s?__biz=MzU0NDc0NTY3OQ==&mid=2247488573&idx=1&sn=215619cd9851e79ec75408196ad92916": "红队技巧分享：看看二进制漏洞研究与免杀相结合", "https://mp.weixin.qq.com/s?__biz=MzkyMzE5ODExNQ==&mid=2247487732&idx=1&sn=e92589cbe79e05ee823759d988b688f9&chksm=c1e9e738f69e6e2e78755af17ee489b1e7fb96a891bbcfce9bf45ac7f7c6592147fafe36832c&scene=58&subscene=0": "2024 年 GreyNoise 在野大规模漏洞利用报告", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487034&idx=1&sn=17c00f90fbe293eb4a543d5699c8e22d&chksm=c22296c3f5551fd585268ca603fb6d11fb46347e9b820547cc8af639add0dd5ae6842331699a&scene=58&subscene=0": "漏洞预警 | Apache OFBiz 服务端模板注入漏洞（CVE-2025-26865）", "https://mp.weixin.qq.com/s?__biz=MzkzMjIxMDU5OA==&mid=2247498704&idx=1&sn=2150111a90876f9a198e1c61baa03987": "微信新版本 小漏洞or bug", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490960&idx=1&sn=bfd43cc763c91b3e30dace3c4ceaa362": "NetMizer dologin.php sql注入漏洞(XVE-2024-37672)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068576&idx=3&sn=c5c8335b7757cd5111bdd63bdc478536&chksm=f36e76a0c419ffb6f7a39960edd0a751f2d475e98d807dd512e69fa49ed6db764ce9c6565079&scene=58&subscene=0": "【安全圈】ChatGPT 漏洞遭超一万个 IP 地址主动利用，美国政府机构惨遭攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590760&idx=4&sn=2cad9940a8a1545f94ff39f7369c4adc&chksm=b18c2ea286fba7b4e3d25f2c14ff96f82d35366d6cb021f77ebd28bf16e740ca6b8a14ff8a5b&scene=58&subscene=0": "更新第三章：固件仿真 | 系统0day安全-IOT设备漏洞挖掘（第6期）", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489116&idx=1&sn=e0038d4be011868553a9a4953b122108&chksm=c2c64157f5b1c841cefebeaea609d8788b824943b4e5bfebe9a063d64830b5b4d477cc6f89ea&scene=58&subscene=0": "【漏洞通告】Next.js中间件权限绕过漏洞（CVE-2025-29927）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458591568&idx=3&sn=708c1efcf6d598e910c331f0996f643b&subscene=0": "5分钟造出假护照！ChatGPT-4o暴露KYC系统致命漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247496672&idx=1&sn=61480ecdb85f33408d2809e9d5d45378&chksm=ce96bedef9e137c8bd15fc5e53eef96c3b8d92464b9322b909d641bffe5435a568ca7287b1d6&scene=58&subscene=0": "【风险提示】天融信关于Apache Tomcat 远程代码执行漏洞(CVE-2025-24813)的风险提示", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590589&idx=1&sn=9a4e01c36963a74c187f2be20cbc75a8&chksm=b18c2df786fba4e147c945bfce6c421ca468a3bb78f55a0e039d6defc423982f8e3ee76e00ac&scene=58&subscene=0": "VNCTF-2025-赛后复现", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511206&idx=1&sn=3ae458008520330a9967de44f5aba9b6&chksm=fa527918cd25f00e4971988e89fb3b76e03c7a8bc1200335ddad13f040e9f98284757d0b87c9&scene=58&subscene=0": "苹果设备的“锁屏漏洞”：CVE-2025-24200如何被攻击者利用？", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650621626&idx=1&sn=7c189bb47f1aed3c2c11e26ac9cc3a6f": "9.4分漏洞！Next.js Middleware鉴权绕过漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135403&idx=1&sn=782d8879f7d96cee8da7d2513d16fb2b&chksm=bd15ad788a62246e12de917ea5e93cdd9adbf8cdf4f2f544ff98e7370054e009d1bb8966c4e8&scene=58&subscene=0": "逾10亿美元Bybit被盗加密货币已初步进行洗钱，引发全球追踪；WordPress插件RCE漏洞曝光，威胁超10万网站 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489817&idx=1&sn=575c88c1fa41080d156d78747a403a00": "【漏洞预警】Mattermost MFA绕过漏洞 (CVE-2025-25068)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490919&idx=1&sn=c84be81cd4eca3e6d0506b51eb86c646": "泛微e-office sms_page.php sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492768&idx=1&sn=48c8e492f5552230f521836b521da5fb&chksm=96f7fbcda18072db624202b3bb6ec7be74fb37f8c4b36a66c11f9ac7ac33e4751cda7c8209af&scene=58&subscene=0": "【原创0day】Vite 任意文件读取漏洞（CVE-2025-31125）", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485644&idx=1&sn=255e67bb8d9d61f5899858812b8b1f51": "【价值2500美元的漏洞】基于 Facebook 短信的双因素身份验证绕过(文末福利)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490979&idx=1&sn=50adca9ec8960f776a6c13edf6e085fc": "竞优软件 商业租赁管理系统 信息泄露漏洞（CNVD-2025-03578)", "https://mp.weixin.qq.com/s?__biz=MzIwNDYwMDcyNQ==&mid=2247488963&idx=1&sn=7714d2b73a96608f7e0053bb2b8fac1d": "【漏洞速递】Zabbix API SQL注入漏洞(CVE-2024-36465)", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484827&idx=2&sn=01afe7cc13a2835f8f89d3469ed908e8": "fuzzlists：渗透测试和漏洞赏金FUZZ字典", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651317730&idx=3&sn=967c6e413b34f43cdd79f28cd0798792": "CISA将Apache Tomcat路径等效漏洞列入已知被利用漏洞目录", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489777&idx=1&sn=b3402faaa0fb25a4e600de43f1efd22a&chksm=fb0295a9cc751cbf32ee938f585196b7d81f864c7153560f6351a6fc8e18b38da999563fb069&scene=58&subscene=0": "【已复现】Ingress NGINX Controller 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650609940&idx=4&sn=5a59bf8768401324a3ba25525be871d2": "利用主流 AI（如 Kimi、DeepSeek、GPT 等）检测越权漏洞的工具", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522568&idx=1&sn=6c208cae9bd5b7c538ed45a6a6cd2308&chksm=ea94a862dde321741380f898ae5c379d4f9587b09a5c71def04014812a1c3c4ca7fc747b01a2&scene=58&subscene=0": "速修复Next.js中严重的授权绕过漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489413&idx=1&sn=cd3b82bae5a3dcb62439277551c6a0c4": "【曾哥】从CVE-2025-30208看任意文件读取利用", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489841&idx=1&sn=b68a9fe9310ef672f507eb4ac000b605": "【漏洞预警】Ingress NGINX Controller远程代码执行漏洞(CVE-2025-1974)", "https://mp.weixin.qq.com/s?__biz=Mzg3NzYzODU5NQ==&mid=2247484947&idx=1&sn=96c721c56d57b7a2d4b0414b24a199aa": "路由器漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkyMzcyMjgwNA==&mid=2247483914&idx=1&sn=c8315e7348b64b2db11e467ea90888a7": "上古神器Pwnkit提权检测：如何排除它的踪迹，守护系统安全（CVE-2021-4034）", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528676&idx=1&sn=569ad9604302e5c782c17ad60779214c": "Android 版 Telegram（10.14.4 及更早版本）中 CVE-2024-7014（EvilVideo）漏洞验证", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247497102&idx=1&sn=8ce5b99a9119010caa3b518820877e75": "Burp Suite插件专为文件上传漏洞检测设计，提供自动化Fuzz测试，共300+条payload", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135834&idx=2&sn=df3afea773d2de326cbb14a27986090b&chksm=bd15af898a62269f8a6f9eeb295743fbfab6e13b902147503f27c7ea0a30c26c79c9f3863b6b&scene=58&subscene=0": "小红书被曝高频获取用户信息，官方回应；Google Chrome零日漏洞已被在野利用，无需用户交互即可绕过沙盒保护 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247488806&idx=1&sn=c12710c7a4416f017148df5daaff62b5": "全球服务器正遭PHP漏洞精准爆破", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068838&idx=3&sn=cdbfe3b796e5f0bf268dc90249286921&chksm=f36e77a6c419feb084ba62e2fdb458104cc0f215e2b47ff4dbc41c9a1c7464153a94f4232379&scene=58&subscene=0": "【安全圈】Ubuntu曝高危权限提升漏洞 三大绕过机制威胁Linux系统安全", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503162&idx=1&sn=f38c90f903249045d488afc798248811&chksm=fe79e9a2c90e60b4526737d910d2b2bb7a9346ed5a7e385cc6274e5f643507c9f4c615965d35&scene=58&subscene=0": "2025 Q1季度你需要关注的高危漏洞合集！", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513878&idx=2&sn=0e184b9557861d3c7399fdffd76bd147&chksm=ebfaf036dc8d7920a662e9643d096b44e95e78d8c3209a103c25ee7f36621563d77bfc613373&scene=58&subscene=0": "CNCERT：关于Ollama存在未授权访问漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503262&idx=1&sn=144ab53fe27ab9e6774fd2b64009cb84": "【已复现】Zabbix groupBy SQL注入漏洞(CVE-2024-36465)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489695&idx=2&sn=c5c5ec76e0e5bf76a4edf411a4287210": "【漏洞预警】HTTP∕2拒绝服务漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247580053&idx=2&sn=f0326cff16ca89a3e6e4c10841b54946": "360入选2024年度移动互联网APP产品安全漏洞治理优秀案例", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651317727&idx=1&sn=0125a9808afe88e6ca8a55a031280eb4": "漏扫设备误报漏洞处理；数据安全事件中的 “开盒” 防护| FB甲方群话题讨论", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488299&idx=1&sn=d9d31904ee854131dfab883067af6a14": "Crushftp存在未授权访问漏洞CVE-2025-2825 附POC", "https://mp.weixin.qq.com/s?__biz=Mzk0MzY3MDE5Mg==&mid=2247484126&idx=1&sn=e3d80ab5d0956e1930d421366c98b27a": "CVE-2025-0087 安卓本地权限提升POC", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260733&idx=1&sn=27ca2df801ff05a6eeacc362fe817084": "Tomcat CVE-2025-24813 从计算器到GetShell", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490346&idx=1&sn=451473f91c6787f98006c1becb6494c5": "Splunk 高危漏洞：攻击者可通过文件上传执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522661&idx=2&sn=1f24df87fa44c9b3c92d7a7cdb139dd8": "谷歌修复GCP Cloud Run 中的提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068838&idx=3&sn=cdbfe3b796e5f0bf268dc90249286921": "【安全圈】Ubuntu曝高危权限提升漏洞 三大绕过机制威胁Linux系统安全", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247498531&idx=1&sn=c8c6e6ecb121cd2533d8dc4dbd3dc81e&chksm=e84c5dfcdf3bd4ea5d206af1b35fc989670d47d9004a543464f67e0dfae99a0987ea78760fd7&scene=58&subscene=0": "全球云上数据泄露风险分析简报（第五期）：配置错误叠加供应链投毒与第三方组件漏洞，大模型数据链暴露全生态安全脆弱性", "https://mp.weixin.qq.com/s?__biz=MzU2NjI5NzY1OA==&mid=2247512763&idx=1&sn=3cf841bf1b93ce664ed136cd9b20d675": "重大工控漏洞曝光，工业网络安全如何保障？", "https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486308&idx=1&sn=8ae4a8ce7b252e88ca8437c6f3f252c7&chksm=fb04c80ccc73411a75f07661d2b3054792e5349bd21265f03f083ad51adb46eb1814cba7ef1c&scene=58&subscene=0": "漏洞研究和漏洞利用技术领域的本质演变", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524066&idx=2&sn=93a40ee8c5d3b9832561ea2de0fe1861&chksm=ce4615f2f9319ce4ef9e0e219fde02b0290a2fbe48140af183e5ab091de704323c946d09126d&scene=58&subscene=0": "【漏洞通告】Fortinet多产品前台远程代码执行漏洞(CVE-2024-45324)", "https://mp.weixin.qq.com/s?__biz=MzkzNTYwMTk4Mw==&mid=2247488589&idx=1&sn=d77bace9cbcfdba23c79244d92ff5aee": "网络安全—Web常见的漏洞描述与修复方案", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247751&idx=1&sn=9f2e604ccb5f57c2da5cb3a65867871a": "CVE-2025-24813：Apache Tomcat远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQ0Mjc5NA==&mid=2649766913&idx=1&sn=4eb52c1050b8916733a01d1e0153aef3": "漏洞盒子×阶跃星辰SRC | 漏洞盒子「企业SRC」新住客", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507699&idx=1&sn=8685bbc4a7a5c3ab156290bdba31f839&chksm=cfcabde7f8bd34f109ac5cdbac70fafb57c5718aa87e116f36916bfdc6266974f17443de45d6&scene=58&subscene=0": "双倍奖金！X 春日漏洞悬赏计划启动！", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524820&idx=2&sn=a2d5eb3834a1c2092323aa5ba76233d1&subscene=0": "2025-04微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068386&idx=1&sn=1b7561dc90e9ac7086e4648fbc108a8c&chksm=f36e7662c419ff741f68fa4d95867ad5aa4e881384e163c286d68426cb0427f284b5d1b6caa1&scene=58&subscene=0": "【安全圈】紧急预警｜Elastic Kibana 高危漏洞，可远程执行代码，速修复", "https://mp.weixin.qq.com/s?__biz=Mzk3NTQwMDY1NA==&mid=2247484366&idx=1&sn=8f74d77f7f7357fe1ca951471fb0a03c": "漏洞复现篇 | Vite任意文件读取漏洞：CVE-2025-30208，最新！", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522499&idx=2&sn=26c6be6088417f7563b0041ef251fe1f&chksm=ea94a9a9dde320bfa8a74d93d1ee2705880753a16aee51c69dca6183f453d3dcfab19deffe53&scene=58&subscene=0": "GitHub 发现ruby-saml中的新漏洞，可用于接管账户", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581851&idx=1&sn=89204ddc3d8a3883f51123a63590bbea&subscene=0": "Sante PACS 服务器漏洞可使远程攻击者下载任意文件", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487028&idx=1&sn=17913f755a5167c919f0c75985f35a7f&chksm=c22296cdf5551fdb3331a68f05a450c2a80d926451739f6e50c477f8f81f5cda6a47abd9447f&scene=58&subscene=0": "漏洞预警 | Elastic Kibana 存在任意代码执行漏洞（CVE-2025-25012）", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094945&idx=2&sn=b8927f61ae21ac02b310e4b2e01c22f6": "Microsoft WinDbg RCE 存在允许攻击者远程执行任意代码漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487521&idx=1&sn=d97ae7fdc1eaf6b8883dee4beac30128": "暗网漏洞交易的财富密码：如何用1个0day实现被动收入？", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094990&idx=1&sn=26a1f09c332cd65265003ec07d316544": "IBM AIX 存在允许攻击者执行任意命令漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488138&idx=1&sn=196d2a12c48d2e8d3ef171a1cc3b9b79": "蓝凌EIS智慧协同平台fi_message_receiver.aspx接口存在SQL注入漏洞 漏洞预警", "https://mp.weixin.qq.com/s?__biz=Mzk3NTQwMDY1NA==&mid=2247484306&idx=1&sn=50e69fcef563f3873d7be4b116ef6fff": "Web篇 |【全网最详细】Apache CC反序列化漏洞：CC1调用链POC构造过程，干货！！！（上）", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502184&idx=1&sn=234922f0cb0df3244d36814cc3f5dfa5": "【霄享·安全】XML外部实体注入（XXE）漏洞简介（总第50期月刊）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068282&idx=2&sn=cfbab77073fc932a8b466a9586809efc&chksm=f36e75fac419fcecbf602c6a23698a377a6e7431fbf29023fffe68d6c04af74eecaea10c2e0a&scene=58&subscene=0": "【安全圈】全球 49,000 多个门禁管理系统存在巨大安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491034&idx=1&sn=df883c3753afd737b65d84e85c22c83b": "ipTIME 未授权访问漏洞(CVE-2024-54764)", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490328&idx=1&sn=ba3aac1c3b2f2418ffe8b3312ef3874a": "【已复现】Apache Tomcat存在远程代码执行漏洞（CVE-2025-24813）", "https://mp.weixin.qq.com/s?__biz=MzI3Mzk4MDQ5NQ==&mid=2247484489&idx=1&sn=5dfebcfd86fb7f56331edd5f8e9805cb&chksm=eb1a4969dc6dc07fddc561d2b6fdcdbc1509200e87a01bbaa2dae64623cba19e8ba282f21652&scene=58&subscene=0": "【春日双倍活动】专项众测-高危漏洞突击战", "https://mp.weixin.qq.com/s?__biz=MzkwMzUyMjk2MQ==&mid=2247484229&idx=1&sn=ae954257ec674a62d26a7d17f79fbe7e": "deepseek本地部署工具---ollama任意文件读取漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkzNzU5MDMxOA==&mid=2247484348&idx=1&sn=d438a7a76fc8c68be9a7a5135bac4493": "「1day」D-Link DIR 823G路由器存在未授权访问漏洞（CVE-2025-2360）", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490067&idx=2&sn=ee52f8aa1b647a17c100596ca1ee8238": "SRC挖掘 | fastjson反序列化漏洞实战", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489148&idx=1&sn=180b33a58d78ae05e820d5927536fe60": "【0day】某礼品卡电子券收卡系统存在前台任意文件删除漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524146&idx=2&sn=00efd5096a697e5effb42fccec5a1ec2&chksm=ce461422f9319d34dfc4755e058d6900dfaf3921760925dd571340aafa78035d2530190e940b&scene=58&subscene=0": "【漏洞通告】Vite 访问控制错误漏洞(CVE-2025-30208)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528850&idx=1&sn=9c8893a8009d8a3d0b0490df0c5bea45": "CVE-2025-0108：通过 PAN-OS Nginx∕Apache 路径混淆实现的身份验证绕过漏洞 _", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651315731&idx=3&sn=ebb0b3379d3a800631a81f8124ac649b": "全球近5W个访问管理系统存在严重安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068802&idx=2&sn=6d43320c00ad321311bbe8ccf4c0cfef": "【安全圈】黑客技术自学成“提款机”，00后利用漏洞盗刷金豆非法套现10万", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247483955&idx=1&sn=00377c3a46e42e3f4e488f652f231c94": "【漏洞预警】Zabbix groupBy SQL注入漏洞(CVE-2024-36465)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458591568&idx=4&sn=0f391a6c73995bbef9871da319cef8b4&subscene=0": "直播课时更新-系统0day安全（第7期）", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497311&idx=1&sn=b5bf0ffeaecb1297a913f0a4f0b91daf&chksm=e8a5fc3cdfd2752a2808ced61e9aadff045ce3e903cbbb20095287d207cede57a7a876d5e923&scene=58&subscene=0": "某微信小程序未授权漏洞挖掘（置空查询思路）", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484597&idx=1&sn=0f0f4255a3f6d7ce5b727f2864841f7d": "警惕！Ollama 未授权访问漏洞来袭", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486347&idx=4&sn=72e3c9d7b8fe9da410b4694bf9d5ab33": "\"0day\"漏洞裤", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528744&idx=2&sn=d98a71a758a0d2f757cd35589c6d55b6": "CVE-2025-0693：AWS IAM 用户枚举", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247508523&idx=1&sn=2ef8dc3680c5c26b96bdfb5d02405f9b": "Kubernetes惊现“入口噩梦”：Ingress NGINX高危漏洞可致集群全面沦陷", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528882&idx=1&sn=20c23e4f6c831a5896866910321414a3": "CVE-2025-24813 - Apache Tomcat 路径等效漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503290&idx=1&sn=a8392249522b3dfdf21eb6cd1a34ac57&subscene=0": "微软4月补丁日多个产品安全漏洞风险通告：1个在野利用、11个紧急漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524207&idx=4&sn=3eb963d2f1d71e099aa6044120c289fd": "关键 PHP 漏洞允许黑客绕过验证以加载恶意内容", "https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247490459&idx=1&sn=2dba871cabda85172a8cbab0aab699f5": "Java XMLDecode反序列化POC变形", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610018&idx=4&sn=b27eefe8206a3b9ba9038bfbb6d6d675": "一款基于deepseek智能化代码审计工具，支持多语言代码安全分析，帮助开发者快速定位潜在漏洞。", "https://mp.weixin.qq.com/s?__biz=Mzk3NTIyOTA0OQ==&mid=2247484341&idx=1&sn=e4ec9ef45b99fd24053300313548b169": "IMF爆肝7小时绿野仙踪寻找6大flag，层层递进、sqlmap、bp、weevely、nc、cve-2021-4034齐装上阵", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238728&idx=1&sn=0b728fdb715ef29b39d89d6712305e7e&chksm=8b580c71bc2f8567ac9a9e82b8fcf398abb55ee2f9d8fdacc06103e40b09f84c5154e41e8bc1&scene=58&subscene=0": "专题·漏洞人才培养 | 网络安全白帽人才运营及创新实践", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522410&idx=2&sn=0aef267bcd2c2f831a7dedbda98b4668&chksm=ea94a900dde32016f9902d5634144e61cbf559478eaf697cb00cf146b7b4de1bae7a4526be98&scene=58&subscene=0": "思科： Webex 漏洞可导致凭据遭远程访问", "https://mp.weixin.qq.com/s?__biz=MzI4NTYwMzc5OQ==&mid=2247500781&idx=1&sn=4c5df9ca2a5e0efde9eb509c50522921": "玲珑安全第六期漏洞挖掘培训开启！福利多多，速来围观！", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489873&idx=1&sn=496a93baf7881cccb4fa05f4b1d41dfd": "【高危漏洞预警】Vite任意文件读取漏洞（CVE-2025-31125）", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497345&idx=1&sn=2a8ed1271cffebf6ef88cfb93c778cb4&chksm=e8a5fce2dfd275f4a1a43e88b089a59ab9ebb9bdd4954ff9f30cb2e50fb7fc9bfffc9444fdfd&scene=58&subscene=0": "【SRC实战】支付逻辑漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522648&idx=2&sn=90341e46704d8bff579e255a4405da41&chksm=eb8af58afdf08b026933e9bf8bc57815824f59d69547b3ec63d6bad01c77ae22bc4148e46569&scene=58&subscene=0": "佳能打印机驱动中存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492761&idx=1&sn=5f8c867388ac56894cc669a1454a5f60&chksm=96f7fbf4a18072e2487b594a12ec9eacba9abaa57fbcca2ac5c630c0e4b75cf39476131feb26&scene=58&subscene=0": "【已复现】Vite 任意文件读取漏洞（CVE-2025-30208）", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247497155&idx=1&sn=966cfb1d9a041fad6285333b4a7a7086": "一款图形化的 .DS_Store文件泄露、.git目录泄露、.svn目录泄露漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247554342&idx=1&sn=446893fee26dc64fa6cfb9f977292177": "Jeecg漏洞总结及tscan poc分享", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489859&idx=3&sn=771fa528fc9373e9b736f7f1b99f9731": "【漏洞预警】Microsoft Windows文件资源管理器欺骗漏洞(CVE-2025-24071)", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462668&idx=2&sn=fea352bcd11c8dd1d9163cf83b2f0959": "专题·漏洞人才培养 | 以CTF学科竞赛为抓手的漏洞人才培养探索与实践", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651317345&idx=4&sn=2d2f67ba15b1fd479a1bca3d6027a20c": "Mozilla紧急修复Firefox高危漏洞 与Chrome零日漏洞原理相似", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522693&idx=2&sn=e1391919751a9d3acaf0708361a37f65&subscene=0": "微软4月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499815&idx=1&sn=dce5a2af1a71a8f7765ee5a87161a141&chksm=ec1df00fdb6a7919f721d0c66c27ddfb05e61b83d6542df7e2a185a0c3ecd417a34dd87c791b&scene=58&subscene=0": "我的首个 AI 智能体，一键关联漏洞 POC ！", "https://mp.weixin.qq.com/s?__biz=MzAwMjc0NTEzMw==&mid=2653588940&idx=1&sn=6401dfd2bc0405557d89de2c2a935ecc": "JavaSecLab 综合Java漏洞平台搭建", "https://mp.weixin.qq.com/s?__biz=Mzg4Njc1MTIzMw==&mid=2247485823&idx=1&sn=501b849f5815c36d2ec6fd45dc1b51a8": "利用 CVE-2025-29824 CLFS 零日漏洞可导致勒索软件活动", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487083&idx=1&sn=d6ae088533da2dac07491e648388e71a&chksm=c2229692f5551f846f940d835aae7f15d1d6215adae1bfe10a3d09ed973e9650c97bcbbec930&scene=58&subscene=0": "漏洞预警 | Kubernetes Ingress-NGINX Controller 存在未授权远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651315768&idx=2&sn=371671713a9a66f0f4b69a57db9747ae": "FreeBuf周报 | 谷歌收集用户数据且无需打开应用；近5万访问管理系统存严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495843&idx=1&sn=36b368160ef2df7587d3c0c94ab30c81&chksm=fd74c06aca03497cb9aef84ffcbc6cb968f07edfb61063db88f6c5be00027c7f98b9358ce345&scene=58&subscene=0": "CNVD漏洞周报2025年第10期", "https://mp.weixin.qq.com/s?__biz=MzUyNjk2MDU4MQ==&mid=2247486520&idx=1&sn=7fd71cde4148956e0177fcfdda20030f": "Ollama 漏洞检测工具及使用手册", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581795&idx=2&sn=2b72c823fb0e62dc340567568c6dfd82&chksm=e84bd0e48e8f098e8db1eef8e687f013893fc2765d8109a6b3839a5ea69b609e695c01d125d0&scene=58&subscene=0": "新的 OpenSSH 漏洞使 SSH 服务器面临 MitM 攻击和拒绝服务攻击的风险", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096051&idx=1&sn=12d1531eec52768a008a3463a4226be5": "Apache Parquet 允许远程执行代码漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522605&idx=1&sn=d013414cab5f1de1d4ec9080c742585e&chksm=ea94a847dde321512841fc1abc7fb1931ffd8c2e62fc5dc59bb03f0d3cbfcb5b7956bfe75ab1&scene=58&subscene=0": "OpenAI 严重漏洞最高赏金提高至10万美元", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522410&idx=1&sn=0f5b704ab0b14c7dd3262ffbc0697b07&chksm=ea94a900dde32016fa789ad6e1cbd205eab3afe70049ad11ab8634e97423249682ce8b5d438a&scene=58&subscene=0": "博通修复3个已遭利用的 VMware 0day 漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664240236&idx=2&sn=879075c08d2e27c35ebadff15fb313f9&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068550&idx=4&sn=2c40ebea61f1937556e695b2be5f2873": "【安全圈】PHP 遭多重安全漏洞 “围攻”，应用程序风险骤增", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511459&idx=1&sn=d164a4a8ab7a6d67f374caa7978ce665&chksm=fa52781dcd25f10b28432fa6bc3a4eb73361e46c5c42b8c59895dd8e4dbfe53fdbec0fea8f12&scene=58&subscene=0": "微软2025年3月补丁日重点漏洞安全预警", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247554402&idx=2&sn=d45339f0257dddd5563a007ae471271f": "【免费领】新手必备！Web安全漏洞挖掘实战入门教程", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489754&idx=1&sn=57c283962096cbe0ba12fd8927bf9ccf&chksm=fb029582cc751c943a4e53c5a0a3b96e80459f0cb16241c005be5e0baaf9eb80a742f2e3d548&scene=58&subscene=0": "【风险提示】VMware ESXi新型漏洞利用链已出现在野利用", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462671&idx=1&sn=f90d72f94fb77060e8128345abec4aee": "专题·漏洞人才培养 | 知攻善防，内外兼修，网络安全实战人才培养的实践之道", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247484743&idx=1&sn=7246afac3f6f47121512e04fd7838953": "【漏洞挖掘】密码重置漏洞案例", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495860&idx=1&sn=7a58eb41bf13bba3ebb80bfece796e81&chksm=fd74c07dca03496b5c8b56a0d65061a51877807dd82c478cab9ba58246288cbb23c42f669cff&scene=58&subscene=0": "关于Google Chrome存在沙箱逃逸漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489222&idx=1&sn=18f4c183c2bfc53de9996791fb5e33ca": "【支持排查与检测】Vite任意文件读取漏洞(CVE-2025-31125)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488311&idx=1&sn=f585cac7d8239a0cff353b75038a2d4b": "Emlog index.php接口的存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487478&idx=1&sn=6dd9af08e4fbf71708b9a8133038fb15": "HackerOne审核漏洞的隐藏规则：为什么你的报告总被拒？", "https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484348&idx=1&sn=e2703f4bd969e744f6d6b0d9b2d9e13a": "渗透测试神器之漏洞利用代理工具Empire", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068507&idx=4&sn=2de5344a3fcb8ad860aed5b850eab880": "【安全圈】开源字体渲染库 FreeType 出现高危漏洞，可被黑客利用发起攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458591194&idx=1&sn=8573593d270470e21d64034d47a9045b": "CVE-2023-4427 复现", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247502970&idx=1&sn=d4279c37345e6a404336b2158cb1f969&chksm=cfc56b25f8b2e2339fa4c0425bf32321f7bb80a09d224ad087dcc5152a9f8a7ddd7b3021c142&scene=58&subscene=0": "实力认证！360入选国家工业信息安全漏洞库技术组成员单位", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491026&idx=1&sn=20721f7418799a813246b42c73e03f2c": "ipTIME 未授权访问漏洞(CVE-2024-54763)", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247496672&idx=1&sn=61480ecdb85f33408d2809e9d5d45378": "【风险提示】天融信关于Apache Tomcat 远程代码执行漏洞(CVE-2025-24813)的风险提示", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524212&idx=1&sn=adc8b32975d00ac07cf0fd25f744e1f4&chksm=ce461464f9319d72572a9a50463a53a1aaa2655ff33e45286b7a31fdd11a4c35d76d75aa5e62&scene=58&subscene=0": "【漏洞通告】Vite 任意文件读取漏洞(CVE-2025-31125)", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247580199&idx=1&sn=2e58119f92999a524f566f3335728a27&chksm=9ec7245d1f687fe5eafce7f07dc17ab66e22b61571693cc4c25d2ccb512053f2740114cdf4ce&scene=58&subscene=0": "2025攻防演练必看：千起实战案例、600+历年漏洞汇编！", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513917&idx=2&sn=286b213b1698f09bb36bba8eb40d4d21&chksm=ebfaf01ddc8d790b1e4ec9f94d937e8979a8008245c15cd8c8ce1388f9d2b5cb82fe1e88ebfe&scene=58&subscene=0": "多个政府机构和企事业单位门户网站遭攻击，工信部漏洞平台发布预警", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247508076&idx=1&sn=9c232aa11dcec49b95b63e043618b4af&chksm=eb965a93eec22b4b46eb98e0dbe72214c16c8a04ebf826be8fa170309306e12d2bbafad69d62&scene=58&subscene=0": "专项活动第一期|单个漏洞1w元起的活动！", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522590&idx=1&sn=ee578730b1733ca26a369770366c3b00&chksm=ea94a874dde321621c61902e3f2a06600d7b26506c458661c5ca08a93507ffca99fe28a26c7d&scene=58&subscene=0": "博通：注意 Vmware Windows Tools 中的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492735&idx=1&sn=6dea5357862c227b6882f2948233a06a&chksm=96f7fb12a1807204479d179722d02b1be6aab60e7d63066f83a1c5f0994a3158e00bfc38b36f&scene=58&subscene=0": "【已复现】Apache Tomcat Partial PUT远程代码执行漏洞（CVE-2025-24813）", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485757&idx=1&sn=88c93afe3d77576996c88fd3a31b4901": "【最新漏洞播报】", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238220&idx=3&sn=ac6f6d9892b05eabfa11b6103d383753&chksm=8b580e75bc2f8763635869430b4598e1759d531dd6424e8018f4ce4e385d1ab2b7a98c0b7267&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788162&idx=1&sn=ead92e907ffe3dc8ae5f3212f1292138&chksm=8893bf6dbfe4367b0edc05095932cd4900c1465b8bdf5efe54d2505331c0524962347d41f388&scene=58&subscene=0": "紧急补丁发布：谷歌、苹果、微软联合应对高危零日漏洞 CVE-2025-24201", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486336&idx=1&sn=75b14eacfed52c233f8020786d12315d": "审计分析：验证缺陷导致文件上传漏洞的产生！", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247502991&idx=1&sn=aa35c8e8e6ad6ef56e7f35c84e5150ba&chksm=cfc56bd0f8b2e2c62f23476a2f394839ae286c8f994de2e8ba0f40cd727167b04167a569c207&scene=58&subscene=0": "360漏洞情报月报2025年02期｜全网捕获4000+漏洞，整体威胁水平处于高位", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511562&idx=1&sn=a9ac30c9a1453dd6f10d10ad0dc38e84&chksm=fa527bb4cd25f2a2602307afbc35529e1305d7b5562cd081a9cce1ef01a61c513d794f459409&scene=58&subscene=0": "Apache Tomcat 高危RCE漏洞CVE-2024-50379：复现分析与防御策略", "https://mp.weixin.qq.com/s?__biz=Mzg5MDU4NjYwOQ==&mid=2247484240&idx=1&sn=d7532687fa54f9403d3489a824651ecb": "SRC漏洞挖掘之敏感信息泄露漏洞挖掘实战指南", "https://mp.weixin.qq.com/s?__biz=MzI2MjcwMTgwOQ==&mid=2247492290&idx=1&sn=a6f0e60f644aa507c0c852e5058b65d2": "春季特惠 | 实用办公软件 6 折起！Downie、WinRAR、PDF Expert 好价来袭", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484787&idx=1&sn=47fc321710f48f1f6e8c0ea35943f8ad": "Sapido-多款路由器-远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068414&idx=3&sn=901c48dfd12830282fa40f36c5da693f&chksm=f36e767ec419ff68fcb78d1cd0e8d0e7854fbc83e1fc5d9a2c3c966cfee30b8aaf4de92be4f5&scene=58&subscene=0": "【安全圈】PHP-CGI RCE 漏洞被用于攻击日本科技、电信和电子商务领域", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590984&idx=1&sn=c31273097426c0de80490922a0abe551&chksm=b18c2f8286fba694bf529bc37a0820cf419f1d29aab3881739da68477bc62e1f71151ce59c06&scene=58&subscene=0": "Hyper-v虚拟磁盘驱动vhdmp.sys漏洞汇总分析", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511221&idx=1&sn=b04ebc86e93bf83a9d60382e28d6ea0b": "Apache Tomcat远程代码执行漏洞（CVE-2025-24813）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068507&idx=4&sn=2de5344a3fcb8ad860aed5b850eab880&chksm=f36e76dbc419ffcd54c3a0ee4875406afbd620e90706f6700f7186307d95e9560af29441827e&scene=58&subscene=0": "【安全圈】开源字体渲染库 FreeType 出现高危漏洞，可被黑客利用发起攻击", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650609205&idx=3&sn=7b5061a2d007e86ba90068114d3a1ff8": "记一次某大厂csrf漏洞通过蠕虫从低危到高危", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485744&idx=1&sn=8e49c57f7e06a99568418c62c9c53121": "WIFISKY-7层流控路由器SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490657&idx=1&sn=c230af9bfb68100184dc8371bbe743a0": "Elber-Wayber模拟数字音频密码重置漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MzAzMzk3OA==&mid=2247485090&idx=1&sn=d153e5c7df9e1fb5e60ae40aeaf1d518": "反序列号漏洞解析及赛题分析", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499313&idx=1&sn=6e3ea4f65a3a341208b946ee3200f59b&chksm=fa5950dccd2ed9ca75b9c4b3efd59c0ff2d1232b56761d7c9e243aef74d77912825f853bf9d1&scene=58&subscene=0": "实战+分析 | .NET 分布式事务反序列化漏洞插件", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524174&idx=1&sn=1d798d08a9a7152d738fd82f9dba148b&chksm=ce46145ef9319d486615f7b9d3fc59b9b8f283376cc841e26e0adce442d010d6fd200ca5136f&scene=58&subscene=0": "【漏洞通告】CrushFTP 身份验证绕过漏洞(CVE-2025-2825)", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489233&idx=1&sn=3b3871ac2d18a742398deb6e15ca9284&chksm=c35076a7b82ae7e693530ebc872cd3c4f6f475b2201470347718a068fcc7f09cc2a0efdc8794&scene=58&subscene=0": "【处置手册】Vite任意文件读取漏洞(CVE-2025-31125)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490061&idx=4&sn=f8a82b936d8fd0966a0b883e39f563c2": "《DOM型XSS漏洞之AngularJS表达式触发》", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094931&idx=1&sn=e3c2c8b464a873243e663da80de3035d": "Linux 内核越界写入漏洞（CVE-2024-53104）", "https://mp.weixin.qq.com/s?__biz=Mzk3NTEyMzQzOA==&mid=2247484810&idx=1&sn=a40974123602bdf89cc6c169259d7251": "VulnHub靶场之DC-3超详细Joomla漏洞命令提权和系统内核漏洞提权", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068838&idx=4&sn=002ce9534343b99abd03634daa05b2ff&chksm=f36e77a6c419feb0e91e7f231c9b02cbc6eb2af4024ec3a528cff197bcb321b753a2dd58edb0&scene=58&subscene=0": "【安全圈】Dell Unity 企业存储系统现严重漏洞，攻击者借此可实现 root 权限接管", "https://mp.weixin.qq.com/s?__biz=Mzg4NTY0MDg1Mg==&mid=2247485667&idx=1&sn=d395cb01aed4ebde31e39e2563eb0423&chksm=cee97ac7b82a6a8df0731f0a9460131ca49254e7b146f56975b250d4ecfcd6978d64d9dc1290&scene=58&subscene=0": "从CVE-2025-30208看任意文件读取利用", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503073&idx=1&sn=6769c38d6b37afb2cecf671963dff742&chksm=fe79e879c90e616f8d3bc3f16b6ef82738e3618fb4be9584f97a3f0b6c743197970c469212d0&scene=58&subscene=0": "【已发现在野利用】VMware ESXi多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkxNDU0MTUyNw==&mid=2247492477&idx=1&sn=0e28b1917e0ce6cae09c2fbad5345526": "【2025最新】6款漏洞扫描工具！收藏这一篇就够了（附下载链接）", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651316208&idx=3&sn=614cc4ab71f72682c6e24ab68cca503c": "微软与VMware零日漏洞紧急修复指南", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135784&idx=2&sn=a72b91fbbc4464ad90155ba6a5a9081b": "研究显示：超300万财富500强员工账户凭证近三年内遭泄露；严重漏洞威胁Next.js应用，攻击者可绕过授权访问管理面板 |牛览", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489211&idx=3&sn=ba50e05a2bc768b8aa87e315aaef328d&chksm=c2c641b0f5b1c8a6c70abe890e06b6d9ac422cac821204790cc7973c2e6ee6fbba6c3f1c3419&scene=58&subscene=0": "【处置手册】Vite任意文件读取漏洞(CVE-2025-30208)", "https://mp.weixin.qq.com/s?__biz=Mzg4NTY0MDg1Mg==&mid=2247485667&idx=1&sn=d395cb01aed4ebde31e39e2563eb0423": "从CVE-2025-30208看任意文件读取利用", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528721&idx=1&sn=8e7d2055056a5ecd904ce639934c19ad": "CVE-2025-0927：Linux 内核 hfsplus slab 越界写入分析（EXP）", "https://mp.weixin.qq.com/s?__biz=Mzg5MDU4NjYwOQ==&mid=2247484223&idx=1&sn=feba755768b8f849823e57dae54399e0": "SRC漏洞挖掘之文件上传漏洞挖掘实战指南", "https://mp.weixin.qq.com/s?__biz=MzkyOTQyOTk3Mg==&mid=2247485217&idx=1&sn=d0f50245c5ce735ba8528ea86d1c097e": "一个漏洞POC知识库 目前数量 1000+", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247496541&idx=2&sn=488de68d5a2e231c565a7021b36de1a8": "不赶趟的 tomcat:CVE-2025-24813漏洞验证", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519026&idx=1&sn=c7fa234af76b49572b577b843110190e": "列目录引起的一系列高危漏洞并获取一万五千元赏金记录", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068768&idx=3&sn=bce77deed6ad8035e8531d60d82059f8": "【安全圈】针对近期 Chrome 零日漏洞的利用，Mozilla 向 Windows 用户发布紧急补丁", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489116&idx=2&sn=55d30d438131d9bff6405626dd0a73b9&chksm=c2c64157f5b1c8417dbb20c3823a444773f296d5613ecec6eec3cd6c8f3f09561591c695221d&scene=58&subscene=0": "【处置手册】Apache Tomcat远程代码执行漏洞（CVE-2025-24813）", "https://mp.weixin.qq.com/s?__biz=MzA5NDI0NzY3Mg==&mid=2247484850&idx=2&sn=7e725c0a7ce8bdbaf01b01860e1719c8": "AllForOne nuclei漏洞模版自动收集下载", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503098&idx=1&sn=27b33ae5cbe86fa6be65bd5b34b2c1f0&chksm=fe79e862c90e6174deddc655619db7a160525240fea9fe86f3412c26ef2d03b01d958c4a00f3&scene=58&subscene=0": "Apache OFBiz 服务端模板注入漏洞(CVE-2025-26865)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492754&idx=1&sn=9f437f4b0b3d4edced726f996430121a&chksm=96f7fbffa18072e9a669fdc2a0a68f41899e3e1bb28780574e8a9d52db2f65c673c19ae2fa98&scene=58&subscene=0": "【已复现】Ingress NGINX Controller 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484655&idx=2&sn=5db178d22f78ce33edd883a5dbb917e1": "H3C多系列路由器存在前台远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135481&idx=1&sn=d3265ca05fb3478831f69020f9a2c3f0&chksm=bd15ad2a8a62243c41425e7c068635da1e7bf2076baa3e4fa9ff044c5e52aac1c893eca8ef00&scene=58&subscene=0": "MFA告急！黑客利用高级技术绕过保护；WebKit零日漏洞被利用开展“极其复杂”定向攻击，苹果紧急修复 | 牛览", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524099&idx=1&sn=bc3a4611c8c85240a6fb2c1fd38ef7c6&chksm=ce461413f9319d05649f5a680834880964812593d72c98fb1d3c0e842324b677a6704dc3a6bb&scene=58&subscene=0": "Next.js Middleware 认证绕过漏洞（CVE-2025-29927）", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503355&idx=1&sn=5c2e9383e5cd263c53c2bc880d636e89&chksm=f2585e88c52fd79e999ff0537a01fb50bb19170db5f55bde644c69f4dcf63e0f6f24c6c51057&scene=58&subscene=0": "雷神众测漏洞周报2025.3.17-2024.3.31", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247485811&idx=1&sn=cdfad292d379fa7cba51408350147367": "工具集：svnExploit【SVN源代码泄露全版本Dump源码工具】", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497341&idx=1&sn=353bf45187d56042ddb590cdd022bb81&chksm=e8a5fc1edfd275083b3b3d17736767b00679bc171710b31f05f35302521c23066af91576f8d7&scene=58&subscene=0": "利用js挖掘漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497273&idx=1&sn=0bc20077a14bd5a29028a49ee15a9d4f&chksm=e8a5fc5adfd2754cc17f724edeec51bad5113f97814dcc19f67772fe3f84dcc83588fb8ecdcf&scene=58&subscene=0": "XXE漏洞各种骚姿势", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068486&idx=3&sn=49a253062081aae290f02f07ac4704a2": "【安全圈】GitLab 警告多个漏洞可让攻击者以有效用户身份登录", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524212&idx=1&sn=adc8b32975d00ac07cf0fd25f744e1f4": "【漏洞通告】Vite 任意文件读取漏洞(CVE-2025-31125)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490850&idx=1&sn=e76fe3973b2336d62ac834665ec2cdb4": "万能门店小程序管理系统 dopagefxcount SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499062&idx=1&sn=780d36184c63b257ce9a15c1e4cf67e5&chksm=fa5953dbcd2edacd634e99df62c8e21b1b249a45f475b8616cae4fc6a3152df08b9f1dcb90d5&scene=58&subscene=0": "MachineKeys 大字典：利用 3000 条 MachineKeys 爆破 ViewState 反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068690&idx=1&sn=56b130f81a1375b405d522f031dbdbbd&chksm=f36e7712c419fe045a5eb90bb78f2db716f3a343592cfa7e354b6fd52234ef91f0f73d1485f3&scene=58&subscene=0": "【安全圈】研究人员揭露macOS漏洞，或导致系统密码泄露", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590963&idx=3&sn=3bd3151438c0f5b55d478fb9b092ab44&chksm=b18c2e7986fba76f0a4cf349800bbae5940e35ed0b05eb2822f0c3991f6574203d4d9cb178cb&scene=58&subscene=0": "更新2节（附课后作业）| 系统0day安全-IOT设备漏洞挖掘（第6期）", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094990&idx=2&sn=71a46ec096693c5fde872c3101911bb5": "Linux 内核越界写入漏洞（ CVE-2025-0927 ）", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490061&idx=1&sn=be33af5aab30b0fd1bafc6877d17f939": "Ollama未授权访问漏洞【实现AI自由】", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484772&idx=1&sn=b953ebaf6bd157dbe8582350ec8548bc": "Nokia-G-120W-F-路由器存储型XSS（CVE-2021-30003）", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489062&idx=1&sn=7bfb2e666dd730047d33b3aba257b374&chksm=c2c6412df5b1c83b9122a4491eaa03f46d6adf74027b790fe46024417aefd7d5e1da9aa852dc&scene=58&subscene=0": "【漏洞通告】Windows文件资源管理器欺骗漏洞(CVE-2025-24071)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522548&idx=2&sn=0cc9b1e732d2a5c231ebd3f08b1198d4&chksm=ea94a99edde3208849ca7ab6d940870bda4fe6411d5141b128f4065c88085d0a6292aa744dd0&scene=58&subscene=0": "Chrome 修复 Lens 特性中的严重 UAF 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522437&idx=1&sn=fa13f44a7ac5f969c2545cd409208ea5&chksm=ea94a9efdde320f99e34707ab6058ef0fa72c3871963c59aa4dd58f17220777ad7b155eda06c&scene=58&subscene=0": "CISA：Edimax 摄像头中的严重0day漏洞已遭利用", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135371&idx=2&sn=6a4ed653f5f735d427b6b4b80a73c605&chksm=bd15ad588a62244e67295291773f1dfcf10039ea37bc7ec7363949d7f90676247858568f2c95&scene=58&subscene=0": "工信部CSTIS提醒：防范Murdoc_Botnet僵尸网络的风险；谷歌修复两个已被利用的Android零日漏洞 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486637&idx=1&sn=9582df0651833643a927edc2a197edd2": "【漏洞预警】Apache Tomcat 远程代码执行漏洞(CVE-2025-24813)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522462&idx=1&sn=c051df72b6c28d0692307dd16d721ac3&chksm=ea94a9f4dde320e2d70d9b7a80e5498b123869d81567fe01975c9045575a19dd18d413f1a724&scene=58&subscene=0": "苹果紧急修复已遭利用的0day漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489222&idx=1&sn=18f4c183c2bfc53de9996791fb5e33ca&chksm=c2c641cdf5b1c8db2f8172526d62e9c1428f007aa258ccb8f68a4a5fd47b0cf61230bc169760&scene=58&subscene=0": "【支持排查与检测】Vite任意文件读取漏洞(CVE-2025-31125)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489835&idx=2&sn=ff63457657a61b42e52447167443ad0c": "【漏洞预警】Yii2反序列化漏洞(CVE-2025-2689|2690)", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499125&idx=1&sn=0d7a07d43c5d44a19f72a0e53ba45e83&chksm=fa595398cd2eda8eaa59614d333b1a0096c89e121f302e740b5f7d310f32742cf1355b4a6e64&scene=58&subscene=0": ".NET v2.0 框架不用愁，通过 ysoserial_frmv2 触发 ViewState 反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MDU4NjYwOQ==&mid=2247484219&idx=1&sn=89af4b699328ee762974eeb130ed2c58": "SRC漏洞挖掘之逻辑漏洞挖掘实战指南", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522462&idx=2&sn=f4fd6b2b3208ba9bf9c03f0a964fe0e5&chksm=ea94a9f4dde320e2794628bba1a96ea5a4fbdcaf3687cbaf3007508db92db3e077e36f2cfa87&scene=58&subscene=0": "微软三月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484814&idx=2&sn=d370c68ff4ae64de4cd6d6bbb4ddf60c": "malicious-devfile-registry ：在Gitlab中利用CVE-2024-0402", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522568&idx=2&sn=ec34401dbcb58be493c11352d5815bb6&chksm=ea94a862dde3217407994c21b360a3a36b5d0158799c4aedf1f7d71946499b6f7e3f11b7e7c7&scene=58&subscene=0": "思科智能许可证实用程序中的严重漏洞已遭利用", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495894&idx=2&sn=857f86603a4c210e66ac8ec76414e169&subscene=0": "上周关注度较高的产品安全漏洞(20250331-20250406)", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514014&idx=1&sn=940df55ce8c872acd2dc9639c8eef32a&chksm=ebfaf0bedc8d79a8d91b72468dda1173573bc960aff6d38299c3b3543b8078870c19af1930a6&scene=58&subscene=0": "警惕！Fortinet防火墙漏洞遭勒索软件利用，多家企业被黑", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487022&idx=1&sn=be6d4d80fd50ee781458871cfc1eef6f&chksm=c22296d7f5551fc1e5006b6bc19fb3b5655ab633f1b0815aae458952101c37baae87d8f56aac&scene=58&subscene=0": "漏洞预警 | VMware ESXi 存在缓冲区溢出漏洞（CVE-2025-22224）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590984&idx=2&sn=b1db17b5fcaa1c4c3fc72ffc5ce6ecf5&chksm=b18c2f8286fba6941ab6105f712225167b1d0fbc683889fe28f7005fd280a1a5a1d1910c2f13&scene=58&subscene=0": "​Veeam 备份服务器现重大漏洞，速更新补丁！", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492746&idx=1&sn=ed13e6ad093adc8c57da7258ae6ca173&chksm=96f7fbe7a18072f19a82f0ea649e2b56c2bcacfba7dd95fd5fa8fd9319ee48e641b66e8ff029&scene=58&subscene=0": "【已复现】影响部分热门 AI 应用，Next.js 中间件绕过漏洞（CVE-2025-29927）", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788145&idx=1&sn=0f1a20f6a89c77dc027a3479ca3bfbaf&chksm=8893be9ebfe43788a04621c079caea12bf248a00372c0231aa1126095d0398806a01db2ad9c3&scene=58&subscene=0": "攻击链揭露：间谍软件利用零日漏洞攻破安卓手机锁屏", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490065&idx=2&sn=a4481e4d2263583ccf6816d48497e8a7": "SRC挖掘 | fastjson反序列化漏洞实战", "https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247530213&idx=2&sn=bc7ed39e7a3e88d201015a514b3feb0d": "国际 | 运营商巨头赔偿超2.3亿元：因系统漏洞令用户损失巨额资金", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484772&idx=2&sn=5d95f12ceb0ce9f2d63129ff4ab144c9": "Panabit-智能应用网关-后台命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MDU4NjYwOQ==&mid=2247484199&idx=1&sn=408d005a7a84117200e9705d131e6cbc": "《SRC漏洞挖掘实战指南：掌握这些思路月入过万不是梦》", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634869&idx=4&sn=2c9302ea74183c37a3f8c5c49c45be5e": "虚拟机逃逸！VMware高危漏洞正被积极利用，国内公网暴露面最大", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524058&idx=1&sn=5b6a28647c2cd34f5170f008d75d7dd0&chksm=ce4615caf9319cdc9f7d4f3697a1785155e4ed93c11d4debd04fe847d984366a7dbf56607275&scene=58&subscene=0": "【漏洞通告】Apache Tomcat 远程代码执行漏洞(CVE-2025-24813)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068433&idx=3&sn=70253a351fb115e049a9d256c1390052&chksm=f36e7611c419ff07d34d17566ece70874caebfd26dd346a679ab093bdb5ec048fca1956e4d1e&scene=58&subscene=0": "【安全圈】Apache Tomcat 中的 CVE-2025-24813 漏洞导致服务器遭受 RCE 和数据泄露：立即更新", "https://mp.weixin.qq.com/s?__biz=Mzg5MDU4NjYwOQ==&mid=2247484228&idx=1&sn=29999622ae9c6523de14419be8621253": "SRC漏洞挖掘之未授权漏洞挖掘实战指南", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511577&idx=1&sn=329f5c187a5d6240b0131787ff474b80&chksm=fa527ba7cd25f2b134a3912e061b55881b7fca8cd1c26c829a1e3a95b178f9f703dc8d0e3fc9&scene=58&subscene=0": "CVE-2025-24016漏洞对Wazuh平台的潜在威胁", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458591194&idx=1&sn=8573593d270470e21d64034d47a9045b&chksm=b18c2f5086fba6468977f88b6b56fc9deb91954bb8266ddaa9048ce1bda8b42ae58af8375e21&scene=58&subscene=0": "CVE-2023-4427 复现", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068959&idx=4&sn=e57a187e3a257c344e9371d382cfa185&subscene=0": "【安全圈】Dell PowerProtect 系统漏洞可让远程攻击者执行任意命令", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650609945&idx=4&sn=dc687ccf6f9d56f0b1e191eab3a03955": "Tomcat自动化漏洞扫描利用工具", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503362&idx=1&sn=667997870c33aaa2e8794279d067873b&subscene=0": "雷神众测漏洞周报2025.4.1-2025.4.6", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651316861&idx=1&sn=e1d97d2aad6fbc5ac14b4dc8e9e5b3ab": "白帽SRC百洞事件复盘；业务漏洞应对处理策略| FB甲方群话题讨论", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507726&idx=1&sn=87cb8cf899d518b4a7c07925db84de62&chksm=cfcabc1af8bd350c85607f26c312cc39b87c9a3d338bb63e6a33c229f56b8eedeaabb6b2177a&scene=58&subscene=0": "2025上半年最需要关注的80+高危漏洞！", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497257&idx=1&sn=85e09077ac49ae13a1f1daedf3fc5c1b&chksm=e8a5fc4adfd2755cb44a19150ec3a167ed8b06ccf317294d3bd576cf041953a49dc7873e1f24&scene=58&subscene=0": "SRC漏洞挖掘｜助你快速成为百万赏金猎人", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247488786&idx=1&sn=51e7bf2013866df189a3bba48ca8cc41": "审计技巧 | TP框架的系统如何快速高效挖掘漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068262&idx=2&sn=4cf1db2edf35935c09365a77e168187e&chksm=f36e75e6c419fcf0e8d6fe9eaadfd6a76313699ef67cb33b279e19c41386af30413120edb153&scene=58&subscene=0": "【安全圈】苹果 macOS 虚拟机应用 Parallels Desktop 曝漏洞未修补完全", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494528&idx=1&sn=7f8e933d26286579c5b9dc60986b3aa0&chksm=fa9d10d6cdea99c024e39078c2ebc8819c119162458dc9295006e366faef9a056c2df2415957&scene=58&subscene=0": "双倍积分 | 生活服务漏洞+爬虫双专测开启", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247498599&idx=1&sn=db0a2d532eeebd49b487cd58d42cca39&chksm=e84c5db8df3bd4ae94459a242742ec736606d6bbf627d8c19000b53c16a2badd261a43f50ed5&scene=58&subscene=0": "从环境构建到漏洞利用：如何用Metarget和Coogo复现K8s IngressNightmare攻击链", "https://mp.weixin.qq.com/s?__biz=MzkzNzg4MTI0NQ==&mid=2247487370&idx=1&sn=828769015bbb4c7572a3da2b28bb320c": "CVE-2025-30208-Vite任意文件读取漏洞服批量漏洞扫描", "https://mp.weixin.qq.com/s?__biz=MzkyNzQxMjQ4Ng==&mid=2247484230&idx=1&sn=a70c3aec36089a41b2117fe9b81065a3": "Vite 任意文件读取 CVE-2025-30208", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484791&idx=2&sn=956de1b1210bbe1ff1c918ae666442a9": "fuzzlists：渗透测试和漏洞赏金Tips列表集合", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135784&idx=2&sn=a72b91fbbc4464ad90155ba6a5a9081b&chksm=bd15affb8a6226ed3790fb8763c8cd2d7e899a73e5b5c3c5c0bf2e5f0d16a2989aed9db45116&scene=58&subscene=0": "研究显示：超300万财富500强员工账户凭证近三年内遭泄露；严重漏洞威胁Next.js应用，攻击者可绕过授权访问管理面板 |牛览", "https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491372&idx=1&sn=8f6d5ebd2c6ac2f7a14fcb693a978f1f": "震惊！Verizon 750万用户数据泄露，供应商成安全漏洞？", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522612&idx=2&sn=50c7ad88e87b485a09c7ae916f9d9677": "Firefox 存在严重漏洞，类似于 Chrome 已遭利用0day", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237950&idx=1&sn=564e1295e727202d88f8e34675c0d416&chksm=8b580987bc2f80918156eda212fa6b3c348f101d69ddd43a6dddaf317a92ba6835a2f063c227&scene=58&subscene=0": "专题·漏洞人才培养 | 知攻善防，内外兼修，网络安全实战人才培养的实践之道", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497331&idx=1&sn=5043646c8c8773f885a1dc9dedd9bc34&chksm=e8a5fc10dfd2750692c5d3f36d55286cd3950b17c8d5b8c31403370954dcb794b3735ec65729&scene=58&subscene=0": "海外SRC漏洞挖掘｜助你快速成为百万赏金猎人", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522499&idx=2&sn=26c6be6088417f7563b0041ef251fe1f": "GitHub 发现ruby-saml中的新漏洞，可用于接管账户", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503274&idx=1&sn=1a92fb1a08b490191c7da0291d0f3737&subscene=0": "【已复现】Vite 任意文件读取漏洞(CVE-2025-31486)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488206&idx=1&sn=2dec6859f4829ffb1d7ef81960168081": "用友NC-Cloud系统getStaffInfo接口存在SQL注入漏洞 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094945&idx=1&sn=cab9786aaa955563472a712e9552f111": "Apache Tomcat 多项安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538037&idx=1&sn=ec33f4dc2eb70d9417960fe25cc4cc5b&chksm=c14427c8f633aede67a64ff67116350bf19c989ba2d1422ce2e2a71288e75d1e29168300a41e&scene=58&subscene=0": "Ballista僵尸网络利用TP-Link漏洞，6千台设备被攻击", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788184&idx=1&sn=40b357f765ffdbf61042f975a30fc982&chksm=8893bf77bfe436612fa4d97ac07547e2d7c9e38987dcbb8a271666423264511c01ca29598a75&scene=58&subscene=0": "ChatGPT漏洞被超过10000个IP积极利用，攻击美国政府组织", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522590&idx=2&sn=ee575193ee5fe0995b313a95a46890ee&chksm=ea94a874dde32162af6eae13f89ada50332950da90c99d60c106b45836f1993c80d8cd996cbe&scene=58&subscene=0": "谷歌紧急修复已遭利用的0day", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247637810&idx=2&sn=ec91d03b3b9d56b89bd17e92d40d0285": "CSO说安全 | 张天力：智能安全运营体系探索—分布式多智能体在漏洞修复中的应用与实践", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247496048&idx=3&sn=5301263a3d5af1729a93fc785f6f2aae": "美国众议院通过法案：强制政府供应商设立漏洞披露计划", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489835&idx=1&sn=c09fffd40a9c5a670b270f2c5e7fa89e": "【漏洞预警】Spring Security授权绕过漏洞(CVE-2025-22223)", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650609945&idx=1&sn=5aa5340587198c952ae4f44c9fa5c0ba": "外包保洁员段某泄露3项国家机密！国安部披露细节|黑客技术自学成“提款机”，00后利用漏洞盗刷金豆非法套现10万", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484889&idx=1&sn=4651a159ebddd37ffcec1791cfb81162": "CVE-2025-29927：Next.js中间件绕过漏洞POC", "https://mp.weixin.qq.com/s?__biz=Mzk3NTIyOTA0OQ==&mid=2247484141&idx=1&sn=156d01a5ddc9eb22fe1b24e1817e9f31": "vulnhub靶场渗透之Stapler 8000字详解，多种方式任你挑选，sql注入、隧道建立、hadry爆破、内核漏洞利用。", "https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247484681&idx=1&sn=dd3a010cb7a74de83fa8dc1cdf225d53": "【漏洞复现】Vite 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503229&idx=2&sn=c5328659e9a3f009109e9af22c442b32": "【已复现】Vite 任意文件读取漏洞(CVE-2025-30208)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652997718&idx=1&sn=752d913378c3996e28d3f53b6afb9bc6&subscene=0": "先知通用软件漏洞收集及奖励计划第七期 正式开始！", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487389&idx=1&sn=37bc4e36e8c88426d8ced66cda70de42": "Apache Tomcat partial PUT文件上传反序列化漏洞（CVE-2025-24813）", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524146&idx=1&sn=d09e102574d231b235425141cfef65af&chksm=ce461422f9319d34720cf5387352c6b926feaf5841e13e10cec9259e104efcf74757876a486c&scene=58&subscene=0": "【漏洞通告】Ingress NGINX Controller 远程代码执行漏洞(CVE-2025-1974)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522661&idx=1&sn=234e6d8db3a2e78f2339f4951303f508&chksm=eb4b7e15816de87a16a19e040a1e8b2516b924025af2555f539186e12291ae3e471f978695f2&scene=58&subscene=0": "Jan AI 系统中存在多个漏洞，可遭远程操纵", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068976&idx=1&sn=60a9f88e02e487944d15429688fbd7f6&subscene=0": "【安全圈】谷歌紧急发布4月安全更新 修复62个Android漏洞含两大零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NDY3MzA2Ng==&mid=2247484165&idx=1&sn=079a104fd320c9c27612368c79e5ef6a": "【漏洞复现】Apache Tomcat 命令执行漏洞（CVE-2025-24813)", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247545731&idx=1&sn=e6c11f0be3ece715ea375cd373086b13&chksm=eb84d823dcf3513522edb395d85ad8adb6f946eeaf5c65e058109cceeafaeea1f795e60123ff&scene=58&subscene=0": "Vite开发服务器漏洞预警！启动即裸奔,低门槛攻击可致系统数据泄露", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489779&idx=1&sn=0e63132b1c7d972b6c91bcac37259929&chksm=fa801517e4e91fa05a42e61ac90392fef9ef05b622ee43e15761de7f29a6251f4f910fce842d&scene=58&subscene=0": "揭秘天价漏洞BrokenSesame 技术细节", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238059&idx=4&sn=475d254c976f43978bdbea4bd84bebc9&chksm=8b580912bc2f8004cd4d679d99c77d8e0b6160005bd80b4eb56c439ca0bf6499bf983b741911&scene=58&subscene=0": "CNNVD | 关于Apache Tomcat安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzkwMzUyMjk2MQ==&mid=2247484210&idx=1&sn=1686a772cf7455a19bfda4b623d6958a": "本周最新的、复现超简单的Vite任意文件读取漏洞(CVE-2025-30208)", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487054&idx=1&sn=f7a9ab7406135e91f6b98f7d0341f6bc&chksm=c22296b7f5551fa1bd51b4c258ac6244bad50aa97ea58f3c353361d92372e881f25e3addd18a&scene=58&subscene=0": "某合约任意提取BNB漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503114&idx=1&sn=51c104a70566f06d4b7bbc8e0fb68a0f&chksm=fe79e992c90e6084f11efad6b33b036377233c8947b09dc08ec185699823134f53a28fb4ffe9&scene=58&subscene=0": "Apache Tomcat 远程代码执行漏洞(CVE-2025-24813)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488251&idx=1&sn=9dd825fbac48298618f53dbb722f73ec": "FOXCMS黔狐内容管理系统index.html接口存在远程代码执行漏洞CVE-2025-29306 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzkxMTMyOTg4NQ==&mid=2247484401&idx=1&sn=d1b0954e68a03906f60a5055bd8331da": "ZZCMS最新跨站脚本漏洞及解决办法（CNVD-2025-05384、CVE-2025-1949）", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500968&idx=2&sn=8d2a6ef14e348b55969ad6cc82159d0c": "【漏洞通告】Vite 任意文件访问漏洞(CVE-2025-32395)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529020&idx=3&sn=307880420bc8cb8495f1f825729ab4ec": "Jenkins Docker 镜像中存在漏洞 (CVE-2025-32754, CVE-2025-32755)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651318396&idx=3&sn=a78c051f89f530f4063d6b0d8232c8ac": "CISA将Linux内核漏洞列入已知被利用漏洞目录", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651318396&idx=4&sn=d4cd7bb135efe9f1d1a5aac2a77284ce": "WordPress插件身份验证漏洞披露数小时后即遭利用", "https://mp.weixin.qq.com/s?__biz=MzU5OTg4MTIxMw==&mid=2247504106&idx=1&sn=b5c65ac97ae5321c0c1fd2a535f56bf2": "回顾 | 2025香港Web3嘉年华：CertiK以创新技术定义安全未来", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522711&idx=2&sn=2524dc1d635d1e0a9ec3abc54886f6ab": "日产聆风存在多个漏洞，可用于远程监控和物理接管", "https://mp.weixin.qq.com/s?__biz=Mzg4MjQ4MjM4OA==&mid=2247524240&idx=1&sn=4a854ad105d1b374a056f7c26ebea424": "CISO集体推荐！漏洞管理十大最佳实践", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490486&idx=1&sn=5e399f5cdae397c1fa1f19112bc6fcdc": "Linux USB 音频驱动漏洞正被恶意 USB 设备在野利用", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU0OTQyMg==&mid=2247484409&idx=1&sn=4985296f3ca2c4956a30d0468edaebbb": "【漏洞预警】Foxmail远程代码执行漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490367&idx=1&sn=0b9a137ad0a91aedd26f7a5e9054583d": "【已支持检测】Langflow存在远程代码执行漏洞（CVE-2025-3248）", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524246&idx=1&sn=b861355f8def9c56781fa86b8fe0a243": "【漏洞通告】Ivanti多产品缓冲区溢出漏洞(CVE-2025-22457)", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487971&idx=1&sn=013a3712fb405f76d1d1c0e53e923be8": "RemoteMonologue: 利用 DCOM 进行 NTLM 认证强制攻击", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489931&idx=1&sn=122fd98425212783a719b1be9750565e": "【漏洞预警】Vite 访问控制不当导致任意文件读取漏洞(CVE-2025-32395)", "https://mp.weixin.qq.com/s?__biz=Mzg4NjYyMzUyNg==&mid=2247491673&idx=1&sn=acb4d6ed548113a18913ac89297083ef": "安全威胁情报周报（2025∕04∕05-2025∕04∕11）", "https://mp.weixin.qq.com/s?__biz=MzkwMjU5MzgzMQ==&mid=2247485362&idx=1&sn=b3e9b39e80db5f4a7ca1c13b7d71427e": "逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247626162&idx=2&sn=74b4f80b9153fd3f2bbd12e7eac5acd3": "Foxmail 官方致谢！APT-Q-12 利用邮件客户端高危漏洞瞄准国内企业用户", "https://mp.weixin.qq.com/s?__biz=Mzk0MDYwMjE3OQ==&mid=2247486442&idx=1&sn=34349d4f38ac1cc9d363fbec3bb38441": "AkiraBot借OpenAI绕过验证，AI垃圾广告攻击狂轰40万网站", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247485363&idx=1&sn=bcfa6206296abb06768c82b403f6db80": "午夜代码影：黑客捉奸背后的 Azure 漏洞暗战", "https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247534828&idx=1&sn=e9c2cc00e07c9dbaf6239c626a8a4abc": "【漏洞预警】Foxmail邮件客户端存在跨站脚本攻击漏洞，建议立即升级防护！", "https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247501805&idx=1&sn=cb6ccfa56e174c9f64d10e2da16b6167": "慢雾(SlowMist) 与 Web3 的香港之约圆满落幕", "https://mp.weixin.qq.com/s?__biz=MzIwNjQ4OTU3NA==&mid=2247510315&idx=1&sn=e436082393dcbb2944e29e0f6e0ed6c5": "[0411] 一周重点威胁情报｜天际友盟情报站", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503309&idx=1&sn=7a1ece2cfde74c26341f4eba4ff36737": "Foxmail 官方致谢！Foxmail for Windows 远程代码执行漏洞(QVD-2025-13936)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486485&idx=1&sn=f914d4e913965d81c1f55f4deb639e18": "你为什么挖不到漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMjY1NDMxMg==&mid=2247485843&idx=1&sn=84a90e809a31d051b590280548b7273e": "【漏洞复现】帆软报表 ∕view∕ReportServer SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491091&idx=1&sn=f4e680a3ad39665ff306d21b2f4d4aec": "YesWiki 任意文件读取漏洞（CVE-2025-31131）", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497393&idx=1&sn=74ff74da6853989a2c781e7b8dabfb59": "漏洞挖掘的几种思维", "https://mp.weixin.qq.com/s?__biz=Mzg3NzIxMDYxMw==&mid=2247504525&idx=1&sn=4610ea3baed3a5f7e4e88c79c377c0f7": "src 挖掘| 奇怪的任意用户重置密码组合拳漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247485396&idx=1&sn=acb6f51557e59bdf3a92601a2fc2497d": "代码审计| 某u8 1day漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487994&idx=1&sn=976e5b596d7f3e794daa72cef2fdbaab": "MindshaRE: 使用 Binary Ninja API 检测潜在的 Use-After-Free 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247483984&idx=1&sn=de8a16f1b1a270597ae040358b8e2d5e": "【已复现】Vite 文件读取漏洞(CVE-2025-32395)(已经出了四个CVE了！！！！)", "https://mp.weixin.qq.com/s?__biz=MzkyNzY1NzEwMQ==&mid=2247484655&idx=1&sn=70cf4ce7b4537a05dee06afb4262c1ff": "欢迎各位师傅4.23来青海民族大学参加我们举办的ai安全沙龙", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529050&idx=3&sn=03390c04496d1105d0618a4a3619cfd4": "CVE-2025-22457：Ivanti Connect Secure X-Forwarded-For 堆栈缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486679&idx=1&sn=46b3a31a1ea5b645361d94338a8debfb": "【漏洞预警】Vite 任意文件读取漏洞(CVE-2025-32395)", "https://mp.weixin.qq.com/s?__biz=MzIyMzIwNzAxMQ==&mid=2649467284&idx=1&sn=8b281bb06c564527481b340943af734c": "100台新交换机如何实现批量配置？", "https://mp.weixin.qq.com/s?__biz=MzkxNDUzMjE4Nw==&mid=2247490294&idx=1&sn=4bfdc69de183f0757321a590854111c7": "PG_Plum", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247489012&idx=1&sn=789da52475cd646f3ddffa24b8b85abf": "影响资产居多 | Vite 任意文件读取 【CVE-2025-32395】", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247485926&idx=1&sn=fe08698cf9b61f835438e4c487247a1b": "工具集： DahuaExploitGUI【dahua综合漏洞利用工具】", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487671&idx=1&sn=3632be6e09b0b40b572900557be4a2d4": "25,000美元漏洞背后的警醒：API端点如何成为数据泄露的“后门”？", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491978&idx=1&sn=336e239d43c86ac21d4c675ef0a96a8f": "渗透测试-非寻常漏洞案例", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514163&idx=2&sn=833919f6929df766601724c5b9e4477d": "CNCERT：关于Foxmail邮件客户端存在跨站脚本攻击漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511689&idx=1&sn=b520b9a89b0e0dc7e5f319ee3e50dc9f": "固件安全的隐忧：UEFI漏洞的持续威胁与修复之路", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247518583&idx=1&sn=c1f7a64ef6e9780af0afdc339293cdf6": "小程序渗透记录 | 通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037611&idx=1&sn=faa5a7bb5555a25087fc85eae6eafdbc": "利用solidity与EVM本身的漏洞进行攻击二", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247489113&idx=1&sn=0436d5c27d2708e16a0fd64c96d7d76f": "泛微云桥20240725存在未授权文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247498528&idx=1&sn=91134b170a08058f6d2d26fbb6dd082f": "参数** _session_name= RCE", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492841&idx=1&sn=651ce330b0e4ca0456383fb70b989319": "漏洞预警 | Kavita路径遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492841&idx=2&sn=b4790ecbb5fe40780165e7a41d0926b8": "漏洞预警 | 畅捷通T+ SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492841&idx=3&sn=effe50b8ba0886a68abc721bfdee3944": "漏洞预警 | 神州数码DCME-320出口网关任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyNTUyNTA5OQ==&mid=2247485165&idx=1&sn=6bf8e2894f9573d36bfc7203606b2150": "【漏洞复现】Next.js中间件权限绕过漏洞 CVE-2025-29927", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069034&idx=3&sn=b2c1459405fd108b2d8796be35f685ea": "【安全圈】微软4月安全更新：修复125个漏洞，12个存在高利用风险", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651318420&idx=4&sn=406df082a4a4770f0bef21dff25a3ee5": "Linux USB音频驱动漏洞正被恶意USB设备在野利用", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247488985&idx=3&sn=af1065e3e418f7750b6d75c25fd9eded": "CrushFTP新安全漏洞：未授权访问和CVE-2025-31161", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655274391&idx=1&sn=62c2d63989bba70217719e7677da48c7": "HVV蓝队面试题汇总", "https://mp.weixin.qq.com/s?__biz=MzIwMjE2NTM5Mg==&mid=2247485557&idx=1&sn=7d53e25aa71f65d1af21f8347a2c8d41": "XSS漏洞挖掘下", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491109&idx=1&sn=b60205c1c49c7d9ea4e2e6393cd0250d": "NAVIDROME 权限绕过漏洞(CVE-2025-27112)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491100&idx=1&sn=e1c7d7ebeb28e092fbcbe727bc69c56e": "Langflow 远程命令执行漏洞(CVE-2025-3248)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488354&idx=1&sn=e4e589ed2f4cfddcf07f04359155915e": "Langflow code接口存在远程代码执行漏洞CVE-2025-3248 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484396&idx=1&sn=2873a95da7a1ad77080e1e5c4b179fe7": "MCP 赋能安全工具的无缝集成", "https://mp.weixin.qq.com/s?__biz=MzkyMzcyMjgwNA==&mid=2247483951&idx=1&sn=a2682aafbaf36a8d13f230de07e070e2": "GeoServer-Tools-CVE-2024-36401内存马利用工具", "https://mp.weixin.qq.com/s?__biz=MzkyMzcyMjgwNA==&mid=2247483941&idx=1&sn=800f2091e3d20945c642bb27c098819e": "nextjs中间件权限绕过漏洞（CVE-2025-29927）", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488365&idx=1&sn=314c21aa414c89fadd60ee05820047c6": "Vite import存在任意文件读取漏洞CVE-2025-31125 附POC", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511690&idx=1&sn=6d60fe31b68f04bb55ead2d1e4d7aa70": "警惕！NVIDIA Triton推理服务器整数溢出漏洞曝光：原理、复现与修复全解析", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247484280&idx=1&sn=b7a40149f0c6ee185ce0c95c9d52ffe3": "实战|SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664712178&idx=1&sn=25e55840517fe21298f753ffaab47fc7": "heapdump未经授权漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069034&idx=3&sn=b2c1459405fd108b2d8796be35f685ea&subscene=0": "【安全圈】微软4月安全更新：修复125个漏洞，12个存在高利用风险", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514163&idx=2&sn=833919f6929df766601724c5b9e4477d&subscene=0": "CNCERT：关于Foxmail邮件客户端存在跨站脚本攻击漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511689&idx=1&sn=b520b9a89b0e0dc7e5f319ee3e50dc9f&subscene=0": "固件安全的隐忧：UEFI漏洞的持续威胁与修复之路", "https://mp.weixin.qq.com/s?__biz=MzUyNTUyNTA5OQ==&mid=2247485186&idx=1&sn=d60c71d512d754e0c55d1747a7c9c042": "【漏洞复现】Vite 任意文件读取系列漏洞(附POC)", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484853&idx=1&sn=bfee0d86e2a2f245553fd532d8791486": "Zyxel-NBG2105-身份验证绕过-CVE-2021-3297", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484853&idx=2&sn=40e5e9afccda310296c445df31f9cff7": "Zyxel-NBG2105-身份验证绕过（CVE-2021-3297）", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610203&idx=3&sn=4fde380e2a27458adacf0317df2124ce": "浅谈AI部署场景下的web漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260890&idx=1&sn=f46073f31278972785b097461b3b66bb": "从CVE-2025-30208看任意文件读取利用", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247488005&idx=1&sn=6643771366172d0252db5ac06ea90045": "CVE-2021-31956 Windows 内核漏洞（NTFS 与 WNF）利用 —— 第一部分", "https://mp.weixin.qq.com/s?__biz=MzI5MDcyODIzNg==&mid=2247484994&idx=1&sn=1cb5bfec74a800ad6e63d0ef4b4a99d6": "3月成绩出炉，这届白帽子太卷了！地图大师新手SRC漏洞课程3月学员成绩报喜！！", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247498590&idx=1&sn=fc1e93c95932737caa9cab07855c7a1b": "CVE-2025-22457", "https://mp.weixin.qq.com/s?__biz=Mzg4NzQ4MzA4Ng==&mid=2247485569&idx=2&sn=bae8c0344767b0fd34f062816de56c31": "H3C多系列路由器存在任意用户登录漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069060&idx=3&sn=30e98f80aea19e6a87a4765e728b6602": "【安全圈】WordPress插件漏洞导致网站遭受关键文件包含攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069060&idx=4&sn=8f7ac8e308536849b9fc926f55d5b341": "【安全圈】TP-Link 漏洞：Wi-Fi 凭据面临泄露风险", "https://mp.weixin.qq.com/s?__biz=MzkxNjc0ODA3NQ==&mid=2247483889&idx=1&sn=8d4a9aa5fddab0aae717cdb3bb4727c6": "价值 $25,000 的hackerone 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491127&idx=1&sn=23169aa6102935e5aedefeeed1a167d6": "elestio memos SSRF漏洞 (CVE-2025-22952)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491118&idx=1&sn=73f107c1456e7a1b833ab075bb86432d": "Vite 任意文件读取漏洞 (CVE-2025-32395)", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQ0MTI2MQ==&mid=2247484833&idx=1&sn=2f76e4a9ca94746f37a50b9055fa9d19": "当心！新型钓鱼攻击正绕过你的双重验证", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484915&idx=2&sn=bd3b1bb5bb259d840a67c27b64a8af41": "CVE-2025-24813：Apache Tomcat 漏洞POC", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247494035&idx=1&sn=9199ea3207a45dfee0cd53c3984a6f8d": "一个自动化PWN利用框架，专为CTF比赛和二进制漏洞利用设计，集成了栈溢出、格式化字符串等多种漏洞利用技术", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520068&idx=1&sn=e17599d10b5470a5e1aa10131271d8e7": "从CVE-2025-30208到CVE-2025-31125再到CVE-2025-31486", "https://mp.weixin.qq.com/s?__biz=MzkwNjczOTQwOA==&mid=2247494408&idx=1&sn=eca1f790f3ef8cae120729ed27563c09": "工具推荐 | OSS存储桶遍历漏洞自动化利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247490912&idx=1&sn=2c4cd750457017b6bf8776cae3c45bbe": "通过HOST碰撞发现更多资产和漏洞|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492583&idx=1&sn=8d29765a3bb3ec8506a8401886f45887": "EncryptHub 与 Windows 系统上的 MMC 零日漏洞攻击有关", "https://mp.weixin.qq.com/s?__biz=MzkyMTYyOTQ5NA==&mid=2247486788&idx=1&sn=913b6fb09deb3d46c4c786dfc645458d": "黑客如何用一张图片掏空你的服务器？揭秘SSRF漏洞的致命陷阱", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484863&idx=1&sn=ae907d6c690893e6e09dc0c609caf6ca": "Zyxel-USG-Series-账户硬编码漏洞（CVE-2020-29583）", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484863&idx=2&sn=cf7f7e0a555f5c38dd960531d352bd63": "Zyxel-硬编码后门账户漏洞-CVE-2020-29583", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069060&idx=3&sn=30e98f80aea19e6a87a4765e728b6602&subscene=0": "【安全圈】WordPress插件漏洞导致网站遭受关键文件包含攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069060&idx=4&sn=8f7ac8e308536849b9fc926f55d5b341&subscene=0": "【安全圈】TP-Link 漏洞：Wi-Fi 凭据面临泄露风险", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511690&idx=1&sn=6d60fe31b68f04bb55ead2d1e4d7aa70&subscene=0": "警惕！NVIDIA Triton推理服务器整数溢出漏洞曝光：原理、复现与修复全解析", "https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247491573&idx=1&sn=e64d595da71a593b827cb8f9df1400f8": "针对漏洞安全研究人员的钓鱼攻击", "https://mp.weixin.qq.com/s?__biz=MzA5NTUxODA0OA==&mid=2247493382&idx=1&sn=92628136ce7b70ecea181580346cb279": "Wireshark & Packetdrill | TCP Cork 算法续", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247491151&idx=1&sn=39ad93fa57285531b3b995548c657c33": "窗外有\"眼\"：IP摄像头安全漏洞与默认密码危机", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651318490&idx=4&sn=36c83d3d53a3998b800eec9e88dabcff": "思科设备曝出七年旧漏洞 攻击者可远程执行代码", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247638706&idx=1&sn=08c0847526be9176f8b06fbf0c03b1e7": "直播回顾 | 2025百家说事：企业出海之安全观", "https://mp.weixin.qq.com/s?__biz=Mzk0MzQzNzMxOA==&mid=2247487923&idx=1&sn=dffb61931400a56d9f07668b674dcf66": "日产Leaf被曝存在远程控制漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMDY5OTg5OA==&mid=2247494915&idx=1&sn=49f99424f090ec06972e9e6cd5627cae": "容器漏洞101", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495916&idx=1&sn=95dd17be4de0242ca4f54b54200179fb": "CNVD漏洞周报2025年第14期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495916&idx=2&sn=0a85f04f728e3f725c6f40109a6b4213": "上周关注度较高的产品安全漏洞(20250407-20250413)", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490549&idx=1&sn=b0d73cd6e39be667ff212ab730bb4454": "黑客利用已修复的Fortinet FortiGate设备漏洞获取Root权限", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458592509&idx=2&sn=9a10b35e0c61ef7dbe37b2a1c097cb20": "Fortinet 漏洞再现，攻击者利用新方法入侵", "https://mp.weixin.qq.com/s?__biz=MzkyODIwNDI3NA==&mid=2247486213&idx=1&sn=c5a611cf1e8efde9cbd820d4274efefd": "BSSRC四周年活动联合礼包结果公示", "https://mp.weixin.qq.com/s?__biz=MzU1NjgzOTAyMg==&mid=2247523649&idx=1&sn=28b85b4837a0fdaf3bce0280ad7b5cc1": "系统0day安全-IOT设备漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492783&idx=1&sn=24722b7cf6403b97d3b9c5935eb86715": "【已复现】泛微e-cology 前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk1Nzk3MjA5Ng==&mid=2247484800&idx=1&sn=05711cd30de2ff9e41e3cc73052a02c8": "你知道JWT漏洞如何进行攻击利用吗？", "https://mp.weixin.qq.com/s?__biz=Mzk1Nzk3MjA5Ng==&mid=2247484817&idx=1&sn=f1f2e54d99b2824f8f992cb533a8af88": "推荐几款好用的Jwt漏洞工具", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650621893&idx=1&sn=927ada6d707b69c72733b0208ea5eeef": "高危！Vite任意文件读取漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503369&idx=1&sn=67594945f0cabd22f1742778e4ad13a6": "雷神众测漏洞周报2025.4.7-2025.4.13", "https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247526651&idx=1&sn=8cc74d081512721be906f6871e5b24b0": "当漏洞攻击遇上腾讯混元超能力：EdgeOne 的 Web 安全赛博决斗", "https://mp.weixin.qq.com/s?__biz=MzU1MzEzMzAxMA==&mid=2247500002&idx=1&sn=8f8b447bced031f93302817a136888ed": "网络安全动态 - 2025.04.14", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503314&idx=1&sn=f30378a921d30010f931c4eb0741bce2": "安全热点周报：PipeMagic 木马利用 Windows 零日漏洞部署勒索软件", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247572356&idx=2&sn=18c79293f3ca29cbc3ff403b0257b17e": "今年运维这工资是认真的吗？", "https://mp.weixin.qq.com/s?__biz=Mzk0MDYwMjE3OQ==&mid=2247486447&idx=1&sn=953fbcff32b36a93699e1ed6079cd185": "日产 Leaf 电动汽车被曝存在漏洞，黑客可远程操控车辆", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247623435&idx=1&sn=a552114e8824f9f24564fd27a751dd12": "网络安全研究：人工智能安全趋势研究", "https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649871255&idx=1&sn=3d17eaea3505ec55b3fe70510fb27b63": "邀请函 | \"AI+低空经济与数字化生态安全\"技术研讨会", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489487&idx=1&sn=a3fbf405d8596427ed2f89da41963dd8": "记一次某EDU站点实战从任意文件读取漏洞到RCE", "https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661300149&idx=1&sn=9aca54ccea3fb64c3a48596ec9bf9e38": "山石网科闪耀华为云生态大会2025，荣获“年度持续经营奖”", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247499118&idx=1&sn=c240cdea6dd7b9f4dbd9f227787398b1": "国外：一周网络安全态势回顾之第94期", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247488006&idx=1&sn=49502e27205bd6d65ab6405276597d91": "CVE-2021-31956 Windows 内核漏洞（NTFS 与 WNF）利用 —— 第二部分", "https://mp.weixin.qq.com/s?__biz=MzAwMjc0NTEzMw==&mid=2653589001&idx=1&sn=238b7d26b15726787b8b9b1e2bb614ba": "SpEL表达式漏洞注入内存马", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247615852&idx=1&sn=a626dd27fc9de09c765a8c0c6b20bc82": "赏金故事 | 入侵 Google 自家的漏洞追踪系统，并拿下1.5w$", "https://mp.weixin.qq.com/s?__biz=MzkzMDE5MDI5Mg==&mid=2247508964&idx=1&sn=ef41b82ca3acfb1815ccb4c4a8bbc7bc": "中移动控股第一年，启明星辰上市首次亏损为哪般？", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489941&idx=1&sn=5120eb645929f0329d9f2ac32c52c8f4": "【漏洞预警】泛微E-Cology9前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489941&idx=2&sn=5b47223cad6d3d10a43beec69aa874be": "【漏洞预警】OpenSourceMatters Joomla 未授权SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyMDAwMjkzNg==&mid=2247513589&idx=1&sn=e47c0cb26111d9e399ce8cedf7f86ce5": "小程序渗透记录 通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491137&idx=1&sn=a2cd856b7ac743911b386c4629a31b1f": "JeeWMS cgAutoListController.do SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5Njg5ODM0OQ==&mid=2247486007&idx=1&sn=d62a59172f6e53c77c8c1fdb21e61e83": "漏洞分析 | Apache Skywalking的log4shell分析", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247494044&idx=1&sn=a001baaaa089ff3339dcfe9e2c811276": "一款全方位扫描工具，具备高效的机器探活，端口探活，协议识别，指纹识别，漏洞扫描等功能", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655274891&idx=1&sn=7c4322c4431633091709b2d36229b8b1": "300页 Android 应用安全：缓解黑客攻击和安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487899&idx=2&sn=8342140bf27d4c4e50aa8bfede0fba83": "安全人员如何对漏洞进行定级？", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485278&idx=1&sn=fecba70d08e60884cefdea405e054459": "【工具分享】供应链漏洞探测工具", "https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247491573&idx=1&sn=e64d595da71a593b827cb8f9df1400f8&subscene=0": "针对漏洞安全研究人员的钓鱼攻击", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503314&idx=1&sn=f30378a921d30010f931c4eb0741bce2&subscene=0": "安全热点周报：PipeMagic 木马利用 Windows 零日漏洞部署勒索软件", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458592509&idx=2&sn=9a10b35e0c61ef7dbe37b2a1c097cb20&subscene=0": "Fortinet 漏洞再现，攻击者利用新方法入侵", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495916&idx=1&sn=95dd17be4de0242ca4f54b54200179fb&subscene=0": "CNVD漏洞周报2025年第14期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495916&idx=2&sn=0a85f04f728e3f725c6f40109a6b4213&subscene=0": "上周关注度较高的产品安全漏洞(20250407-20250413)", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503369&idx=1&sn=67594945f0cabd22f1742778e4ad13a6&subscene=0": "雷神众测漏洞周报2025.4.7-2025.4.13", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247503070&idx=1&sn=f53d03400c6041496926b42651d6cdeb": "360漏洞情报月报2025年03期 | 漏洞总量持续高位运行，核心系统威胁加剧", "https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650627056&idx=1&sn=897e591387829326d8bf5577f47712d5": "“一周懿语”丨第十六期", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247497718&idx=1&sn=a9eb2025f299dcfc98322ff03f5f2f10": "悬赏通缉！3名美国特工对亚冬会实施网攻窃密被锁定", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491997&idx=1&sn=5834ac3728b18dcaa41d9487729d1512": "硬编码导致的前台上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247492180&idx=1&sn=b3578e7314688379ad313a8065f7a44c": "漏洞预警 西部数据 NAS safepoints_api.php network_get_sharefolder 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzODMyMzQxNQ==&mid=2247484543&idx=1&sn=deb04049ce38b06879d91f9daa69f2ca": "CPTS考前PATH全部Flags合集", "https://mp.weixin.qq.com/s?__biz=MzkyNzM2MjM0OQ==&mid=2247496333&idx=1&sn=f9bfa284e08c84c0b573c55b87aac338": "SRC舔狗日常", "https://mp.weixin.qq.com/s?__biz=MzUzMDQ1MTY0MQ==&mid=2247506867&idx=1&sn=1d525340d344139f5182692369e05276": "某代理商管理系统存在RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247489123&idx=1&sn=a1a8b52dbf0a3542e6bbadc615fff2bb": "实战 | 记一次双排渗透测试漏洞复盘", "https://mp.weixin.qq.com/s?__biz=MzIxOTM2MDYwNg==&mid=2247513081&idx=1&sn=652370f1585c30fe3300a01ffaec5179": "国际象棋网站漏洞 从XSS到账户接管的探索之旅", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247506010&idx=1&sn=80b1e19f7016f882c5d7aa2d3ab98cc1": "一次就学会网络钓鱼“骚”姿势", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247485937&idx=1&sn=cc10c48f62bbcfa614c1598fbda0c39b": "工具集： CTFTool-All-in-One【集信息收集、漏洞利用、提权、文件传输等功能于一体的CTF综合工具】", "https://mp.weixin.qq.com/s?__biz=MzkzNzQyMDkxMQ==&mid=2247488014&idx=1&sn=b2b8d96e8f2553a8d4be4fb1d8d0d808": "支付类漏洞挖掘技巧总结", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492866&idx=1&sn=86e9042f1a3e9c82ccc49178026541aa": "漏洞预警 | NetMizer日志管理系统远程命令执行和SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492866&idx=2&sn=2a8428d734de11e12b6d8063a65cfd4e": "漏洞预警 | 家装ERP管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492866&idx=3&sn=e18dd4b4d80de1a41360126b870fe746": "漏洞预警 | 用友NC SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NzIzNzU4Mg==&mid=2247489997&idx=1&sn=b280dd0cf6e984f8a066d6a5624c556a": "21201_ctfshow_misc_绀青之拳 writeup", "https://mp.weixin.qq.com/s?__biz=MzkxMzIwNTY1OA==&mid=2247511756&idx=1&sn=1d0b6a4dd53fa8d4b162dcbdd56e110a": "基于ESP8266水质检测 （MQTT上报小程序和HA）", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247491539&idx=1&sn=05c9048508a769e94dcae826662ecad5&chksm=fd772f1aca00a60c5bfd35fca6134ddc7af7c85af525ef10e442847393ec0dfaf16e78c2b1aa&scene=58&subscene=0": "CNVD漏洞周报2022年第15期", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247511412&idx=2&sn=a8d4aa558a717bc3227abcc1363b5e93&chksm=ea949c1edde315087a2d5ebd9235b98d5eabb6789a50df0860fd04883b4c64bacb6b33cd5daf&scene=58&subscene=0": "VMware Cloud Director 严重漏洞可使整个云基础设施遭接管", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247492771&idx=1&sn=5bc86cbf62a83db69b1b1919ad86273b&chksm=c007493ff770c0290f199daef6b03bd09f9f85e35c5179c3ca8fe062623ecc27522b45850f0a&scene=58&subscene=0": "【技术干货】CVE-2022-1162 gitlab 硬编码漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMDEyNTkwNA==&mid=2247486352&idx=1&sn=2e009dcc7c7de3913f7541079ebae00d&chksm=f9ee672fce99ee39f02d9456384daf94259dc4b1578dbcbcabccb39af473d1474fafe8525e4f&scene=58&subscene=0": "从Spring RCE 0day(CVE-2022-22965)看黑产利用速度", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649769413&idx=2&sn=fce295840d0736a1eee3d83f59ed6665&chksm=889375aabfe4fcbc869da1c91cd12ad53c19b08de096687dfc19904b9625ebf295f667b2ecb3&scene=58&subscene=0": "【技术分享】Visual Studio Code本地代码执行漏洞(CVE-2019-1414)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247495821&idx=1&sn=2b7f070f4e696369bb1d360fa1da05d1&chksm=fe79d415c90e5d0336b6c4b9847892371af5cf12d3a7b943c5916423bb5189577dbd2a486434&scene=58&subscene=0": "【安全热点周报】第241期:微软4月补丁日发布了120个漏洞的补丁程序", "https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247489504&idx=1&sn=fe86ccce73da17cd24ee84039aee3b28&chksm=9799ec45a0ee65530d6b7caa678c699c4a3dec3f83af411ac0aac6a9e32b4d25dbe1632b73ef&scene=58&subscene=0": "【漏洞预警】7-zip命令执行", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247525843&idx=1&sn=04cd642e1e38965470be1c70da6931a4&chksm=c1e9e982f69e60945c4712749bed3bfe994081237726b40e41460fa940b06e0f318aaba40549&scene=58&subscene=0": "由PolicyKit和DirtyPipe漏洞浅谈安全操作系统的意义", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247511433&idx=1&sn=ccfa58d4b24a80f8950bdafde68af58c&chksm=ea949ce3dde315f563191aee1b6f8c1e5a266126fe4968ef8018d1a937bc6e8a3bc500415221&scene=58&subscene=0": "NSO Group 被指利用零点击 iPhone 0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247511433&idx=3&sn=ff04084cd337034fbdf95f2eb572c65a&chksm=ea949ce3dde315f54aac997e6b2fa73ed091ef780a4381e169502f00c9227d9bc2518f543d05&scene=58&subscene=0": "开源工具 PrivateBin 修复XSS 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1MjgwNzc4Ng==&mid=2247503231&idx=1&sn=ca048f32cfba5260024b27cc3d4d479e&chksm=fbfef17acc89786c935d2ef0adce3bd44daa6a96eb8dc93665d1c2cb95307048f362cb63e1c9&scene=58&subscene=0": "“精”准把握静态分析｜科恩二进制文件自动化静态漏洞检测工具正式开源", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649769428&idx=2&sn=d73dff2472aa389c279df1c88eebbae5&chksm=889375bbbfe4fcad5c8003c61cd83d13dffea1939b4a462a5ba2d071345609f7627e5cb78cad&scene=58&subscene=0": "【技术分享】Phar与Stream Wrapper造成PHP RCE的深入挖掘", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247495839&idx=1&sn=c72294b6276e1c689e23864ed5ba58e6&chksm=fe79d407c90e5d11f136dc6f94771866a7d844f8dc21908a0064c526c48de03c7f95e0710c2d&scene=58&subscene=0": "【安全风险通告】Oracle多个组件漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247490896&idx=1&sn=214fa7addb1f41d0ba4e6e55ac6192b0&chksm=fe251851c9529147ba43c6ac1d8be787053730d77014f3a2e378547955284fe0b41db1c7c4e6&scene=58&subscene=0": "2022-04 补丁日: Oracle多个产品漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458438427&idx=1&sn=a265492f38362801447a5423d49a51ce&chksm=b18ffb9186f87287b1fd247325b81803b4c18429d9238be1213ff186842ddfcea51fb5be09e2&scene=58&subscene=0": "CVE-2022-0995分析（内核越界 watch_queue_set_filter）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458438427&idx=2&sn=2eb22f30d7cfaf8028cdf109d5a2f6e2&chksm=b18ffb9186f8728772dc022c69c356a46572d6307f7804b2104c7aa4756c546b82864359f7b0&scene=58&subscene=0": "联想UEFI漏洞影响数百万台笔记本电脑", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247525895&idx=3&sn=e8bfbedec74f22090bbbcc68154bd865&chksm=c1e9ea56f69e6340073094afc4f69d97c4b558f9f68bec571d75be6b4f81d59ea23e719d8c51&scene=58&subscene=0": "黑客组织利用ProxyShell漏洞攻击医疗保健提供商", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247502480&idx=1&sn=e5c7bf21f30e66209597f0db25ec465f&chksm=ebfa8db0dc8d04a6dac8d9f03f2dc712a97b4fccdcaf155080ccd7f8e7aa8a5b6a62eb97313d&scene=58&subscene=0": "2021年零日漏洞在野利用状况：数量创纪录，传统漏洞为主", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247502513&idx=2&sn=57418a913633e1a1eef0e3f3dd302a4d&chksm=ebfa8d91dc8d048773f6a303df386bb472fa3f9f126ee351b8a4c0e3bde5e040cd037c8f5f9f&scene=58&subscene=0": "谷歌2021年0day威胁形势复盘：你知道越多，你越知道你不知道", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247511475&idx=2&sn=7b28cadcfa45182f3c7285f34c2454c8&chksm=ea949cd9dde315cfd74febfca37472f0cf099450eb767d476baa5fc7ac53ad75dfd0d3cc2d70&scene=58&subscene=0": "开源的 Snort 入侵检测系统中存在高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247511475&idx=3&sn=d944ace06613bb0fc7ab6099e251b30e&chksm=ea949cd9dde315cf4a1d48d11a8ef9a7f9d085aa16678adad9cc7ebee49b39f9415ceacb18eb&scene=58&subscene=0": "年度加密漏洞提前锁定：Java JDK 加密实现漏洞可用于伪造凭据", "https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247495448&idx=1&sn=a9a36e0f9b8e113a7b23f37cd1e36be7&chksm=fdde919fcaa918893069fb84233a1371c2a60494882878d62a3bbe8fa73f054e1295ece1132b&scene=58&subscene=0": "慢雾：Rikkei Finance 被黑复现分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458438567&idx=1&sn=a6f209fb274919dddcde9584f1e640e0&chksm=b18ffb2d86f8723b1eb6dfbb169a4c7ae4fee1dbb202b46a199da3e50201ab5ef8c1bc8a0094&scene=58&subscene=0": "JLink固件漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247490901&idx=1&sn=0697a2bcbc10e6fd5ff13148e2038d5b&chksm=fe251854c9529142ac787655adc1aec8ce976258aca9280f83d71c0ff717eb6656dea0a7f48b&scene=58&subscene=0": "CVE-2022-0540：Jira 身份验证绕过漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657044396&idx=1&sn=c50f71d249b87f2320faca35fdd565e6&chksm=803fa772b7482e64031830d3572f2e8f975c08c1b5bbde4895d5295889ee086984df4df6299d&scene=58&subscene=0": "【漏洞预警】Asciidoctor-include-ext 命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727834682&idx=1&sn=8261edbbddd3e823e50cc6466f2c4354&chksm=8050a3b2b7272aa430de05df201daa829b5ef20597a7b98081af84f8136bcc7368d744448381&scene=58&subscene=0": "漏洞马拉松·京麒站 | TSRC 3重奖励叠加，挖到就是赚到！", "https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247489524&idx=1&sn=4d2a9c15924b23024fbdb266eb516e76&chksm=9799ec51a0ee6547bd28b8a6f7f367bb30df3172dbe322f57a88953a315c85975783cfc10a64&scene=58&subscene=0": "【漏洞预警】WSO2 API Manager安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247489524&idx=2&sn=ab3f381c65ad078a6ed23ed15a647ec2&chksm=9799ec51a0ee654791261b6d1a91d50d580214c5f09f16a15c998f1df64c82656097f88747a8&scene=58&subscene=0": "【漏洞预警】Jira身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247493910&idx=2&sn=4c56a52e2568c099253af96d1beef3c8&chksm=eaa96136dddee82096526b39e8eb718af2b44776a350187ba09e78a2c781edf30bcc369f76f1&scene=58&subscene=0": "业务安全漏洞-登录认证实战总结（一）", "https://mp.weixin.qq.com/s?__biz=MzkzNjI2MzgzOA==&mid=2247484287&idx=1&sn=927a489a3271eb3aa63a31b58f997edc&chksm=c2a02a8ef5d7a398e3c9d4b8ee37fd33c01130cb53bc135f99009b23b5f9dd387f2eecd967ba&scene=58&subscene=0": "使用打印机漏洞获取Active Directory特权", "https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247489352&idx=1&sn=b9e728095c880831da1fca68f3c4f8bd&chksm=ec1bf69bdb6c7f8d1129ba8d7c2391e357a5adb76074a41a0477173703c3e3c5b5a0091bc926&scene=58&subscene=0": "重要通知 | 美团隐私漏洞处理标准1.0发布", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247511504&idx=2&sn=04504363458ec7eae8089dbfb498d827&chksm=ea949cbadde315ac5c9bd2f40a6f192b3250198f157ae151d9aa59e0f29ce6b3f21dd2118763&scene=58&subscene=0": "开源组件11年未更新，严重漏洞使数百万安卓按设备易遭远程监控", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247511504&idx=3&sn=db5e57652474eb1850d3b2b14ac08b7d&chksm=ea949cbadde315ac5a2e1ec42b1f22f41a109103847e4fd1d2ea90423d2291aaec360750ffa4&scene=58&subscene=0": "亚马逊的 Log4j 热补丁易受提权漏洞影响", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247502591&idx=1&sn=c919afebc098a9354907cb4211254d72&chksm=eb7014c0dc079dd692f3a2eb97d6f8a3815438a665040c06214d5c14a8e7bc397962ecb9240b&scene=58&subscene=0": "【火绒安全周报】7-Zip被曝出现零日漏洞∕黑客捐给乌克兰25万美元", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247525968&idx=3&sn=2c381c96faee6f8aa16e51ab1ccf589f&chksm=c1e9ea01f69e6317d8388d564867644ebbd3d78ae0b1b0c4c3bf80e6a997c43074a69b047811&scene=58&subscene=0": "CISA 发出警告，攻击者正在利用Windows 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247502551&idx=2&sn=0c04998e9088f9d84c07df4bd38abf2c&chksm=ebfa8df7dc8d04e1d983793aa0db2dfc5a4e025a85fb98a399bd6cc890d6eb88cb6821b00609&scene=58&subscene=0": "高通和联发科芯片漏洞致数百万安卓设备可被远程监控", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458438809&idx=3&sn=22897f7a006bea015f9615c487f59204&chksm=b18ffc1386f8750558ca8484f7436d52d56390a5317b419b63a1199fe1ea19d5b858f3c29ff0&scene=58&subscene=0": "Intel CPU漏洞研究，为你深入详解三个史诗级的芯片漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247489536&idx=1&sn=640891e328f90da1e1aab139344cfdda&chksm=9799e3a5a0ee6ab3186fe418fc33199f877ac4df5f0f3f07afcf13a01af63e4293a452c0b2e9&scene=58&subscene=0": "【漏洞预警】Java数字签名伪造漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247489536&idx=2&sn=0477b0c8ee438132fec22917e44c044d&chksm=9799e3a5a0ee6ab3ce16b13d47958c6cb4fc4af5fff356f8f4653b87975a19dbab575159830f&scene=58&subscene=0": "【漏洞预警】Apache Log4j SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247492926&idx=2&sn=8753e83a55476cdac042aba6e84bd7f4&chksm=c1449783f6331e95be73d42cea78d793e4518f0a6cada2aef1e003039686b05bbb1c71436d73&scene=58&subscene=0": "[调研]80%的软件代码库含有至少一个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652496833&idx=1&sn=0c9e7462798d247483c04d12e8a9d469&chksm=f2584072c52fc964f09b89dec09bcfe3e8afce57c9124168e52a84fe8b6c1511b99f7813a9fd&scene=58&subscene=0": "雷神众测漏洞周报2022.04.18-2022.04.24-4", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247511538&idx=1&sn=6f91f6176cac01585dd7b8fa5c1c7f18&chksm=ea949c98dde3158e379cbf7052ded0011c00528a6104cbb0043cbd738d11575dad2c31167efd&scene=58&subscene=0": "SmartPTT、SmartICS 工业产品存在多个严重漏洞，影响全球90国", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247526053&idx=4&sn=80bda77efd350d13a5b9959964e03a16&chksm=c1e9eaf4f69e63e229bbf5e0f611d9fa769decec6e589e5a2c7a80ab4e03e95eb9945f2cf20d&scene=58&subscene=0": "十年三倍！安全漏洞创纪录增长", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247491577&idx=1&sn=29b4c59fd4ca8ebf49070b17188b9a98&chksm=fd772f30ca00a6268f5ad08faa531c80390c159549d4540e90386ccd8b356ece701d70d47489&scene=58&subscene=0": "CNVD漏洞周报2022年第16期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247491577&idx=2&sn=84594d370130956460057cb4b985cfcc&chksm=fd772f30ca00a62607414a8b3873aacb90939ea4e06c24061b7496aec00e481cba597a56a9b2&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220418-20220424)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247491825&idx=1&sn=c255c3be1aed3a608afd91dca32df6d3&chksm=fd74d038ca03592e8d619f99b8b587f43ecac5806d46d348014e4dff702fb11883f2b552979e&scene=58&subscene=0": "CNVD漏洞周报2022年第22期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247491825&idx=2&sn=57f8a4022a8fd3918649a58cc76cdc4a&chksm=fd74d038ca03592edbb37dc72abeb8f4774f57076e6d218a8800aeec303f29d86cfb01b4da06&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220530-20220605)", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247496726&idx=1&sn=d0860fc41c405027399d1fdcc5a36f82&chksm=973ac774a04d4e623b815ca7e6d30e3bdead698d2734564442c1ae563e04fc6e7cf9d68d99a2&scene=58&subscene=0": "CNVD漏洞周报2022年第22期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247496726&idx=2&sn=75bb0ccd9104d516ceabcabe29468ca9&chksm=973ac774a04d4e62aa7b6d30b1b67ec78d6fc4f8efdbd69f697c8de7c8dc5aae79508d843fce&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220530-20220605)", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652497555&idx=1&sn=34ad39b51376d97a86d271794f0971b2&chksm=f2584520c52fcc3642230fc02b4e94a296f0d35f8fec8b4a4e3e13498a8fbff11c725f98cc30&scene=58&subscene=0": "ATT&CK-Spring Framework(CVE-2022-22965)远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650961305&idx=1&sn=5d27d89f79f036101db5acffdf124014&chksm=807937abb70ebebd10830cd2aa7822df3e266174fd12ff27f0a8b303661771fbc68d5c528a7a&scene=58&subscene=0": "CVE-2022-30190 MSDT 代码注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247527114&idx=3&sn=bc36689958f0aa95f4c9d42c74760da5&chksm=c1e9e69bf69e6f8d4dffdbe985b50d58a7a1b21c9f430e4de16ace50ea9bb6d7e97a7b80d5ba&scene=58&subscene=0": "美国BIS发布网络安全漏洞出口禁令，全球漏洞共享机制遭严峻挑战", "https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247489848&idx=1&sn=1dc3a8dd3d06d8666392a69df9630047&chksm=feb5982bc9c2113d18235b6386351752d880b4e0e5f639a8eaeee73598e8fc7aa02b16796537&scene=58&subscene=0": "美商务部出台新规：未经审批禁止向中国分享安全漏洞，微软反对无效！", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458451595&idx=1&sn=745cf76fb3ee0b1f35dd530b7146b017&chksm=b18fce0186f84717d542b5ae309eec80c2242099578d154522f4cba65fa3b74dbeee1d40c432&scene=58&subscene=0": "PWN入门-格式化字符串漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512217&idx=1&sn=695daaf2d00a8140749841523279263a&chksm=ea9481f3dde308e53ddaf06265f0cb4e13b91c90ff1268dba7dbdf22c4585a6fc9a29e2bcdd7&scene=58&subscene=0": "《2022年道德黑客洞察报告》：不少人计划当全职漏洞猎人", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512217&idx=2&sn=3780aed7f5cd6cb969207042687f44c0&chksm=ea9481f3dde308e5eadec773aa2e2e09e91f2ff17adcd39cf882f40ff93c3f574c50cfd9235f&scene=58&subscene=0": "DogWalk：Windows 新0day 获得非官方补丁", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652497576&idx=1&sn=d0482c3cf9412ae3d040c378f9613ec8&chksm=f258451bc52fcc0d6d4857054f33c9960197d3175be7562739ad89f219d6d441243a2073efec&scene=58&subscene=0": "ATT&CK-Log4j2远程代码执行漏洞（CVE-2021-44228）漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650172601&idx=1&sn=9a18ab52336f06584aa6fc8ee2b428ca&chksm=f4489705c33f1e13f63f10becd9276bf9f46e663e95bdb7d1bef405a1f0f6fc4cc6fa2de0b63&scene=58&subscene=0": "我，TDP，正式官宣一个0day检测新能力！", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247493445&idx=1&sn=e76269a88625e90cdc093e162f6e23cf&chksm=c0074ad9f770c3cf739e422130f5e8d656bc368c913a40da98e1076163e4fd8125a0b2fcff69&scene=58&subscene=0": "API NEWS | 国际最新API安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4MjEwNzMzMg==&mid=2247491163&idx=1&sn=1a56d85bee41dd17ab7fe9004569df79&chksm=fdbc37f0cacbbee688aa7e3956188b62818f77e1fef1ad28e61c40f32d53ffb95cc78de47b7f&scene=58&subscene=0": "火线安全荣获“国家信息安全漏洞库（CNNVD）技术支撑单位二级证书”", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496265&idx=1&sn=a5ca4709547add642a019e6c5c182ebb&chksm=fe79d6d1c90e5fc789f85ff961c1e6e4077ca5682bceb4aec3fc1ae5df931d102f23a576e9a6&scene=58&subscene=0": "PHP多个远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496265&idx=2&sn=5bcac3621449253e58b06d34c965cfba&chksm=fe79d6d1c90e5fc7814bcde0373501ab52a338e1797d814366f85e18babf522725f4c30d691f&scene=58&subscene=0": "GitLab账户接管漏洞(CVE-2022-1680)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512256&idx=1&sn=fd26c082e19e42b9579bfdc16d90cc36&chksm=ea9481aadde308bc8754e712723fe813063ab2ddc7a80a171069b724a6eedf732b4fa71a7684&scene=58&subscene=0": "Formidable 项目开发人员驳斥：MITRE 发的这个CVE漏洞纯属“碰瓷”", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247493980&idx=1&sn=8d000e5a38e37dddb934e3665cd90d69&chksm=fa523ce2cd25b5f4759b0e3dc883196c63cbceef292eaac7e12c6fb15b6d9945619cc31aeef2&scene=58&subscene=0": "浅析LuCI系统的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247493511&idx=1&sn=f058ea91433fda6529a6e116cf21ca6f&chksm=c0074a1bf770c30d6ec8076f3b09c10f8ac82de42d444df77f90fb0da7828b233ae0aef1cb85&scene=58&subscene=0": "【技术干货】2022-29464 WSO2 API Manager 任意文件上传、远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657044511&idx=1&sn=937b1528d16837b905b2e7287c73c747&chksm=803fa8c1b74821d77b34ad8c9c930fbbc8f62a9fc4614d2c9c30f6c5503a5b9cad357132dc70&scene=58&subscene=0": "【漏洞预警】Owl Labs Meeting Owl Pro信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649771657&idx=3&sn=614d32e629d1d8d2480258d77c54a706&chksm=88937ee6bfe4f7f0d862453c78811f0523ad4a0964ffe05b6e47c1f8d1f24406e28d1d7a01f2&scene=58&subscene=0": "【安全头条】Linux僵尸网络张开怀抱迎接Confluence漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMDEyNTkwNA==&mid=2247487602&idx=1&sn=03f65b30c42885ff3b5daab6ad8bf689&chksm=f9ee7ccdce99f5dbe4d36d131e4524e4f1c3dfc7adb06855e33d5cb87278b5830b7e8460c58c&scene=58&subscene=0": "Apache Httpd AJP请求走私 CVE-2022-26377 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650834910&idx=1&sn=5096efb28e423a5dccc66f41583ef9c2&chksm=80dbe47bb7ac6d6d4d5bc5aaedd70a3d6b59b3569d70335b43a358d2138cce25460543acf131&scene=58&subscene=0": "【漏洞通告】PHP 远程代码执行漏洞（CVE-2022-31625、CVE-2022-31626）", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652497685&idx=1&sn=f4376357029a3618887b0d8509c29243&chksm=f25844a6c52fcdb0f907fdd6e4f24debf6e514cd3f22a1b97d90f29396e883adc536d3d3d5d1&scene=58&subscene=0": "雷神众测漏洞周报2022.06.06-2022.06.12-4", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247503459&idx=2&sn=c4e82a9f42389835c41505c8ba543295&chksm=ebfa8943dc8d00550f0162b3367a9a3d1af2d15f7a7c67555bd5cff3fb6f71271dcdfc4438f3&scene=58&subscene=0": "MIT爆出苹果M1芯片重大漏洞：补丁无法修复", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247495526&idx=2&sn=88f885d60dca173473f4cbfd7b7b7960&chksm=eaa96746dddeee501ce2261cdc5565c16f9b1167328404c929c476a78b326dbeccafe52a6455&scene=58&subscene=0": "ThinkPHP系列漏洞分析-2.x任意代码执行", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512281&idx=1&sn=371c8c2da75df09506fe20a95f3dbe10&chksm=ea9481b3dde308a5fea3d23bd48bcbb36b3d924ac6d8fae85e882d49a0dc1803005630b8a316&scene=58&subscene=0": "热门工业访问控制系统中存在8个严重0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512281&idx=2&sn=d4fe854721aa8050ee66a20a176080a1&chksm=ea9481b3dde308a5dc2fe7ffe9a71d112a0dafbf6fd6f05a2f6895852e794b2d7b9b353b2258&scene=58&subscene=0": "两个严重的富士通云存储漏洞可用于破坏虚拟备份", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458452267&idx=1&sn=1485f8a3c82d0f4e175e5574016311d0&chksm=b18e31a186f9b8b7c793f36dd47b8027f896de18b0001f5bf7951e9378649d9590b99ea05eb9&scene=58&subscene=0": "cgibin中与upnp协议有关的一些漏洞分析与复现", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496290&idx=1&sn=33f714add8320edd7103491825e65a86&chksm=fe79d6fac90e5fecfc269b09e0d01bf2a38fce6f9ec538acc4fbc47cdba0d4e482fa0d29d49b&scene=58&subscene=0": "【已复现】Linux Kernel eBPF权限提升漏洞 (CVE-2022-23222)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247491859&idx=1&sn=0a31942b7776fd8366027cd54f8aef60&chksm=fd74d1daca0358cc084442cf5323b790dc0c18cc63e6251156baff886e5631dcab4b9ba0820f&scene=58&subscene=0": "CNVD漏洞周报2022年第23期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247491859&idx=2&sn=5098a08f2b8a1d7d0c746a958a97b6c0&chksm=fd74d1daca0358cc7244cb7604455c28cd3c3f42181244a9f2930c38845687296eae8ac32731&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220606-20220612)", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247496763&idx=2&sn=8f1c78df98ebbff7b41bfa7d027c1ac9&chksm=973ac759a04d4e4ff8e7d445aca633c1ff5fd7bb536e1c1a294ff0a2665199b95edd4574ac30&scene=58&subscene=0": "CNVD漏洞周报2022年第23期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247496763&idx=3&sn=a186020c19626529c2a5365485d4f085&chksm=973ac759a04d4e4f3f932b49cc69d0731998eff83514101a71026eb4c149dd856de1c973c3a3&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220606-20220612)", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247527332&idx=3&sn=b6f0ef5db53ab44fd2637a3681efcb51&chksm=c1e9e7f5f69e6ee33063bceb3223964f66ce3ba7fc0e65b6267f048caad8fad60bf803b58eb7&scene=58&subscene=0": "CISA公布新漏洞，可以远程解锁任意门锁", "https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247489844&idx=1&sn=a09c6bf3e96a5f5810e18ed8a2821350&chksm=9799e291a0ee6b87fb7e7c7d08699288d6a2f83d9bf007857ae091b22d15e3ecf54684cd493e&scene=58&subscene=0": "【漏洞预警】PHP远程代码执行", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458452356&idx=2&sn=013a06dec954773a9b481bc28ab06cf9&chksm=b18e310e86f9b818d0907e714c43d0d7adf60733714ef32d144bea0edfecbef268a5f148bac5&scene=58&subscene=0": "万字长文详解CVE-2014-1767提权漏洞分析与利用（x86x64）", "https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652992694&idx=1&sn=2f500d1eff1e6203b8597f0e95abc1f1&chksm=8c9efbe1bbe972f7cfbf8332a5db22d25816a2b1407b5d351aaccc126958fe0ee717dc46508b&scene=58&subscene=0": "钉钉高危∕严重漏洞双倍奖励活动", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657044516&idx=1&sn=cb95654633224cd07d57d8e90b1cdbbf&chksm=803fa8fab74821ec3b23e081a7d4bfc725d0b453c2897726d10612ed29c82893fe3bc30fa881&scene=58&subscene=0": "【漏洞预警】Linux Kernel ebpf权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458452452&idx=1&sn=45e52124810e59e65a86ef7931c30160&chksm=b18e316e86f9b878e2497c82fce3813b09f238af469e4e868c131a0d98cf0b9125fada6094f9&scene=58&subscene=0": "CVE-2018-15664：符号链接替换漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247504566&idx=1&sn=8c67e0a8744c95efe6c772bee085ea77&chksm=eb700c89dc07859f71ca15098052c2e56bcde9c015f2af206b24cd7a8381a48e218089470aa2&scene=58&subscene=0": "2022-06微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512333&idx=2&sn=941187896fb7a8b1aa8894038839d4db&chksm=ea948067dde309712677a3c1025833ce2d2b6124a230df150c3d899e8252a0d9214dbea3d276&scene=58&subscene=0": "Travis CI API 漏洞未修复，可暴露用户机密访问令牌引发供应链攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512333&idx=3&sn=8b2d3c40a59f28ad4ef19cca4e7de98c&chksm=ea948067dde3097194f650240489cdb2bfb2ee4a852e63ff960607da69af4ddc744d0a0e03d5&scene=58&subscene=0": "开源邮件平台Zimbra 出现新漏洞，用户登录凭据可被盗", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651084683&idx=1&sn=4ed8497406f88548b340cc4c67cbf471&chksm=80e64d3bb791c42dd6b65bfcf679a5b1dd717692cce846c124cd2d6ca4d92390ef030d585d14&scene=58&subscene=0": "十年三倍！OT漏洞增长88%！", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496307&idx=1&sn=dc2778ba9aa52569476df57c9077810d&chksm=fe79d6ebc90e5ffd24f29d0ac3c3031d90003450fdaec0b7d420c976707fc51524e8827a1b45&scene=58&subscene=0": "微软2022年6月补丁日多产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247500336&idx=1&sn=92ca5f0d1ee950a26b072189baa995c0&chksm=ec9f1b43dbe89255c9f79100d53536c39f259e25aef32b091e5dca1f91ef1de93ed153d6f0d7&scene=58&subscene=0": "微软六月补丁日：广泛关注的Follina漏洞（CVE-2022-30190）得以修复", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247503492&idx=3&sn=216f95b82cd464319c96816b9bf47f2d&chksm=ebfa89a4dc8d00b29c93480ea864c40d85c2af9b3a2af665c4cbdf78d3f1e3ff5dc30fcf50f3&scene=58&subscene=0": "2021年路由器漏洞数量超过去十年总和", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491068&idx=1&sn=9492ae74cc1baa7b5c182c5a5a908fa1&chksm=fe2518fdc95291ebd1bbe03d7efc891d0fe6e2ad67df3beaa8825dcf3919b26044ec19448ad9&scene=58&subscene=0": "2022-06 补丁日: 微软多个漏洞安全更新通告", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247493712&idx=1&sn=0eb90bbd63cadffdd089fcd8ede0fbeb&chksm=c00745ccf770ccda84e24402f35e19e6349ba5c2d15e8362ab0e888041524876dda4eed7e884&scene=58&subscene=0": "【技术干货】CVE-2022-26134 Confluence OGNL RCE 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496326&idx=1&sn=841acaa2dd461bed677ec3decd01afc6&chksm=fe79d61ec90e5f0839d1ae3b2e91025c38ad9043e2a89c9f96eb5b9c50ce925cc3d663ca2843&scene=58&subscene=0": "【已复现】Windows SMB拒绝服务漏洞(CVE-2022-32230)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512362&idx=2&sn=8b46a7d7acb584b00292304dfcc7fd67&chksm=ea948040dde30956d4770c1c90d9bf9b7ad1acc876eb83ac63c20987e9f83b6678f23e01c62e&scene=58&subscene=0": "新型侧信道漏洞 Hertzbleed 影响所有AMD 和 Intel CPU", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512362&idx=3&sn=70e454390ffa2bbcc942bc0ef7d5a286&chksm=ea948040dde309563ae79f6f57791819cbb113d3001d4dfc53dbf437979066bb00c594bb068d&scene=58&subscene=0": "思科安全邮件设备现严重漏洞，认证机制可被绕过", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649772281&idx=5&sn=dfd503418dcc9a760cff1640209fb41f&chksm=88936096bfe4e980640b9724848b81cc7852dc28623312192088babc13420edc9c1b372355a3&scene=58&subscene=0": "【技术分享】Linux kernel 4.20 BPF 整数溢出-堆溢出漏洞及其利用", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247504723&idx=1&sn=ee6635e9205c54248d3c6eff47d02eed&chksm=eb700d6cdc07847ae68ac80c7d41e2aae12e61c5f9e1e8ae69e2c611a7648058a5a684b3d289&scene=58&subscene=0": "【火绒安全周报】勒索软件与恶意软件联手∕俄利用漏洞入侵乌机构", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247503550&idx=3&sn=143d95fc75127e6285ab1a65c5e3a09f&chksm=ebfa899edc8d008835323fd04aa90da6b09d494d1a3061696260bc97487ad49cfd295d1db0b5&scene=58&subscene=0": "Windows SMB拒绝服务漏洞 (CVE-2022-32230) 安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512404&idx=1&sn=3f6c217dd2037970aa2fb88576e72223&chksm=ea94803edde30928208f75e8e32f8dad8b673a8bbbddd571da9dc4a14718f8cd9403b3dac39d&scene=58&subscene=0": "热门Fastjson 中出现高危RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512404&idx=2&sn=c658bb128dac22af8e2041f4d86d9c98&chksm=ea94803edde309286702f0b3b4638f0e87262ccd067fca6402a3f21d7cd880e36026452daa2e&scene=58&subscene=0": "Anker Eufy 智能设备系统易受严重的RCE漏洞影响", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512404&idx=3&sn=0a2fc411015676c5b452cccf54ea5489&chksm=ea94803edde30928b210233c0861c0dbb30f257cb589c1889182de311e5db510fde7d392a632&scene=58&subscene=0": "黑客利用已存在三年之久的 Telerik 漏洞部署 Cobalt Strike", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651114742&idx=1&sn=0f318edb922b5718bea97387d2721cbb&chksm=bd147c258a63f533e3f2d92ef3069238fd3762d6133942837a5fb6b01ca467130432812b893f&scene=58&subscene=0": "如何制定一个可落地的漏洞补丁管理策略？", "https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247495755&idx=1&sn=c53a9c7408feda41482f9d284f33d082&chksm=fdde8ecccaa907daaa563b27b528bb2f499be89b80dbf0ff9c87988b6a5db3565f2d0fb17f52&scene=58&subscene=0": "MetaMask 浏览器扩展钱包 demonic 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496333&idx=1&sn=78a16eca8dff8a7e3863a481103ec60c&chksm=fe79d615c90e5f0366e79776af5da445231a2559168b2be92c8b6841a60c80bd2a4d771eef28&scene=58&subscene=0": "Cisco Small Business远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247500338&idx=1&sn=2fa717b3367276c07c87f3f2a4163431&chksm=ec9f1b41dbe8925763f9944ec19e2210152a563434ea2abf75df97b7698dc337151bb7f59c6e&scene=58&subscene=0": "腾讯安全威胁情报中心推出2022年5月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651114811&idx=3&sn=0a7ef41b0c1b19e911fbe8c976c6817f&chksm=bd147de88a63f4fef5dc787acbbdaf00f0df0de2adf2b8fcd9303f67d59f1f990d96ac904df6&scene=58&subscene=0": "安全头条 | CNNVD通报微软多个安全漏洞；工信部累计通报、下架违法违规APP近3000款", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247496815&idx=1&sn=8d8b6aed4d0bda1b20c9a784729742e8&chksm=973ac70da04d4e1b7cc3ef78970a4c442208a3b9cd58cf42505e5fcc6a30c4dc71f487a226fd&scene=58&subscene=0": "CNVD漏洞周报2022年第24期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247496815&idx=2&sn=bf57f161ca2b0de0e3a758a8801053b3&chksm=973ac70da04d4e1b7a4bd7e3eda8f60b037519d79310215b7817400f02b026089f2d5ea751ed&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220613-20220619)", "https://mp.weixin.qq.com/s?__biz=MzI4MzI4MDg1NA==&mid=2247484591&idx=1&sn=3c608f297f8150a40eeeb91c7a4c4ee4&chksm=eb8c5016dcfbd900e79d26d7683b4101251a9f333451401996ea01e10100addd23cb20fa25ff&scene=58&subscene=0": "双倍快乐｜单个漏洞最高奖励1.2万元！！", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652497909&idx=1&sn=f51e40a67a60966742b0ec4c03fc286d&chksm=f2584446c52fcd507b7e9b8dd269585483c09d17f6b4c4943cecb0aa5dc203a524040638621f&scene=58&subscene=0": "雷神众测漏洞周报2022.06.13-2022.06.19-4", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512438&idx=1&sn=563e5fbc7e61730cf40397cd09414e2b&chksm=ea94801cdde3090ad98fcb1524ccb001df9942040fddf238640160b7dab3a84c77eeef57ee7e&scene=58&subscene=0": "思科不打算修复VPN路由器 RCE 0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512438&idx=2&sn=dc6db27797628706ae9f2892365b1f0b&chksm=ea94801cdde3090a9082e2396cd7a7f51816e70a1559981a18d63bfbe37b3f27b2a62f868d35&scene=58&subscene=0": "研究员披露修复两次的 Windows RDP 漏洞详情", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247491877&idx=1&sn=21bb58d07d6c7e6d80a2401dd4c00c77&chksm=fd74d1ecca0358faa1ee6787855b189ca7f196a5d9e75b04fb2e9e4289155f0c343e6515464d&scene=58&subscene=0": "CNVD漏洞周报2022年第24期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247491877&idx=2&sn=211fe8b04ab0ec51efd24c093605a7b9&chksm=fd74d1ecca0358faed48517ece3efaf8b5dcbb92fc9bbec4c9dc1edc731e18ffd40e00d90bc0&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220613-20220619)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458453618&idx=2&sn=dba42df66438701cda904d463e51e760&chksm=b18e36f886f9bfeefd2de981ac20b75516801e14ee248a182751e0b64855fe6df533fe2c4a41&scene=58&subscene=0": "CVE-2016-0165提权漏洞学习笔记", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458453618&idx=4&sn=5a89909619e14747903efcdaf11aa2ba&chksm=b18e36f886f9bfeede1ea44ae22e97c8b39106820aca06b759c403ae4cf24cb285a83f61d3f6&scene=58&subscene=0": "（618限时9折）Intel CPU漏洞研究，为你深入详解三个史诗级的芯片漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458453650&idx=1&sn=80fd959ccaf32602fca0cc7462497228&chksm=b18e361886f9bf0e105675b2206100d43cebf617bf488de3bdedf767ed1a85768818145f8596&scene=58&subscene=0": "EXP编写学习之绕过SafeSEH", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496347&idx=1&sn=41c698327015d265c511437802918bbf&chksm=fe79d603c90e5f153fdd7145f6ea5d6ba48b5362dc439aa23e5858e297606fbd788989567046&scene=58&subscene=0": "Spring Data MongoDBSpEL表达式注入漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652497976&idx=1&sn=1afbd05efa7327021334863176f19910&chksm=f2584b8bc52fc29dd0536646067319f0f9ce3f873846ce32334bf543cee9ea4abb8aed54624d&scene=58&subscene=0": "基于Zabbix的漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512458&idx=1&sn=08b25be264dda4e141186f4948c38a61&chksm=ea9480e0dde309f63d8503831b6b7d929be097e6a6d155a43132e4f6cfafd14db0afa455cced&scene=58&subscene=0": "谷歌研究员详述已存在5年、已遭利用、已修复的 Safari 0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512458&idx=2&sn=f1263ecf9f5f3344014fbb23ed01ef9b&chksm=ea9480e0dde309f6895b3ca1824f5dbf05ec60a8059c2590a09de5d1f9ce9f6091a15eacabfa&scene=58&subscene=0": "西门子工业网络管理系统中存在15个漏洞，可导致RCE", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512458&idx=3&sn=b55867df7184e1bc35226d1d943cabe3&chksm=ea9480e0dde309f669afde9e26ac00dda9d4749a4a0a6235ff4f8d5e7d597e1dce83c40d010d&scene=58&subscene=0": "思杰ADM高危漏洞可导致管理员密码重置", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649772458&idx=1&sn=494294c3f20c40f28df4b397616e079b&chksm=889361c5bfe4e8d343462ab6122b39674ce39bb51c3b6e78540d819caa0d80e9fc425373d8a4&scene=58&subscene=0": "【技术分享】从 CVE-2017-0263 漏洞分析到菜单管理组件（上）", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657044521&idx=1&sn=43271807ce76c3977a936ce5315e85f8&chksm=803fa8f7b74821e137a8c8d0d0a15122eb06ab12a284d59722e1d9cecb84a4f10eedfba47d06&scene=58&subscene=0": "【漏洞预警】Spring Data MongoDB SpEL表达式注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512470&idx=1&sn=9ff886e36269deab3af95b513c60754e&chksm=ea9480fcdde309ea294148ae92264463a822f5a65d3243f576e255cf7f0be60c1126a2ae9b95&scene=58&subscene=0": "研究员披露影响10家OT厂商工控设备的56个漏洞OT:ICEFALL", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247503648&idx=3&sn=6e10c4492d57bf004ee7b88d1ad2b186&chksm=ebfa8800dc8d01168e023cf591d82e41d5a373244fdfc0177102d5153428a7f2b1b2e5211406&scene=58&subscene=0": "工控安全火山爆发：“冰瀑”报告披露56个重大OT漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650961961&idx=1&sn=03653289ec8e2263cb248b5637ed7f34&chksm=80793a1bb70eb30d8a9dc4d7290f6f92e2e6bc0e6352fc5b7ec2d55741d00a27746d67e6735f&scene=58&subscene=0": "404星链计划 | BinAbsInspector：二进制文件自动化静态漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650172752&idx=1&sn=cab9dcbb993cb56adcdd585c77bb8b06&chksm=f44896ecc33f1ffa784933749ace038d3d66c1968838861ce284a5cbe87e96f7f723572e0c36&scene=58&subscene=0": "攻防演练实战秘诀：让0day内存马从送命题秒变送分题", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649772527&idx=3&sn=6f8291a6d2c6b16a93ef423b917b5d75&chksm=88936180bfe4e896fbc92202ab50c00ef0a1b1540e7d9bc7db91a7a5525446653537646bd0e1&scene=58&subscene=0": "【技术分享】关于Bludit远程任意代码执行漏洞的复现、利用及详细分析", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247496909&idx=1&sn=8b9774d3d050aa469356f4d08993a547&chksm=cfc55392f8b2da84c2ee6faf335bcb892d83d1ea7e2f227c5cb10f5eac7619d5b0113982294c&scene=58&subscene=0": "360漏洞云服务号迁移公告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512551&idx=1&sn=a3dc5a12724c0b9b230eedf1455dbf23&chksm=ea94808ddde3099bc99f14a224f4836cc7d9419f056f982dd29238ebf945806f58f2989225bc&scene=58&subscene=0": "开源项目 Parse Server 出现严重漏洞，影响苹果 Game Center", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512551&idx=2&sn=62ca391c055ea2839fe4178afcd48f4b&chksm=ea94808ddde3099be6ec5044d096c7921e4abb430485bfbd3eb207e3fa39af16c7a0ca6a766b&scene=58&subscene=0": "严重的PHP缺陷可导致QNAP NAS 设备遭RCE攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512551&idx=3&sn=1d82552fab1461f66ca02457161cf83b&chksm=ea94808ddde3099bca51c4d30afed76e7f9f6f4d553a89f6a7585832af3f8743faabd0c122ac&scene=58&subscene=0": "Spring Data MongoDB SpEL表达式注入漏洞安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247527682&idx=2&sn=bad34031570e2c46a35b968dc174bf5c&chksm=c1e9e153f69e68456dd4d584b9629791702147ecfeff7f133e350c3ef3f962d48cd932e60141&scene=58&subscene=0": "工控安全火山爆发：“冰瀑”报告披露56个重大OT漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247527682&idx=5&sn=50c209d72bde4e92a99b774d3573e20e&chksm=c1e9e153f69e684552ae8721913f4a5f723a82f15a29bd63467ef73d6fd7e2838e4d5c03adee&scene=58&subscene=0": "网络安全行业热议“OT:Icefall”漏洞：世界末日or见怪不怪？", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247495672&idx=1&sn=5a43a5482769a476a870f49962c6d581&chksm=eaa967d8dddeeece563deeed31b727674e425c7fa244eadd99e525952e98140d5bf496f169fd&scene=58&subscene=0": "CVE-2022-25165：AWS VPN 客户端中的 SYSTEM 权限提升", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458454436&idx=3&sn=d8018013e051a19f37930afa7dc64b94&chksm=b18e392e86f9b038869ce00368b565364dd5133ebb4ad9c8de1bb25450ab5d5c687fd9fcb0c7&scene=58&subscene=0": "严重PHP漏洞使威联通设备面临远程代码执行风险", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649772687&idx=2&sn=5803cbd7d749677a192a0a4f70eda8ad&chksm=889362e0bfe4ebf6284ecc85b6f11d8979e65c17c2ebe7ed2d29469ee9ffc3defdd69b0a592c&scene=58&subscene=0": "【安全头条】MEGA修复导致数据泄露的高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491101&idx=1&sn=fe143c42f81f8e70e6d17d15037c09ac&chksm=fe251b1cc952920aa8002863ce27e244c999f945539698884fe50d697945a8b7a380b20baee8&scene=58&subscene=0": "CVE-2022-21445:Oracle JDeveloper ADF Faces 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491101&idx=2&sn=7d8a506a104539a48a85ccdfc469ca72&chksm=fe251b1cc952920a5c68c82e547fa26beca531a1d57540582828999ffa00e4785bba44d8dd8e&scene=58&subscene=0": "警惕！PBot挖矿僵尸网络正利用新漏洞发起攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458454448&idx=1&sn=3555e70fdfeb7a4107c476199caa8d7c&chksm=b18e393a86f9b02c71f02972dd13db2c3c8623b6db04e13785ffee36db716f73c948e78678b9&scene=58&subscene=0": "[Rev赛题复现]DASCTF Apr X FATE 2022", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458454449&idx=1&sn=0e7fcab06f6208c134b8388ea61af637&chksm=b18e393b86f9b02df2779e9bd4d55058cc7666c0c83945978924a0690e47ee0f449087a1ef70&scene=58&subscene=0": "CVE-2016-3309提权漏洞学习笔记", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512575&idx=1&sn=831b8a4cf06da94d6f5012a897e71f84&chksm=ea948095dde3098340317267be4e92ba692ad9ab877266c163231767f839c7ce62ea51baeaf7&scene=58&subscene=0": "勒索团伙利用 Mitel VoIP 0day 发动攻击", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649773083&idx=1&sn=54c93c37622750cfef39e4ffcf0b5134&chksm=88936474bfe4ed62d436aa41b7313cfc3febe6251db8e5b87e36605e7cbc394e3605d4bc15da&scene=58&subscene=0": "【技术分享】SA-CORE-2019-003：Drupal 远程命令执行分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458455526&idx=1&sn=f42801fd98759f7224a3052d45b4cb25&chksm=b18e3d6c86f9b47a27170075f62d9833009f5714725c22fd190ecfd2231efed75f70c04055b2&scene=58&subscene=0": "记一次安全产品的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247489713&idx=1&sn=72f3c21c6e9381cdc42bb1643a8ba4a2&chksm=96f407dca1838eca7888f5511cbcd54504943e6a50a553ddf609272f89f0e7b47b29f6ccdf0d&scene=58&subscene=0": "一个xray POC的编写全过程", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247527805&idx=3&sn=c4f152021973ad99b59ac611538ec4a7&chksm=c1e9e12cf69e683a828fd642ac8c33042c141d24ba48da8975e83f4c00981cd7c81e192a415d&scene=58&subscene=0": "CISA警告：黑客仍在利用 Log4Shell 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496380&idx=1&sn=eca9992413b3c774e7e60c9c022a9e3e&chksm=fe79d624c90e5f32c8ea5ee773e5fc4c939f64804bef98e7395ab29b116be17a58bcd0e3e983&scene=58&subscene=0": "【已复现】Spring Cloud Function 拒绝服务漏洞(CVE-2022-22979)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247493869&idx=1&sn=73d04a1dc038d2616c5ee0b9d6f3da8f&chksm=c0074571f770cc67b6241e8cf6bab732df594b2f2a477e9b9ce50950185210dc15557eb74cbf&scene=58&subscene=0": "6月，盘点您需要修复的那些API安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247501833&idx=1&sn=c91b745c048596faf0e05510165d2299&chksm=ea663f7edd11b6681e35de65031ad4373f8ee1a722ce3e2a0dd7efed82fc007a21b3e64440ea&scene=58&subscene=0": "美国国家安全局（NSA）“酸狐狸”漏洞攻击武器平台技术分析报告", "https://mp.weixin.qq.com/s?__biz=MzUyMDEyNTkwNA==&mid=2247489030&idx=1&sn=0c9799377b28ef5851b8b0c3265be8ae&chksm=f9ee7ab9ce99f3af1f06c4c96d4bb9c801b8aba7754b7b1bad8ff4b3ff2973f2dc26926788a7&scene=58&subscene=0": "美国家安全局“酸狐狸”漏洞攻击武器平台技术分析报告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247503957&idx=2&sn=5b0b78bed396d22e22eca8124b7a678d&chksm=ebfa9775dc8d1e632fb422e60fb60782b6f3d35f15be37ee4115ae43401720df354eb1cfc931&scene=58&subscene=0": "美国家安全局“酸狐狸”漏洞攻击武器平台技术分析报告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496387&idx=1&sn=ed634e2458a888f961044354d6224c3c&chksm=fe79d65bc90e5f4dea518095d127b0141e945ba0a23b040fcc89632fc42317ec4781bdf0e56a&scene=58&subscene=0": "【已复现】Apache Shiro 身份认证绕过漏洞(CVE-2022-32532)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247488567&idx=1&sn=764b71452aaa0695da3626393f362208&chksm=c187d426f6f05d304a4c640ba7243e250dbe5fae353279cbe38685aac8a8fe999efc52d57481&scene=58&subscene=0": "CVE-2022-24521 Windows CLFS本地提权漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491116&idx=1&sn=21f9abfcf2de1dca06f6cbd909049206&chksm=fe251b2dc952923b53b62afe304cd9f38a09bf7b06c9a7161e8a246fa4f83799aee96e9d2691&scene=58&subscene=0": "CVE-2022-32532：Apache Shiro 身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247504000&idx=1&sn=dd431b937f81c9d207faa0e84d5e0ff1&chksm=ebfa97a0dc8d1eb61735870c66e1a5f7306d5bb2c304eb07eba979c076e11a986934b93a5f7d&scene=58&subscene=0": "微软云服务爆容器逃逸漏洞，攻击者可接管Linux集群", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657044539&idx=1&sn=844200f7ded4e407c1f60c4eaecf3c73&chksm=803fa8e5b74821f35d4b5770f899d11b40c4f3a94a22effe163efe173282d1d87eb8d9b1a296&scene=58&subscene=0": "【漏洞预警】Apache Shiro认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3Nzc2MjIxOA==&mid=2650344931&idx=2&sn=3e7cce36cd8fafedd7691fd8754476b9&chksm=8740b626b0373f30625fd0948617c121549bb31d5fe75b3f927102651251db845aa9935d75d9&scene=58&subscene=0": "美国国家安全局（NSA）“酸狐狸”漏洞攻击武器平台技术分析报告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512652&idx=2&sn=41462de310311abaadf3c81fa66dab19&chksm=ea948326dde30a30b6628410dbec18f7095b4ceac398685c020321f11a956d0d0c573779d4f5&scene=58&subscene=0": "微软 Azure FabricScape 漏洞可被用于劫持 Linux 集群", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512652&idx=3&sn=2b4e8e13ba0800dd1fc7f8468b6a0829&chksm=ea948326dde30a308994628b3b2468662db78d6469ed717a69fd91089fce0e26e5820559f664&scene=58&subscene=0": "亚马逊悄悄修复安卓相册 app 中的高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512679&idx=1&sn=0c82369854fa59dc4fa12f66f58f28ba&chksm=ea94830ddde30a1bcbbf95307bc949733929927064b26c19848a6f40b73600efda78313738e8&scene=58&subscene=0": "谷歌分析2022在野0day利用后，得出令人意外的结论", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512679&idx=2&sn=59d6ec9653aaf6de0cfe4f624fe39695&chksm=ea94830ddde30a1b240c47dd7ca7dba361eef098dba1a723363510aee0f8b42df1d2234a6ae5&scene=58&subscene=0": "博通Brocade漏洞影响多家大厂的存储解决方案", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247528258&idx=4&sn=6c1fd15c19332a2003f81012c6193bec&chksm=c1e9e313f69e6a05a216a34674fb5f7357f5b9cdeabce8b2fcc0b676ced25855a0e807dd764d&scene=58&subscene=0": "微软云服务爆容器逃逸漏洞，攻击者可接管Linux集群", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491121&idx=1&sn=6109b0bcbf7e058596687514ab9900c1&chksm=fe251b30c9529226066d2a759791f33156e1850f7313a8efc73a2e3e7000d6cc768c0a394ea0&scene=58&subscene=0": "CVE-2022-2185：GitLab 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650509028&idx=2&sn=a6c0e4d6fefc50442fb0b9c34e30a9cb&chksm=8716a0afb06129b9afabd6b44caed4aa05205fd94662cf91b3e8775d536d09f43da2b1d5beeb&scene=58&subscene=0": "使用区块链分析评估朝鲜黑客的优势和漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247494084&idx=2&sn=e4761b62c8c1a41c94b18ede48d34cac&chksm=c1449b79f633126f670b14ddef2e1a65bca0ae22df29f70cc80fd6c7a9681175bd94cdde591f&scene=58&subscene=0": "2022年迄今为止半数零日漏洞都是之前漏洞的变体", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247491947&idx=1&sn=c45f6af39402e6bf7a9cbdc86f0bf1b3&chksm=fd74d1a2ca0358b491c9365630034adc97d24c805030c42371ced87322714ad2aed020f20247&scene=58&subscene=0": "CNVD漏洞周报2022年第26期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247491947&idx=2&sn=63ee4c1b9fa053be95bc0f1c9370c6ea&chksm=fd74d1a2ca0358b427e20224e8a653c31c277065d7f398044b40f369b05beb959d2fc649d070&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220627-20220703)", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247528329&idx=5&sn=15363350536361a51f100750382d49d8&chksm=c1e9e3d8f69e6ace29cc68a40086dc6b1b30f780dee8dca12c567a48f20d11b1861f72c4786d&scene=58&subscene=0": "可修补和可预防的安全漏洞成为第一季度攻击的主要原因", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247495894&idx=1&sn=bfe228cd674fd5b9b7a208578e579652&chksm=eaa978f6dddef1e0a33a0d4fd3ddae36722123c81c3ba71c439bc5d78ef5f272a090e44d4d22&scene=58&subscene=0": "AWS：代理服务器上的远程代码执行（hackerone漏洞报告）", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247496884&idx=1&sn=59c9ecb4ae1f668e9c383685ef0e7995&chksm=973ac7d6a04d4ec0321712b56a386c1138a7eb54af390cf9baca9a0033b97754e3346d1f3792&scene=58&subscene=0": "CNVD漏洞周报2022年第26期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247496884&idx=2&sn=da05f25da1830fb5bb4144111a223a75&chksm=973ac7d6a04d4ec00d5d8082e9db04e6672acc20be8e4209e32a2b84b38598c8b60067b419f5&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220627-20220703)", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649773477&idx=2&sn=06bbfe9783ac4d923c198482f5e3ab6c&chksm=889365cabfe4ecdc4a39d6acb7fd25cfcc8aead738389aa7888518bf934bb0a8fe70a8739ba9&scene=58&subscene=0": "【安全头条】Hackerone员工偷卖漏洞报告截胡安全研究员", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512717&idx=1&sn=90d9ee1cbcb33e3442cfd9d4d4c1d958&chksm=ea9483e7dde30af103b74637ffdefd0a6d62164388d12598a2a74b18e802f659d18f3e11a70f&scene=58&subscene=0": "Chrome 103紧急修复已遭利用的0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512717&idx=2&sn=e7d555a3b2e371cc5f51269f55621112&chksm=ea9483e7dde30af1515cb24b488607e05e070f64625e434938207bb79bcccb49fafba26a620a&scene=58&subscene=0": "Django 修复SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512717&idx=3&sn=ed4f540ffb43d12f8f07655065653095&chksm=ea9483e7dde30af173547333a59e5ef20cbd256045c377a56722b6cac0af0d581a27bc4b07a1&scene=58&subscene=0": "澳大利亚莫纳什大学推出公开漏洞奖励计划", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247504210&idx=2&sn=79f8d32946140092fa33441779333b22&chksm=ebfa9672dc8d1f640b262f54dc1e1e622c0124172e3a1b037969f5a2588a2bce5a59a9c690e7&scene=58&subscene=0": "国家漏洞库CNNVD：关于OpenSSL安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496413&idx=1&sn=75d27dd23e9c49860973d4d084f41ccf&chksm=fe79d645c90e5f53a4e9ab2f690ed0a413b755370fcb4e5fdb4dc86290849b9f070b82e8475d&scene=58&subscene=0": "【已复现】Atlassian Jira 多款产品Mobile Plugin服务端请求伪造漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491130&idx=1&sn=a09de7b60ad7b88ab2ef105951eb808b&chksm=fe251b3bc952922d3e5ed8edf8a35d43000a2780c8a2890adeefa1fc7d073d3aa3c510dce848&scene=58&subscene=0": "CVE-2022-2274: OpenSSL RSA 远程代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657044546&idx=1&sn=c32a18047a3a1752df8b8559ea654cc6&chksm=803fa89cb748218ad642fa5994adfc65fb9ffd8480c7820dfb145f4205848194093580b59c54&scene=58&subscene=0": "【漏洞预警】Mitel MiVoice Connect远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652004281&idx=2&sn=35525b8ca0386fbd0815c59395cecadc&chksm=f36f73f9c418faefe1ef2c39a5ec66305c98045404db0b4eee9f2ce2738288343e142c2d8813&scene=58&subscene=0": "【安全圈】数亿网民受影响，OpenSSL又被爆高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512767&idx=1&sn=b404692db2fa859fc1ee08badadbb004&chksm=ea9483d5dde30ac3dd034ce16f1c411008f5df15f75344c3da5e32814ca23e20bc24795ba92a&scene=58&subscene=0": "高危OpenSSL 漏洞可导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512767&idx=2&sn=a0b241acce83341531e098b976dc2d6c&chksm=ea9483d5dde30ac37e8cb4cb914a843a0ddc13924b0915e5518a0e2ebe4c6725758f476fb8fb&scene=58&subscene=0": "Atlassian 修复Jira 中的完全读取SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649773579&idx=2&sn=4cb7ffe230f86a2c2553adb40958c57e&chksm=88936664bfe4ef728792b708d3886e1a0f4fddd75aa1e4f69e8bcb0b25fec577f0bef2e9db66&scene=58&subscene=0": "【安全头条】MITRE漏洞公告意外展示易受攻击资产", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496422&idx=1&sn=0c7bbd815d87ed3ade312f727855681b&chksm=fe79d67ec90e5f6837a7057cda5e1c60e03430e10eb68c3f5cb6941f44ba46df5138c7bc63ef&scene=58&subscene=0": "【已复现】OpenSSL RSA远程代码执行漏洞(CVE-2022-2274)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512788&idx=1&sn=e187454b1e7105eca3d4a6988c305073&chksm=ea9483bedde30aa831b27a1729e393da823f28bb3b86c526f3c936e95d2d9c1d928b50b2db9d&scene=58&subscene=0": "苹果为Lockdown Mode 新特性推出漏洞奖励计划，最高200万美元", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512788&idx=3&sn=894340534673ba25a49c72eec950b0d7&chksm=ea9483bedde30aa8e9c0b3355eeee1ce56ec6cb1f2d55b60888cea9487bd8397fff4294a955d&scene=58&subscene=0": "Fortinet 修复多个路径遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247495947&idx=1&sn=7be2fddc2b9ac35897eb4701fa3b71ff&chksm=eaa9792bdddef03dcf44a4ae02879e3ad5eec37ae4221401b1c26110a283014cffdf8ac9b536&scene=58&subscene=0": "Kubernetes NGINX Ingress Controller 中的新漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247545015&idx=2&sn=3fe05d16ee63b849c702a1c7a93be17c&chksm=e915e08dde62699ba6a1f483893a804920d08555152b59808714f7e5036fb45df19e866e0e30&scene=58&subscene=0": "攻击者利用Mitel VoIP漏洞进行勒索软件攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458457914&idx=1&sn=1d505597b47089cbd8bdc1e6e0a2b068&chksm=b18e27b086f9aea63d4404f118b0dc4c0b87c5986f20e556a5a85c967834df0d7f3e8e6d98d6&scene=58&subscene=0": "Android漏洞之战——整体加壳原理和脱壳技巧详解", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512799&idx=1&sn=4c911268f2a7aa2fa486878c0d088a2b&chksm=ea9483b5dde30aa34eecfb2769cecc53e133885f12e381c6c1827d5a3d3dfa4f8e4e0edd9506&scene=58&subscene=0": "Node.js 修复多个漏洞，可导致RCE和HTTP请求走私", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512799&idx=3&sn=cf09134cb420304564ce779f73681d85&chksm=ea9483b5dde30aa399ffec055342fed6659cf6636ee189076567fb2b40cf6d02796785ce7ca1&scene=58&subscene=0": "思科修复企业通信解决方案中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247529335&idx=3&sn=e429a31a4e9ba1488b2dd79d1a28652d&chksm=fa93c5b6cde44ca0bf4f1f3c91dec333c077dd4f91fa994ea7cac29dd0c15336f7cc49aa227a&scene=58&subscene=0": "Chrome被爆严重零日漏洞，谷歌督促用户尽快更新", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247491964&idx=1&sn=d461299f3e39c74b20e33b9dcaf3e281&chksm=fd74d1b5ca0358a3abbb18681b5319c622681d4308c9379ba45b6acb6397fb243f6e0bfc0f15&scene=58&subscene=0": "CNVD漏洞周报2022年第27期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247491964&idx=2&sn=80a4f255978a971050a0010f0766ef95&chksm=fd74d1b5ca0358a369d10b1560f9bc64fe886d63ccaa74d39d63569f4214d4d6022796133273&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220704-20220710)", "https://mp.weixin.qq.com/s?__biz=MzIzOTAwNzc1OQ==&mid=2651135026&idx=1&sn=8c72045fe8a6eca860273815f68c11c9&chksm=f2c11d52c5b69444b0015b0d528f1479dc67347dad7d56d7f7b0d2b022709a3ac372c26061ed&scene=58&subscene=0": "演讲议题巡展｜自动化API漏洞Fuzz实战", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247496937&idx=1&sn=c63b8a7ad9c8a3491127886ce9c7d135&chksm=973ac78ba04d4e9da35c75e838a4d6e88a328bab331ecc565d8c9f8682cab55dcd9244ab1e62&scene=58&subscene=0": "CNVD漏洞周报2022年第27期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247496937&idx=2&sn=9a695ffd2858f54045c35a1d43d01c21&chksm=973ac78ba04d4e9d888fcc0030e51da4184beb9d7e79ecff26ff05a9a07d64e49e5faa96e288&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220704-20220710)", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247529370&idx=4&sn=5d288dfc2b83e3cc2d3b88ca3cd063f5&chksm=fa93c55bcde44c4d529075048bf3053db7133cb4dfba028369ca0fe946f6d4acf9e2815b0740&scene=58&subscene=0": "多款本田车型存在漏洞，车辆可被远程控制", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650963075&idx=1&sn=31d9dd7f02ea26d6ae0f77e6d8271c0b&chksm=80793eb1b70eb7a709e4445827f22ddc20efea9918714fd5c1ab30865b4581113b1dbe47b085&scene=58&subscene=0": "Pocsuite3 入门教程", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496437&idx=1&sn=ea73f7efe0954c9ab9dea943c2b8666d&chksm=fe79d66dc90e5f7be42d2cec4604c6aecdcf028060bf774432e59acde813b60fd709ebc237c2&scene=58&subscene=0": "微软2022年7月补丁日多产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247494626&idx=1&sn=8e5c14866789c5c0390d87650d72b7d5&chksm=fa523e5ccd25b74ad1d76c79e837718502e0bb27a00122547f9341d37d40b93f213baf349921&scene=58&subscene=0": "2022 CWE Top 25年度常见软件漏洞榜单", "https://mp.weixin.qq.com/s?__biz=MzI4Mzc0MTI0Mw==&mid=2247494467&idx=1&sn=6188bd48221567077d761d469d56cea7&chksm=eb84b617dcf33f01566c397e682fe4dfc34c0da21f026f5c723d38c73a7e94db582ea965f4b2&scene=58&subscene=0": "原创 | CVE-2019-0808", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491154&idx=1&sn=dcf4dc8b7a21a1ffa81b99d8442ed7d9&chksm=fe251b53c95292456a0773e2c8798411f95c3a4493b6fdb9649486467254ee43648a0ad6e9b4&scene=58&subscene=0": "2022-07 补丁日: 微软多个漏洞安全更新通告", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664161952&idx=1&sn=2a43bef037c0aa0f85047bc756f39852&chksm=8b5ee059bc29694f1f56f41f6adafb913da72db2ad5463d73169e6eb581f4c3cef01cc56ab54&scene=58&subscene=0": "专题·漏洞治理 | 践行总体国家安全观，推动网络安全漏洞治理体系建设", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649773970&idx=1&sn=b7968724cef926328cc5a195d7b21088&chksm=889367fdbfe4eeeb4f462c9b9b549517c0a77755ae8d7668ff3c71ac6cfa31554a2f2d67812b&scene=58&subscene=0": "【技术分享】CVE-2021-3490 eBPF 32位边界计算错误漏洞利用分析", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649773925&idx=1&sn=2fe5ba6b1353a79616b2662b4ca42de1&chksm=8893670abfe4ee1cc652913e58621225042e5dba33453e2102188fcc6842c35d31b431f2a4aa&scene=58&subscene=0": "【技术分享】从Java反序列化漏洞题看CodeQL数据流", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247504360&idx=4&sn=cccabea3d064a32e9bbdfd14df83b822&chksm=ebfa96c8dc8d1fde3d64af2ec1649d6ccd8d7b5b4af3d40a95830f68fa042077bc17af9593d0&scene=58&subscene=0": "Nodejs dll劫持漏洞 (CVE-2022-32223) 安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496453&idx=1&sn=bb1d672b440f09b242aeff4474aa7074&chksm=fe79d79dc90e5e8b1817458c24ae97997725ed65ef04878a422ccd82f9c9e1201d4ef57c7d36&scene=58&subscene=0": "【已复现】Nodejs Dll 劫持漏洞(CVE-2022-32223)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512889&idx=4&sn=bd3623a8d3f38a4206124b8681f1c510&chksm=ea948253dde30b457da57e1cfc42ab6fc1b7c06335250b93b2f6b89654f0b83884057e98fbd5&scene=58&subscene=0": "适用于Kubernetes 的AWS IAM 验证器中存在漏洞，导致提权等攻击", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664162070&idx=4&sn=9371db36c1a1f42fd42e123e290c723f&chksm=8b5ee1efbc2968f94f93c2bce60ba734c5c4dc45892255aa0fff0f457f0efbeb547824335684&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247506402&idx=1&sn=824c75aa9238dda793cbd635a67f8a64&chksm=e89df13adfea782c8e9a701f13dad1f7e7bddce0d4a539cca52c762d13e76c58b991a5119f30&scene=58&subscene=0": "Tenda AC9 SetSystime 命令注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458458466&idx=1&sn=8c742be24415dc2fa50fb6296118882f&chksm=b18e29e886f9a0fe716047ad32b8eb915f206165ff87036b424364216f532142860e7db2dd0d&scene=58&subscene=0": "新课首发！Windows内核漏洞分析与EXP编写技巧（文末抽奖）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652006195&idx=2&sn=673cd09803f83fd346264e778e446440&chksm=f36f4b73c418c26510efacab5b7a78449aa1dc100c2dfc8eb4641345b0ffcec4891cea917022&scene=58&subscene=0": "【安全圈】WordPress主题中的漏洞可能会导致网站被接管", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652006195&idx=5&sn=5528e9f6ff21777a5a125e504028c8a0&chksm=f36f4b73c418c2653d20e822449a98447a6c800816178c6069f8a8d30e11f014757be9ddd63d&scene=58&subscene=0": "【安全圈】联想超70款笔记本电脑被曝新型UEFI固件漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652498735&idx=1&sn=1387459cd998e124aa04cc7d87dde4e5&chksm=f258489cc52fc18ae479d6cdc8bbe5d694f5bf5ea398e2a6cfce1acd31fbee352b9930cfadca&scene=58&subscene=0": "雷神众测漏洞周报2022.7.11-2022.7.17", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247492073&idx=1&sn=70c0a792e8be9e4e30c54ab15a35847e&chksm=fd74d120ca0358365777c2ff8d6a8a2af9b789c6921f3ea8013f9617931543d5f112c2df13db&scene=58&subscene=0": "CNVD漏洞周报2022年第28期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247492073&idx=2&sn=f28c1ec84d499387f9946b06893b33d9&chksm=fd74d120ca03583669520769b65d2dc8ffee808ee881ee9b6d2dd5347f1579ab6a79a36f2552&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220711-20220717)", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491169&idx=1&sn=1efa2d5412ce1462699b6c0c72d3d887&chksm=fe251b60c9529276a16f3e2025e09b4b172a1628112eaf6d56bdf26b6a6286f2d136f3dd253a&scene=58&subscene=0": "CVE-2022-33891：Apache Spark 命令注入漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247546070&idx=1&sn=b7870a98cce3167f4b3304a641e7366f&chksm=e915e4ecde626dfab5013813fab5509d733deb5fa14d1db5d241a683af2077a57d75abefc12c&scene=58&subscene=0": "Log4Shell漏洞的长期影响", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247496949&idx=1&sn=3bf4566bf80aef54b0dc687f12811f30&chksm=973ac797a04d4e816cff077406c43eac712f78b4df7f78a5fd846810a99dedb96afedf62d23b&scene=58&subscene=0": "CNVD漏洞周报2022年第28期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247496949&idx=2&sn=7b0be2eda6b68372ca73959ac58413cd&chksm=973ac797a04d4e817a7b93b0fb0135c454cff8011bf5dec2360f29527f16e682ea20bff4375b&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220711-20220717)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496472&idx=1&sn=1c5dde52d4da3f12f89c9615f66f0fd5&chksm=fe79d780c90e5e96c67aff44179782d75959c58b83ab63cd75d28df80671e7ea4dd138d3fb04&scene=58&subscene=0": "Oracle 多个产品漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247529228&idx=3&sn=338b1b3666b9f905c4fc18754df53a23&chksm=c1e9ff5df69e764be3c7ae2b7dd65698126ed7489db8499e7dc75ede0d17f0091dfa8e752c74&scene=58&subscene=0": "工业控制系统信息安全漏洞管理思考与实践", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247529228&idx=4&sn=52211608c1db5b9356e1e9e71796621f&chksm=c1e9ff5df69e764bdaab1a5a9b08dae2d04d71b4de52e5352ac633c298796cb9e94c168b07dd&scene=58&subscene=0": "Log4Shell漏洞的长期影响", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247546167&idx=2&sn=a2253870abc25db5f8cbdd60e1ddb435&chksm=e915e50dde626c1b1771b162d40b31083443b5c077e92dfd54442772d720e6a4dbd511d62d57&scene=58&subscene=0": "CVE-2022-26706 macOS App沙箱逃逸漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247504552&idx=3&sn=cdd1be2f2e6fa007ee86be88f29b968f&chksm=ebfa9588dc8d1c9ed761079bb169582ae705356362500dd943b634f60794d7d2b26aac56d21c&scene=58&subscene=0": "国家漏洞库CNNVD：关于Oracle 316个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664162363&idx=3&sn=d105f469617cbd73cb6d2cddcdce879b&chksm=8b5ee6c2bc296fd417dfed5f2ed994e9155184fbe15275b95dc876bfdc4e885da62a83a9f981&scene=58&subscene=0": "CNNVD | 关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650173145&idx=1&sn=94d664d0f7471439ffbbef7d6a1da4f7&chksm=f4489565c33f1c7315fd3ae577d1c6b0137bd256fce132507c10f16b67105d5302ffb9f96b64&scene=58&subscene=0": "0day检测手段完全揭秘：没有最好，只有更全", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652007909&idx=4&sn=d51243aee92bc9d50d4f0c5a6b7ead75&chksm=f36f41a5c418c8b394f42b8a3966a90c5dfb0e23a23b813f14d057f5b1515db48a6b00242469&scene=58&subscene=0": "【安全圈】关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzA3MzU1MDQwOA==&mid=2247484063&idx=1&sn=a9557d0e9da2a34badffa271137ce8e9&chksm=9f0c1db8a87b94ae1e3fb080a40277e232c0330fd579654597b7d021711efe87470b95005e7b&scene=58&subscene=0": "IO_FILE 与高版本 glibc 中的漏洞利用技巧", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247546999&idx=1&sn=ccd9fc528b987ec53f7febef04249f2d&chksm=e915e84dde62615bf1d125e0805bb74295a7cc6222e2559294e5cb420c369fd77c860129cd43&scene=58&subscene=0": "CVE-2022-30563：浙江大华网络摄像机安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247492139&idx=1&sn=53ee951745ab41ca341af44cf20171a6&chksm=fd74d2e2ca035bf466fb22adfd7ce0f75e566ab160e27865524282144956c50fe1718cf3fd7a&scene=58&subscene=0": "CNVD漏洞周报2022年第30期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247492139&idx=2&sn=d618ff445b2b00a51153195424db9b6d&chksm=fd74d2e2ca035bf4408a132b6216c33bd666f22cf8f305ecb1f66b1e9fc6bcab7c855341e7d2&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220725-20220731)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664163104&idx=3&sn=8c2aa130714e1a192d0394163c15c0e0&chksm=8b5ee5d9bc296ccfc8d539e37f8125ce6d2d0def5a6215c099c9baf71ca66c31f0ca6bd34913&scene=58&subscene=0": "专题·漏洞治理 | 从漏洞管理到攻击面管理", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657044689&idx=1&sn=6dbc61c24a2236a48068f0d60ffc57fa&chksm=803fa80fb748211934160e55a2d35d211923f960cb7d0a0a1ce218ee5bb1037fc24c80f09e80&scene=58&subscene=0": "【漏洞预警】大华IP摄像头重放漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247513283&idx=1&sn=5fbd02e0f95926cab449829326e0a8a1&chksm=ea9485a9dde30cbf0fb5e64dcbabdcbc1486306bbf9305df01d0f12022f30b84421fe09b167c&scene=58&subscene=0": "开源软件 LibreOffice 修复多个与宏、密码等相关的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247494694&idx=1&sn=561f31ff7b57eec886e6fa854d753ed4&chksm=c00741baf770c8ac229ddb5b1c2783aa31126879ede68c370ebd2c5a983abec8463d41f3bbaa&scene=58&subscene=0": "【技术干货】CVE-2022-33891 Apache Spark shell命令注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247529543&idx=1&sn=365025703684091eaf990bbc9441e31e&chksm=c1e9f816f69e7100947e5fc5e18b261c9404f7cb832a83c5dcaee0ae013c970428a947f1d071&scene=58&subscene=0": "从漏洞管理到攻击面管理", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247513307&idx=1&sn=22a89560c545c2168147b9a9ea5ea9bf&chksm=ea9485b1dde30ca7cc5237c2be269090f21d72c259ef84384b2acc1e2f180f0899796cb4e52d&scene=58&subscene=0": "VMware：立即、马上修复这个严重的认证绕过漏洞！", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247513307&idx=2&sn=4a99112b9efeb2e33add05f94b1dd1d5&chksm=ea9485b1dde30ca77b26b217f677ed8a3be57d9c8750d39780781015e46520db5185da5bd1dc&scene=58&subscene=0": "开源web应用中存在三个XSS漏洞，可导致系统遭攻陷", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458460061&idx=1&sn=ce272d6b2b2f839d7eeeb2896eb90ee5&chksm=b18e2f1786f9a60139d90f95e9442cc01b6f218f6bd47045dbdeb25d946d7427ba16c9c24cd9&scene=58&subscene=0": "Android APP漏洞之战——SQL注入漏洞初探", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458460061&idx=3&sn=a69c59fbc79b634b447555f2ac76af93&chksm=b18e2f1786f9a601c51138cea6e9f663ec20364f3f7e629496aaac4c6a3207bec8e87cc4296a&scene=58&subscene=0": "VMware 修复CVSS评分9.8的身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4Mzc0MTI0Mw==&mid=2247494653&idx=1&sn=04654fc45de601b350b924e7a695ffc8&chksm=eb84b6a9dcf33fbf4d5745d8aa3eb15fe6d9777533149211cd7c90e8384af06070dad527997e&scene=58&subscene=0": "原创 | TP5 RCE漏洞总结", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649774718&idx=1&sn=bfd99d8e1ec1f53faf9aa6332d0de939&chksm=88936a11bfe4e3074c94cdfb9bc4dd06590acff22112bcea1b9ad7fc74f4b54d67576ab4515c&scene=58&subscene=0": "【技术分享】CVE-2019-10999 Dlink IP 摄像头缓冲区溢出", "https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2652963489&idx=1&sn=6baefa7c364a66dd13bf7d00a2e520ea&chksm=7e547f174923f60110d8873f928952672f5e5996867145905f8da1541cb309d078c5887dcbf7&scene=58&subscene=0": "Salesforce 解散中国团队；亚马逊17 亿美元收购iRobot；拼多多或将推跨境电商｜极客早知道", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247547486&idx=2&sn=e0966f8b2f9644ca448d88f4c3904d9f&chksm=e915ea64de6263729e2879bf5732859e9ae4d364d5f66d69723470b7890bb2747883701dc9cd&scene=58&subscene=0": "Nomad Bridge漏洞利用被窃取1.9亿美元", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458461061&idx=2&sn=510e05c01a9daf99303c2533d446dc58&chksm=b18e130f86f99a19b1beb386becb0cc1cbe4396195ac6207d298610b756d1ecaa6d295893a43&scene=58&subscene=0": "推特零日漏洞遭利用， 540万个账户数据泄露", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458461061&idx=3&sn=c938a6d4e2238e7f16f544a361b68e1e&chksm=b18e130f86f99a19b9dd5df7b9b36730bb7b51ff317a1f2d42e7f6527902f8c204146c62d04e&scene=58&subscene=0": "Intel CPU漏洞研究，为你深入详解三个史诗级的芯片漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664163407&idx=1&sn=bba90a6df0087ce53b60c6ce39337bca&chksm=8b5eeab6bc2963a065ab8ada4610a998e3f471930ce2ccbcc68dbd398b57b9a1cf66c4ffd759&scene=58&subscene=0": "专题·漏洞治理 | 基于漏洞情报的漏洞运营实践", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247492190&idx=1&sn=a5d34ff81f7a66d20199c5624eba8311&chksm=fd74d297ca035b81c4d85fad0854c29f8cabdc8a88f8c8e16a0c396c08545ff8711f660d8fd2&scene=58&subscene=0": "CNVD漏洞周报2022年第31期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247492190&idx=2&sn=2d56b61365ea8d1ccac9b91cfd476a8f&chksm=fd74d297ca035b81cc7dc8fb0954c993c3a8d75d54fe4ea920d6edd8d6edf31c7185ff4bbd9e&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220801-20220807)", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247497001&idx=4&sn=8b1be5437acacb51547fc8495d3c8d04&chksm=973ac64ba04d4f5d873eaea5688ef65bdd3a4fe0c969a9d7ae1c76f6154949d0fb35320be52f&scene=58&subscene=0": "CNVD漏洞周报2022年第31期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247497001&idx=5&sn=ae452782cd545fe0e918e1d5d5ec9574&chksm=973ac64ba04d4f5dbc0ad6773be3e8f450721acc1d91b57c742ad4169a503f1e185e0b5c1ccf&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220801-20220807)", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247530341&idx=4&sn=6ec6f56f89a6b1ad2d302fe38c183d72&chksm=fa93c1a4cde448b2ef68770cebf7087e71ce2d2c527321b2a2d3fd9c85c9c4ed4c9da05b0f37&scene=58&subscene=0": "Twitter 证实，零日漏洞致540万账户数据泄露", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652012203&idx=1&sn=35dea29c4476aabcccf8b64082b6393c&chksm=f36f52ebc418dbfd7b287c798687e4fdeaf1e40b9b187a280f82bd6707e20f2b4f7b53eaa772&scene=58&subscene=0": "【安全圈】网传ToDesk存在安全漏洞，多家企业禁用ToDesk", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247508324&idx=1&sn=efb7bc67b4d6143aa7b8449055306d09&chksm=eb707f5bdc07f64de7316f698d374456b21b57f9ea95f8d3e964a041f8326ef05778b103f8d1&scene=58&subscene=0": "2022-08微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652012427&idx=1&sn=f05679de579fcad095e0434bfc05b209&chksm=f36f53cbc418dadd46220c3dafcb5260c88d1f289e7081b461c296439c9ce0bd616fd04ac5bc&scene=58&subscene=0": "【安全圈】南昌一公司员工利用管理漏洞获利700余万", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247547895&idx=1&sn=93f90d03d6e504c583339f273f69b217&chksm=e915ebcdde6262db69ffbde94137c4b8d783f071d43de32961fd686762ad577c1978ed262266&scene=58&subscene=0": "DrayTek 路由器爆远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247487458&idx=1&sn=ffcca5f2a5186e2fd492ce9b96b14fc0&chksm=c2c658e9f5b1d1ff5267e2acd785efdc592f692eb77737aeaa68ea4377943049a3dc570c8ce7&scene=58&subscene=0": "【安全更新】微软8月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247505152&idx=4&sn=a769ee5add4ccdd2ba325772f6493061&chksm=ebfa9220dc8d1b368aa7e5d1386f2f2bf4f06dd67f14ec1c437b98f74663d07fed3fd2fc5286&scene=58&subscene=0": "VMware vRealize Operations多个漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458461724&idx=1&sn=7d6ba28997f645f74b3c8d692fb7dd9f&chksm=b18e169686f99f80223eeb9691f49b066081214ac3fbc568ffdd0274b7330902071b9d2f5ae0&scene=58&subscene=0": "CVE-2018-8453提权漏洞学习笔记", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458461724&idx=3&sn=b01accf72a94dd6b078b746f74279f73&chksm=b18e169686f99f800a393c906225f4048977ee3cf48008688649eb86e1063e11ef9a69242919&scene=58&subscene=0": "实战CVE漏洞分析与防范（第一季）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652012756&idx=5&sn=193718d31969d1d6318c050364810afc&chksm=f36fac94c4182582f22a1acc0703473cfc657d17fd9827ce601db45d9c025414ecb6ed07ce2f&scene=58&subscene=0": "【安全圈】黑客利用域名开放重导向漏洞，发送骗取M365凭证的信件", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247530015&idx=3&sn=99deb500f6cb30b84e55c5ea79d0295b&chksm=c1e9fa4ef69e7358935b77cdca673c0482418be794a9fca7e52712b91344cc40efe8e8484a58&scene=58&subscene=0": "DrayTek 路由器爆远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247495634&idx=1&sn=2667a54fafa67a8ec6888265bc6c113a&chksm=fa523a6ccd25b37a64085f117f3e92cd9179c37875dc3459701260314944f4e9c7d6c79575a4&scene=58&subscene=0": "密码学赛题复现：2021-CryptoCTF（二）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458463012&idx=1&sn=168bcf8ed4e910a3ea4cfdea4541cc63&chksm=b18e1bae86f992b85098a855dbb9a8e410ee97441d13ad958d3d0840f94379f170e98a5f2fb6&scene=58&subscene=0": "使用AFL++复现历史CVE", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247495666&idx=1&sn=f651ce4168131bbeeec06f4dbe8c6eb9&chksm=fa523a4ccd25b35a464ca9791fe44b8fc80ed231b7100f12a7d29d7479361ce5c39eb096ba99&scene=58&subscene=0": "​密码学赛题复现：2021-CryptoCTF（三）", "https://mp.weixin.qq.com/s?__biz=MzUyMDEyNTkwNA==&mid=2247489695&idx=1&sn=73ddd0afa6d28f251f1587df081a1710&chksm=f9ee7420ce99fd36aeb156bbf64be632a5a657ff3064b5d96ae568973c17df268b11fbcd77a0&scene=58&subscene=0": "安恒信息入选2022 BlackHat USA议题《Windows本地提权在野0day狩猎之旅》大揭密", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247497793&idx=1&sn=4b04a57f780fb94bc221502b2f5d4840&chksm=ec1dc869db6a417f5eb71be95987804cf2f726b02cff5d5ca95364b9cc80685508b1cdc4175d&scene=58&subscene=0": "黑产团伙正在利用 ES 未授权访问漏洞实施勒索", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458463453&idx=2&sn=aafc9c9a5d35924c81bedf54574f7f40&chksm=b18e1c5786f9954158614d47027a32601e9f0b8bdea361f4aaa4acd4c8646a97a1c24ff0bbdc&scene=58&subscene=0": "CVE-2018-18708 TENDA缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNjYwMTMyNQ==&mid=2247488054&idx=1&sn=9a46b6d32b1d251728973404afc5eaa8&chksm=971e7f34a069f622f44331b371851c2fb75d99c065a1bd2cea80c67c4d218c7c151eb2b92514&scene=58&subscene=0": "黑帽大会：关注供应链安全与资产漏洞管理", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652013257&idx=3&sn=bbd76c87449818524b67a03a78ca112e&chksm=f36fae89c418279f7137a4859870d6a2b6141cb797a50230cddb5fb807e52708af0fd25b73df&scene=58&subscene=0": "【安全圈】Zimbra认证绕过漏洞成功入侵超过1000台服务器", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652013257&idx=5&sn=1eae8bc64e361fc9871088b4fd2ac4f2&chksm=f36fae89c418279f9a3cf14da27802193fd029d79ffcbd5092f45aa49632d6799805060852ea&scene=58&subscene=0": "【安全圈】利用macOS端Zoom安装器漏洞 黑客可以接管你的Mac", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649774945&idx=1&sn=5ea02bfc392d1efea15fd93b16cb6d35&chksm=88936b0ebfe4e2187888ddab92206f38d872b106ec59f9307dc5b77e5a2721e3f6cea3661872&scene=58&subscene=0": "【技术分享】CVE-2020-6828：Firefox for Android任意文件覆盖漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652499130&idx=1&sn=497230524a0219419fcd2da31163b695&chksm=f2584f09c52fc61facea882b3dd75e362a2cba34b5e0b2489d9300e09e6dcaac60afc85ed3a4&scene=58&subscene=0": "雷神众测漏洞周报2022.8.8-2022.8.14", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458463986&idx=1&sn=465f3de16b425a0c11683f9d79a85add&chksm=b18e1e7886f9976e0317b3e4e976c03799a7172268e01db399a64421ca76e9793ce131d3a85b&scene=58&subscene=0": "Android APP 漏洞之战——WebView 漏洞详解", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247494688&idx=3&sn=5fc2c6e9372f299b65b9232c9c28a2f9&chksm=c1449e9df633178b7a2a182925114d38c55f2fdd68d4eb0fe6969e1889f6e73e88a5d16a0749&scene=58&subscene=0": "8月16日直播！斗象科技「新一代漏洞情报与应急响应」新品发布会", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247494971&idx=1&sn=c95cc0ed47f8d072f9a8424953f8c838&chksm=c00740a7f770c9b187c52d870302fffbd6ad853efbbff7d808b9e5252f4131c58ee8c43a5350&scene=58&subscene=0": "【技术干货】CVE-2022-26135 Atlassian Jira Mobile Plugin SSRF漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247530121&idx=3&sn=fd9da0b9b13c169a3c7a0366c6769918&chksm=c1e9fad8f69e73ce73e5a1cd8e7355fa413adcc0ea1308697f323af36a9aeeb9f1a682415f53&scene=58&subscene=0": "黑帽大会：关注供应链安全与资产漏洞管理", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247530121&idx=4&sn=f7fed57e6aef63a8dff0064ff5940592&chksm=c1e9fad8f69e73ce519a8670a2894cc3650b74753ab656f52bc29ad5807b27e289776c5c8dcf&scene=58&subscene=0": "Zimbra认证绕过漏洞成功入侵超过1000台服务器", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247489799&idx=1&sn=6b3842493bbaaed6eb55b155889b696b&chksm=96db12dda1ac9bcb075903d9ce33ecadd6fb55bd00546a567f0910643bdbe7b4690547b02bb2&scene=58&subscene=0": "8月16日直播！斗象科技「新一代漏洞情报与应急响应」新品发布会", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651117343&idx=3&sn=5519e317564cb5a4a7ad2dc77c2e34ab&chksm=bd1467cc8a63eeda4165f8620f83ceef479bbf2b850795bb70dd0f21503e63faf22621f3eae5&scene=58&subscene=0": "CNNVD通报微软多个安全漏洞，涉高危及以上等级漏洞56个", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247495711&idx=1&sn=067094678019f8e91b3b0beabf0ed95c&chksm=fa5225a1cd25acb7c61b649de2e23e1af8f442864375ac1ef6143675f0f541d5c49db72dfae5&scene=58&subscene=0": "Django SQL注入漏洞分析｜CVE-2022-34265", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496847&idx=1&sn=a8f69c0983e07ffffa3d5e187eeb09b2&chksm=fe79d017c90e5901dec562d02ce090efadb4c9c87928eb4ee3c2b684a6fe2443f07d22abee20&scene=58&subscene=0": "Google Chrome 代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664163773&idx=2&sn=58c0dc18583d05daace5aefc8ca52f88&chksm=8b5eeb44bc2962526f98098ccc1f8d4596492aa86ceaf679145f8760a89d7a5e54494acb3cb7&scene=58&subscene=0": "专题·漏洞治理 | 面向实战的漏洞运营实践", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247513606&idx=1&sn=7ef2bbe710ecd61f87d32d3a53d28db7&chksm=ea94876cdde30e7a698417a1e60f215d5f74440aeb15e6238bef618870a8d31d953006005405&scene=58&subscene=0": "苹果紧急修复两个0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247513606&idx=2&sn=eb7c5b8b8637ed62d0be305f14e2ba9e&chksm=ea94876cdde30e7ac31840c96b22a9c1872036aff023b5d8f88d53f211f15811f84aede4f150&scene=58&subscene=0": "谷歌修复今年第五个Chrome 0day", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247530283&idx=3&sn=3a534193323cbc338ece358594931aa1&chksm=c1e9fb7af69e726ca9095249cd5f172361743fc9f7e2268e4fa72b7d2d1c2ed4966d142ffd76&scene=58&subscene=0": "Realtek爆出关键漏洞，影响多款网络设备", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247505349&idx=1&sn=d475739315f4bbf0af1813cdc103bf31&chksm=ebfa92e5dc8d1bf33451f3621992026d670b74cdb70071e89fe9977e52d3b9ab20628d1c4a55&scene=58&subscene=0": "微软近一年发放了1亿元漏洞赏金：平均每个漏洞8.5万元", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247505349&idx=4&sn=ae48c8ca9ac705ebb8f4ec7ae7053544&chksm=ebfa92e5dc8d1bf33164d3b90f7bb4b678aedebaef542b1db2c403f05d09aa562e351337ac5b&scene=58&subscene=0": "2022医疗卫生行业网络安全报告：恶意程序和漏洞利用是主要风险", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652014237&idx=2&sn=bf27c24ad2592e96f9ccad3bb4fd7b1a&chksm=f36faaddc41823cb36f29938ef9f0c8961a09a0acd067de77f78563dd6758a9715c4345d6e30&scene=58&subscene=0": "【安全圈】新谷歌 Chrome 零日漏洞已遭在野利用", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247530674&idx=2&sn=d6e155446a1958e88299b54f47ff5b3b&chksm=fa93ce73cde4476502cb06f01f20f1e3ca80fb8e2fee81464406b63ec2eacaebe8b76520b269&scene=58&subscene=0": "英特尔新型CPU漏洞可致敏感数据泄露", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458464924&idx=1&sn=49bdcb7acd7abb1eda7ad1781278f309&chksm=b18e021686f98b004f5f9c7b20fa0ab4019cec2fbf77d02c0326286f0c82ef74520314fcb24c&scene=58&subscene=0": "对一个随身WIFI设备的漏洞挖掘尝试", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458464924&idx=3&sn=cc3a9b9f7d7faaab16da6cc313b77172&chksm=b18e021686f98b00463c9ca812dd7383d635165c16a960f30d7e0be25fb65dbee51e3a357902&scene=58&subscene=0": "精品新课！Windows内核漏洞分析与EXP编写技巧", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496858&idx=1&sn=3ebee0d102cacc44bca58f2407829c82&chksm=fe79d002c90e5914d23e646d2f60046e75daa8623d45d945ea819c799aa75dd051494a301a95&scene=58&subscene=0": "Apple 多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247492256&idx=1&sn=194aa7c5c515750109b74663c7a34c64&chksm=fd74d269ca035b7f1c7dd50c9563f2151e807ed87ed85cf24f08f23cefce528170932f6e67e9&scene=58&subscene=0": "关于Apple操作系统越界写入漏洞和Apple WebKit越界写入漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652499286&idx=1&sn=071258b97a3a9f3c83d39050bbcc4644&chksm=f2584ee5c52fc7f3a4b5b99e55a399ac4c3fb134bd822efcd448c6aff17ae6e998328405095e&scene=58&subscene=0": "雷神众测漏洞周报2022.8.15-2022.8.21", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247497254&idx=1&sn=b1d0d4f0a90a23e38c8f1d50c971b9bd&chksm=973ac544a04d4c52391876d2c3a42f1c30e5692313ac1b1351ff1c453780635fa1fd089da4e3&scene=58&subscene=0": "CNVD漏洞周报2022年第33期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247497254&idx=2&sn=c315e26c488784c125e48118b051cd2f&chksm=973ac544a04d4c5299ff6d62e0deba5fc665978537da0f02d672180a2d41af31ebd49475e66d&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220815-20220821)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458465022&idx=3&sn=34e5fb35ba5d37300b751f6348f1a016&chksm=b18e027486f98b620d51813f78145575aa0fb0b8df9b3e5feb89ffbdd93ee5e5d7adf707c15e&scene=58&subscene=0": "苹果曝严重漏洞冲上热搜第一，黑客或可完全接管设备", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247548798&idx=1&sn=804550d22ddb8f6f520f01faa3ee1e29&chksm=e915ef44de626652c6d637c900f777e5cea90d6e37031fe58837055b25ea4c5394408383a155&scene=58&subscene=0": "亚马逊Ring安卓app漏洞可窃取个人信息", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247530712&idx=2&sn=a8b2fec722331dbb746248d9408859ce&chksm=fa93ce19cde4470f51e918ec054323e06fae1819ed63fa196a3b58d0957036016ef459730564&scene=58&subscene=0": "微软修复\"DogWalk \"0 day漏洞和其他的17个关键性的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247513642&idx=1&sn=c27beda5a40b560ba74580a1caf6d022&chksm=ea948740dde30e56257ab398f0d4f9790aad2d2f22465534355d2e72193d043fece45a36d8f6&scene=58&subscene=0": "微软详述严重的 ChromeOS 漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664164369&idx=3&sn=99f895e3826dd8c833d98c4d16083c3b&chksm=8b5eeee8bc2967fe5dd87157286c49ff676d07721322815c31afef0d89160fb92658ecce56d9&scene=58&subscene=0": "CNNVD | 关于苹果多个安全漏洞情况的通报", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247505448&idx=3&sn=ff7442735de8b8e1161a62e741782f21&chksm=ebfa9108dc8d181e0553fec08ad322ee646a8950defb82fd0fa1239a1ea2ed78e0a6fddb8f88&scene=58&subscene=0": "GitLab远程代码执行漏洞 (CVE-2022-2884) 安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247530494&idx=2&sn=e2f2ba8bbe39e4272567fe9e0a5d26eb&chksm=c1e9fbaff69e72b9063eb9d42c39d816addf4169a2e37ba91fecf915364d0400201628e1a30c&scene=58&subscene=0": "2022最危险的五个API安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247530494&idx=3&sn=2330973ada932f8ce314690abe87d965&chksm=c1e9fbaff69e72b9417b4a83478ef497db3fd1ec7a59f603aad2f3f4afbb30ced3a7a91a77f8&scene=58&subscene=0": "黑客利用零日漏洞窃取General Bytes ATM 机上的加密货币", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247495906&idx=1&sn=0ea6a9ce027d4a062f36ea81cf5026bc&chksm=fa52255ccd25ac4a995aba34668d33e20df4494de6c2f15c8c7f50b8ba8002608d9657518b92&scene=58&subscene=0": "SourceGuardian代码混淆的还原分析", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247549005&idx=1&sn=0ab806381d2637fc37e19c5d58384fcd&chksm=e915d077de6259610a5afc0d25043a2779a91b634922b0569b4eafee4e11ff0ea5573da2e148&scene=58&subscene=0": "超过8万台海康威视摄像头受漏洞影响", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458465700&idx=3&sn=8b93b0d13f775d53299314d9fd9011fa&chksm=b18e052e86f98c3827c75517863bd2cc1f973468ee593c9988fa189438462f99d8f00b660560&scene=58&subscene=0": "GitLab存在严重漏洞，允许通过Github导入实现远程命令执行", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247530546&idx=1&sn=441d3c4a1f7444bbb0d41fd620ecee12&chksm=c1e9f463f69e7d751e99cbebc3f215e1176755225a2e6c0f3fe2e9cb6d5a4bccf2ecfb94428f&scene=58&subscene=0": "2022上半年XIoT安全态势-XIoT环境下信息物理系统的漏洞披露和补救措施", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247530546&idx=3&sn=9f9780e145a4a4b627d2f08ecf308a0b&chksm=c1e9f463f69e7d75fe2c56b1c8388fc608aa3eb0cd26dc738a9867011bef8fd689d85529c6a7&scene=58&subscene=0": "推特前安全主管控诉存在“令人震惊”的安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247495290&idx=1&sn=a6fb2282c9208d2eb9b68a120aaac1be&chksm=c00743e6f770caf0cc12fb695389d94dc4c5016e5964e57849cdca213ab99f7bd99adf870e8e&scene=58&subscene=0": "【技术干货】CVE-2022-0540 Jira身份验证绕过漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247530818&idx=1&sn=7186baa61312bf8dd44abdbc526d6302&chksm=fa93cf83cde446957058e12471d6f7e4138ed08a0901f3fd56f5178f273ce05d5290e83e6b35&scene=58&subscene=0": "微软公开披露关键 ChromeOS 漏洞的细节", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247530818&idx=3&sn=82b5fbaa8965465c27b7c7c0d695f886&chksm=fa93cf83cde44695c5865d4239b2ef9384ae1aaedfb2c256ed2204ad93be57a2ad7c3ebc4c2a&scene=58&subscene=0": "超过8万台海康威视摄像头受漏洞影响", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247513692&idx=1&sn=0f726f793b5bfac0b6d002b8506c64d9&chksm=ea948736dde30e204ff4f91d0084bee437def61910139696409b7b268f10c0ae0f63b07a54da&scene=58&subscene=0": "以太坊基金会设立最高100万美元的短期漏洞奖励计划", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247530874&idx=2&sn=33bcba2e1a1127ce540ee20e737a72ca&chksm=fa93cfbbcde446adcd73f5632c2387e8c38030d6bc81ab8bd6cec68143e0bc6d0ea5a1e70cd2&scene=58&subscene=0": "GitLab修复了CE、EE版本中一个远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247487993&idx=1&sn=9c6d388e20779e343c6885fd5bc257fc&chksm=fad4cceecda345f84249d2130ce7fffc7e8b7fa3e1b7dd28135b1d9d96af003d8466e7464c63&scene=58&subscene=0": "Java安全学习04-反序列化漏洞-动态代理-CC1链-入门", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650964259&idx=1&sn=70e0aea69c8255ba44f1b9738085b4f0&chksm=8079c311b70e4a075046e8e6bf55e21d786b99cc24bdf82deecaa8774ab152f770a55ab3b645&scene=58&subscene=0": "原创Paper | Cisco RV340 wfapp 命令注入漏洞（CVE-2022-20827）分析", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247530607&idx=3&sn=2bdefffa908eb5a777e46085c0c1ac39&chksm=c1e9f43ef69e7d28c65ad982ec538509d2d338f97c198379c9fad411170a5095cfc74ea91a3d&scene=58&subscene=0": "DirtyCred：存在8年的Linux kernel漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651117994&idx=2&sn=6668cac77efe9ff8f69b98c0129c0403&chksm=bd1469798a63e06f3e7c8e124a257c34f9b8b8cad79bc73c12c9757ad90771fc6eb4b023733b&scene=58&subscene=0": "安全头条 |2022年中国网络文明大会主论坛在天津举行；CNNVD通报关于苹果的多个安全漏洞情况", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247495396&idx=1&sn=71230f1c8ce8f5c8ecac51978dd8077f&chksm=c0074378f770ca6e92e338bd326eb30092102659ea54d54c417192d351e972cc491c0a9ab47f&scene=58&subscene=0": "【技术干货】VMware 系列产品之身份验证绕过和JDBC注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247490371&idx=1&sn=2d13096f981f40a65e1ad68d0d2b1acb&chksm=96f4042ea1838d38f4df946c1fb0ed0ed0ea0793c2d4ebba3b54f9500de0403dbbd52c252b1d&scene=58&subscene=0": "漏洞风险提示 | 畅捷通T+远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247492332&idx=1&sn=59802f822b19f53158177e6b1f68430a&chksm=fd74d225ca035b33062e86bfc04651db0ad187a2ca5fdccbb56571c38e6bae52858f25eac324&scene=58&subscene=0": "关于畅捷通T+软件存在任意文件上传漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247549437&idx=3&sn=e22600143bef1de0f958dae29a26d10d&chksm=e915d1c7de6258d1ea00b4e22021adc9b24230d04705a33cb30bcc1955243e8b310d0b5ad67b&scene=58&subscene=0": "越来越多的黑客利用defi漏洞窃取加密货币", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247495793&idx=1&sn=94b38eda28383d4649bc2d265774e2f4&chksm=ce96bd4ff9e13459a7cb521db67c7a142c4810c6080414ae4f360dce9ad824b86f538c0ae589&scene=58&subscene=0": "【风险提示】天融信关于GitLab存在CVE-2022-2992 RCE漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247513721&idx=1&sn=9ccc0511cb8d6c7134eb54700130f1b7&chksm=ea948713dde30e0503874ed6e5ebcd5a90933ef86048fd21466e73431420b799a861f800164a&scene=58&subscene=0": "谷歌推出开源软件漏洞奖励计划，提振软件供应链安全", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651118294&idx=1&sn=77ed86354261bc5af0e2c80be2c8b557&chksm=bd146a058a63e313b0d99249e6a5e142fc6731dff74b8d839cb7475b42ce1b97d81ac921838c&scene=58&subscene=0": "CVSS评分机制会将企业漏洞管理引入歧途吗？", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247495520&idx=1&sn=ea128a5304514cddbb0c6d762819554f&chksm=c00742fcf770cbeab05a152a6a855aa5f18bb0a73e7e526dcaf1cad64b184decc63d879400d6&scene=58&subscene=0": "KCon 2022议题分享：自动化API漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496892&idx=1&sn=bbe9a07e0dc92a4994baeae3e2aa429b&chksm=fe79d024c90e5932efd8d66b9775cd5e419f5e97726e8669bb9fdaf042a7ddc6cbc08aa4553c&scene=58&subscene=0": "Google Chrome 沙箱逃逸漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652499490&idx=1&sn=754ae03073da4e0d54b7817a64381466&chksm=f2584d91c52fc487b14aa8f325e426dc528ccda1546976ad25a7b7109c37ae8ffd9a15d5686b&scene=58&subscene=0": "雷神众测漏洞周报2022.08.29-2022.09.04-4", "https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651138298&idx=1&sn=cb42741ad65c10086e00346981085063&chksm=bd50b8ae8a2731b86d2f5822da1697bea36adba72e0a1fa0ee415718fecbffbcc465e43abdb0&scene=58&subscene=0": "【漏洞分析】CNVD-2022-10270分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247513786&idx=1&sn=6db5fbb61270cf614d6605adb52ca99c&chksm=ea9487d0dde30ec6b7e1631c93975e24741275c2ba254fe0dac3f5f494c3000a8cedb03ff890&scene=58&subscene=0": "QNAP紧急修复已遭勒索团伙利用的0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247513786&idx=3&sn=07ef04262f4e5c1f68019bd0eafffe20&chksm=ea9487d0dde30ec6ddb7fffd17fcf18c63f5f07f66769788f6748460497129ab130565fc545c&scene=58&subscene=0": "扩展物联网 (XIoT) 漏洞激增，安全压力倍增", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458468074&idx=2&sn=06eb27c1649bd4e3a3e43a46a9500add&chksm=b18e0e6086f9877644ba0de33658232f99213d1b1b074342260031cb529c1b7ad1b89b2e0204&scene=58&subscene=0": "V8 Array.prototype.concat函数出现过的issues和他们的POC们", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247495601&idx=1&sn=71c76d41dd00ba2aec9ee1f6344ee12f&chksm=c007422df770cb3bc974d42581d905ffaa99510683fe2a7bdd41a583186f88244bafaf99e774&scene=58&subscene=0": "API漏洞自动化测试、安全工作流编排-星阑科技在Kcon黑客大会进行精彩分享", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664165218&idx=1&sn=2abc5a81d2b47c85e6d021f2c1970df1&chksm=8b5eed9bbc29648df22152a192d14fa30a6a6a2243b963282a3fee91630e6504981266b17b8c&scene=58&subscene=0": "重磅发布 | 《2022上半年网络安全漏洞态势观察》（附下载）", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247549956&idx=2&sn=a47885512dc1c9fdc3e0800df8752de0&chksm=e915d43ede625d28e34e5bbb52cc0f617a1f36fc859e63018a34cec25ef35f0ec262c9f7448c&scene=58&subscene=0": "抖音国际版安卓APP安全漏洞可劫持用户账户", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247549956&idx=3&sn=24d47c77f042ee08d69fa0ca9ccdc786&chksm=e915d43ede625d2893f05e5b057601a9043c723782e749294bf50326605eaa20f0f59d4dcf0d&scene=58&subscene=0": "如何在当今不断变化的威胁环境中，实现漏洞管理的现代化", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247550051&idx=3&sn=88924f43f8f8ed59b1575c7dbf08fbc5&chksm=e915d459de625d4f3d39375cf8c801cc6a44db4fa1ab98f3eb26be8726277af57a09b5781c20&scene=58&subscene=0": "ZecOps 对 AliExpress 平台购买的 Android 手机取证分析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652016310&idx=1&sn=0f4193a2321197b6b8a7bfcf7ecff27f&chksm=f36fa2f6c4182be0b48ec33d6c5aa8aef24ea8d329b38067874ef21294bc1ff9b6b21399047c&scene=58&subscene=0": "【安全圈】800万美元可购买破解任何智能手机的0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652016310&idx=4&sn=93905da2423a0214694ecd87a795e2f3&chksm=f36fa2f6c4182be0dbba265194064143a597d4e7d89ea97688dd69275296465350af5184e00f&scene=58&subscene=0": "【安全圈】CICD管道中的代码注入漏洞影响Google、Apache开源GitHub项目", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247495609&idx=1&sn=8db06764b675fd1a703a84b753dc5837&chksm=c0074225f770cb330379ff622acc3d75b3991f3a53fcf7958931a65c12f7cec4a6c8f84cff07&scene=58&subscene=0": "API NEWS | Bitbucket 服务器中的命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652499643&idx=1&sn=e3f3fc8f34444e02d6d98b03c2fd4218&chksm=f2584d08c52fc41efd5dc4fea1f9e9b9f2c35d8531c5c90d251bc8ae0b1aafd4b49eb3a1e714&scene=58&subscene=0": "雷神众测漏洞周报2022.9.05-2022.9.11", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247496393&idx=1&sn=2e9b49f125f3e1213066ef38c214c5eb&chksm=fa522777cd25ae61f3c4710f8d30f952e8c54e7fead74bb15b25a18d3958c3e80875c2c41598&scene=58&subscene=0": "Microsoft VPN远程代码执行漏洞分析1-CVE-2022-23252", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247495686&idx=1&sn=69667841f86fbf5f4743e7a76d5a42dd&chksm=c0075d9af770d48c7980bb487b21fea572848511a162f8e2a2f246f82b346fbcc4f69857971b&scene=58&subscene=0": "【技术干货】CVE-2022-22978 Spring-security 认证绕过漏洞分析和漏洞挖掘思考", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458469629&idx=3&sn=cb463369b466e7dc9945310ad7c5912b&chksm=b18e747786f9fd614cf809c09eccd5b78d9166b96d451f6f356ac22e37bb92c4ebea477f7899&scene=58&subscene=0": "修复两个零日、五个严重漏洞，微软本月累积更新发布", "https://mp.weixin.qq.com/s?__biz=MzU1MjgwNzc4Ng==&mid=2247503981&idx=1&sn=d273e181fa33ce870f0e361e118437cc&chksm=fbfeec68cc89657e8a48ce9e1243d8fc99b1d1301e4bd162df88de3f9631657681d6a181de17&scene=58&subscene=0": "新型漏洞威胁如何高效防御？9月15日19点腾讯安全专家带你揭秘", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496920&idx=1&sn=09fcc34d768b47dd47376d87691593e6&chksm=fe79d040c90e59569dc9862f0352e851df661195710ff9869713259eafbf2d9bb3bd583938f1&scene=58&subscene=0": "微软2022年9月补丁日多产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247500606&idx=1&sn=3459777890e655e63f94dcc8acd6b09c&chksm=ec9f1a4ddbe8935b4c47fc510f393c39499a7255451891eeae70f1fb60bae6d2902adecd901f&scene=58&subscene=0": "新型漏洞威胁如何高效防御？9月15日19点腾讯安全专家带你揭秘", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247487663&idx=2&sn=40d714ecfa2e2951f59b96b5b71e5e19&chksm=c2c647a4f5b1ceb28051d8ae201d907e13d85f0d2829aa6f4f76f84bd5475c697e1607869c4a&scene=58&subscene=0": "【安全更新】微软9月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247495845&idx=1&sn=757f3a4e7883d23f00831a7b433e85df&chksm=ce96bd9bf9e1348dfeddd178b9971831b97160ae40dfd0f6f98c2f86ceb3ba81ef52801647bf&scene=58&subscene=0": "【风险提示】天融信关于微软9月安全更新中重要漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247496409&idx=1&sn=dfb92078804e6eed5a061cec8c088faa&chksm=fa522767cd25ae712b0c3fdc33d582db11cd1a97585e0f3303b8071275b3db1546086c4ae8e7&scene=58&subscene=0": "PbootCMS历史漏洞分析 0x01", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652017030&idx=3&sn=3461a82798e3ec0a48b8bcc094819de2&chksm=f36fbdc6c41834d011a1661fa32e34d8e6f59376bc6b83b10d6188c6f423ae67541ba02b4ae0&scene=58&subscene=0": "【安全圈】Talos警告Lazarus黑客正利用Log4j漏洞入侵美国能源公司", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247513971&idx=1&sn=a96bbeda0b7a0d9df01ce667900321cd&chksm=ea948619dde30f0f90befd2e027230569d8ee5170c881a341474a921aa2ee684ec8bcd9c03d4&scene=58&subscene=0": "微软补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247513971&idx=2&sn=e4ccf27e2628af5d0016b4b5f9385131&chksm=ea948619dde30f0f97cc248ac9a1d2d7798573ed43876f19e4b1849ebe2ef2a02e8627f3a28a&scene=58&subscene=0": "趋势科技修复又一个已遭利用的Apex One漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247513988&idx=1&sn=512f50328bad39cab97a240c184bc7ce&chksm=ea9486eedde30ff8572a7444f4f52b015f9bfd058124dd3d017529d471f6db94e6474fea07d9&scene=58&subscene=0": "优步被黑，内部系统受陷，漏洞报告被盗", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247513988&idx=2&sn=d8e2aa2199ecfa383521908c1073c29b&chksm=ea9486eedde30ff81f3dd92049688847d298f700e6c02f09be03797789e7985c8a14915576a5&scene=58&subscene=0": "开源CMS TYPO3中存在XSS漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652017403&idx=5&sn=d7e367f0feb39def28f9fda5c7f90ac1&chksm=f36fbebbc41837add953d530035179dd90cf167ac95d69488c53bb7042884b53d812f33ba797&scene=58&subscene=0": "【安全圈】CISA 在其已知漏洞目录中又增加了 2 个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652499819&idx=1&sn=796b70af8f78e533b8336ad39c1c6f69&chksm=f2584cd8c52fc5cee0b21e61cbd7db0c63e6d11d7f51677dad213a8f3a340dba1754bd4bafe8&scene=58&subscene=0": "雷神众测漏洞周报2022.09.13-2022.09.18-4", "https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247496425&idx=1&sn=f0c3c882070605665fc0f700ea6c6e4c&chksm=fdde8c6ecaa905781a105137828a1c2e7b0705cb2260c76ffad5f997978197627fbecc0b4e36&scene=58&subscene=0": "揭秘以太坊 Vanity 生成器 Profanity 私钥破解漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247488155&idx=1&sn=afdbe0f1cb8e91c0517f25c74289b6cf&chksm=fad4cf8ccda3469a8804c422f609401e3875d0596aceaed715f119301d211207a315b6c358fb&scene=58&subscene=0": "CS4.5粗略预防CVE-2022-39197 XSS RCE", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514056&idx=1&sn=489ac21f2dc7107d9761186e3dd7d283&chksm=ea9486a2dde30fb4eafe6158ad59e258c50a18c960de4de7dea19ef5248f190232c7019708d1&scene=58&subscene=0": "Cobalt Strike 远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458471704&idx=1&sn=7374ced93133efd064bb0e7316cd8087&chksm=b18e7d9286f9f4840a35d6618f2fa625359b1095cd8ca266fc48bfc9576e2ff0d0835b9e4ef0&scene=58&subscene=0": "CVE-2014-1767提权漏洞学习笔记", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514082&idx=2&sn=a353a69d6d2c5a3f065ae133b67f4256&chksm=ea948688dde30f9e50183652d6391b23fd17af36c96c1ebcf3a7f40b0034288e9a22f16cbcd8&scene=58&subscene=0": "CISA提醒修复Zoho ManageEngine RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247491539&idx=2&sn=72b1c1dc318fa56cf706394a00b34692&chksm=fd772f1aca00a60c272a259645a67b793223989e3dfb851a7fe40540e55d3f07dc63d25990fb&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220411-20220417)", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651114266&idx=2&sn=d46cc7c19d763eff8878931ac9831377&chksm=bd147bc98a63f2df1b5c4b6b1a045c14c9123701b71e9f039b154fc398479f88e9985e2d8b5a&scene=58&subscene=0": "CNNVD通报Microsoft Windows Support Diagnostic Tool安全漏洞，23家安全厂商提供支持", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247494357&idx=1&sn=b4bd92c79d8a7812aeea975d6cda69c3&chksm=fa523f6bcd25b67dc4ebaac554c2b09719c95aca595aa852ead35aec080902dfcd00dab27e15&scene=58&subscene=0": "Windows UAF 漏洞CVE-2021-34486分析", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247529742&idx=4&sn=e4549250fb4e2e70d51067e4aeaf51eb&chksm=fa93c3cfcde44ad91277c0384c08cf1b9a358aa6326b6e368355617565fbfc3ac6e086a8e736&scene=58&subscene=0": "针对WordPress插件漏洞的攻击数量激增", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247548434&idx=1&sn=b3bf5f9241784ef67399678e53f24149&chksm=e915ee28de62673e936ee21e9ac95f10be78561eec0e8a7599ead8c6743641ee92040f00dd0a&scene=58&subscene=0": "小米手机可信执行环境安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTA4OTI5NA==&mid=2247500554&idx=1&sn=d5d6e289e3e03f249f99d92fd62f9f74&chksm=ce5de16bf92a687da706dd32f2b317d52cb08348ad01e6dc080e66be429f8a70cb0713eddd12&scene=58&subscene=0": "悟空crm漏洞新用", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247495884&idx=1&sn=82c81cafe16e8158f9c32923e14fce50&chksm=c0075d50f770d446333878ac4b6e889ff44d1913228ac3c95b802f7ece1622432785fd12d156&scene=58&subscene=0": "【技术干货】CVE-2022-34916 Apache Flume 远程代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkwNzIxMDUyNg==&mid=2247484915&idx=1&sn=82f13aaded590b6134c85928adb82888&chksm=c0ddff82f7aa769489b6d69baa3a2b26bf659e36e0df7191226e029165b5824409e6c916c25c&scene=58&subscene=0": "基于SBERT孪生网络的漏洞描述归一化", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652019240&idx=3&sn=6c1dd642eb051751f5d6a042205f1f26&chksm=f36fb668c4183f7e982b5c294ce06c789d467f25200814a0f123e730987b11f11c9f74cb7a52&scene=58&subscene=0": "【安全圈】微软称两个新的Exchange零日漏洞已受到主动攻击", "https://mp.weixin.qq.com/s?__biz=Mzg3NDU2MTg0Ng==&mid=2247493588&idx=1&sn=99c7a429bb57cb121f8c871814cea3d5&chksm=cecc4f8df9bbc69b5f5234417c06e2379a38490660699f9c5e6b9eabec241d3f8ec711b64556&scene=58&subscene=0": "GLPI htmLawedTest.php 远程命令执行漏洞 CVE-2022-35914", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458473853&idx=1&sn=cc6c0e7d75f02b4b34edad2bd0525349&chksm=b18e65f786f9ece19e09b9e261ff88f235ba67ffb4045b5e66669bcdc70a6ca550edd5e96ba9&scene=58&subscene=0": "2022 SDC 议题 | 国产智能网联汽车漏洞挖掘中的几个突破点", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514120&idx=1&sn=875f2a8038dd18f4393f68e4958721d8&chksm=ea948962dde3007476979db37549927911d0a40f66cd92734aac2576932e65c02e814b4d2292&scene=58&subscene=0": "微软证实称两个Exchange 0day 正遭在野利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514120&idx=2&sn=e9b6c1a8e128a9eee70880b0fc3cce94&chksm=ea948962dde300745ee1435a5b05de3016d29440d127c2f0dad65ea6b5b80bc83b6a301afaec&scene=58&subscene=0": "Fortinet：立即修复这个严重的认证绕过漏洞！", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514120&idx=3&sn=70433e477638c9c6b3ed925cbdb9cb76&chksm=ea948962dde300745c90d6d6c46d60584f699d5afcb625367d464f79bbbb7bf930be487ee4b9&scene=58&subscene=0": "JavaScript 沙箱 vm2修复远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514120&idx=4&sn=2326059ddf5ddf3a36ed6009c070e3fa&chksm=ea948962dde300745ca4da0f4fd5f0139c312973295e9d112ead5f8df77010a6fd05ed83ebd7&scene=58&subscene=0": "研究员发现 Akamai配置不当漏洞，获得4.6万美元奖励", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247551853&idx=2&sn=2d846fc97f966aa40945a159c1f271e8&chksm=e915db57de6252412a01a8e5d5cf42923de37f8a819c10ee3f09fd02228f71c5b64055dd4072&scene=58&subscene=0": "新的攻击活动利用了MICROSOFT EXCHANGE服务器上新的0 day RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458475098&idx=2&sn=a70d164c39ff37d3b983f97d4a94a61c&chksm=b18e6ad086f9e3c65c1fbb5cc0f1946976397406f7193f8d6e58f47e4867829294012ab75648&scene=58&subscene=0": "一个密码学漏洞导致一亿美元损失！某虚拟货币交易平台遭黑客攻击", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247551871&idx=1&sn=bd2a46a697628ef293d7b08dcd57ec5a&chksm=e915db45de625253c2e8df5bb617dfcaf97bcd79854f13adea280e6248da04ebdc780a89c860&scene=58&subscene=0": "研究人员在宜家智能照明系统中发现漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652020254&idx=3&sn=ce1a2a77f4185c5fd8b146e3b3cd790d&chksm=f36fb25ec4183b4830c7a78a61ce39ec4333a9dde92466c334547374640ede9f58283c218f67&scene=58&subscene=0": "【安全圈】macOS Archive 工具漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657044860&idx=1&sn=2ff650583175cf79e13410fbea2b633f&chksm=803fa9a2b74820b48f19d2b405d13ad5b5d149bf325eb88067a05be827a036e6211105d866c2&scene=58&subscene=0": "【漏洞预警】Fortinet多个产品身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458475529&idx=1&sn=e671849b648ae1495d898f2f6d2ce96a&chksm=b18e6c8386f9e5950a273cd6d31bda88a81e428b8a93489476c57810e5c4f0a5262d0d989c48&scene=58&subscene=0": "2022 SDC 议题 | 从后门到漏洞——智能设备私有协议中的安全问题", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247552045&idx=1&sn=97beaa36cf2d426426e8f71be82014ee&chksm=e915dc17de6255012ef33cb9f2dd96090317f048d4650f6f009322c007a6100f330393939bd4&scene=58&subscene=0": "【技术原创】Sophos XG漏洞调试环境搭建", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247506309&idx=2&sn=5855170cbea5718ba41bd7d0f4270ccd&chksm=ebfa9ea5dc8d17b35ad83875cd8d48130d3b7923fabc75eb83870f80f843543ef5d1496a9b0e&scene=58&subscene=0": "这个VMware高危漏洞已发现超一年，官方至今仍未修复", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247531881&idx=3&sn=431fbbfdd6d4289044979c28af52d62a&chksm=fa93cba8cde442bee88d05d015a39bcc32594e774108ceff530298c9ebcf698d371be8636943&scene=58&subscene=0": "游戏机黑客披露了“实际上无法修补”的PS4∕PS5 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514198&idx=2&sn=7355930428f40ec6edfaaa22d7aee746&chksm=ea94893cdde3002ae09057a6941995beea58bffa9829737ad255d7b107096c28655b9bb0dfb1&scene=58&subscene=0": "Aruba 修复EdgeConnect 中的严重RCE和认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247496915&idx=1&sn=f41ce8a944db1f5895aacb5bfdd94797&chksm=eaa97cf3dddef5e579d473cc823c5e15090bcf64d77a4f3460e97bc9c421edfd2070e52184a6&scene=58&subscene=0": "重温OMI：分析CVE-2022-29149，Azure OMI中的权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247552091&idx=2&sn=445cd3cc9b5c1d062ed8c6c4a99dcfc4&chksm=e915dc61de6255774a3e4eb5b6e47ebc8f30d7aaac158cde1aeb35ef18677cfd20d370b07936&scene=58&subscene=0": "VM2远程代码执行漏洞曝光", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514220&idx=1&sn=750a288be57eb8452af469145908204b&chksm=ea948906dde3001079435980a74be8cd2323e4db3b1658dd30655296b28c8fa54cacfd9002d3&scene=58&subscene=0": "奇安信代码安全实验室研究成果入选Black Hat和POC安全大会议题", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458477025&idx=2&sn=c1d30434d9df949a29f0acb219c1214a&chksm=b18e516b86f9d87d7ab1131d064b815b4057d53d80f43a64d033635efc6d40be4aa915335daf&scene=58&subscene=0": "CVE-2021-22555_Netfilter堆溢出提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247486693&idx=1&sn=fa9c3e02922c098748e9f5aeef4b7b36&chksm=fa5aa208cd2d2b1e8fde199fe6520edef65d69731b7b2f62350d9045d2a26f12446984495746&scene=58&subscene=0": "推荐 | 基于Roslyn实现C#脚本代码执行", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247496080&idx=1&sn=0c8c93506c6b7c979228b89ccc50ff3e&chksm=c0075c0cf770d51a8092d98e8bc2094aefa9a547b0928ad085e10457676fa57de12e22368d99&scene=58&subscene=0": "【技术干货】CVE-2022-25237 Bonitasoft Platform RCE漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652021173&idx=1&sn=7718a1c0580e5003e4a8ff222a1c3101&chksm=f36f8df5c41804e3960c4adc2e697c26ce4b1b97520b531694d69334950ea509a07313af7162&scene=58&subscene=0": "【安全圈】利用平台漏洞“薅羊毛”被判刑真的并不冤", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657044865&idx=1&sn=ff932955d7bcf4f68b03b758ba4913ff&chksm=803fa95fb7482049e6d89a80ed79269bb84b92c6878d51e85b8ec8c05683cab94aefe26c87bd&scene=58&subscene=0": "【漏洞预警】Apache Dubbo Hession反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652021860&idx=1&sn=9d4de6b51a485c0b181f8ce8fd53ee1b&chksm=f36f8824c41801329bf0778a74c3fafc27058e9fd28a0d041ea685d913c3c6a7a20960565617&scene=58&subscene=0": "【安全圈】团伙利用游戏漏洞倒卖虚拟货币和道具被判刑！", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247496153&idx=1&sn=c7b6380da70f19597139eccbc3d5ece4&chksm=c0075c45f770d5531554ded20d88f4fb281938d1d64c9766ef97c53de7483945cab03c773fa7&scene=58&subscene=0": "【技术干货】CVE-2022-41852 Apache Commons Jxpath命令执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247532094&idx=1&sn=205506e690121d4569b673e7a408d989&chksm=c1e9f26ff69e7b793d012dfd60aa8a00d4624a8ea2ec7a4fff14aa26936cd03477a7f12dc95d&scene=58&subscene=0": "OPC UA .NET Standard Stack可信应用认证绕过漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247532214&idx=1&sn=3f16187309ec36daaa844062ec769cb2&chksm=fa93c877cde441616fda0e7930ed46bdd8227679670fe12f6824c182169be2ce232ddab464b4&scene=58&subscene=0": "原创 | OPC UA .NET Standard Stack可信应用认证绕过漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514319&idx=1&sn=10f6c5afa8be65b7ccac62c9ab73645c&chksm=ea9489a5dde300b312a93ec52a321f835baed001465326883dd6cdbbe70fecd5b94b1b8000c7&scene=58&subscene=0": "苹果修复已遭利用的第9枚0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514319&idx=2&sn=dcb724416b73a279ecc84b431bf4b120&chksm=ea9489a5dde300b3db050905faed63fce50f5ac9036956a0592ecb89ab79e60230ab4419c6a6&scene=58&subscene=0": "HyperSQL数据库存在严重漏洞，可导致RCE后果", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514319&idx=3&sn=6dd16dc42aa628d2d112e9e0f6512428&chksm=ea9489a5dde300b3d2d064af27d6ad29e9592f0c42842c936f2cff8d04443759b19d1a8545b5&scene=58&subscene=0": "一个值1万美元奖励的GitHub 登录欺骗漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514319&idx=4&sn=bb1d931819cef01583083f9eddee4a6d&chksm=ea9489a5dde300b349e85d3bf53d19d161712a5ac99dc81cf9fa3b09e54426e9bedd529d9889&scene=58&subscene=0": "Abode 家庭安全包存在多个严重漏洞，可导致黑客劫持和禁用摄像头", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247496852&idx=1&sn=84850e657a6a4b987a6989f1917b95e5&chksm=cfca9780f8bd1e969cde4f57453d79f7bc3f1abe5d1fadecb8d905d2e58b5ee86964cdb06299&scene=58&subscene=0": "主机提权 | 浅析sudo堆缓冲区溢出漏洞CVE-2021-3156", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458479751&idx=2&sn=d8815a87725c397271c5d6ee9447a1e0&chksm=b18e5c0d86f9d51b5b87bdfbb7a895e5f5887457e614f23379d8e09755492f7fd1c743ce22d9&scene=58&subscene=0": "CVE-2022-23613复现与漏洞利用可能性尝试", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497009&idx=1&sn=25cd2513f09cad43f422298f6a7f8615&chksm=fe79d1a9c90e58bfbde3a438e590e6ca4dda5926661b2f5192e6a7211892524dfc7e626c5a7f&scene=58&subscene=0": "SQLite拒绝服务漏洞(CVE-2022-35737)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652022381&idx=3&sn=d2bae64116e1ce9e3718607b683615a4&chksm=f36f8a2dc418033b8be6bc5ad4499c98a7e24cee411d21ba4a616b25f494b90b8d1cb50c096b&scene=58&subscene=0": "【安全圈】苹果曝严重漏洞，可窃听用户与Siri对话", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652022381&idx=5&sn=4caa05eb4b770d746b59e3aa33929523&chksm=f36f8a2dc418033bab6ea2bd74c0f9efbbb315343ed130a0f32b40da6eadf50dcd7c574a1395&scene=58&subscene=0": "【安全圈】因严重 OpenSSL 漏洞，Fedora 37 延迟至 11 月中旬发布", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247552901&idx=1&sn=6b508f55415007ada6193d9eaf7aa281&chksm=e915dfbfde6256a94aca316a2fe2d2ef07dacd7ab5e3b70f879889e99d897941e353af87c316&scene=58&subscene=0": "成千上万的GitHub代码库分发含有恶意软件的虚假PoC漏洞利用代码", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651119544&idx=2&sn=58f1b3191fba48554bc6a88f544474c2&chksm=bd146f6b8a63e67d1e3ae631a4351d62fc3f1a48012e224c3df83ae6dd91431dd19928e39e95&scene=58&subscene=0": "安全头条 | 国务院：全面加强网络安全和数据安全保护；工信部印发《网络产品安全漏洞收集平台备案管理办法》", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652500315&idx=1&sn=957328c8c6e83d1803c3066f2d18f124&chksm=f25852e8c52fdbfef23fafb6983dbd87669ace34d06e7555bf0cc9fe71a64892362cb2c0c8a9&scene=58&subscene=0": "雷神众测漏洞周报2022.10.24-2022.10.30", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247492560&idx=1&sn=c8c382c5e8c734a6064669177e8a4ddb&chksm=fd74d319ca035a0fc36fa711f55e3ebdb8688edac5951ff0d22c1fc3730cda112048c9fc2ab4&scene=58&subscene=0": "CNVD漏洞周报2022年第43期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247492560&idx=2&sn=034896b9c76f87d5290b97d18694d2ed&chksm=fd74d319ca035a0f707fde40a6a53cec1afef22b0e31c12b189f1b4620f8f43c92b897cf1af3&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20221024-20221030)", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247496274&idx=1&sn=5c6544a72b9eed690e3a73c2fb027c7c&chksm=c0075fcef770d6d8054d952a01dcff84dfa075b6ac36186f4bc7311cfb88357186f5de273068&scene=58&subscene=0": "【技术干货】CVE-2021-3019 Lanproxy 目录遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652022775&idx=2&sn=2cde490875cfc601f506ea1ccff199be&chksm=f36f8bb7c41802a191d7958f63e4de6fb9b1745a714157bf0dfd64ef28682e2343d10a6f7dbe&scene=58&subscene=0": "【安全圈】工信部印发《网络产品安全漏洞收集平台备案管理办法》", "https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657163463&idx=1&sn=d2b540f40e9448b5e49f52cee44d56a4&chksm=f1d4ea22c6a363344226769249dc154ffa1b3d693881790d42914bad9aa14db057f425ff7956&scene=58&subscene=0": "GoEXP WANTED 3", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247506559&idx=2&sn=d6c171a7788894e50fb3da15a958b053&chksm=ebfa9d5fdc8d1449f4cd0b01e6ce464182d60b292f3fc9509a2c540bca6a1b749e763bbe94e5&scene=58&subscene=0": "已复现！OpenSSL多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg4NTY0MDg1Mg==&mid=2247484870&idx=1&sn=01da931f28c3f3478c32a6aded0ade01&chksm=cfa49e3df8d3172bdad20a1dbe5678e617d98b8c5ff31708c202b1581694a2fa38b210bbfc9b&scene=58&subscene=0": "GoEXP WANTED 3", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491547&idx=1&sn=a0e2e2ad607e7a06734348103cd5ba98&chksm=fe251adac95293cce380de64f37642eb98ceb7f3c50ce93ae5468eca262afdb391e64bb27683&scene=58&subscene=0": "CVE-2022-3602∕3786：OpenSSL缓冲区溢出漏洞通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458482303&idx=5&sn=b2775462c2b19ddeef0b7c88acc2b0e8&chksm=b18e46f586f9cfe3bc6ccc22d5cb59dfa568714ed46abf09f8e44802f11387b423d7419cf661&scene=58&subscene=0": "精品新课！Windows内核漏洞分析与EXP编写技巧", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652500440&idx=1&sn=cb8574e8db24451ab305b860167b24d6&chksm=f258526bc52fdb7d1be711c964787f47fa3a291f3c73ab6e1587fbd05589b8a1accac47ea394&scene=58&subscene=0": "CVE-2022-30190分析", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247532525&idx=2&sn=7bce76321d0fd4bec104efd51ae396eb&chksm=fa93c92ccde4403adc8e3f4f7c6d9c8916227aa1db8c490845fdb2ec2c620292de6d8be633bb&scene=58&subscene=0": "工信部发布《网络产品安全漏洞收集平台备案管理办法》", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247532525&idx=4&sn=9d416b02136309790d831399243a6351&chksm=fa93c92ccde4403a1ef9284fb06ce64b4557ad09c9c1f6aa43b9f7681605c598d2c28f0f793f&scene=58&subscene=0": "GitHub高危漏洞可劫持其他用户的库", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247515331&idx=1&sn=d30b12490438ac177fe8cfc9347fc3bf&chksm=ce4637d3f931bec5264bdb33a398d0e4bf7c38d7a6b8aae071704c4e95f7b80b7f245a596059&scene=58&subscene=0": "【漏洞通告】Spring Security身份认证绕过漏洞CVE-2022-31692", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458482822&idx=1&sn=13f269f0ee613726295c941a895fd3ad&chksm=b18e480c86f9c11a3daab021795a44acc40cbb38c4ffa76cf30c057095e3210c348762631e98&scene=58&subscene=0": "2022 SDC 议题回顾 | 国产智能网联汽车漏洞挖掘中的几个突破点", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247483993&idx=1&sn=39ceb1de3ef26623e9da33d247601963&chksm=c2b1002ff5c68939a59c407373cdf440bdc4bb4305f612ae464ed12419caff83e2a07be74138&scene=58&subscene=0": "腾讯安全威胁情报中心推出2022年9月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514414&idx=3&sn=dd3d82b3a03b5b06090e5bc38014da44&chksm=ea948844dde301521b0cb907cb7dc3aadabd0e9a46e67d5b3855a850f580c0124798fa2504ec&scene=58&subscene=0": "CISA：注意这三个工控系统软件中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247532489&idx=4&sn=d6c6237a6da5f631eb34cf0d3e853e15&chksm=c1e9f398f69e7a8e62e1d5339328ff19b972db72e267967ea2297f578af1a3d0531f51cd7c87&scene=58&subscene=0": "CISA警告3个工控软件系统存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247553459&idx=3&sn=9bedb5923c780ad7a71f336c16fbdcf1&chksm=e915c189de62489fe5262730f558f97117c4a4e809c879373d03a9c83a4f09edf7c3b855fe7a&scene=58&subscene=0": "CosMiss：Azure Cosmos DB Notebooks远程代码执行漏洞详解", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247515418&idx=1&sn=4a7140509130770f1bae19de2324dca2&chksm=ce46360af931bf1c68854c563fd77a32376a2c2ba54f9d758b9fc6ba6b0ef1403d15d0ffb1e6&scene=58&subscene=0": "【漏洞通告】微软补丁日安全通告|11月份", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247511196&idx=1&sn=fe076996b55c5fe98a036c98e2f17eed&chksm=eb7072a3dc07fbb5ea57a0ec92e27d45669751c7dd23d5fb200ff389f9d756bfc2453c331f15&scene=58&subscene=0": "2022-11微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247497225&idx=1&sn=0d968065dbf9532f264e69571bb9faf8&chksm=eaa97e29dddef73fefa216287db7c08532b8879eab76641d0afba705ae00cf0d858cadf21174&scene=58&subscene=0": "Azure Cosmos DB Notebook 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497064&idx=1&sn=582a952bc48b2a7138c0807e7599b9a2&chksm=fe79d1f0c90e58e6581d2b98d276a44e5d30678f49b0122c1f519acf9a2f0180c8d2cae31896&scene=58&subscene=0": "微软2022年11月补丁日多产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497064&idx=2&sn=a9ce5bbf48d86e3c3ba5ea46d2ccd079&chksm=fe79d1f0c90e58e6f317cbe32759a4a97ed60854ac6746fbb40d4f0f207404a7c88c6c836093&scene=58&subscene=0": "Microsoft Exchange Server多个0Day漏洞安全风险通告第六次更新", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247495945&idx=1&sn=2d84f5b73db5d8f6f3d8054bcc2c616d&chksm=ce96bc37f9e1352118766f55800747314e997c418e2c2000dcff852728d840a287e7768f14ee&scene=58&subscene=0": "【风险提示】天融信关于微软11月安全更新中重要漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247532618&idx=4&sn=7e7aa6211704357eaf343bdb1644e3b5&chksm=c1e9cc1bf69e450d6305187bd645dafb1893f26ab1eb1fd642607017bbf399bab9d7c4570462&scene=58&subscene=0": "最新披露！三星手机组件发现三个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497084&idx=1&sn=fc4a7ba050faaa9a68cdb0f4966cee0a&chksm=fe79d1e4c90e58f2bae37d494596f1ef1361427b8b825743c4077ab1330954c6f1d455f74274&scene=58&subscene=0": "YApi命令执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650174812&idx=1&sn=ba9cbf3e1a073d9c787d840f4af2e7f1&chksm=f4488ee0c33f07f688256918783ef2de6e470f87d471647e9db941d8bc19f315c56705cbd3f7&scene=58&subscene=0": "速修！开源API接口管理平台YApi爆高危漏洞（附补丁链接）", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247553649&idx=1&sn=d14f4ba92f85e724d9482ecdb12de308&chksm=e915c24bde624b5debd29ad82abb67d68f78d004a062f8f49d9ec433c271b264cc4323490b8f&scene=58&subscene=0": "三星0day漏洞被用于监控活动", "https://mp.weixin.qq.com/s?__biz=MzI4Mzc0MTI0Mw==&mid=2247495372&idx=1&sn=4cb544c359426734e0bb5f77918384de&chksm=eb84b398dcf33a8e9e2713d42439ddee7c71d757bba13401aa7e368eb9289ee7a63733fb9f9e&scene=58&subscene=0": "赠书福利 | 《物联网安全漏洞挖掘实战》", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247532672&idx=2&sn=f524abe156b9a9003f21688a56deeb9c&chksm=fa93f641cde47f5770573216781edafe1c78b5f58231ef49352ba5b5937cc20caae83b4e5126&scene=58&subscene=0": "漏洞管理十大度量指标", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247515489&idx=1&sn=f208a84999443e30c783de0d35733506&chksm=ce463671f931bf67dcdaf64f5af9e851edb97bc1cbe69b54752d58eb8cd56f2e44a9343b0e17&scene=58&subscene=0": "首届中国eBPF大会分享 | 基于eBPF的内核漏洞检测实践", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652024283&idx=2&sn=8d503685003568764b705d4552b869ed&chksm=f36f819bc418088d81845fc2faf65cc5aa086b2f7da2773cea9b42088f4d7dde2ba7531b3e8f&scene=58&subscene=0": "【安全圈】三星手机组件发现三个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458483697&idx=3&sn=56a74f29fe0266ac98f5568d10cd2d1a&chksm=b18e4b7b86f9c26de866c908f8b255a0e2f92936dbb26439738f543fef2d61a63a479443983b&scene=58&subscene=0": "安全研究员无意间发现谷歌手机一个锁屏绕过漏洞，收获七万美元赏金", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458483697&idx=4&sn=6c5d49f550285631c32600351a9fe1f8&chksm=b18e4b7b86f9c26dc2f394392117c9e76c2ca1381843ab1f8c5e9e7e565154294db7ce01f53d&scene=58&subscene=0": "精品好课！《Windows内核漏洞分析与EXP编写技巧》", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650965955&idx=1&sn=ffbddba91498541e48f1a86b8069e60e&chksm=8079c5f1b70e4ce75b9d45ef86993625962961b1338881acdedc7d7d59063bf5a5e5c93e2970&scene=58&subscene=0": "404星链计划 | Pocsuite3、veinmind-tools、afrog 版本更新", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652024390&idx=3&sn=647b4c1f2c155a44ae22f05502c86521&chksm=f36f8206c4180b104f83a68039d989ec133a6ad2c325f86388ced4da5aa445ff84da20c02379&scene=58&subscene=0": "【安全圈】全球最大BT网站曝安全漏洞400万用户信息泄露", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491579&idx=1&sn=4e4b1ca4a1c417f42a38d045710635e2&chksm=fe251afac95293ecfa4adb66d7b89483782aab79c22e7a4aae5b6581e239543ff50fc5516795&scene=58&subscene=0": "CVE-2022-27510：Citrix Gateway∕ADC身份认证绕过漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247553752&idx=2&sn=e4018f4129fcb9921f469dbfdf73aa2e&chksm=e915c2e2de624bf47c59126095f4069443a6f3e108b982d3733600818e678de4101e9d2812e9&scene=58&subscene=0": "价值7万美元的谷歌Pixel手机锁屏绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514661&idx=1&sn=ed03e7c7fed936ce5c82e4583a0df074&chksm=ea948b4fdde302593a589756559c66f23db2dff4547b4b3a335485b1a65abafd877d7bc5310a&scene=58&subscene=0": "F5 多款产品中存在多个RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514661&idx=2&sn=059d03a2384d5d57513f1e02a69f1f4d&chksm=ea948b4fdde3025977bec54f5099ef0554974ed2c2a16b192b61bd98eb58875466740d94e666&scene=58&subscene=0": "美国政府：伊朗黑客利用Log4Shell 漏洞攻陷联邦机构", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247500668&idx=1&sn=2aa462502ebb29059cf6f2f7e3698d02&chksm=ec9f1a0fdbe89319c61e01bc3bdd5dc8e19bdcc03c1fe8a4c406b1edc950748399c9ffcc4643&scene=58&subscene=0": "腾讯安全威胁情报中心推出2022年10月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247532755&idx=3&sn=300cb893ef8bed20ca0882362c9e06bf&chksm=fa93f612cde47f0424c8ac6c11c81e6b0696051b2c604ec7585d7af32b29f5f6ce6aad01992b&scene=58&subscene=0": "马斯克执掌推特三周后，双因素身份认证出现漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247553953&idx=1&sn=1bb691ecd45e87668ba75673e17c1e0f&chksm=e915c39bde624a8d17aa3f4a5f8cfbda701d441da884fcfd62dd547f2a8b092d1505dfe15587&scene=58&subscene=0": "Pcspooof：新漏洞影响航天器和飞机使用的网络技术", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652500626&idx=1&sn=9d8fdcef903dfd13a79cd4c8c1e318e8&chksm=f2585121c52fd837fb89cd4248f4ae7f7b72bfeb8d9727a8c8e0005e4613e92ad9378037cceb&scene=58&subscene=0": "雷神众测漏洞周报2022.11.14-2022.11.20", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247497573&idx=1&sn=497d359ecd88e851b8824180a0ec5256&chksm=fa5222dbcd25abcd961a9aa09376e304d0ea62650887931afb070d3b423ad9ff0ab58d65567d&scene=58&subscene=0": "0Click RCE：攻击VMWare Workspace ONE Access", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650175034&idx=1&sn=e409660353cc61a0e6f4c5a3369eeb11&chksm=f4488d86c33f049066b9b734f4b5fc12ccf26e67fcf88d4547cf973c83715a5fd79b5e009ea9&scene=58&subscene=0": "速修！Smartbi软件高危命令执行漏洞，影响超4000家企业", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247515674&idx=1&sn=7ef0eeef29d2b1246c764ffd34f917dc&chksm=ce46350af931bc1c4bf841fa2a80d41c87fd91e6b2796da1198bfc7e66412e1529f9d83040cd&scene=58&subscene=0": "【漏洞通告】Atlassian Bitbucket Server and Data Center 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497113&idx=1&sn=76113d2d01432b6eb1b383fd9123b857&chksm=fe79d101c90e5817e6503ca34cff483174d26805c184492edf297d314c1c91f2316edbe96f4c&scene=58&subscene=0": "Google Chrome GPU堆溢出漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247496519&idx=1&sn=1ba1f0896f7dd78c5707ac5460c856f1&chksm=c0075edbf770d7cd08317656491cd31e92712cc7eaaf8c713a12509ab3e80ccffdffbd20ed8a&scene=58&subscene=0": "【技术干货】CVE-2022-42889 Apache Commons Text RCE漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514771&idx=2&sn=82231141505568820fbd6a3f66546680&chksm=ea948bf9dde302ef5d8114281a47daf92a67743ea8eba6632472a813a8d656b261c788586d1e&scene=58&subscene=0": "谷歌紧急修复已遭利用的Chrome 0day", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247554374&idx=2&sn=523ea6c8810bf78b43d6a05166888f53&chksm=e915c57cde624c6a17a59110f941582ca6a4bca041e3f0e7b280b82cf6247c1a482f2cdc6fc0&scene=58&subscene=0": "新攻击利用Windows安全绕过 0 day 漏洞投放恶意软件", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247497643&idx=1&sn=b57d74a8d6875c4a970922b35346ac69&chksm=fa522215cd25ab03f5421436165d5085e6f2c2b2774e9da3ea8270b2f3a749868474329b00df&scene=58&subscene=0": "利用solidity与EVM本身的漏洞进行攻击（上）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652026116&idx=4&sn=732180dc0d04439122b38983b1496ac7&chksm=f36f9944c418105244f8b19679a11b5c658f7f64a1c33db06c728bbd66676ba0e684838bb494&scene=58&subscene=0": "【安全圈】黑客正在销售最新Fortinet漏洞的访问方式", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514853&idx=1&sn=10d64bdf4f72858d7013dd2cff5fe37e&chksm=ea948b8fdde30299e8387c194b6f4ea7215218284949ef26ba92e2bee711fe42c1b49615e283&scene=58&subscene=0": "热门Java 框架Quarkus中存在严重的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514853&idx=2&sn=aa7edf1c528ee030b826738933440806&chksm=ea948b8fdde3029958ce600f79ba636a4b31e5e7bd11dbda3eca72604cd5ebe9f8c54899f257&scene=58&subscene=0": "英伟达发布 GPU 驱动更新，修复25个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514853&idx=4&sn=f887c2246bde0615a6afcc197112e9a8&chksm=ea948b8fdde30299897ba08d1d9780bac245ae05c8b213f63334fa58fc54924eb5c5e95c5bac&scene=58&subscene=0": "德企Festo 和 CODESYS 的OT产品受3个漏洞影响，可导致供应链攻击", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247532999&idx=2&sn=72d37dbdeb4d2742b0442b6155d37740&chksm=c1e9cd96f69e4480371336b17b1c1884751ec266185c54fcbac1ce79528d998bbbc60455509d&scene=58&subscene=0": "美国CISA最新收录高危漏洞，系与甲骨文有关", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247533031&idx=3&sn=923a2ac91f88b70444b51f2bc70be139&chksm=fa93f726cde47e30f3f8f15fa6feb7405f6ae07962685e259dcc221cc04050fb8bbf1d64bfd1&scene=58&subscene=0": "停用UEFI安全启动，宏碁多款电脑存在严重安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247554584&idx=3&sn=352271b528745f4d6201e246b00917ac&chksm=e915c622de624f34d70c5f5b07a0e35ec1b57a1c91874d8a299e3af90bd3e9894434b0735a25&scene=58&subscene=0": "Chrome、Windows Defender和Firefox的0-day漏洞统统与西班牙一家商业IT公司有关联", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491631&idx=1&sn=23f6b889fb044adec5d046573adfb0c9&chksm=fe26e52ec9516c3893d2f61519c471f06c71fc7f6bec0eb8cc26efe21a1899f62f1ab3d93344&scene=58&subscene=0": "CVE-2022-4262：Google Chrome V8类型混淆漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652500801&idx=1&sn=d69df6a6377c2f9eafae2d2355fb3e69&chksm=f25850f2c52fd9e4e6a9dea2d46f42e0505b92180cf620453f09d05526a079d6c7f7cf563f00&scene=58&subscene=0": "雷神众测漏洞周报2022.11.28-2022.12.4", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247533101&idx=5&sn=9ba36bcd6e768076a0dda7474e9abc0f&chksm=c1e9ce7cf69e476a093b7f34c83e5bc04f50c296eb2b3080f5611264a9390779c8a2d5363641&scene=58&subscene=0": "App漏洞可远程解锁启动汽车，影响现代、捷尼赛思汽车", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247492722&idx=1&sn=fedfdcec9a3f970b243c317de610b24b&chksm=fd74d4bbca035dada3dff95c3ce06c0a1f1d14f9f97a94d89c5699829ea8391bf5f80684571a&scene=58&subscene=0": "CNVD漏洞周报2022年第48期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247492722&idx=2&sn=fb5839b2138a86dcc952bcd6c80ded02&chksm=fd74d4bbca035dad6a27a210b44a6a1d89dfbc05d4de536e2589417a48f39c494885c2272d81&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20221128-20221204)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458486646&idx=1&sn=a5fc19d6a8405526da6127ff2e147b3b&chksm=b18eb7fc86f93eea6a210b8071e8c207de283e3b8270c54e8841cacd4803361bae5ee77b2d7d&scene=58&subscene=0": "新课预售！系统0day安全- 二进制漏洞攻防，赋能企业安全", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497162&idx=1&sn=8a432eb3310578a28011180ff782c015&chksm=fe79d152c90e58444a2c2cfebba23556c9754d53db9c401d2ae356d7ffb88b46b63beda9d5d2&scene=58&subscene=0": "Cacti命令执行漏洞(CVE-2022-46169)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247507000&idx=2&sn=60e3981328a12fd29dc99a957d181af7&chksm=ebfa9b18dc8d120e1364a0af9b45f7b37458a4684159574d80810f151b8061549e77b880ddf6&scene=58&subscene=0": "能写漏洞PoC？网红人工智能ChatGPT的十大妙用", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247507000&idx=3&sn=a34992b3108b2b846bc685ecb1742aca&chksm=ebfa9b18dc8d120e9b3222c33e188c204237930dc44b065d83a7f987ed07f38a7bb91214095e&scene=58&subscene=0": "Cacti命令执行漏洞 (CVE-2022-46169) 安全通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514911&idx=2&sn=a07e3f6f6557db4b5408f3f337728a4c&chksm=ea948a75dde3036344fe266d8db84bdd445070bc070dfd60d49eaeb5317d40dc0f3cb80d4e0a&scene=58&subscene=0": "多个BMC供应链漏洞现身，数十家厂商生产的服务器受影响", "https://mp.weixin.qq.com/s?__biz=Mzg2NTA4OTI5NA==&mid=2247504035&idx=1&sn=84908b67217a82438cd8f506fefcc839&chksm=ce5df2c2f92a7bd4610396f7707d667fb2920bf8cf8fdbe6440492b1048370df037fee7fa578&scene=58&subscene=0": "APP漏洞挖掘之某款APP开发商通用漏洞的挖掘", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045100&idx=1&sn=31586f16a73e73b8a9fb966398823104&chksm=803faab2b74823a4397617124337a4ee2c6bbdff62df4fa6b3d1d5674450170ca74de8fc2011&scene=58&subscene=0": "【漏洞预警】Google Chrome V8类型混淆漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491641&idx=1&sn=285394a64d4fd977f649d3dd9c12c8a8&chksm=fe26e538c9516c2e25a5f0f8a22c7a2cce6066f09495541fa4aa24bb19515e4457c8be79c3c3&scene=58&subscene=0": "CVE-2022-46169：Cacti命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247497693&idx=1&sn=01aa123b0f4d0555852d9879c04af0c2&chksm=973ac4bfa04d4da90c19842493ca550086ffed405c81f0edfab9a0fdce42886c02fa0e13b786&scene=58&subscene=0": "CNVD漏洞周报2022年第48期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247497693&idx=2&sn=118e7dc8d2495658173f51c8f43a7d66&chksm=973ac4bfa04d4da907be6a8a97f28bd7786145e4f279ccba33fcd2e9c1ce32c86431f56e5c21&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20221128-20221204)", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247533194&idx=3&sn=5aff8415158698c181468f65fd30f3bb&chksm=fa93f44bcde47d5dd8d2ae651793b0189675dd7aaadde80a6d1d585389e6c45dbfb4c9dbad07&scene=58&subscene=0": "AMD、ARM、HPE、戴尔等15家服务器厂商产品曝出严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247498726&idx=1&sn=a3230d5676fae8c8b9e5c65ebe959974&chksm=cfca98f2f8bd11e4d9272df3f0a45408d63956f9566f52f1a4e5718cb866f51f2b91b9ebac4b&scene=58&subscene=0": "ThinkPHP开发框架曝高危漏洞，需紧急修复！", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247554835&idx=1&sn=aa14159337001f1d807d64f69660a760&chksm=e915c729de624e3f5dfeb9d3e95242df04a030c39b809f4942fb1d944f16bcbeada489173390&scene=58&subscene=0": "CVE-2022-23093：ping漏洞影响FreeBSD系统", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247487885&idx=1&sn=58d14a5a85ba194e4fbde5cebd91b1b2&chksm=c2c64686f5b1cf90623db665cdddf6b71670130a643c839a3c4e33c5cf4787c05079dee43cd2&scene=58&subscene=0": "【漏洞通告】ThinkPHP远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649781006&idx=1&sn=b2ff8f31e73c5f920dabda206f70b0f3&chksm=88934361bfe4ca777feaceb3be5fe1f80617eeaa505ec2d2c410f907fe14bbf0dd8fbcc062c4&scene=58&subscene=0": "【技术分享】针对比特币钱包App的三种漏洞攻击与对策", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247493948&idx=1&sn=0f7bb04084bf95d09ac771a0a9f9dae1&chksm=e84c4fe3df3bc6f5e25574fd707bb56ce65c7f4678c1738501798cdc5f4eea0a52b5ef98c18a&scene=58&subscene=0": "【公益译文】了解、预防、修复：开源漏洞讨论框架", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491657&idx=1&sn=5ea289ea07f728f6a0daa10fc9b6d558&chksm=fe26e548c9516c5ed714bed387f73978b272fd0e2da2ff77dde3af89c57a1717e2c548b83151&scene=58&subscene=0": "2022-12 补丁日: 微软多个漏洞安全更新通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458488972&idx=1&sn=de0687bfa9fd03296e051372c3f38b65&chksm=b18ea00686f9291034706473da2cd2e85759dcedca31e322d4925ee5064a8a795b67d6acf2a1&scene=58&subscene=0": "CVE-2017-14627栈溢出漏洞及exploit的调试与分析", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247533470&idx=3&sn=f63b902421452faf93a29151d0aa018b&chksm=fa93f55fcde47c490f3bf02a6545daa5f0c593d614deb358da2ffc6e89bd8303b5a5cddfa3a1&scene=58&subscene=0": "微软发现可以绕过安全审查，开启Mac电脑大门的恶意漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458489310&idx=2&sn=65be16f07e07cab5d29111dbd406d3ec&chksm=b18ea15486f928428114713f06dc4016836f052e13c456507ecca59f74de756e19f7aa224f80&scene=58&subscene=0": "Intel CPU漏洞研究，为你深入详解三个史诗级的芯片漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652501026&idx=1&sn=d632f5ea585a733c18d46106c96df433&chksm=f2585791c52fde877a13e73a53496dbb27a041ae57bec8996d78984746aae061ca07068a9d32&scene=58&subscene=0": "雷神众测漏洞周报2022.12.19-2022.12.25", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515107&idx=1&sn=47eca1a57ee9fd7e5cb0b36080483ab3&chksm=ea948a89dde3039f969c6fe7e6e1558310d44cc7a2c51cd0e7f4b2aed00e0d79952a523ded02&scene=58&subscene=0": "【已复现】Microsoft Exchange Server \"OWASSRF\" 漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247533487&idx=3&sn=dd3652a2a41151e1db7b674816c777e5&chksm=c1e9cffef69e46e8369bb03f84136131d0798dbf7b66a069c560b29b21073927545a96dcd6f2&scene=58&subscene=0": "macOS漏洞可绕过安全检查", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491691&idx=1&sn=8b0b07d00988d9ae5e72a1ef13673008&chksm=fe26e56ac9516c7cd9ec4328ac3f95facce83c04b012f31417dc90e81f2decdf3238892d797d&scene=58&subscene=0": "CVE-2022-47939：Linux Kernel ksmbd UAF远程代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247533490&idx=3&sn=baae970d2a5f1c24887478ff3acd4bd2&chksm=fa93f573cde47c65b734878c588013b0478eb5b37efdd27df76b95b7f61120e753363e65cd0c&scene=58&subscene=0": "Lastpass事件调查：黑客在云存储漏洞中窃取了保险库数据", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650175357&idx=1&sn=567c7233f02197b8f0f16837f912df90&chksm=f4488cc1c33f05d745c2490017ea7e57ecbda681309c91a6a61e4f1facb5d411c971f93ab465&scene=58&subscene=0": "重磅福利 | X情报社区全面开放漏洞情报能力！", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247497772&idx=3&sn=c9b98e7544782d306b440b4ad84540c3&chksm=973acb4ea04d42583d0fedfba4599fd168b290df30c68c8ef40ef5042bddff0bb78ac2ee07f3&scene=58&subscene=0": "CNVD漏洞周报2022年第51期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247497772&idx=4&sn=633e7fe1307a96a1a68cd2128c74e7b6&chksm=973acb4ea04d4258fd356f202b8d8cabbb149974dc2b4b50fe42f5ef3a38efd05daf722e6397&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20221219-20221225)", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491702&idx=1&sn=d67d3fa0aa6b5dbb35fc4b914466507e&chksm=fe26e577c9516c61d1c52dac871cd8ffb0e7fe0d75a76cc200c38f46cfa64cefd86e6ff3ee1a&scene=58&subscene=0": "CVE-2022-41966：XStream 拒绝服务漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247496812&idx=1&sn=a471fd83df5ea6c4d53cc2e86c2cdff4&chksm=c00759f0f770d0e64fc60f3c677050aa7c623003aff223bb6b57abf9f48aef23082347ffb2bc&scene=58&subscene=0": "12月API漏洞及相关资讯一览", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247487943&idx=1&sn=e8915ac33599559dbea5d2a06abcd9f6&chksm=c2c646ccf5b1cfda90e2c0fbc3ffce4505f0c14ce5ef6d24c8c107bd6c3f0358c1b553be687c&scene=58&subscene=0": "【处置手册】Exchange Server OWASSRF漏洞（CVE-2022-41080∕CVE-2022-41082）", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247533654&idx=3&sn=f799f0ef49a7ef1f3c0de5b3ed1bfe1d&chksm=c1e9c807f69e4111c33bcf480452885c9a7c5f1c524c78ce2a20e10f99651b9dc96dcc98b594&scene=58&subscene=0": "Google Home智能音箱漏洞可监听用户会话", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497287&idx=1&sn=699dc588b5eacb72a805ddefab2e8b5e&chksm=fe79d2dfc90e5bc90a30623c1df61092c6b45ab55beb2d9faf5ecb736771ddcb00979c815051&scene=58&subscene=0": "Apache Kylin多个命令注入漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NTMzNjU4Mw==&mid=2247489519&idx=1&sn=ecb528312386d1c9ff9f1fc9de398419&chksm=fd8d4587cafacc918cd035c8669b8b7b2bc551acfb06cfbe2c88e7a76662d4809e9264ceb7c3&scene=58&subscene=0": "《58集团漏洞标准V4.2》", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515192&idx=1&sn=e87e601569d5822582e1538bb28323b7&chksm=ea948d52dde30444d574600b79a6c202142ec2bf9b6ce53a72934ada80a5c93a9670132bbf3f&scene=58&subscene=0": "Synology 修复严重的VPN路由器漏洞，CVSS评分10分", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515192&idx=2&sn=272bc0a3af1895e35d8757fc824d54e7&chksm=ea948d52dde3044428c3a85f3626292aa92baae3cad83b4c5ec41f5fe18285b316d2ca225fa6&scene=58&subscene=0": "研究人员发现Google 智能扬声器中的多个漏洞，获奖超10万美元", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247497797&idx=3&sn=f3c68b3596365eb8b17987c5f5f8b61b&chksm=973acb27a04d4231fa27f30872f000b9ae77c163f218b4664437b4c8933506397a148a37d623&scene=58&subscene=0": "CNVD漏洞周报2022年第52期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247497797&idx=4&sn=073c1d83aaa20c2faa054abe8e6069e1&chksm=973acb27a04d42313e48ef3c3714aeeb12ba7a4ec27430d0662ecfe37d62f34e07d9a4c5e15c&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20221226-20230101)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458490765&idx=1&sn=27c79edaca0efbde1cc2dadfdc6b7e53&chksm=b18ea70786f92e111c980d570c1686005a98480e522ee37144e8d9e61f1e360807f0cb3998b5&scene=58&subscene=0": "Notional Double Counting Free Collateral 分析和复现", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458490765&idx=3&sn=6fa59add274fc550ca3624fbe9db0ee4&chksm=b18ea70786f92e115145550ac751497df50ca1fc551b6279e029828da36f492179a5072820ff&scene=58&subscene=0": "新课预售！系统0day安全- 二进制漏洞攻防，赋能企业安全", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515203&idx=1&sn=0154c72722b8b2c44432c3c779bc5ce6&chksm=ea948d29dde3043f88a8f390467e5fe9417ffdbb15210cc62b5ca63cb1bb7d11d80897439b47&scene=58&subscene=0": "Fortinet 两款产品FortiTester和FortiADC中存在高危命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515203&idx=2&sn=b4c1c37a3e9a0cec0dc518765c86b736&chksm=ea948d29dde3043f45edbaf7748079fecbc26a7462e00af08c08cf7d77d9c07d2ccd669686f9&scene=58&subscene=0": "Zoho：立即修复这个严重的ManageEngine漏洞！", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515203&idx=3&sn=1ce2594fe8a272445e3b52a3598227f3&chksm=ea948d29dde3043f06e675d6f61647db3b51b77bc3191575c8ab8aec96e8f443eab259a28d5f&scene=58&subscene=0": "丰田、奔驰、宝马等API漏洞暴露车主个人信息", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247507433&idx=2&sn=48d9a0f7de6244cd2971a24b1dc2e153&chksm=ebfa9ac9dc8d13df0d5ef10c5b9dd578bb67739a207c6b380d751a77288b3ff62468067a93f6&scene=58&subscene=0": "汽车行业最严重漏洞：20家知名车企API暴露车主个人信息", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650175461&idx=1&sn=72d1e76098b09bc5ec3b8754e6848f98&chksm=f4488c59c33f054f04a1960abb51f885c2fa3b559cccc27b9a827a2b043868bb31249cd0ea88&scene=58&subscene=0": "漏洞奖励计划升级第二弹：首胜奖励+周周有奖！", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491726&idx=1&sn=e894591ca2f6f476d53070c2791f2385&chksm=fe26e58fc9516c9990e9737802278a1fdea92990d547f6eed92d1f46abddf00b6759a4635532&scene=58&subscene=0": "CVE-2022-39947∕35845：Fortinet 命令注入漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491726&idx=2&sn=7f5ffe5e7668e55bebfd8df8cd7e5bfa&chksm=fe26e58fc9516c99d51c9492348652278a3020992d7a1ca400216f1ef56f432ba34c8556875d&scene=58&subscene=0": "CVE-2022-43931：Synology VPN Plus Server越界写入漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247508121&idx=1&sn=e34f59e53a1394600c7e768fcbf237f9&chksm=e89d8841dfea0157a63c1a15213306739f936f3b63aa8e32ae6657a87934aec82d60bfe046b8&scene=58&subscene=0": "某达摄像头的漏洞挖掘经历", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497301&idx=1&sn=5a3254374e3be80cedbce988f57d58e3&chksm=fe79d2cdc90e5bdb098a310de0957ef6282331cb166e6bf71f8e5964257c766739e6ef102e46&scene=58&subscene=0": "Fortinet FortiADC 命令注入漏洞(CVE-2022-39947)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497301&idx=2&sn=b6e6e17cabcd53962b115f1120005bf4&chksm=fe79d2cdc90e5bdb639eb6d373369c202a7e96782a4d995033744406d6369fe079aaa37d1a21&scene=58&subscene=0": "【已复现】GitLab 远程代码执行漏洞安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247507495&idx=1&sn=47e4462318ce8a6f10b370663b17f772&chksm=ebfa9907dc8d101122c7fc7c7964bb868cb70f039ad8a44e89e060a7039e7e66fcc6e5f51c85&scene=58&subscene=0": "突破太空网络安全！航天器关键技术爆严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652501303&idx=1&sn=a3e39072840cc04692ce8c0a513dcd76&chksm=f2585684c52fdf9275620cc2eff570bb627f998eb64c09084e59124d2dd854680eb0ed4d3b60&scene=58&subscene=0": "雷神众测漏洞周报2023.1.3-2023.1.8", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515233&idx=1&sn=1e9a33dc52094b1fa20a75a16e81d1af&chksm=ea948d0bdde3041d97220eab3c1615d2e8e9d7bf783d606a1571bea4c078d16aed093074a0d6&scene=58&subscene=0": "热门开源库 JsonWebToken 存在RCE漏洞，可引发供应链攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515233&idx=2&sn=df29998bb260f1c274b561d8d33c1ed7&chksm=ea948d0bdde3041d86dd780d173b82a65374d35b5fc063d67de6fb5a4dde1e81e6b3d7805a8c&scene=58&subscene=0": "CISA提醒注意日立能源产品中的多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247533812&idx=2&sn=65ce28bfcca12c0f35227f0581bf67ac&chksm=c1e9c8a5f69e41b3a52829514568c5d036a1467e733ca6a5b88fff990796e5490c1c8bb2dbf0&scene=58&subscene=0": "突破太空网络安全！航天器关键技术爆严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497343&idx=1&sn=26b3d52e67c145e77a14acbc9c645693&chksm=fe79d2e7c90e5bf1bac62af14f18ce35de7ea5eccbcea8385cb4940ccf18aa7cfa5c2ea6f34a&scene=58&subscene=0": "微软2023年1月补丁日多产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491746&idx=1&sn=bac8d935768cb75687b2d29dff99861e&chksm=fe26e5a3c9516cb5c49281b35d82b6709aeb25f129db1d07487779db23f30aa8e2edac7775eb&scene=58&subscene=0": "CVE-2023-21752：Windows Backup Service权限提升漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247533840&idx=3&sn=a795c2eda4ac337c0c119d01ffb83886&chksm=fa93f3d1cde47ac7f6c4dbf8832aa166b038e79d6ce1dd32b81208e4c3fe32865ca4bd72bfdf&scene=58&subscene=0": "Experian严重漏洞暴露信用报告", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651121436&idx=1&sn=5cea0e9ecd77cfbe49fe51e99dd7a766&chksm=bd1457cf8a63ded9b018b2f83a979b94d4770aca865f39424b0c5d1eb268774b0e1fec1c1972&scene=58&subscene=0": "应对0Day攻击的高阶版防护实践", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497382&idx=1&sn=20e8b4b124f3d778da180c3953b80744&chksm=fe79d23ec90e5b288576a44e455f702c149c3a2df4ec69977f683101c00e8536cc7c4716bcd9&scene=58&subscene=0": "【已复现】禅道项目管理系统远程命令执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497382&idx=2&sn=e24de37a297ab8a0a4c624226ec9e154&chksm=fe79d23ec90e5b2846999b719d8ed565784ee37f13367871e13ec9a9c95b353f81610c7517dc&scene=58&subscene=0": "PowerShell 远程代码执行漏洞(CVE-2022-41076)安全风险通告二次更新", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515297&idx=2&sn=460499858dd7355f4569e49b316d18b4&chksm=ea948dcbdde304dd13d7b674af7f35b59b16dd02b31770de7ae9738688f20bcc072fae10dce9&scene=58&subscene=0": "思科不打算修复SMB路由器中严重的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247512639&idx=1&sn=75d26c05a17c696b6aaf69bb9cde156b&chksm=eb706c00dc07e51629b399ba347fa165d05ada66959957265a163e92255d1cfa94a95eb6d0e7&scene=58&subscene=0": "【火绒安全周报】“鹅鸭杀”服务器遭到网络攻击∕推特回应2亿数据被出售，并非系统漏洞导致", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247497212&idx=1&sn=8ef48006a3978bfda8961f0956f5a45e&chksm=cfc552a3f8b2dbb5f80a50045c0ed26a635f98b6895aa64f5ef0a89cac5a949b6032432608f5&scene=58&subscene=0": "前方即将抵达漏洞云星系，引力弹弓开启中...欢迎来到2023北京之夜 ！", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652029816&idx=3&sn=6c31705746744488dc93dc0ca77b4f21&chksm=f36fef38c418662e935bdf4f7d68927774fe8e0149895e2501bbf81e8c21472f01402cae5d59&scene=58&subscene=0": "【安全圈】竟然不修复！思科企业路由器存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515307&idx=2&sn=bf20e1ace07e74a2657417caf4f0b6f6&chksm=ea948dc1dde304d73004888e52b7d0ac3b89bb748d42de28380055d0894a642c8b456bdb6652&scene=58&subscene=0": "Juniper 一月安全更新修复200多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247521997&idx=1&sn=d3c444f95c97f06b1d24240a91bd898d&chksm=eb847d6ddcf3f47b0c50ab4a97b2adbee3241149d9a3ac5a56958e76ac33ede48e0bbd108952&scene=58&subscene=0": "用 Goby 通过反序列化漏洞一键打入内存马【利用篇】", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458492659&idx=2&sn=a63c0f35e0b19a057d9fbe52e437b144&chksm=b18eae7986f9276feb843b5b5ea16ac6b6234be576b2224b8390c71020f6bf3bf6e68dde9ff2&scene=58&subscene=0": "谷歌浏览器“SymStealer”漏洞：可窃取用户敏感文件", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247507614&idx=1&sn=c0c99d7e69558b1dc0aae3659916bfae&chksm=ebfa99bedc8d10a8456eee61e1f300db9fd57dd78a90f74e1b2bff2a58303233326c93d521bb&scene=58&subscene=0": "从美国CISA KEV项目看海量漏洞管理方法", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247497887&idx=2&sn=8c720639705095d13d001791a2bc7f20&chksm=973acbfda04d42eb34961c002f81e0437acaf90110de0f24e37c5993ea9507dd7e2f79f00838&scene=58&subscene=0": "CNVD漏洞周报2023年第2期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247497887&idx=3&sn=ea70a1c3f87e7c33469f650be4bfaa02&chksm=973acbfda04d42eb006b585ec84be3ee7360efde761ff643c08ef745d426f6e2e567d2d2fbf7&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230109-20230115)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652029924&idx=1&sn=ab547df73b4cfdd2405bade9fcf6ca5b&chksm=f36fefa4c41866b20226cfbe5d0534d62b885ad74f7f219a16a2d8e53328e3d54e43f89d0b27&scene=58&subscene=0": "【安全圈】ManageEngine 曝出严重漏洞，攻击者无需身份验证即可远程运行代码", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652029924&idx=4&sn=7f882b1b2a8760c9911800eebb3782d1&chksm=f36fefa4c41866b22955936529e3f96cb8a9b2b588cd47f271a7f26d2c4a450762717e023502&scene=58&subscene=0": "【安全圈】Fortinet VPN已修复的缓冲区溢出零日漏洞，可执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515346&idx=1&sn=3d1acdb97283a7d9606c441b9ca5eb27&chksm=ea948db8dde304aea15c93964eceaeb7328f9d6fd59ebe7ea979943fac2a6e48c8fd1b9087c2&scene=58&subscene=0": "TP-Link 和 NetComm 路由器中存在多个远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515346&idx=2&sn=9c64d78059c7b3ee275ab9039c5b3544&chksm=ea948db8dde304aeca214fe6e90ce53733d06ee853e596d44400020349aeb9c8fd6ab433bba3&scene=58&subscene=0": "CISA提醒注意西门子、通用数字和康泰克工控系统中的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515346&idx=3&sn=7314d6f33c9cc44614100d627ee92de1&chksm=ea948db8dde304aeb1f522231dc8ba2f6cc789d08fd9bc2d2f0964ba7cd303a8233461778c96&scene=58&subscene=0": "厂商纷纷主动绕过Adobe发布的CVE-2022-24086安全补丁", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247489912&idx=1&sn=10019b03b94e9aac5a7d3e204b02b529&chksm=96db12a2a1ac9bb4db1e52e9126f6d58878020cd56f9f545d9114685bd230e36c1471e40832d&scene=58&subscene=0": "斗象漏洞情报中心分享|禅道命令注入漏洞深度分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515363&idx=2&sn=36927e449388a6dc1fcc5e7ccbf92a2e&chksm=ea948d89dde3049ffbff2cf56bcfbaa5d4e844e193a9391619d310ac4f075848d0fc66a2cf00&scene=58&subscene=0": "微软Azure新漏洞可导致RCE，研究员获3万美元奖励", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515363&idx=3&sn=6c939ad71b9754325cf5e804212ce38e&chksm=ea948d89dde3049f9674c7caff6a7a10ad9243925974600a40bc322cfba7198f6d8f4e045dbf&scene=58&subscene=0": "四款微软Azure服务存在漏洞，可导致云资源遭越权访问", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247534015&idx=3&sn=c1a316a3d8062190e9aa438050f240ac&chksm=c1e9c9eef69e40f8704e40cacc6d1086b48e79117fa77607ecf8063b93bdd4b8dc41aeaf28d5&scene=58&subscene=0": "Threema 加密通信APP多安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247496979&idx=1&sn=96f7d68a74d716551585d051bdc3cc99&chksm=c14487aef6330eb8dfd4c939b0051998a55902aff8704791933bd5e9dc59f4157d8edf8638d5&scene=58&subscene=0": "[调研]Java和.NET开发人员更容易遭遇漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247496989&idx=1&sn=8eadd8d98e52f3f3c7c72b48a9995438&chksm=c14487a0f6330eb6a1dc960883672e15b7bf63cfa90109ba2cc80f100ccb257e110e2bbd1eca&scene=58&subscene=0": "基于风险的漏洞管理缘何兴起", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497477&idx=1&sn=9cb0283803d41ab7cad568351a54b3f6&chksm=fe79d39dc90e5a8b46e7802d574e387775273196386f98e1d17fe96611a347b22394b927af09&scene=58&subscene=0": "Argo CD 多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491787&idx=1&sn=b6e6f73d94e17797f797784791e0d0cd&chksm=fe26e5cac9516cdc7ad4831086fc1426f42ff432a3f66e19a00b1c5365b7446e1131b0f09833&scene=58&subscene=0": "VMware vRealize Log Insight多个高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491787&idx=2&sn=894b48c7f0763d1e9918b5f6d9a68b19&chksm=fe26e5cac9516cdcb549574d9ea7671a8ca1644ec365103764ef5e394e1a135234e6904b0d65&scene=58&subscene=0": "CVE-2023-23560：Lexmark打印机服务器端请求伪造漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491796&idx=1&sn=a591d7f370fcba76b195cb82cc3847c7&chksm=fe26e5d5c9516cc3a07a1acae8e3d2ba6746443bdccaa82247c10657e4bce8e13a47d698ad71&scene=58&subscene=0": "CVE-2022-27596：QNAP QTS∕QuTS hero SQL注入漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247556868&idx=1&sn=c617d450756c0557ff1266baf3f80426&chksm=e915cf3ede624628adb794ea9d4535a169b48f2d75fbe4f81870a1076ad3f4810c0fbddf98df&scene=58&subscene=0": "【技术原创】Horde Groupware Webmail漏洞调试环境搭建", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491801&idx=1&sn=62540c25ea1fc3a3f866c1ff8cf476e4&chksm=fe26e5d8c9516cce9eaa581d2382700135404e6f072b35acf9276c7209b8960de7ecc66b4c43&scene=58&subscene=0": "CVE-2023-22482∕22736：Argo CD 身份验证绕过漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247556885&idx=1&sn=f1bdbd83d8a5d9a5ddcbcdb7bd9a0d62&chksm=e915cf2fde624639ed5322b7fbf506b741c80491d84589bf1b9820d13efab96ff57b9abb7be2&scene=58&subscene=0": "CVE-2022-42856：iOS 0day漏洞，影响iPhone 5s等老版本iPhone和iPad", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458493266&idx=2&sn=235736dba6bc7ec0d726a21754ba6044&chksm=b18e91d886f918ce6609c86f32d28f15abe1cf05e71e455b1886a598b1fdc97bcbf02b0aafc7&scene=58&subscene=0": "27200美元赏金！安全研究员披露Facebook、Instagram双因素身份验证漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458493266&idx=3&sn=f57dbd97a75dec34212f575d46218c05&chksm=b18e91d886f918ce45a58487474c53b78022ae54089a5b53da7407d2ce0af7113c3bf9d3d1fb&scene=58&subscene=0": "想要深入了解各类CVE漏洞，get独立挖掘和分析漏洞的能力吗？", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515460&idx=1&sn=300b30047d4cb364fa903361e05d3052&chksm=ea948c2edde30538eab915c12ac7b6a1d83fe856638e1a22d727813fb060b9c1ad7f612dfa10&scene=58&subscene=0": "F5 BIG-IP 高危漏洞可导致拒绝服务和代码执行", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515460&idx=2&sn=6ff90ed5a1a5cfe857a4aa75a16def08&chksm=ea948c2edde305386563b822262353daa67aecbbe719fdcbf7b97f402220ee247091ea7aeac0&scene=58&subscene=0": "热门开源Dompdf PHP 库中存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247556983&idx=1&sn=6d82fa0da6bbbeab07a1ba623f56f2ee&chksm=e915cf4dde62465b1cc58f2364765a1d318ec8c5e435b4c69e7e3ffb9877567ec2217b2795f8&scene=58&subscene=0": "ImageMagick：隐藏在网上图像背后的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652030295&idx=3&sn=166a3b7691e894cc8223bd17daea1cab&chksm=f36fe917c418600181c972cc9b84176d7a74e72b96ea31ab86b8f0b9d7e39a4b35b608cb79f9&scene=58&subscene=0": "【安全圈】VMware已修复的堆溢出漏洞被勒索软件利用攻击ESXi服务器", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515504&idx=2&sn=59769cc0918ffbe4502f46bca1f3a6a9&chksm=ea948c1adde3050ccb386f6f3f2e1851f4b3aec399d1c496bf1ed6b4355e88d7aeb87a86d249&scene=58&subscene=0": "遭活跃利用的GoAnyWhere MFT 0day 补丁发布", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497658&idx=1&sn=d1718c5294e9c5c6f4013d6a370d27da&chksm=fe79d322c90e5a34c4e7c2a02eedcc47a13972be2d7eb002a33621f3f7172746fb63326d2b06&scene=58&subscene=0": "IBM WebSphere Application Server远程代码执行漏洞(CVE-2023-23477)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488033&idx=1&sn=c41e361f49daa2573026dfe1275f8037&chksm=c2c6452af5b1cc3c25c5e758415d17a1bb67fb1a64fb0a8de7ce0843c44cc063458f3617a3a1&scene=58&subscene=0": "【漏洞通告】IBM WebSphere Application Server远程代码执行漏洞（CVE-2023-23477）", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247557232&idx=3&sn=ca560dae23f1c31f1cfa8686b7bff606&chksm=e914304ade63b95c9a94b05581be027f11fa484d095e13865d92c8b400d60b054b903161f940&scene=58&subscene=0": "CVE-2022-34689：Windows CryptoAPI漏洞PoC公布", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247516883&idx=2&sn=6dd5577d4d628c211bb4fc8ad56b185f&chksm=ce4609c3f93180d562260fadfcb6cfb015040fd454d1902108c10b7dad2275be1b05afd40c2a&scene=58&subscene=0": "【漏洞通告】Apache Kafka Connect 远程代码执行漏洞CVE-2023-25194", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458494504&idx=5&sn=0f1099583439b97e246b469f7b67bd0f&chksm=b18e96a286f91fb40e6ef12a67e76f74eb305929f3d423381cae8f73aabf4fdedd007cd1d19b&scene=58&subscene=0": "带你一路狂飙！快速掌握PHP的调试技巧及反序列化EXP编写", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652501556&idx=1&sn=a654f7bc7fb06e5ec2a44ed150e5d5c2&chksm=f2585587c52fdc9159aeaf62628c35c023e42c095327c8a9a3b9afea22ed414048bfb5d74ff6&scene=58&subscene=0": "雷神众测漏洞周报2023.02.06-2023.02.12", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491845&idx=1&sn=7b877f1b8497988c5e5f14e784ab555a&chksm=fe26e404c9516d12df653bdb84e900012e7353e672a82f4d94bedc0bf49a8aa215607a3e6e55&scene=58&subscene=0": "CVE-2023-23529：Apple WebKit任意代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497708&idx=1&sn=e044bc73f214fc3dc41c3e17285c0a1a&chksm=fe79d374c90e5a6208c1134374e0e862db2cdd38fdb9538a398384f093549c6b1d1f9d2e0209&scene=58&subscene=0": "Apple产品多个漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515546&idx=1&sn=f9311f04f319e12385edbfcd698fa495&chksm=ea948cf0dde305e697564ae3c0b973831eece5c572326a20990546b6bacf3bef67450345d514&scene=58&subscene=0": "苹果紧急修复已遭利用的 WebKit 0day", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247557497&idx=2&sn=ae71d749d86192c4e3265172546501ad&chksm=e9143143de63b855791971a957c477aad3380281b6d9757fa092319aa1b5ddd1b40f5c0b89e6&scene=58&subscene=0": "Clop勒索软件团伙声称：使用GoAnywhere零日漏洞闯入了130家组织", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247557497&idx=3&sn=d3ccbd05cb90ef8fbd264df79e75c591&chksm=e9143143de63b855b3525bedcbc1fb1aa24fe1ae732d74472e116a49ed887bc963340504fdf5&scene=58&subscene=0": "CVE-2022-22583和CVE-2022-32800技术分析", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045247&idx=1&sn=e99542169f15d3b8c755b7bfb2a43a24&chksm=803faa21b74823375d0d9b7dc7937a621552a92123135e18e6bc1a5987271e4d11b22bb01f70&scene=58&subscene=0": "【漏洞预警】微软2月多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664176313&idx=4&sn=a10fbfe3daa8aea290bb20a6903fce0b&chksm=8b591840bc2e91561fb51469f33d6a638859349dd324219d89cfca91244d0b3bdf0af0776ad1&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzA3MzU1MDQwOA==&mid=2247484330&idx=1&sn=b725d8802e71d215baaf57bd8159648b&chksm=9f0c1c8da87b959bb6f98ddab396a6c9f5009a41efdb41d018d28aa7ab74a30508ce74f7394e&scene=58&subscene=0": "Android 反序列化漏洞攻防史话", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458494923&idx=1&sn=1d157ebbe377348cad89a8367a9d4da4&chksm=b18e974186f91e5776bbaf02530f84af44781a7e26187dd4f8907cec6cab7ec2df8f5ee2f4ee&scene=58&subscene=0": "CVE-2015-2546提权漏洞学习笔记", "https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247497028&idx=1&sn=79d9c0773c1a16a5e94d32294b7ca75c&chksm=fdde8bc3caa902d5ac89af5b6c59233bcffe37ce7cce8aa4fe8eb6aa9cd388a4065ab92a5bfa&scene=58&subscene=0": "ZKP 系列之 Circom 验证合约输入假名漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491253&idx=1&sn=1caf40cf97c5238ac58bef1254e37b18&chksm=96f401d8a18388ce04f9a2813df0e40c698c8ff0792417ca6ba3a2e3e945acff902d7076adb0&scene=58&subscene=0": "漏洞风险提示 | Joomla webservice 接口未授权访问漏洞（CVE-2023-23752）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515656&idx=2&sn=75097008dc3956ef9f875f11ccec6d4d&chksm=ea948f62dde306749d121190dcb5ebb30950231f44947d0194107e5f848801a0c9dce99f5818&scene=58&subscene=0": "热门开源代理 HAProxy 修复HTTP请求伪造漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491869&idx=1&sn=eb4c5401f22be6e08fa8f686b376920e&chksm=fe26e41cc9516d0a8da8a44de28f515adf9a197239970796f839e7248259424b3468c55bbc4e&scene=58&subscene=0": "CVE-2023-23752：Joomla未授权访问漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491869&idx=2&sn=3a9a63f17d92cec0575cfe68e4fc63ed&chksm=fe26e41cc9516d0ad7ddfdba2968570b03a730a00f5f67a0669b53ddf36e314e749532aabe27&scene=58&subscene=0": "CVE-2023-24998：Apache Commons FileUpload拒绝服务漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497797&idx=1&sn=0b337bd555a67a90094e46161cdd31b0&chksm=fe79dcddc90e55cb3b1da85ec7d47e6f3bd71338a9759628e656e04e37e8a1215bf92cd1a4e0&scene=58&subscene=0": "【已复现】Joomla未授权访问漏洞(CVE-2023-23752)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497797&idx=2&sn=d9086378cd19a4cd75896b8c009f95ac&chksm=fe79dcddc90e55cb4c8d4aa79a9ef4636aa112cb0b109451708d1fbabb64ae2af7382debf959&scene=58&subscene=0": "Fortinet FortiNAC 远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458495053&idx=1&sn=e037fbe4c1ee7d86342985897cf1e6f5&chksm=b18e98c786f911d13201a01d3626398637a97f524d39d9cf191d212505874b40e2097f7fe9a3&scene=58&subscene=0": "CVE-2016-7255提权漏洞学习笔记", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515674&idx=1&sn=a2545f99534c8c181bb5022bbc3989e1&chksm=ea948f70dde306661e8a7532ffad9fe411f3cd1cbcb74c5ae58c6e4f394d04247cb807e3ce08&scene=58&subscene=0": "VMware 修复严重的Carbon Black App Control漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515674&idx=2&sn=bcbd823a17b7b53fa3727413e8b16af7&chksm=ea948f70dde3066650f26a64de4d11fa90f8b89d0724f7d08d98105e9d23003c590c5def6010&scene=58&subscene=0": "苹果更新安全公告，新增三个漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493030&idx=1&sn=d854ee809c510d0e5ac627f6fe78ae04&chksm=fd74d56fca035c793aecbaf5f72db5c6861a041f6008e6806df77e7e686ec5eaac2b6f7832bc&scene=58&subscene=0": "关于Joomla存在未授权访问漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497814&idx=1&sn=e874182595597f68c01f9d9610a15e18&chksm=fe79dccec90e55d8e1626348dc381a75dc441875bb098ebdb8c926d2a4c2b8dd851cae338489&scene=58&subscene=0": "VMware Carbon Black App Control 远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497814&idx=2&sn=751cd6f30cd0a6aafa9a54fea4689dc4&chksm=fe79dccec90e55d86be9e601f65c1d6ea5e30388ecb286de5b61bf86d06ffe48e07c9003b0c1&scene=58&subscene=0": "【已复现】Fortinet FortiNAC 远程代码执行漏洞安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247517276&idx=2&sn=c543bba51ebb4e7801cba1bc72f25d3c&chksm=ce460f4cf931865aca5f8eb804ed6b84f658600d2147b7966c684e4f68be1b1a81e14b330dac&scene=58&subscene=0": "【漏洞通告】Joomla未授权访问漏洞(CVE-2023-23752)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247517276&idx=3&sn=8822839506828410ea0dc2e1e6f68e7c&chksm=ce460f4cf931865a76f3ae5315fe8653877e5e0fa3986fdd90ca3aaeacd5624ebbc23cb117d1&scene=58&subscene=0": "【漏洞通告】Fortinet FortiNAC 远程代码执行漏洞(CVE-2022-39952)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247557874&idx=2&sn=411077d6fe9d41b32dcf5c269764b9e2&chksm=e91432c8de63bbde60d3e18c87ded130bb48a571d22ee82320934c997db116ab58942d686144&scene=58&subscene=0": "TouchEn nxKey键盘加密应用程序出现的许多漏洞很容易使其被黑化", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045254&idx=1&sn=50a33c047697502a5c2ed114bca4631f&chksm=803fabd8b74822ceebe40fb17ac6c408e74370feb3d8f284143ea9ade4d66da98e9812db182d&scene=58&subscene=0": "【漏洞预警】Joomla未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247513001&idx=1&sn=a9f5596cb1f6f2e354a59f33b58ca6c3&chksm=eb706d96dc07e480850351f9fa6c79b80e83fddefe224a598da2408e3d95dda84998c9bdd0cf&scene=58&subscene=0": "【火绒安全周报】谷歌支付1200万美元的漏洞赏金∕动视暴雪疑似员工信息遭泄露", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247534924&idx=4&sn=f5a83697da74ed3e41697c47cc94c8e3&chksm=c1e9c51df69e4c0b83839e8f5a755f8ccd6680911ad11479e7cad9c43172e1383b54edf2a378&scene=58&subscene=0": "【TrustZone相关漏洞导读】Glitched on Earth by Humans", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498018&idx=1&sn=b98a39f754e6d77185a8c570a1b70742&chksm=973aca40a04d4356f958c04d39268e01295f2731d5b74122dd3ef02ad73f996902fbe80d30fd&scene=58&subscene=0": "CNVD漏洞周报2023年第8期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498018&idx=2&sn=1848dd3e9e6a79c48153750b56169430&chksm=973aca40a04d43561a26a9d196ad67d59a0917d5cc7e59096b89af835fdaee0863abfcdb8da7&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230220-20230226)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515762&idx=1&sn=3de5cd1e8a38ecfddac1ebab20ee6b48&chksm=ea948f18dde3060eb71f9ad5b5a212e250c11191c75766067819d29b3ced5103a9e86c9dd415&scene=58&subscene=0": "QNAP推出新的漏洞奖励计划，覆盖应用、云服务和OS，最高赏金2万美元", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515762&idx=2&sn=d0544e7c040ded8d269077260cf6dd17&chksm=ea948f18dde3060e3aeb1b186df35346212a396dafcdc58377d0aad3d492d5483edf1b72a7cb&scene=58&subscene=0": "Chromium 漏洞可用于绕过安卓设备上的安全特性", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458495738&idx=1&sn=97f941a0ee1dfbaddc067923a065c7fb&chksm=b18e9a7086f9136614e6e161d91ee6ce3bb13b7f943441a293454e435443a1542bedc0b5efbb&scene=58&subscene=0": "Windows 2000系统的一个0day漏洞发现过程", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458495738&idx=4&sn=0f59a14c11c0ee7a03637f8b8ba3332e&chksm=b18e9a7086f913668e1d7ff397d695b4783724d61e1ea63914a58f80c6dffa1efba9061362ff&scene=58&subscene=0": "明天开课！系统0day安全-二进制漏洞攻防", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247500125&idx=1&sn=be5aa0c7eb891e1d3ced4d1b7d55831a&chksm=fa5214e3cd259df56c9575dfbfc4789fe93e43b93717a419897f40f21e67863330b75521b59a&scene=58&subscene=0": "山石网科获CVE漏洞编号颁发权限CNA", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247535023&idx=4&sn=dbdd70f2ecefea4e895f35ddcbfe5cc6&chksm=fa93ff6ecde47678392685b1cf158a6009f1213123eb8fb26c391a2c7fa85831052bffd703b6&scene=58&subscene=0": "针对痛点修复: 2023年有效的漏洞管理", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247499991&idx=1&sn=18dee09de6007d604de3d05bdb87e577&chksm=cfcaa3c3f8bd2ad506d1591df7d6e31c5e0029be63a45ded0df9225bb330debed7783748b5f6&scene=58&subscene=0": "0day 速修！Smartbi 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497863&idx=1&sn=b1491f0343ff76f15ba2e6269ad8cfbb&chksm=fe79dc1fc90e5509806ac5ec072a93dad754cb32b4742a54150ae000c701447adcb2ad785c41&scene=58&subscene=0": "Smartbi远程命令执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652030887&idx=4&sn=80a5c3de889f4943b1455f267cb13ac9&chksm=f36febe7c41862f16550e57981d534748cf29a8792357f3bdc962bbfdb35bb3d22917b0e7dda&scene=58&subscene=0": "【安全圈】iPhone 存在重大漏洞！ 歹徒靠“偷看”搬空银行存款", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491264&idx=1&sn=cdc5b203155c0997eeddc6494479e0d1&chksm=96f401ada18388bb8da71f9d5033328f5d9c935827bc32a93534551b9c567a08d8704f14f8a3&scene=58&subscene=0": "漏洞风险提示 | Smartbi 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247507965&idx=2&sn=bda7939fe2acb1d0b35a3163437166e0&chksm=ebfa98dddc8d11cb1024f3a686f5ed9298cebe0149e11e4a354bc5f5c1d074fc9032421edfc1&scene=58&subscene=0": "谷歌2022年发放了8200万元漏洞赏金，平均每个漏洞近3万元", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247497205&idx=1&sn=0df5b8681134d24706d84a2712fef404&chksm=c0075869f770d17f2bc1aaea39310d5a05183bcbdeca87e99cbcef268fe717f459ea1fb598e6&scene=58&subscene=0": "1&2月份重点关注的API安全漏洞一览", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247558152&idx=2&sn=5627951c01f79aea257767fee6d6f22f&chksm=e9143432de63bd242eaf0e25405d59783d4bc6fd0be2d8880709f2f732980b2c901cbe200b0b&scene=58&subscene=0": "如何以一种意外的方式发现并找到 WinIO 内核驱动栈溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247535137&idx=3&sn=e26eb362e18303614e9d972bab15b76a&chksm=c1e9c670f69e4f668ba0c2a2586fdf957ebc45dad4a219e01b0e5afcedcbac1bc720386aef15&scene=58&subscene=0": "如何以一种意外的方式发现并找到 WinIO 内核驱动栈溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247535137&idx=4&sn=e2323b85a30494c647b84f9ab8100c6b&chksm=c1e9c670f69e4f66027c941af8c6edea7b4f7128b43e6b7b73e00f104d42398b2679cf1cb3f3&scene=58&subscene=0": "重大供应链威胁！这个 Java 开源框架存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247497416&idx=1&sn=b56a90dc0ea3e6dd587f09b90dbb4f23&chksm=c1448475f6330d6303352a6b93b815b498558d9ba8e9fdd3a7e992792b38148fe14923cc6b2a&scene=58&subscene=0": "严重性评分差异干扰漏洞修复", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652501706&idx=1&sn=5c677f40d7297f925122360e93f2e90f&chksm=f2585579c52fdc6fd148fc41fe190819ebf7570fd51459851e30ec76c16e203fef7baced07b6&scene=58&subscene=0": "雷神众测漏洞周报2023.02.27-2023.03.05", "https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247508316&idx=1&sn=36d50d5692915ad1113d4db76ad5aba6&chksm=e89d8984dfea00926f74ec20e7842fdf5c4e7fde82d0f0b0cf2ac10c530ae21a3e0fa374cf65&scene=58&subscene=0": "TPLink 中继器设备命令注入漏洞分析及复现", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247507991&idx=1&sn=f2d9aa2b2e592da0a02ad8de66296a9d&chksm=ebfae737dc8d6e214696c343c6fd760657182e27dbc69c5324cb746674525b9a63633cfe4a55&scene=58&subscene=0": "大疆无人机被曝16个安全漏洞：可破解禁飞限制、飞行中强制坠落", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247498498&idx=1&sn=b08147f28191d9099028907736055d18&chksm=ec1dcb2adb6a423c4857fdcc2e76c8c8d8c6f819864ea680f3c90d9262e563e810f48110d5d0&scene=58&subscene=0": "如何更高效的玩儿 nday 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493081&idx=1&sn=f357c2ee63f56911e49f1a2317133e4f&chksm=fd74d510ca035c06caf9940cb29d434155300a28622409651e666e1ad75eec0d1b81b40c16ff&scene=58&subscene=0": "CNVD漏洞周报2023年第9期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493081&idx=2&sn=498c337e3043ca5574ad23f2ace21708&chksm=fd74d510ca035c06b370b1b2556fc0a335cbcd3067989388b3d898eba380ecaa450d66a1d2bf&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230227-20230305)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458496584&idx=1&sn=4d74ffbf312639dba3ab745ac46517af&chksm=b18e9ec286f917d46ed7b5d20462c43a6726db71c8c321b57042b864b4ad5683060f56cbc40a&scene=58&subscene=0": "[译]大疆无人机安全与DroneID漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458496584&idx=3&sn=be8ee21f66f51125119d0e2695a8e220&chksm=b18e9ec286f917d4e8339c8638afc3379cf9565a948b1d8990a8d1cff22ec8b2dffcf99a5978&scene=58&subscene=0": "正式开课！系统0day安全-二进制漏洞攻防", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515830&idx=1&sn=62672aef02ae740d65e67ab95a5db18c&chksm=ea948fdcdde306ca7893363e26bd5bb43dd9943d0e2be4690cc6e385c40a5e449486bcb837a2&scene=58&subscene=0": "【已复现】Microsoft Word 远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247487338&idx=1&sn=1af7d11a37cf6d9049ba508afcaef373&chksm=fa5aa187cd2d28912017f2c50b0d0ba1cc689d5a153bb1d33b307eb57d49e46cf801c3ac7416&scene=58&subscene=0": ".NET 调用Expression表达式树执行命令(5)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652031129&idx=1&sn=0ef375ee19fbac8349168c2a3eeac4b8&chksm=f36fe4d9c4186dcfb046175851735080259d5b44643c7d9f0c8f32d7d1741cc6bc81387ce7c4&scene=58&subscene=0": "【安全圈】研究机构披露某购物平台利用漏洞，非法获取竞对信息，阻止用户卸载 APP", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488130&idx=1&sn=a889eafb23174d222109d7d0303d1038&chksm=c2c64589f5b1cc9fde7bdca60e0ca40e050560aae1e8fab33f47dd476da8790842057a2534ad&scene=58&subscene=0": "【漏洞通告】 Microsoft Word 远程代码执行漏洞（CVE-2023-21716）", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247558351&idx=1&sn=b2a5aecc9be4547715a3749684d149ab&chksm=e91434f5de63bde3c8755e9c86f3af692182c5fecf7082f7822e3cab3b5b76e9e194e59d8a86&scene=58&subscene=0": "NIST抗量子密码算法被爆安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247558351&idx=2&sn=bb553ceff82f275b789aac5b8b923bb1&chksm=e91434f5de63bde32b78d09f5e1e11b1e8fc879cd1fa122818d817c47a2c4f8503a591ffe3a9&scene=58&subscene=0": "Sysdig报告解读：配置不当和漏洞是云安全的两大风险", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652031161&idx=4&sn=33a8ff910f309667d7b6bcd1f1b168cb&chksm=f36fe4f9c4186def774c912f46f546cfc3788cf8e83771a865bdf42f67c905c15f6746684629&scene=58&subscene=0": "【安全圈】Win11 强制要求的金身告破 TPM 2.0 漏洞影响数十亿设备", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247558413&idx=1&sn=b989669735234e44060bbd0e4afe9440&chksm=e9143537de63bc21d2366af1579641cdc9aec153e4d2d7629ed60eb5cc58c3a66b3914237aa2&scene=58&subscene=0": "TPM 2.0安全漏洞可窃取加密密钥", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247558413&idx=2&sn=a9468eb241589a06fda7943bc9e6f9cd&chksm=e9143537de63bc2137f1f706bdba056beb18fce8af79525bab7f495469de16432b69853ad36f&scene=58&subscene=0": "CVE-2022-25365在内的多个 Docker漏洞，通过攻击命名管道实现权限升级", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458497424&idx=4&sn=29a4ce346a457a8d752cc66e9e079d55&chksm=b18e811a86f9080c0d82a621fc70d6452576b25da30b6bbc685f6eb82bcf2a121a4d85bd7a48&scene=58&subscene=0": "快速掌握PHP的调试技巧及反序列化EXP编写", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491296&idx=1&sn=3673bde0517b695ebaab4cd050431276&chksm=96f4018da183889bf1ed140434bbbedf30fd4851d6c17e98ddb075bfc50e934ad23402102784&scene=58&subscene=0": "漏洞风险提示 | FortiOS、FortiProxy 管理界面远程代码执行漏洞（CVE-2023-25610）", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247500323&idx=1&sn=d490cc0d8bd8298a3d0a093c388f2701&chksm=fa52179dcd259e8bb50fe3de14bfb67612204aaf46be994c7a5da67713f1cdf296f8a8007d49&scene=58&subscene=0": "美国网件Netgear RAX30路由器RCE漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg4NTY0MDg1Mg==&mid=2247484984&idx=1&sn=cc9c7b4f9053f1c3f91018c3bb333a20&chksm=cfa49dc3f8d314d57d91f02c5b4ac8a746aad43b4ae18533c850175a94278054b3d17297aa72&scene=58&subscene=0": "浅析IPv6下的安全漏洞与应对措施", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515862&idx=1&sn=d2ef6b5ab51eba3e97af531d1a8b212b&chksm=ea948fbcdde306aa2d71b31b492175fc0c01a69233601e35fc9fee73fbfbae62668f3aaaffb2&scene=58&subscene=0": "Fortinet：注意这个严重的未认证RCE漏洞！", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515862&idx=2&sn=559cb44fa0529b875f5361b1112c5b60&chksm=ea948fbcdde306aaba8058c93f2a95d0d723359a0d01dee3fa2e873d99d65d6a7d5d0c5bdae4&scene=58&subscene=0": "Jenkins 出现严重漏洞，可导致代码执行攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515862&idx=3&sn=e59b1a83fa85ee490560066b8b39f535&chksm=ea948fbcdde306aa8791fa944d0c5db86f2535cd2381fc0dcc7d846cf5ee4c1686e12f3696d8&scene=58&subscene=0": "CISA新增3个影响IT管理系统的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247517720&idx=1&sn=147b9e9704b289c1194075c225a48c44&chksm=ce460d08f931841ee449f0af542ca71973fe40f34f0a65309f04d3dbbfbf8498087fede482cc&scene=58&subscene=0": "漏洞通告：Apache Http Server请求走私漏洞CVE-2023-25690", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652031207&idx=4&sn=b848ec73e7021ffd21a1029674d74c86&chksm=f36fe4a7c4186db1de4bdd1b4fbe0068a7602615e5a018cff4209c51c8b037c4d5a248ad91a6&scene=58&subscene=0": "【安全圈】Jenkins曝两大严重安全漏洞，可允许代码执行攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515885&idx=1&sn=8bd8588f210b0b78430ead9ac6d5eeb1&chksm=ea948f87dde30691621e2aadd60a0a45bf17ed8880497e1c1b6489d2b57c7f52806f896318c4&scene=58&subscene=0": "思科企业路由器受高危DoS漏洞影响", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515885&idx=2&sn=26d62bc99cdd37f8365bae8a9b94dba5&chksm=ea948f87dde30691fa7f9887c40e755916adb1ef81c320c67bd9cf032e3495edbc2c16f71288&scene=58&subscene=0": "CISA必修列表未收录数十个已遭利用漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515885&idx=3&sn=ffefe13a8f5da2c680df756b9e641cfd&chksm=ea948f87dde30691fda5efbd07f068606a775eb6e6e596b39f44c7f1cd843a4c64a24c1a88a7&scene=58&subscene=0": "Veeam修复严重漏洞，可攻陷备份基础设施", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491937&idx=1&sn=e79a1e1a4a2f85628e807c3772899529&chksm=fe26e460c9516d76455e608f44dfde0516aab55b0731813b990c00d49cb3b260cd1afef8ff50&scene=58&subscene=0": "CVE-2023-21768：Windows Ancillary Function 本地权限提升漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491937&idx=2&sn=a3daf844724e4d23888453e193fd4c27&chksm=fe26e460c9516d76fd0c6632a2dfe1d87f6ec472cf0b135f284c78f8f525ff274ec355bebb20&scene=58&subscene=0": "CVE-2023-25610：FortiOS ∕ FortiProxy 远程代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652031340&idx=3&sn=73911b694d2e53db282bfe93cef755de&chksm=f36fe52cc4186c3a007f7f3c136204f30ef44e3ceb2759c8263e96fbc618ed02036a25237da9&scene=58&subscene=0": "【安全圈】可泄露用户密码，Bitwarden 密码管理器浏览器扩展发现新漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652031340&idx=4&sn=30809f0487da8f7f558c754efdbb132d&chksm=f36fe52cc4186c3a7d09be4755055ee473fb2ac7c97cd08378c8e8ff7a825c48d96261cad44a&scene=58&subscene=0": "【安全圈】黑客正在利用远程桌面软件漏洞部署 PlugX 恶意软件", "https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247490776&idx=1&sn=0104e61a81d39838feab66a61bd5dcb4&chksm=ec1bfd0bdb6c741da082f4e0ed1bd5b7366e4fd428a3f0382d1ff7ca7a7a47a9ea9caff576d6&scene=58&subscene=0": "活动 | 什么？这两个月的漏洞奖励都翻倍？", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458498157&idx=1&sn=366f45bb8b731d0201324e7fc400e6dc&chksm=b18e84e786f90df19b716a5ccb23483e516b9385da573df9433be99054c3e1a9d8691469845e&scene=58&subscene=0": "全新Pwn系列课程上线！解锁二进制漏洞挖掘技巧，掌握操作系统底层知识", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515912&idx=1&sn=0d48724c08d4d63949a7142683b6fdd7&chksm=ea948e62dde30774b504e3a089bab575daf337854bba663d40f81014b5672260b74230a007a3&scene=58&subscene=0": "Fortinet FortiOS漏洞被用于攻击政府实体", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515912&idx=2&sn=9a2496bb8c17bcf9ed8e477367f18001&chksm=ea948e62dde307749ef7616c97efc1c91e680e87bd654e1a1766fae70831f36318fa216354cf&scene=58&subscene=0": "CISA提醒注意与LastPass泄露事件有关的Plex漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491315&idx=1&sn=2faea3c945bfe79f3459af2cae1925cb&chksm=96f4019ea183888893aff05a67723628b984281e04b67f8184cedc2ccf55c3a718f7ceb3ab74&scene=58&subscene=0": "漏洞风险提示 | 微软3月补丁日多个高危安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515919&idx=1&sn=93fed13d31237fe54742e8ed9d5d4fd0&chksm=ea948e65dde30773778a62d7fdf7941794ec42b1c350761ec8df50d27dbe226a8d8aef902b22&scene=58&subscene=0": "微软3月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498048&idx=1&sn=4b594ec737ac7ea4420a342c57fddcf7&chksm=fe79ddd8c90e54ce2dacf892eb092468d2df798f102b3494730ca81b28de5a9c9127f65c3517&scene=58&subscene=0": "微软2023年3月补丁日多产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491953&idx=1&sn=6bc6c87aba134ea0e8c0f1391ea27095&chksm=fe26e470c9516d66a1db46b26426e46a0b7a06fea964ccd82d800f5c693205f81917c4d8879f&scene=58&subscene=0": "2023-03 补丁日: 微软多个漏洞安全更新通告", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247513498&idx=1&sn=7643e8f8e5ed2d59662eccbc1f23bcc9&chksm=eb706ba5dc07e2b36a40cb8c61eeec38f38fef0d58832ec181365bc24184f7f6d8dce0f4cf25&scene=58&subscene=0": "2023-03微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458498394&idx=3&sn=174b693b2624db3c1bda2611bc4d2728&chksm=b18e85d086f90cc6c19df0b8f6f750b602d94da177b693a64cbff470e3911ab5708be74c92c4&scene=58&subscene=0": "正式开课！系统0day安全-二进制漏洞攻防", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247484044&idx=1&sn=71c0e4d9abeb486d200111b22a2b99b3&chksm=c2b100faf5c689ec9653bd022983d1e218259c0eca48d1d2a6f90e734c3a503af18d89b7c0f3&scene=58&subscene=0": "腾讯安全威胁情报中心推出2023年2月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515956&idx=1&sn=01fe340192b1659e658210ae4b02ac97&chksm=ea948e5edde30748775821e1c9ed1b389b2c0dd119e01cd78b9292d859542e3f209300000e4c&scene=58&subscene=0": "谷歌在三星Exynos 芯片集中发现18个0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515956&idx=2&sn=7870f9607adf1541eef5be5402a82ab4&chksm=ea948e5edde307489a6b2a77b80ba248729a3d0dbfd20a6b65ee00d181f4b422bc09fa95eb1c&scene=58&subscene=0": "Mozilla 修复Firefox 浏览器的多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491959&idx=1&sn=354174a7453cd3167537442dd86a1401&chksm=fe26e476c9516d60787f975dbeb1e528425ce93206912f60427176cf461a252adac12fd69952&scene=58&subscene=0": "CVE-2023-23397:Microsoft Outlook权限提升漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247535554&idx=2&sn=c03482deff61e9fe5d2a653bd31517c2&chksm=fa93fd03cde47415953fe3a46b336a4e282cd92652003e9c718e7992752f6f4bf2ef3a69bbd5&scene=58&subscene=0": "紧急修复!微软Outlook和Web标记功能的两个高危漏洞已被大肆利用", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247487417&idx=1&sn=5e81a1b84d891e027b48067bd7a32ad5&chksm=fa5aa154cd2d2842e1a1cdb0a6b6649e415df39cbaac7f9e506ce00a7592b4280697092e25bb&scene=58&subscene=0": ".NET PC客户端安全评估-SQLite注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664178468&idx=4&sn=e78a0e342300f83d29e5db52b8b611ad&chksm=8b5921ddbc2ea8cbb658e4082fb6b76e0727a6d206fbbbcf2c85f62f4c93bf87e3e86d29f7a5&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247497642&idx=1&sn=234e9332fdb37d819063decacd9b9ee9&chksm=eaa97f8adddef69c5fe379ca48e6c82ad3c22f0840d6756afd8779f39cd1e0de789550bb5b30&scene=58&subscene=0": "Fastjson漏洞和JNDI注入的前世今生", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458498698&idx=2&sn=1be4286243e16d8e3af1c79a636972e1&chksm=b18e860086f90f16e9fa31043d70fdfad1c692f8eef85af1822fef2d5f5cded497e33e94d664&scene=58&subscene=0": "全新Pwn系列课程上线！解锁二进制漏洞挖掘技巧，掌握操作系统底层知识", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247488587&idx=1&sn=eaa6d625d787d74342dbbf44751b1e83&chksm=fe2eebc0c95962d6595920c03318678accf546a6522ef1beb64c88df90f2416e262a9e33513f&scene=58&subscene=0": "SySeVR:使用深度学习的漏洞检测框架", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498070&idx=1&sn=9212558a06ed798050d59b06eb31f52d&chksm=fe79ddcec90e54d8772ffebc530b981c9c1ea341d980c13d501aa45aff1fc8238e8f34d9ee9a&scene=58&subscene=0": "全网漏洞态势研究 | 2022年度报告", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650176054&idx=1&sn=ae799116802f387b09319eeb22cde59b&chksm=f448818ac33f089cb41b7fcddb76d09eb16a846d63dfc930d84d2355680eb8b6f0c3e84aa546&scene=58&subscene=0": "春春欲洞 | 漏洞翻倍奖励，暖心好礼迎春", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247517954&idx=1&sn=7820c08652736e96e2fe15c221314b4b&chksm=ce460c12f9318504184b33040cbede8c35d60da7b8bc41a8b55b2c8ecad807f8208e30d63288&scene=58&subscene=0": "Adobe ColdFusion多个漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247558912&idx=3&sn=2974d3b7e3b10e340a9183be3a571f67&chksm=e914373ade63be2c9dc48816f1a04e92f2d3bc6cde4aa819adaecfe104641d2cae2388fdd9f6&scene=58&subscene=0": "CVE-2023-23397：Outlook漏洞PoC", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247505672&idx=1&sn=638255f31c1079460271945a7b560a99&chksm=ea66207fdd11a969c02794a3ce2e62f11780f256836a6a2baf72f38dc5d5c6836ab8f648d239&scene=58&subscene=0": "全网漏洞态势研究 | 2022年度报告", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650176068&idx=1&sn=cb41cc8984ede3ac8ede4b34dc82473f&chksm=f44881f8c33f08ee76c668501d7a8b09c690095db2083e243ff30e8ebc88fc4e8371172dc8a4&scene=58&subscene=0": "微步成为国家信息安全漏洞库（CNNVD）一级技术支撑单位", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247535631&idx=3&sn=0b028a99a444b67cb78077ecbb7e691b&chksm=fa93facecde473d8e5fa54aee23c72de10a90c674501cdc4b710805611e0163b22275294c5f0&scene=58&subscene=0": "利用同一漏洞，多个黑客组织入侵美国联邦机构", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247490286&idx=1&sn=ea1f5b7787d7d9642cb7aef171217ffb&chksm=96db1134a1ac98228c2463265bce81cbb9cd3273922ae931c33e4af12765901da32c0f821dcc&scene=58&subscene=0": "2023年2月必修漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498150&idx=1&sn=a72ac25760dc7b1d6ea633fe64161f0a&chksm=973acac4a04d43d24f04d4b3fa1dafc42f444605c5dc5d18b9874068247fa1bf789c4d986bfb&scene=58&subscene=0": "CNVD漏洞周报2023年第11期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498150&idx=2&sn=b6a6e5bfbbed172ab93bcfaea13ba60c&chksm=973acac4a04d43d2d35543f520632adfa1a80eb7992d5c36ed0be0143281b55e1124790c17a2&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230313-20230319)", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247488635&idx=1&sn=6ddeb8cb691959850c3152d4fae55cae&chksm=fe2eebf0c95962e6d1dd365f8ac002c795d84521bc3b4bd747ddc11f1ec0cef0326843765896&scene=58&subscene=0": "结合图学习和自动数据收集的代码漏洞检测模型", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488186&idx=1&sn=7748c9a4dcec9fc6cba2cec1a265f9f8&chksm=c2c645b1f5b1cca792bb380e94ca65c2656c7d455e8f6467f3006ce46f69fa5df602a0f9afc9&scene=58&subscene=0": "【漏洞通告】Spring Framework身份验证绕过漏洞（CVE-2023-20860）", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498098&idx=1&sn=11b501628fc3ca85f12c352ee29865db&chksm=fe79ddeac90e54fc6f52b51be38955e4d52e96dbe0f6f6d79be35ec53b8131bef69d5e43ecef&scene=58&subscene=0": "Spring Framework 身份认证绕过漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491971&idx=1&sn=60887c2073bbf485187057e7416e2f72&chksm=fe26e482c9516d94bae3e0db8a063f3608baaec30ce18531550d6d86b9057e3b1a14699e1ea0&scene=58&subscene=0": "CVE-2023-20860：Spring Framework身份验证绕过漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247517969&idx=1&sn=c57b65879f9377e7f59d02a151261154&chksm=ce460c01f93185174396365fa0c1aa959a33d56da802d33b7ed82312cffdf534aaccf926effe&scene=58&subscene=0": "【漏洞通告】Spring Framework 身份认证绕过漏洞CVE-2023-20860", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516017&idx=1&sn=5e3c7c8f862132892592ddc4374aa0d8&chksm=ea948e1bdde3070dc62e414af95b3217979ff5f063fd707703f34555416351b9698de9b19f0e&scene=58&subscene=0": "速修复这些Netgear Orbi路由器漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516017&idx=2&sn=09318646aeb89a81eeacb8a2b51f9939&chksm=ea948e1bdde3070d895e8c6cea2e67f1eb2a166309fb913b70ade0894f89d12b2f3aefb0b477&scene=58&subscene=0": "CISA提醒修复这些严重的ICS漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247498554&idx=1&sn=aa16b67212105b0e9ec9234f0297a7cf&chksm=ec1dcb12db6a420407078c0aef6790d2a350842c93acc0033351d9e570181c3345eb483b460d&scene=58&subscene=0": "首期公开课，web 漏洞自动化挖掘实战", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458499198&idx=3&sn=84ae074e1b5729feb539932059046e7e&chksm=b18e88f486f901e2b8301d21fd2ec71134de274ded416c3fc57fa284531dd78432a4c3e56e95&scene=58&subscene=0": "掌握系统0day安全攻防技巧，成为二进制漏洞猎手！", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247497346&idx=1&sn=57cb4f410d05e0cac2a9374b7159bf5d&chksm=c0075b1ef770d2080581a836776027b29083afa95721a3cb4b66bae3ac3163d1a0a695d30ade&scene=58&subscene=0": "【技术干货】CVE-2023-21839 WebLogic Server RCE分析", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498109&idx=1&sn=a2da687e3f25165e023b256388e132b5&chksm=fe79dde5c90e54f38a4b69b19d50872ac127afd009e98d10748ed331977cf5e61f0245b65b04&scene=58&subscene=0": "MinIO 信息泄露漏洞(CVE-2023-28432)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247517975&idx=1&sn=dfabd6d89dc49fb318615a303ee628ca&chksm=ce460c07f93185111732a39687ea8631014d6b3a622bda235e9ae816d70f645ab615537ed444&scene=58&subscene=0": "ChatGPT+RASP，实现CodeQL漏洞挖掘高效自动化 | 2023INSECWORLD", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664179090&idx=3&sn=9a4dfb1e7e7fcd82d178e4553cf91b2a&chksm=8b59276bbc2eae7d6f0f2a8b8411aaf2f309d84a8dfef4d961ff280cb88a206a8fddbcd75e18&scene=58&subscene=0": "2022年度CNNVD漏洞奖励评选结果公告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491978&idx=1&sn=4870d58fee4592f4b8a12a4d53aad796&chksm=fe26e48bc9516d9dbadd2d48de2a414a309b8d024bd5bbaf773474030eebf52ed7639dda7033&scene=58&subscene=0": "CVE-2023-28432: MinIO信息泄露漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247527209&idx=1&sn=5a549945a40b73d6731b3d5ad8904c81&chksm=eb848089dcf3099f7469e26717431f80f3a94261ab4cbfb02cd4a1ac23ae4b645a53e082fe1e&scene=58&subscene=0": "ChatGPT 写 PoC，拿下漏洞！", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247527209&idx=2&sn=05b4fa943f11c7aa3da5e855cfb2146a&chksm=eb848089dcf3099fc8d74012d003d120239f8e3828672923d0d7284495d24e74dcc4f79f2b69&scene=58&subscene=0": "GoEXP将于3月31日暂停漏洞收录通知", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488202&idx=1&sn=88821c84798d79ce2d6a8925def7455f&chksm=c2c645c1f5b1ccd72558dbbe502681a04d10c87f755b1674e01c109e7faa6c155a525e36259f&scene=58&subscene=0": "【漏洞通告】MinIO信息泄露漏洞（CVE-2023-28432）", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247559087&idx=1&sn=5e8b6eb722e5ac678fda2b4dca7bbdd2&chksm=e9143795de63be83337bf1b8140846f4e3698d1efce59797df2a8cda81fa3070ae992de0b8d4&scene=58&subscene=0": "三星Exynos芯片集中发现18个0 day漏洞，影响三星、vivo设备", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247517999&idx=1&sn=abd7a549cba9aae9ae97057eb5b6cdc1&chksm=ce460c3ff9318529906e251aae267394cf9e57c7e8db97b5ae48583ba351b9496f58127ae521&scene=58&subscene=0": "【漏洞通告】Apache Tomcat 信息泄露漏洞CVE-2023-28708", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247517999&idx=2&sn=ac0b62faf4f6b293f65beab278551eb1&chksm=ce460c3ff9318529fe7c3c07497b6af7f0d1d4062e8488f321cdff36726dfc9e533f1d049bf5&scene=58&subscene=0": "【漏洞通告】Minio敏感文件泄露漏洞CVE-2023-28432", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247500523&idx=1&sn=9ea77ceff0668330f4f0335064b8f8d3&chksm=fa521755cd259e436f5328e93c4ce6396fc8df2e2a97223994abff5f3b1311d0ef2eae169d6d&scene=58&subscene=0": "PHP开发服务器远程源代码泄露漏洞原理剖析", "https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652312716&idx=1&sn=a9dc5e61b6a12c595f594002d685994d&chksm=8bc48902bcb30014ce28544f1a191a8ea7b17b35199b3f9de1d05f66596afc117f9c99a7467e&scene=58&subscene=0": "【S&P 2022论文分享】以Protocol为中心的UEFI固件SMM提权漏洞静态检测", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516023&idx=1&sn=7a78fd326a65fcefb63640ca08718328&chksm=ea948e1ddde3070bbd81a64cbc30f293a43f08c270359b9dda6bb7d7a8cd0b43ca3fef303428&scene=58&subscene=0": "Spring Framework 身份认证绕过漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg4NTY0MDg1Mg==&mid=2247484986&idx=1&sn=15a3b003a1b73a2219dbd34873df994c&chksm=cfa49dc1f8d314d7ad8d57b57555cfd74c1d8f841cdd23655b7f79c2d481343d85a9606d6bec&scene=58&subscene=0": "ChatGPT 写 PoC，拿下漏洞！", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458499499&idx=1&sn=b9163880e1d230947cb4c7011d6618c2&chksm=b18e892186f9003768dc8d960ed3181f73eeca2b3998bd00fd2d97f0a22cbac13db4d9f05aa6&scene=58&subscene=0": "源代码与二进制漏洞的融合", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652031856&idx=4&sn=c9f626a533e011a570bff35aa6a8918d&chksm=f36fe730c4186e26cbf2b6dbacb8cb52d4f5399aa0df0aa8f3b4e636fabe2e7b176965026a13&scene=58&subscene=0": "【安全圈】2023第一个重大漏洞，几乎影响所有组织", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650967612&idx=1&sn=ac3a298f1d1bc5efcd9d94cfbfd93586&chksm=8079cc0eb70e45188c719d641fbefc9cf484ae65a5c4de12710fb6a18f8e3dc496ce2cf7592e&scene=58&subscene=0": "404星链计划 | Pocsuite3、veinmind-tools 项目版本更新", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516047&idx=1&sn=6aa14e04c8c7775ff68e6c8cc3b625d1&chksm=ea948ee5dde307f30458a51c238b2dfa50d2fc70f5537f28618295941f6d1236a8d47f705984&scene=58&subscene=0": "Redis客户端开源库漏洞导致ChatGPT泄漏支付卡信息等", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493169&idx=1&sn=10d8f2fa4ce9afe7649b66f69e6adfe9&chksm=fd74d6f8ca035fee47a7121beb209b451c16a6ab0ca3b39d85f6a18ecd7ccaab8d93e99f8a22&scene=58&subscene=0": "CNVD漏洞周报2023年第12期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493169&idx=2&sn=f45a62958f981c35a94a8d672f7dccdf&chksm=fd74d6f8ca035feefe8fa6e589c3bcbadcb6415a7482107624a545605991c57bfbe03d3e2d62&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230320-20230326)", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652501806&idx=1&sn=fef36b5c708b4902094d710636c5dcab&chksm=f258549dc52fdd8b2aaddb5f362a9bc88f49125920d5e27d1d5cf77bb36ec4f956e90b9eba8b&scene=58&subscene=0": "雷神众测漏洞周报2023.03.20-2023.03.26", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458499980&idx=4&sn=586afdc8061ff76318b7f75b44f3ff21&chksm=b18e8b0686f90210217c19076194a95ce2114f23d88ee0349eb615e507f6e5af4a60040242d2&scene=58&subscene=0": "精品新课！系统0day安全-二进制漏洞攻防", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247559250&idx=1&sn=d794642ec65cb9e8b5273862c63aa49d&chksm=e9143868de63b17e2d9ac6c1199957892c0b9038874b2ba15cf6e27aeb57a8c8cfd31bb29139&scene=58&subscene=0": "OpenAI：ChatGPT支付数据泄露系开源库漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516064&idx=1&sn=7fab64273f8adce01a48faf50055431f&chksm=ea948ecadde307dcd53290844da902ec142820effb62c358fda87676545eb9c2424da1575e72&scene=58&subscene=0": "多家大企业受GoAnywhere 0day 漏洞攻击影响", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516064&idx=2&sn=3b952d583d720b24a32bea4b8840959e&chksm=ea948ecadde307dcb7d589b06a0bed588220bc1bcb179f9c53db7692f79bdbf1e2514b8bea61&scene=58&subscene=0": "苹果修复老旧设备中的已遭利用 WebKit 0day", "https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247497294&idx=1&sn=c3270820e15569f4e6af8e8059907419&chksm=fdde88c9caa901df83a7ded5c85c5426c22d5fe6d4c8050113d5b45566e51a67276b46e53936&scene=58&subscene=0": "Ronin 黑客计中计，你听说过扭曲攻击漏洞吗？", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247535800&idx=4&sn=a17c0503c033b8619929b8b72b99e8ba&chksm=fa93fa79cde4736f4a97f370e65e2f4fb1cbd28c9dc26e525df76befae755c4852763dc4c559&scene=58&subscene=0": "ChatGPT漏洞：部分高级用户数据已泄露", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498166&idx=1&sn=075a5cedf65a8afc367b9803bcc1f8a2&chksm=973acad4a04d43c20e1bf047ac9154e123e8aa83b309fa9c1cc6908e1892e78e1dc5f87cbaf8&scene=58&subscene=0": "CNVD漏洞周报2023年第12期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498166&idx=2&sn=c2a7d8b3b8a8c5950dcd780f0b76ba34&chksm=973acad4a04d43c2ee0802c9c90debe6843502381603b411efc6356c20d08124027490b97772&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230320-20230326)", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247497714&idx=1&sn=7e72265e2c25406baf241218d312829a&chksm=eaa97fd2dddef6c4b4c24d1f29ea8b53c1c1768ab293d674208e80d534a69568a89fd33f3087&scene=58&subscene=0": "JNDI注入- JNDIExploit 改写内存马适配冰蝎3.0以及魔改", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247535633&idx=3&sn=d20fb9cd50c90dbde5576aa432920cbd&chksm=c1e9c040f69e495628d998b2fee3b97ac15ce09a09808ba9abe7882f6d484b082d7cba9f4135&scene=58&subscene=0": "OpenAI：ChatGPT支付数据泄露系开源库漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516076&idx=2&sn=7aa0709e9df4a0d8c797ce6c54547971&chksm=ea948ec6dde307d069669905324ed5495a07a93a3b8b7382f3bd7a98c0ca31d2a53d56e329c5&scene=58&subscene=0": "WiFi 协议漏洞可用于劫持网络流量", "https://mp.weixin.qq.com/s?__biz=MzI4Mzc0MTI0Mw==&mid=2247496882&idx=2&sn=5917f507d1ac6758629f5e6727d5c3fc&chksm=eb84a9e6dcf320f0782a15ccc4f88e91c949b37d4bb43f5ff87704d605c98fa8f4f0f6aeee81&scene=58&subscene=0": "原创 | Spring Cloud GateWay CVE-2022-22947 SPEL RCE", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458500315&idx=4&sn=4b0c050214f2a7a4f3eaee8fc9396bdb&chksm=b18e8c5186f905471f84c108da695cf622b311716b6c915f1dff7dda1ab73cd867677628fe72&scene=58&subscene=0": "全新Pwn系列课程上线！解锁二进制漏洞挖掘技巧", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516096&idx=1&sn=1b7557f7a2683f3f9e215004fb1e4922&chksm=ea948eaadde307bc2c035530c28e9af2f550d85dccbde7413bdd71c3c755aeaea56acc4d9dc4&scene=58&subscene=0": "商业监控软件厂商利用多个0day 攻击安卓和 iOS 设备", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516096&idx=3&sn=82f067c61adcd0aa4a98ca6165d9c9d3&chksm=ea948eaadde307bc40d0015e6feadf0f1264ab387fd2b2500439ce984d5722ddf2e79da15ca4&scene=58&subscene=0": "QNAP 提醒用户修复 NAS 设备中的高危 Linux Sudo 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247508198&idx=1&sn=c7f94589bf9f280dd6d5c3fbbba3e904&chksm=ebfae7c6dc8d6ed031c6ef227147468722adde008f6439b9c2ffd7cecee70da738180440a8e5&scene=58&subscene=0": "商业间谍软件猖獗！去年底至少使用5个零日漏洞，安卓苹果设备通杀", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045298&idx=1&sn=003af88982bcffea255811c386776f95&chksm=803fabecb74822fa8fb4d8b6ad955fc7be0408ea57310a4f753c4827e8c4a5450c0667d9a73c&scene=58&subscene=0": "【漏洞预警】Apache Fineract SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518031&idx=1&sn=a9c4f1bdf8ed2470f7edbed8332cf551&chksm=ce460c5ff93185499a43aead7d9648228455f99496161249743e76c9a233de2d2267c781c9ca&scene=58&subscene=0": "【恶意文件】Magniber勒索软件借助微软的漏洞实施攻击", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650967645&idx=1&sn=109a11ab8834fb555d5b67282d2bea42&chksm=8079cc6fb70e4579fd233ae2605ac1ddba7fe836c4f3194b4eb776f399aff4906e3b1680d6c7&scene=58&subscene=0": "原创Paper | parse-server 从原型污染到 RCE 漏洞(CVE-2022-39396) 分析", "https://mp.weixin.qq.com/s?__biz=MzIzOTE1ODczMg==&mid=2247496054&idx=3&sn=459c362b0e7873f861960f8026e4758e&chksm=e92ce5d5de5b6cc34530cb457dfa2656c9930f0c9b7ab39156f5007750ef4e8135f7e82d2820&scene=58&subscene=0": "紧急！问脉开源工具支持扫描 MinIO 敏感信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498142&idx=1&sn=dcfa11ee9419d2d7b56fe90c9d70ab10&chksm=fe79dd06c90e541077b0c8b16c8f4e7b76fc11fedf89babca2205d25bb9bf42e64f40fcaf3d4&scene=58&subscene=0": "3CXDesktop App 代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491996&idx=1&sn=d42e993e673d06e90cacb968fa27dca6&chksm=fe26e49dc9516d8b1f86fa432faf4b8535ad648a93fc9b9851eac031fe5e2771978854a21d04&scene=58&subscene=0": "CVE-2023-29059：3CXDesktop App 代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247535685&idx=3&sn=a0410151052c54d6236a447a3fa720bb&chksm=c1e9c014f69e490257d4b3442271eb247d2f45462fb08ecd5c847c9c3d94f1336296502e9b87&scene=58&subscene=0": "商业间谍软件猖獗！去年底至少使用5个零日漏洞，安卓苹果设备通杀", "https://mp.weixin.qq.com/s?__biz=MzkwNzIxMDUyNg==&mid=2247485105&idx=1&sn=4b8d8da5eebe0dfccc7f9801df6cc7a2&chksm=c0ddfcc0f7aa75d6d608b4c0984939a46eb6af70aac8d36c5af20f722c430be304b68ac7de62&scene=58&subscene=0": "Realtek Sdk CVE-2021-35392漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516114&idx=1&sn=f5e9f50e1c37ba75e607261b2e912282&chksm=ea948eb8dde307ae2d64f8f3e3672eb57e1d5b5e92d34a87f2ce6162682818039452ffca1697&scene=58&subscene=0": "通过配置不当的微软app劫持Bing 搜索结果，获得4万美元漏洞奖励", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516114&idx=2&sn=430b1d4e9614f9b4e81d5de5e6b1ae9e&chksm=ea948eb8dde307aeaf7d488295dab582fa9cd7c306c29a64c23f69abb2dbed6ed5993532967a&scene=58&subscene=0": "未修复漏洞可导致水泵控制器遭远程攻击", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664180162&idx=5&sn=0196766a0886bac33e5678d6fa761c02&chksm=8b592b3bbc2ea22d80958680aab4b923821b2d2d36876b1fac38fd2ec28ebc3093e6f80dfba5&scene=58&subscene=0": "CNNVD | 关于Apache OpenOffice参数注入漏洞情况的通报", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247559413&idx=1&sn=6ef1e8bfc555f0bad13f9da67ca6ad71&chksm=e91438cfde63b1d978cad62067f34df4e8270a6dd8542a85213ec057919253235a8b7bd26323&scene=58&subscene=0": "WiFi协议曝出漏洞，攻击者可以轻松劫持网络流量", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247535857&idx=1&sn=e79309521140afaf024690bd0cf4887b&chksm=fa93fa30cde4732621590ab4c1eef494a20392471fa14710c44c9db3b7bec4876efed4f14dce&scene=58&subscene=0": "谷歌：黑客利用零日漏洞监控 iPhone、Android 用户", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247535857&idx=2&sn=7401706bdf553ed90faa559a63525b15&chksm=fa93fa30cde4732660061de45a0a635075eae6285fffe32986cd22d01da897fbc7f0658afda4&scene=58&subscene=0": "WLAN协议曝重大设计漏洞，可劫持web流量", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458500598&idx=2&sn=2df59155b864da24c3ab9886148769a6&chksm=b18e8d7c86f9046ad89b990c4859800aa6e8e7b0e033d90c2923cd831b13801d9a86a1b04564&scene=58&subscene=0": "周日14点直播预告 | 系统0day安全-漏洞挖掘复现cve-1", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652032104&idx=3&sn=ba4e8260dd4481401f7a01ef2e267e00&chksm=f36fe028c418693e1250a10aa9eebb7df40b599633b23bfae2cbc9f2797fd5de2bdc09c4ac0b&scene=58&subscene=0": "【安全圈】WLAN协议曝重大设计漏洞，可劫持web流量", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516131&idx=1&sn=9ced8ade5f5884fcee054a1767486be1&chksm=ea948e89dde3079ff7147b94758c02675ebca5937a221a0e770238a109b77f798c296e082e35&scene=58&subscene=0": "Windows漏洞十年未修复，3CX供应链攻击影响全球60多万家企业", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516131&idx=2&sn=e4062667fe1d4694a90a9ffa17a2fd40&chksm=ea948e89dde3079ffc2cbba3e2f13e7929117094754c9e3216a4c6cb5f303cf622ec99800e6b&scene=58&subscene=0": "1500万公开服务易受 CISA 已知已遭利用漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652501821&idx=1&sn=bac6ecfce0b0aee5d764550b202e6d50&chksm=f258548ec52fdd98d31367888d4ad1de972ddcaaf8b30beba92b38d5313f724253b2bb13562f&scene=58&subscene=0": "雷神众测漏洞周报2023.03.27-2023.04.02", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649784347&idx=1&sn=b9252c99e6302e46dd7712a33fd39c57&chksm=8893b074bfe43962178a2726486c35e702df3b646e5f8703c4bc6a2af81c2030c02a6aba2ce3&scene=58&subscene=0": "【技术分享】shiro550漏洞复现与研究", "https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650842064&idx=1&sn=5565f8103481350574d2016b643fb2ed&chksm=80dbc075b7ac4963edcb6320ece4694143fb7f218d7a18a0ee7c3da23b7a50ac8e6c92c5e6bc&scene=58&subscene=0": "418新品发布预告 | 漏洞之痛，有了新“药”", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493203&idx=1&sn=134b81d2a28339697d5d4a611b56ab49&chksm=fd74d69aca035f8c9db6356bb19b8a79552064a3d71fdfd1138457c0c46ced7bd0cf97fdf15b&scene=58&subscene=0": "CNVD漏洞周报2023年第13期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493203&idx=2&sn=929ce90ec622ad04e45fd2c6f4bb3caf&chksm=fd74d69aca035f8c762be26f6749f32380b7f81620be0d2ec6e9f6434fb5e5a45c86db7001ab&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230327-20230402)", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045303&idx=1&sn=6819963b821e9b6cd34e427ef87c84c9&chksm=803fabe9b74822ff7f768e6aeb00fb84e2aa8082e69e19b5d211c95ed57e434bfed0c5db21fb&scene=58&subscene=0": "【漏洞预警】WordPress Elementor Pro插件访问控制漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498182&idx=1&sn=c2a1446bfb50731a0c4e0e89b2a65942&chksm=973acaa4a04d43b2b41bc1ea4aff7327147a3bccfb046502201d4eacfa9a2ceeffbc12c311af&scene=58&subscene=0": "CNVD漏洞周报2023年第13期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498182&idx=2&sn=fa7d44051f291acca115d186ccedeeb0&chksm=973acaa4a04d43b222b4e513c2ca753757d8b1d3676183be1646d72a7a9e23d6aab1467181a9&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230327-20230402)", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247497388&idx=1&sn=04c01e40fdfa1a4b3a7633149f7b1a20&chksm=c0075b30f770d226467dee1190f9884f57c899b235bc696283eec6d938971866c77b91329dd0&scene=58&subscene=0": "3月这几个API安全漏洞值得注意！", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664180665&idx=1&sn=3c6b7cacda11801aecf44cf9fd4f558e&chksm=8b592940bc2ea0566a98b2a293683981cf4bab40c9868ad24e3c630e73c0788324a7cf4e3012&scene=58&subscene=0": "关于发布 “CNNVD漏洞奖励计划”的公告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458500902&idx=1&sn=a463b0a219b9bed49b7cc74b634894ab&chksm=b18e8fac86f906ba1fd8b11bfd4f684aa1a08fa6ea340dcb4b85ce010c4871324e51c7929dea&scene=58&subscene=0": "【上新】实战能力UP！从基础到入门，轻松掌握 CVE 复现技能", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516164&idx=2&sn=00deb0a15fae5034e3bbde0e1407178b&chksm=ea94b16edde33878ac23c8677c44d1e95a6307fec34807fd13ba32689de740186ca370c72df0&scene=58&subscene=0": "QNAP正在紧急修复两个0day，影响全球超8万设备", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247497394&idx=1&sn=e75719d9de68c12b39fd50fae1c05a5d&chksm=c0075b2ef770d23889ffa0c0b9042f79a408351b162ccea5c395cf3f85463ffa8e8107bce231&scene=58&subscene=0": "权威认证！星阑科技入选CNNVD漏洞库技术支撑单位", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247497798&idx=1&sn=cb2107f7f7aebe91a72e9937a78728e9&chksm=eaa97066dddef970e2db91eff9b6a61988ceeabc3df6fda3d69625a4cfa6ec3702cdc1cf3a56&scene=58&subscene=0": "CVE-2023-28432 MinIO信息泄露漏洞分析及复现", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247500678&idx=1&sn=5d4dc9dd7ce903393e763e2909cc1c28&chksm=fa521638cd259f2e1e24fc37313477389addc03a76f99790dd803391d9337e000ef85f941e65&scene=58&subscene=0": "基于Drozer框架对安卓四大组件的漏洞挖掘总结", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247508273&idx=1&sn=3c87cc2169e6cb18135d52741c96f298&chksm=ebfae611dc8d6f07c2cccb120fc878b1d82525f66c3b04ff4c3b16f4fe72311470b40a09445f&scene=58&subscene=0": "美国FBI查封全球网络犯罪关键平台，封堵网络防御漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247535940&idx=5&sn=374c5a3403ffc6bfea37f58177c69e53&chksm=fa93fb85cde4729317cffbd737090f931b215dda246a072fc42942dbe2d6652e49cd950ab7db&scene=58&subscene=0": "影响上千万网站，WordPress插件曝高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516175&idx=1&sn=20108ea07af5ffc49fe8a5d6be681dda&chksm=ea94b165dde3387388e6da861135928b57d5b4252f7d07184156526321bd80542df17fbf073f&scene=58&subscene=0": "惠普将在90天内修复这个严重的 LaserJet 打印机漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516175&idx=2&sn=622c1e525eac66ff89956cf0d9c7c94b&chksm=ea94b165dde33873d49fb73b3c492d7b57426e571702dc507fa765696fae2dc5c921f62762a4&scene=58&subscene=0": "Nexx 智能设备存在多个漏洞可使黑客打开车库门等，无修复方案", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247490490&idx=1&sn=fd53d0a05cfea5787c1e07c1dfb37520&chksm=96db1060a1ac99762bcce2b9c902d25d274201fa3887ba11c2a0a74d49aff5f3208f3c4e96a2&scene=58&subscene=0": "2023年3月必修漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247535806&idx=3&sn=b888124b27f105c99041e8ec50d3249c&chksm=c1e9c0eff69e49f9d90c6b5d1207d5b21eed399a6949ded42e0b65370f6ab33fda514b42c9d6&scene=58&subscene=0": "美国FBI查封全球网络犯罪关键平台，封堵网络防御漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY0NTExNA==&mid=2247488934&idx=1&sn=57d56a257131f971f035b3dd3f7a6a86&chksm=fdf97eb3ca8ef7a53929120f4ca3c7c0e1501718659a5dc3043212f37e79f332f4d1eebba4d9&scene=58&subscene=0": "Linux提权系列14：[训练营] 利用存在漏洞的应用程序进行权限提升", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651123480&idx=3&sn=3b74197c7c22d4cc678b48bfade093cf&chksm=bd145fcb8a63d6dd1ac2625b240d9c617af705234d8d4686af1ae7c81fe681b863b2d34a4dde&scene=58&subscene=0": "安全头条丨CNNVD漏洞奖励计划发布；知网因数据出境问题暂停部分港澳台高校服务提供", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458501417&idx=4&sn=95f27b53a93dc97ad95808068e59ee96&chksm=b18ef1a386f978b55065760dea3f23e4889b61e33402a7ae33d756e7395201c8481bfa6528c4&scene=58&subscene=0": "赋能企业安全！系统0day安全-二进制漏洞攻防", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247505978&idx=1&sn=a9869f2d37b14edc4ea6cac008a6d339&chksm=ea662f4ddd11a65b5f9f859bcf42540aa5136602aa8f17ad2b9a958f4eedee6a0297b682c583&scene=58&subscene=0": "Operation $mercenary$：弥漫在东欧平原的战争迷雾", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247488715&idx=1&sn=107cfc67929223715b23f410d8130876&chksm=fe2eeb40c95962567768b25ca9aa2aa21a83ac55273d2aa610bc6e66b038bb1666225d280e5d&scene=58&subscene=0": "JSLIM:通过\"瘦身\"技术减少已知JS漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247500980&idx=1&sn=cab7d7f050e87ec980aad9debd64e9cf&chksm=cfcaa7a0f8bd2eb6f2fbea515ba7baca0c6cc684caaa68d72641a76c02de96629559c639973b&scene=58&subscene=0": "0day 速修！瑞友天翼应用虚拟化系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498176&idx=1&sn=ec6c041efce70dfcb91e3be4a3f55cf4&chksm=fe79dd58c90e544e4fa0ed46a8043595df7684a2509d6393e4f8d6d1d6dc253bf990ec7de346&scene=58&subscene=0": "Apple 多个产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492024&idx=1&sn=5fb70978fa0b4658e7b6d43f8d669f2e&chksm=fe26e4b9c9516dafc7182b254c2f955c2022b071bcbbe7a992e5015d431ea6ec1c4fd470e4a5&scene=58&subscene=0": "CVE-2023-29017:vm2沙箱逃逸漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493235&idx=1&sn=beeb3a3051f0926c822ecf18deafadb4&chksm=fd74d6baca035fac0f08c8e7a64763b2b2dac1a546e600e33bcfafd8c3830461436808b1ce41&scene=58&subscene=0": "CNVD漏洞周报2023年第14期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493235&idx=2&sn=cc394f73f2f9f06475efbfd62d1c4a79&chksm=fd74d6baca035fac9aacaf0e9a53e3933649c9f2e99738f9fca4f5b0c21c5f450eb5398baa4f&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230403-20230409)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516192&idx=2&sn=5c3e3733fceb0ec8d172ac2df805b47d&chksm=ea94b14adde3385c3f37236533daf5e7d38ba6c37d81d396c80446e2d37a13b2fd254a3b2904&scene=58&subscene=0": "苹果紧急修复两个已遭利用的 0day，影响 iPhone 和 Mac设备", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516192&idx=3&sn=8ab0a31dc71c4a46eafb1990c1f0f021&chksm=ea94b14adde3385cb974be6e0db2bac6737f0ffb278d0cb57922f45c53afcb115f38d3ad64de&scene=58&subscene=0": "VM2 JavaScript 沙箱库中存在严重的 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649784484&idx=1&sn=f15bb5717f9482ad94afcbc40cc28f02&chksm=8893b0cbbfe439dd0c74aa9f82e6fdc11b3ed841a537848aa410309d8feee2b00a528c7dd491&scene=58&subscene=0": "Apple发布针对间谍软件式0day漏洞的紧急修复", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458501607&idx=3&sn=e7de63a69ca3c42259e17958802fe1cb&chksm=b18ef16d86f9787bb10a2d9eb6c3ad9c5e0cad280d2a062280c63cd3697c9446c05705f7b621&scene=58&subscene=0": "报名中！CVE复现漏洞精讲-从基础到入门", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492028&idx=1&sn=58769b911bfab0f6072868100f90c271&chksm=fe26e4bdc9516dab8cc389bf7d999593e2002ef4ae76946be19a82f79c5abdc484f0b1fe4bef&scene=58&subscene=0": "瑞友天翼应用虚拟化系统远程代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247487540&idx=1&sn=a6099c3b9d222aea90d968ae8332cbd2&chksm=fa5abed9cd2d37cf256e4e458d2dcddbe48a22499014ed4dea61cc79a9127932284e2b8fe4fd&scene=58&subscene=0": ".NET ViewState反序列化漏洞 (三) 命令回显", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516210&idx=3&sn=feeedf873b800fb3d1e85197987d1eb2&chksm=ea94b158dde3384eab1d174044d92af1e092828334e6fed424c36bdcf2f0c95e38402680d94d&scene=58&subscene=0": "Sophos 修复位于 Sophos Web Appliance 设备中的三个漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518110&idx=2&sn=7284fa55368e73fb77e7db9b054d6c35&chksm=ce460c8ef9318598c13773845577dd614e9e19c97bf42e9448b72ef5efa93bac9a1048528eae&scene=58&subscene=0": "【漏洞通告】Apache OFBiz任意文件读取漏洞CVE-2022-47501", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518110&idx=3&sn=c7ff38f4cd3eb2c2dad5ca3e13619330&chksm=ce460c8ef931859826f35e2a35a8677daff72bc64e51fc2f6a73bb9e07029522cb63cd5de20a&scene=58&subscene=0": "【漏洞通告】瑞友天翼应用虚拟化系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498197&idx=1&sn=3da1613c3b0d6dfbddc39048fc06c098&chksm=973acab7a04d43a1b06dab27444666e8186e0908782edfa366020910f8a7e4819e8a8d0cb0ef&scene=58&subscene=0": "CNVD漏洞周报2023年第14期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498197&idx=2&sn=9575f454f77e03525dc50c3700e46480&chksm=973acab7a04d43a19503726781dea40857dd0aaf0d24e6c33d33aab13556b84f8d6c81460c26&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230403-20230409)", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652501829&idx=1&sn=ba2a62de5d5afb2200a701029bc8bcd1&chksm=f25854f6c52fdde0e532ae98335689fffe90f9bc0330e3aebc9436b1d183d4452539869614e2&scene=58&subscene=0": "雷神众测漏洞周报2023.04.03-2023.04.09", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491352&idx=1&sn=dd8ac90f81d7e0a0838e47dd525ba362&chksm=96f40075a1838963da54a28a42181541013c530fa65d838a6833a2a51375fc7f65f55494d01f&scene=58&subscene=0": "漏洞风险提示 | 微软4月补丁日多个高危安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649784550&idx=1&sn=d0a97eaf8c7ef5f48e8e49d70ef8dd33&chksm=8893b089bfe4399f37e831c6e988fa8fabafc603ab5c0253a268124101c4f5276be71630fe1a&scene=58&subscene=0": "微软 2023 年 4 月补丁日修复了 98个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516226&idx=1&sn=5e792e5dafde4d77cfdd688736f28c8a&chksm=ea94b128dde3383e614541db7f16f6541e41d277c21c7e45a8763e50d67b280ea5123f8697e6&scene=58&subscene=0": "OpenAI 推出漏洞奖励计划，最高赏金2万美元", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516226&idx=2&sn=e7f2dafb8a5996808eb986ee331cc878&chksm=ea94b128dde3383e7747fbb60df716ad987539ab7a5b46d2212e3c63ee1e6e0e8deee53cef41&scene=58&subscene=0": "微软四月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY0NTExNA==&mid=2247489150&idx=1&sn=ae044369083d652369da533cab6f47d8&chksm=fdf97d6bca8ef47dfeac4f8abf42e6240c81e64671e3afca5e9a8f6d83010c0c8ff388f9f1f4&scene=58&subscene=0": "Linux提权系列18: [训练营]利用linux能力漏洞1", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492035&idx=1&sn=3025853285e6979542f11e5ad3fd97c8&chksm=fe26e4c2c9516dd4536e6f58444df177e17a1a814a972fcc93ee79b0e7dcf426774d8f896398&scene=58&subscene=0": "2023-04 补丁日: 微软多个漏洞安全更新通告", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045308&idx=1&sn=4aa00249cb875493ae3591ff631aa3f8&chksm=803fabe2b74822f45faf2c949f329a9e3bc8410113f5a92d95d911a164b508969aaec0f8b99c&scene=58&subscene=0": "【漏洞预警】Apache Linkis多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4Mzc0MTI0Mw==&mid=2247496889&idx=1&sn=46623999da05db946894e49718ff6564&chksm=eb84a9eddcf320fb57a301655cfa1e14849c42959a6b89558ce47e597d53a8f6a0cd87201a53&scene=58&subscene=0": "原创 | 缓冲区溢出漏洞那些事：验证与危害判定篇（文末福利）", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518224&idx=2&sn=1dc5f62747d15c973a831fa54251ffdb&chksm=ce460300f9318a16743589c81853b28cb7ea2f27f8c7a155a0129eadfbb86e4c86cbbd96dffc&scene=58&subscene=0": "【漏洞通告】Apache Linkis多个安全漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498222&idx=1&sn=5675d2096bfe46b9f106d1d65e163c59&chksm=fe79dd76c90e5460e10716bc590dd437c281eb0782fe3638e8185a6700bdb42fe16da52c067a&scene=58&subscene=0": "【已复现】Windows 通用日志文件系统驱动程序权限提升漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498222&idx=2&sn=14f21da8af7ffdfb21453fd096ebd2e1&chksm=fe79dd76c90e546039c9410efa4cdc0f956ac84b4649ea7b01d74a765f22c8eb65d7794390fe&scene=58&subscene=0": "微软2023年4月补丁日多产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498222&idx=3&sn=0d77681957bfeb51671213ce56b3386a&chksm=fe79dd76c90e5460f4e23392b050cae9221a02733d5bfc23d18a5382a98d84c403f67e0cb243&scene=58&subscene=0": "【已复现】vm2 远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488220&idx=1&sn=b454c2817c4ea3d0944facf571176c38&chksm=c2c645d7f5b1ccc1faf967e0d670114c2098fd57e079a9317e9f17fdfebdc5bb3896bbba81b5&scene=58&subscene=0": "【安全更新】微软4月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488220&idx=2&sn=9573101cf5c3a8c41c0e54e9b67ac8c1&chksm=c2c645d7f5b1ccc1c02512aa3e2475d58f65d1c793cd71a89445fd0ced97cfdc70f398fa49f0&scene=58&subscene=0": "【安全通告】瑞友天翼应用虚拟化系统远程代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247514173&idx=1&sn=ab66a4c23630d0d9d51514ad3eccfa30&chksm=eb706602dc07ef14f6001e4b825d1aa0e6428c484cc147c2c59803470d75e28e4de7bd5bbf8e&scene=58&subscene=0": "2023-04微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458501920&idx=1&sn=21104bc7823e9c882fc22cb0cd5b88af&chksm=b18ef3aa86f97abc18d4ca5b25be38309812ed2473e9b2f64277def7c1e6da92f26f0eea4431&scene=58&subscene=0": "Windows_AFD_LPE_CVE-2023-21768分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458501920&idx=2&sn=41597905291fa77f12bc5ca7483240b3&chksm=b18ef3aa86f97abc939b05ea8650626ba4984eaeb284c0aa7f971bbba2f5cb989cfcf0f11104&scene=58&subscene=0": "OpenAI推出漏洞赏金计划，最高奖励2万美元", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649784555&idx=1&sn=29b213bcc277a68e7938608810da376b&chksm=8893b084bfe43992b81111e7da097b8adc075f37f64fccf7c930354f93d43f77ce233bca20be&scene=58&subscene=0": "ChatGPT 发生数据泄露后，OpenAI发布了漏洞赏金计划", "https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651139477&idx=1&sn=ed516988a04cf77e32ba18a4861f43be&chksm=bd50bdc18a2734d7fbd4a5701a258f3d99b4e44bac936b3e9df8eabede916c19533d3d468ba8&scene=58&subscene=0": "Source Insight 4.00.0126 破解", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498239&idx=1&sn=7cec830cbb332985f066744388032bef&chksm=fe79dd67c90e547149b600b4e0c17de3ea4913f8a9a4f1139b2596e200366d798b3130fda7c2&scene=58&subscene=0": "【已复现】瑞友天翼应用虚拟化系统远程代码执行漏洞安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516234&idx=1&sn=ba72ac437de85dff898598d11ce97f6d&chksm=ea94b120dde338367ba09290193fddc80c82805257f0aac35587dafcb63dd98f43f418cc767f&scene=58&subscene=0": "Apache Linkis 修复多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516234&idx=2&sn=8b8cbd3bbef796e7781c52396c37618f&chksm=ea94b120dde33836274567a92fa01a00f6e40b1b29565d989648c9eeada3ac326405a7a9e7d9&scene=58&subscene=0": "Fortinet 修复数据分析解决方案中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652032362&idx=2&sn=937d07175a9f2f69e28230a60cca93ad&chksm=f36fe12ac418683ca506348e5e3ba0d8dba3019d2f08eb9dde0c1eb927dc59c0dbe470c521e6&scene=58&subscene=0": "【安全圈】1秒盗刷！注意看，原来是骗子钻了这个“漏洞”", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652032362&idx=3&sn=8dde31dab85f0bc1a59ac470d48e12dc&chksm=f36fe12ac418683ca752bc869a6d0953278d57d58adcaff4794cfd9fda4d5cfeaf830186d77e&scene=58&subscene=0": "【安全圈】微软敦促 Win10 ∕ Win11 等用户尽快升级，已有黑客利用零日漏洞植入勒索软件", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518238&idx=1&sn=0e9d62e0b09506bb43dbbbf003665f88&chksm=ce46030ef9318a186681a51fcd5aaec147f3612716cef3c36f1dcad6738be1afbd537e0e4915&scene=58&subscene=0": "【二次通告】瑞友天翼应用虚拟化系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTE1ODczMg==&mid=2247496277&idx=2&sn=8b2d7960195ede33d0585a4a5dc34e82&chksm=e92ce6f6de5b6fe0c7fa41bde3b336d1326638aa2fbf929bdee38aebd1dd531a764e79c9eb95&scene=58&subscene=0": "检测工具发布｜瑞友天翼应用虚拟化系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247527734&idx=1&sn=93073a73437cfee6dd2c91dce0331a48&chksm=eb848696dcf30f80bd676f6000ec92283893ecce08ec2abe571d0a4d908b0f9046512259b727&scene=58&subscene=0": "跨越语言的艺术：Weblogic序列化漏洞与IIOP协议", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498264&idx=1&sn=a73d1de88aff3c562df2aa3e7fc71e9d&chksm=fe79de80c90e579682aed7a38c1b5ab35dce9dc17581428999026dcb8e19c333eeac401ab6e7&scene=58&subscene=0": "【已复现】Artifex Ghostscript 代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498264&idx=2&sn=336a77c1bf6acef7c5cef9b5cf83f0b5&chksm=fe79de80c90e5796e21dad634ce0bb1948db022a15cdd2cba7592db4913cf6f0802df1fe50c0&scene=58&subscene=0": "【已复现】VM2 沙箱逃逸漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247497995&idx=1&sn=1512b8bcb2df5c6a6da63ab66d81df63&chksm=eaa9712bdddef83d5df1f9611fe66a5799286ba2e5636f2f30a534ae4ab3ed6bb4334da9deb1&scene=58&subscene=0": "Joomla Unauthorized\"后\"渗透到RCE", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247497995&idx=3&sn=0abd25c48e4481bcd49a4040d40e7405&chksm=eaa9712bdddef83da8e7bd807b1f7fb845cb1159e07c9b7d09ee6ebce5dec3141279c54de9ea&scene=58&subscene=0": "ISRC劳模众测月！单个漏洞奖励最高可至万元！", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664181549&idx=6&sn=7c004b8e2dfab2049da218eb37d31878&chksm=8b592dd4bc2ea4c22dfc9e94d172555d1250a24fef332f15cb614295ab179c2a2ae82bfeb76e&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247514208&idx=1&sn=79c7c50895aeb562b85e350cbee58aa0&chksm=eb70665fdc07ef4920de0a05cf8e5965d1448da6a401bf4d000f9ee76c6a1b2be18ce980229c&scene=58&subscene=0": "【火绒安全周报】肯德基母公司报告数据泄露事件∕OpenAI推出漏洞赏金计划", "https://mp.weixin.qq.com/s?__biz=Mzg4NTY0MDg1Mg==&mid=2247485011&idx=1&sn=107c0a62e834e34ef909acca94443796&chksm=cfa49da8f8d314bed5edaea02a0a1fd3a8e8b56320a2cc3fb4da678fa8a15b7c236f181b5f2b&scene=58&subscene=0": "跨越语言的艺术：Weblogic序列化漏洞与IIOP协议", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498275&idx=1&sn=3baa5653ca8ecb725d971d90ee0cc869&chksm=fe79debbc90e57ad534c373ee1acc6d3b97e1f6c712f163885a31974f9a1d0a9302119a8f11d&scene=58&subscene=0": "【已复现】Apache Solr 代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652032427&idx=2&sn=17f1222dcc12dae652e6c942c59cc8f6&chksm=f36fe1ebc41868fddfece91af8419a045c07d0b26e2962d3c582c937c3ac47fc9dde6d7c2164&scene=58&subscene=0": "【安全圈】Windows 系统曝高危漏洞，数十万个系统面临风险", "https://mp.weixin.qq.com/s?__biz=MzkwMTE4NDM5NA==&mid=2247486277&idx=1&sn=dbc764a89e6e4ade9b83d2f2f0566b93&chksm=c0b9e5a0f7ce6cb6cc6a8febaa5ba44c9094bf8624805db54e3cdbc454786b26e29fa787bb08&scene=58&subscene=0": "开源堡垒机teleport任意用户登录漏洞审计", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651123563&idx=3&sn=297021801bf52aa412e51e51d1dfc89a&chksm=bd145fb88a63d6aec201d6ef4536da9044a00cd456e0b39198ecb7f749b0fa380e39936596b9&scene=58&subscene=0": "安全头条 | 国常会审议通过《商用密码管理条例(修订草案）》；CNNVD通报微软多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516252&idx=1&sn=8371d9c05433cba2f5df47f101e8ad05&chksm=ea94b136dde33820c0033b8827312e06fe8bf7770075580020919000bdd6049133fc97d2a49e&scene=58&subscene=0": "谷歌紧急修复2023年第一个已遭利用的 Chrome 0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516252&idx=2&sn=546ab537a158f4562912d5ce5c76c6ac&chksm=ea94b136dde338205c6567186607ee7781fff2af825518c69732f7f401efd9705272298cb50f&scene=58&subscene=0": "Juniper Networks 修复多个严重的第三方组件漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657164455&idx=1&sn=01df8e32bc1dff626f3bda6aa1d570e3&chksm=f1d4ee42c6a367542f76dcdccb67a51cf818319160324b256e63118fbd7f278d00a06226a1b2&scene=58&subscene=0": "ISRC劳模众测月！单个漏洞奖励最高可至万元！", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247484108&idx=1&sn=959dd47bc264b364f3cda08b754cddb2&chksm=c2b100baf5c689acbe0773f5aed75ca8896aaef9f78157e03f5793b84b26b9a011ecd4278215&scene=58&subscene=0": "腾讯安全威胁情报中心推出2023年3月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247500838&idx=1&sn=86c1b0702e091070098c7bbf50ae8b1e&chksm=ec9f1d55dbe8944380fe9b66a37e5492ab10a1cf23fbae1053886f8e62366a85644caf62425d&scene=58&subscene=0": "腾讯安全威胁情报中心推出2023年3月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=Mzk0NzE4MDE2NA==&mid=2247487530&idx=1&sn=5b4c5b12cb80a3424683ca021f06b00a&chksm=c37b97c1f40c1ed7dae898cfb70ddf3a8b6d5e3f12303168f7fc2716a233c45b6b1fd53d7c9c&scene=58&subscene=0": "深度协议特征分析在测绘领域中的应用：改革传统漏洞挖掘与运营的新途径", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458502023&idx=1&sn=1b4793ad60f92dcf0756ee8f8079a595&chksm=b18ef30d86f97a1bdb1db0888d7dd11e0a3186ece2bf41c892c43206adfddbc35f4dad0670ee&scene=58&subscene=0": "Chrome存在高危漏洞！谷歌紧急发布安全补丁", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458502023&idx=3&sn=ef814f90c4413f4af0dddda95b82d302&chksm=b18ef30d86f97a1b1ee3fb09cfa1745333edf0a6cc73a392dd478c662882659c304bc5f08752&scene=58&subscene=0": "报名中！CVE复现漏洞精讲-从基础到入门", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498284&idx=1&sn=fa90d06ed2883ad1f080ce301bd79b73&chksm=fe79deb4c90e57a2c9796435744ae209aba3fc597b6609250d037b354cb88f5f1910cbd82031&scene=58&subscene=0": "Google Chrome V8类型混淆漏洞(CVE-2023-2033)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493254&idx=1&sn=eefe9470b91a7dfdbf7fc1950ac1b381&chksm=fd74d64fca035f5991c856307027ddacac82b9efb4caeb905fd85fb274c52f933328ce7127a6&scene=58&subscene=0": "CNVD漏洞周报2023年第15期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493254&idx=2&sn=e941beeda7757cfdcaba6a6f5726ebf5&chksm=fd74d64fca035f59509adb7c2f671fa7d5b47314f7e38c758cbabc2e11fc9fc06b8370781efd&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230410-20230416)", "https://mp.weixin.qq.com/s?__biz=MzU4NjY0NTExNA==&mid=2247489187&idx=1&sn=9b793ed6fbbea4c66c0431fd1f1995da&chksm=fdf97db6ca8ef4a078d6f61339b6a85f3cc3584ddcf061367a69101a682f755bfb6779d88ce8&scene=58&subscene=0": "Linux提权系列23: [训练营]利用linux能力漏洞6", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247560165&idx=3&sn=845c22e1e319dea213a1a56c8953b528&chksm=e9143bdfde63b2c957018d617eed6b6ee4036cd278aa2a822397ee5db2946b2c8cd094954b24&scene=58&subscene=0": "多个 TPM 2.0 实现存在越界写入和越界读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518378&idx=1&sn=d2f006db4ff181a5b0068944bdd13d1e&chksm=ce4603baf9318aac2e947ea1aeeaf61508c505bcecc00cf5e9ad0f00097daa69f6ab7e2dec3b&scene=58&subscene=0": "【漏洞通告】Google Chrome V8类型混淆漏洞CVE-2023-2033", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518378&idx=2&sn=895b54808f4ff67e10cfa960cf693caa&chksm=ce4603baf9318aac7b57862812c68a62592725be8c40650b73934cc8eab9a073fd890b40ac84&scene=58&subscene=0": "【漏洞通告】Apache Solr 代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652501837&idx=1&sn=b3edad8de91665e3b1b902601c02c736&chksm=f25854fec52fdde8d6cc23bf978a73dbfe18d52e6dfca9267fe0d358f1d73700cc1d983e93dc&scene=58&subscene=0": "雷神众测漏洞周报2023.04.10-2023.04.16", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498319&idx=1&sn=fd17b4ca9f3680b0113de4bbd0032610&chksm=fe79ded7c90e57c1176ebbadfe15b0275a28a979dbfd427189c852b18c9125bb72ac781d5c2c&scene=58&subscene=0": "【已复现】Vm2 沙箱逃逸漏洞(CVE-2023-30547)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247536219&idx=3&sn=f07e8f484e87c2bdc6c2f88d9ab7a446&chksm=c1e9c20af69e4b1c73a5038a55ce5a4d8e22d991f1abd69ad7d7d451cb5dbbbb14c8b4f49977&scene=58&subscene=0": "多个 TPM 2.0 实现存在越界写入和越界读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498215&idx=1&sn=5d4908e61cc00f3d786cfaa3d3c50a28&chksm=973aca85a04d4393e8035d516a80b540974970ef77efcb353200b5ffaf7e2210bf6f21edf802&scene=58&subscene=0": "CNVD漏洞周报2023年第15期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498215&idx=2&sn=21f6d638515e30d2222b344bf38fc352&chksm=973aca85a04d4393cf5d351e64588bf7279f1e0b58436f578b3bb6f1c752504a1cd77a956b36&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230410-20230416)", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491396&idx=1&sn=df6c2b7c075306c2b066bb13bb5b4f69&chksm=96f40029a183893ff65ee390ff8ff0f413ccbb6335c72fdfbef5afb4ef94feb48ee1f2e126a3&scene=58&subscene=0": "在野0Day漏洞预警｜Apache Druid远程代码执行漏洞（内附检测工具）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516269&idx=1&sn=02f92ed155ba727f4c05720d3c0cd9c4&chksm=ea94b107dde33811b517d3ac16982dcec7d0609c87c4939a05f50a0f147bc4d6cf1ead52c3ab&scene=58&subscene=0": "速修复！VM2 库中又出现严重的沙箱逃逸漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516269&idx=2&sn=ce98d0e24d86dc1299d184713687b43d&chksm=ea94b107dde33811dc2662ffe815d6035779b7303082f256c0cdb7b0bdec0bd9b0552a29a5eb&scene=58&subscene=0": "NSO集团2022年至少使用了3个 iOS 零点击 exploit", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498334&idx=1&sn=3f90c4d2f610d9bf7bdc1c63cfdb90d2&chksm=fe79dec6c90e57d04be4536d15c30d84dafcd9337f69e3be9052ce02a592b5187b56796525c5&scene=58&subscene=0": "Oracle多个产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247501384&idx=1&sn=e3dd2817da868fe0aeaffe9ac1e52895&chksm=cfcaa55cf8bd2c4ac165a2ad16d0eeddec35eb6bae16d7e5bd68d8e924a989b0e1aa435fb042&scene=58&subscene=0": "0day通告！WebLogic JNDI 注入远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458502201&idx=2&sn=dec5aa410d77a35b61cc19f3f6f9eeb8&chksm=b18ef4b386f97da58f600a523505e06a6e0c93a8ec67ca80bcace10f3c05bcc1bc9743f7e6c6&scene=58&subscene=0": "谷歌联合网络安全公司创建漏洞挖掘基金，为保护白帽黑客免受法律追究", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458502201&idx=3&sn=4aa585dfebda7b61fb987b90aea73411&chksm=b18ef4b386f97da51c6c4719f51ba63f8dc1368924a3d937e73c75d9ef2ab1229b499a60dcde&scene=58&subscene=0": "系统0day安全-二进制漏洞攻防", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247536251&idx=3&sn=9e375f7f08aa1b28249fcf9f082a88f9&chksm=c1e9c22af69e4b3c3d7dff946637a3a68b543fd94b8ce8480937494bf886b4bc05217306fad3&scene=58&subscene=0": "五大API安全漏洞及缓解措施", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247560265&idx=1&sn=83d3a6c82350bf0e0da60781778d9c2a&chksm=e9143c73de63b5658781fcf496c687c47cf8b90c1f184341214e427708d48776dc0c0ab8e7dc&scene=58&subscene=0": "【技术原创】Server Backup Manager漏洞调试环境搭建", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491411&idx=1&sn=6987fa135e5a5e39bb11beb3432fdc0e&chksm=96f4003ea1838928bfb36569a450cc1055bc3abc53fe1a35d857846ccd2ec57702ab45573735&scene=58&subscene=0": "漏洞风险提示 | WebLogic多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247527913&idx=1&sn=f3dce554430b75bc9bd5c1e76dde5587&chksm=eb848649dcf30f5f829b8e51a85390b2581f29b0a164d67fa164609f84c9ddd6f72de2231100&scene=58&subscene=0": "Weblogic CVE-2023-21931 漏洞挖掘技巧：后反序列化利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516282&idx=1&sn=52eb5c1094115b783391abfa147ff39a&chksm=ea94b110dde3380674f5e90137e75fac973293e981e63b279fe6617e8a82bd25e2a2d066eccf&scene=58&subscene=0": "谷歌修复今年的第二个已遭利用 Chrome 0day", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045315&idx=1&sn=0d95ab0071c1029c509095cf81714723&chksm=803fab9db748228b32abb7327593ae570b95e5e69bf590bb656abe42e40549202d051e31d701&scene=58&subscene=0": "【漏洞预警】Oracle WebLogic 4月份补丁日安全通告", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664182276&idx=4&sn=72010f997374d1d3f421fec398344969&chksm=8b5930fdbc2eb9eb78a24576a90d9ae26cc41a4242e0c4a42baa8387abf6a2678224ba5f2701&scene=58&subscene=0": "CNNVD | 关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458502953&idx=3&sn=913e68bcaf5fb7460acdc2ee45798919&chksm=b18ef7a386f97eb57682288bdd8539021f8c51f5b5a51e19139b164cfb7a05a0bd8ae1dc52e6&scene=58&subscene=0": "周六19点直播预告 | 系统0day安全-apache fuzz", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498396&idx=1&sn=d9ffaac639246f184569db4d949b9d7c&chksm=fe79de04c90e5712f5058e9ddeb2f6de881a40a2143ff5ea56a3655d074d28e9e6e798c1b61d&scene=58&subscene=0": "【已复现】Apache Druid 远程代码执行漏洞安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498388&idx=1&sn=550a94c4f42d404cab19bdf5741af5c7&chksm=fe79de0cc90e571a9ec6b1bf717cc29951a7e7a7efd50ee0a92fd3b84191541a9dc62759c3dc&scene=58&subscene=0": "Strapi 多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498388&idx=2&sn=4a7471494513fa70ac9bf47b19b9c963&chksm=fe79de0cc90e571abcd5d0ff0bb23de44f4210a5c757caa2d63305c65391c8ce983b10720113&scene=58&subscene=0": "Apache Druid远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247508453&idx=1&sn=9e8fae986be9414269b82315cd57090c&chksm=ebfae6c5dc8d6fd3e3cd233650b49e5955f4a61d6ee6e22c814722eb208fb67c0416e620a063&scene=58&subscene=0": "阿里云数据库曝出两个严重漏洞，全球公有云漏洞层出不穷", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247536336&idx=1&sn=52c232b48f8e57501a7521d3ad074218&chksm=c1e9c281f69e4b97534025a6d0c94eb19c21b8c642120b12a9ac3bc7ae7dbc177c16db54081a&scene=58&subscene=0": "罗克韦尔控制器身份认证漏洞CVE-2018-17924分析复现", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516298&idx=2&sn=1625888e8762acc4a48a665717933497&chksm=ea94b1e0dde338f62127926fd478fb71059387a0ae20c0fd3e0d9c2f4c6405f946351edeb454&scene=58&subscene=0": "VMware 修复严重的 vRealize 反序列化漏洞，可导致任意代码执行", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247536493&idx=1&sn=4693d95c36ea5aac35337f6591c78bbe&chksm=fa93f9accde470ba0b5b4e9d504c5314421862e4fd12f723be361419a90585ed4ee756266ca5&scene=58&subscene=0": "罗克韦尔控制器身份认证漏洞CVE-2018-17924分析复现", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518495&idx=1&sn=81f2ce2af3a5c3ce80d7ba9602ab6145&chksm=ce46020ff9318b19f302ac307805e251fdd6e472ffd687796f3b243c78f1f7d29557f6296329&scene=58&subscene=0": "漏洞通告：Google Chrome Skia整数溢出漏洞 CVE-2023-2136", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652032821&idx=1&sn=1c4a278828b2ff1092ac903cd3b4a436&chksm=f36fe375c4186a630be4ae42843ca86ebd932da52439bc4b47724ffa365daeee9a3d233b1b1e&scene=58&subscene=0": "【安全圈】现已修复！阿里云SQL 数据库曝两个关键漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458502960&idx=1&sn=5322cbc9e7501a9a24071e302e5fec1d&chksm=b18ef7ba86f97eacd561cd723e6f10bb2079c158987bc141c57b87f91a515d5f6c719fd93b66&scene=58&subscene=0": "Netatalk CVE-2018-1160 复现及漏洞利用思路", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247536370&idx=2&sn=da8ff048efa8b5ee8fe964ba58e7265f&chksm=c1e9c2a3f69e4bb54099f82028c7e6f561055b51afce9c600dad532abfd3628337d397e9b9c2&scene=58&subscene=0": "黑入AI：通过MLflow漏洞接管系统和云", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247536511&idx=3&sn=64b612365e880c7f037b0ba6fb226353&chksm=fa93f9becde470a89d125c3767c9fbb053ab5fbd953ea56c7216ba0313bd8677f9d5bc6cfe99&scene=58&subscene=0": "阿里云数据库曝出两个严重漏洞，全球公有云漏洞层出不穷", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247486979&idx=1&sn=8d18648e46f26e2d8a763e232495f536&chksm=fb02835bcc750a4d7fb191fb525f0b1cfdf3ecb1886aca44d85a170fb3a745e04c37e4541020&scene=58&subscene=0": "漏洞风险提示 | 泛微 Ecology OA SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MjgxOTc4MA==&mid=2247484325&idx=1&sn=ad53c618b35d6c3241c5e7062eca6f62&chksm=ce03470ef974ce18370c5734b646f5d3165af5931aae235fcdd17d1ffffb3edeb65ba2747aac&scene=58&subscene=0": "Weblogic T3 (IIOP)协议漏洞分析（三）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516312&idx=2&sn=2cac42d417ababa92025bbc46308d532&chksm=ea94b1f2dde338e4bb6a7f32bffeb2acff01f5c37bb2e78c7c90eeff36d1925523800c87dd66&scene=58&subscene=0": "GhostToken 漏洞导致恶意应用隐藏在谷歌云平台中", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652032969&idx=4&sn=f7aef4bcf75ec900c4c79b8e7ee76d52&chksm=f36fe389c4186a9f1b0ed7ceee9f44da75db0c922e72df01eee35599e8479d255c978bb9f4cb&scene=58&subscene=0": "【安全圈】美国CISA最新收录三大漏洞，涉及谷歌和ChatGPT！", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498447&idx=1&sn=b5963a92370ae0d4fc385831023ca5df&chksm=fe79de57c90e57412313d7d9e5e3e80b7521865a631df8c16b122b9f0b015cf6e18029f1940a&scene=58&subscene=0": "【已复现】泛微Ecology SQL注入漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498447&idx=2&sn=822761baba2a2efce84f4c6465474153&chksm=fe79de57c90e5741138d0b3b928df05470b4ca225d445afbdcca6733910b20d7dbc033f2d788&scene=58&subscene=0": "【已复现】Strapi 多个高危漏洞安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247488850&idx=1&sn=a4dcde9937f598926d27524ca4ed0f48&chksm=fe2eead9c95963cf852c901fb78e955aa043899ad61a6a84449a80c4c332835c99acc2838f33&scene=58&subscene=0": "VRepair:修复c语言安全漏洞的神经迁移学习", "https://mp.weixin.qq.com/s?__biz=MzI4MzI4MDg1NA==&mid=2247484708&idx=1&sn=ad2f4ce1b53957cfe9d005d8e9438a35&chksm=eb8c519ddcfbd88b5acfc1a11a54902c806d9739f760a68cbd3166aea05582b1b63cdb36a6c4&scene=58&subscene=0": "同程黑盒漏洞扫描系统 - 飞刃(nextscan)正式发布", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493294&idx=1&sn=79c543115a4b296bbf6842184f950fc7&chksm=fd74d667ca035f7156ec23ff411e762aa279e81d3167f5052562bf96fcc0a929183d4ee0c6a8&scene=58&subscene=0": "CNVD漏洞周报2023年第16期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493294&idx=2&sn=e785929b28c50d8ae99c499ea170d6ab&chksm=fd74d667ca035f7139e728965ef39064ac93485edd1932a2d143e2f2dead1e2a964e48d215e2&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230417-20230423)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247560463&idx=2&sn=850b8b3aa1bde77b54d3837bde1c7ef1&chksm=e9143d35de63b4233f9fa0e8e047676557ca4af7aa9cde2139970b76aec20d38132762d4291f&scene=58&subscene=0": "在阿里云PostgreSQL数据库中发现安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652501863&idx=1&sn=6e372b1bdd00a8281ea8ab3358f7edc4&chksm=f25854d4c52fddc2e5f4fb2bd8d31d1542f98200f346f97bfbe6b89823d8c6942a9b105e3936&scene=58&subscene=0": "雷神众测漏洞周报2023.04.17-2023.04.23", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458503197&idx=3&sn=1dc8739401530a0203437093a0fd38ef&chksm=b18ef89786f97181cc51ce6eddab40e14ad63762d788020a3271f32429b6bf8cc9e33d89abd6&scene=58&subscene=0": "CVE复现漏洞精讲-从基础到入门：现在报名立得20元优惠券", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516335&idx=1&sn=d6970653344d43075615c17ff16238fe&chksm=ea94b1c5dde338d3789946c1608390c5efd92097c9603d9825cf6e2a34dfd82935abe1d1fd32&scene=58&subscene=0": "施耐德电气 UPS 软件中存在严重的未认证 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516335&idx=2&sn=7714c02477242110c20958d13327c558&chksm=ea94b1c5dde338d3aea7cd488e25f4d59825e633deebe43bb64963f20d6336a81cf4016641f1&scene=58&subscene=0": "SolarWinds 平台修复两个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487043&idx=1&sn=fa2085171776869c3e4a75f896b3be59&chksm=fb02831bcc750a0d2767497ea742469359fae0025a0e5d4c9e9564fb1208ad4a42741a04ea7b&scene=58&subscene=0": "Netty和Tomcat环境下给Spring Cloud Function Spel RCE注入冰蝎内存马", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498228&idx=1&sn=cc121dc951d62ab71189871eb1d32af0&chksm=973aca96a04d4380fbb6a2e28f5df0cc8279377407e916c2b76c28b67cf5368fe6445e4b2cc5&scene=58&subscene=0": "CNVD漏洞周报2023年第16期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498228&idx=2&sn=627801a5f720abffba3a484e76cacb42&chksm=973aca96a04d4380e52a059db2cb51f791aebc992ad8945b868fd06dc4274efffccdd1da887f&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230417-20230423)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247560534&idx=1&sn=4a88bf2f7b8dfca94315ecddbbf70195&chksm=e9143d6cde63b47ae28c2b07e5775af6afc1d387c9ac0e874f6968fa6437f9b9bb54570cacd4&scene=58&subscene=0": "vm2再爆沙箱逃逸漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498472&idx=1&sn=62a9b6554d133eef35c8fae8ac7dbefb&chksm=fe79de70c90e576609eedf07dfc9dd1bc5a58113bffe5a45168638d9722a7cb0587cc295e564&scene=58&subscene=0": "【已复现】Apache Superset身份认证绕过漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498472&idx=2&sn=b44e92245487d7eff9f96da6fe9f0b61&chksm=fe79de70c90e57662854b773fddd08aa092866e7fcb48f7e824505978a3cde386dbb464648ca&scene=58&subscene=0": "服务定位协议(SLP)任意服务注册漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498472&idx=3&sn=36e28ea5b7d470017fb942d2a7fa934b&chksm=fe79de70c90e5766038bb78c4654bf7c4d7378a66e3d602309f00811019cc1f5bc29bd8d76dd&scene=58&subscene=0": "VMware Workstation与Fusion 多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492080&idx=1&sn=7f731f1fc953800abba0855319684744&chksm=fe26e4f1c9516de755ddd197c5a6ed07a98b9b8ac9024e512c4e5ce72278dac29e29ec540b95&scene=58&subscene=0": "CVE-2023-27524：Apache Superset身份认证绕过漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516346&idx=1&sn=260aa87f75279d3101ddc11e8e48ee81&chksm=ea94b1d0dde338c6aa50da46b3651794726cdf0d14752bb2a5af194367089da4bfa90355660d&scene=58&subscene=0": "VMware 修复在 Pwn2Own 大赛上发现的两个严重0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516346&idx=2&sn=c84ae42d9a4eab4b30b8eba4a27130a5&chksm=ea94b1d0dde338c6da3cc189e548d10cc3511c1ef2d59f067bd428a6efae2df174b66c93b0f6&scene=58&subscene=0": "Apache Superset 会话验证漏洞可导致攻击者访问未授权资源", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518562&idx=1&sn=ee8dca38555a426ebfe65e2c27a9d832&chksm=ce460272f9318b64a572b2f6531973886ef9a542052aa656ad7b84dec032153e7fd2e660fbba&scene=58&subscene=0": "【漏洞通告】Apache Superset 身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652033185&idx=4&sn=aeb42c67f64b4f18109f11323bbf7b67&chksm=f36ffce1c41875f73671bb0397cac20255c07cb7a3b8e31355f39abbfad3119a3c532f398e18&scene=58&subscene=0": "【安全圈】2200倍！新的SLP漏洞引发史上最大DoS放大攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651206295&idx=1&sn=6b005f55bf514a7057439ae4ee4aaf6a&chksm=bd2cd7318a5b5e2710289af29bb301f48e3136aff7e3f9a527ebd58b83a58d37263082b885f2&scene=58&subscene=0": "TSRC拍了拍你，全新漏洞处理和评分标准即将上线～", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492087&idx=1&sn=c5ab55deaa16c1789fa911cce8a0f845&chksm=fe26e4f6c9516de09d927d1d9b2ea9d99947094234b51ba6a1d65fb85c34d9bedb1a1d84fe0d&scene=58&subscene=0": "CVE-2023-20869∕20870：VMware Workstation∕Fusion 漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516356&idx=1&sn=3a870e38244c8f43090fe23f54c81fa7&chksm=ea94b1aedde338b8242499091a2cb37dec7924bffa0bde2f1dc62c5d42e10242fb0125850d86&scene=58&subscene=0": "思科服务器管理工具中存在 XSS 0day", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498483&idx=1&sn=d2276988aeb46f7a30634dcbeba28b9d&chksm=fe79de6bc90e577dd721a745bc9640e5deaa6f084b0872ccf0f127f9118ae2b304b1f5a8719b&scene=58&subscene=0": "【已复现】Windows HTTP.sys 权限提升漏洞(CVE-2023-23410)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247488885&idx=1&sn=07bbdc918e7c7e0d8958d9464125c045&chksm=fe2eeafec95963e889b4620109884c2edbf0f72a6c3e07117630bcd3a61e03ade4736f09fd6c&scene=58&subscene=0": "VulRepair: 基于T5的自动软件漏洞修复", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652033310&idx=4&sn=806dc3b6cb797a293abe87f4853a686a&chksm=f36ffd5ec418744898b7bb0a943469115e47d38ff9a54b13dee1649e3be130edb7b3ade9d69e&scene=58&subscene=0": "【安全圈】黑客利用PaperCut打印机漏洞传播Clop勒索软件", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247488913&idx=1&sn=c9dc28bfde182f6d14951a6dcf128c89&chksm=fe2eea1ac959630c50bb9097b3420578aad0488a4983896965ddef91b05ad43ea9b6a35abfe2&scene=58&subscene=0": "Java项目第三方库漏洞兼容修复", "https://mp.weixin.qq.com/s?__biz=Mzg3NDU2MTg0Ng==&mid=2247493790&idx=1&sn=c6eb7b7480638b11e5fc7405aaed44bb&chksm=cecc40c7f9bbc9d1f2dbc8979be06b8291b2b109c21fc0116ca844ebba2a884b016c94e48f78&scene=58&subscene=0": "PaperCut MF SetupCompleted 远程命令执行漏洞 CVE-2023-27350", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652033607&idx=4&sn=4993f0942dd95c4f48a07aa8fe545e93&chksm=f36ffe07c4187711382dcacbcf12b120b6d52908545c628d5d1ec29f8719190bcc7db8c8a93b&scene=58&subscene=0": "【安全圈】黑客利用PaperCut打印机漏洞传播Clop勒索软件！", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458503744&idx=2&sn=fc25fe131fd11a3b2cc7ffec6a0f19d3&chksm=b18efaca86f973dc58047dd2c996703bb7dfafdbb06c345115a8e56aeea3b886454dffb84fa2&scene=58&subscene=0": "赋能企业安全！系统0day安全-二进制漏洞攻防", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652501882&idx=1&sn=ce8fbf6b948abc55737bec131ca2b9a6&chksm=f25854c9c52fdddf0bc3a4a0dde3c87e19e95dde5d0be8b04849ccb72411e0a40e47136aa3a9&scene=58&subscene=0": "雷神众测漏洞周报2023.04.24-2023.05.03", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516377&idx=1&sn=4cbbc6c979c62c393f9ef2db0243a131&chksm=ea94b1b3dde338a54cdab96dad5458c78ef17312b82e06a66b7cded637686a8042982eadf075&scene=58&subscene=0": "黑客正在利用 TBK DVR 设备中五年未修复的 0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516377&idx=3&sn=192b57a49188eff333e91ac76838eb8f&chksm=ea94b1b3dde338a56301077e9edbeaff1b5814e3eb2e0e1c8e5abcad7423c6ee89408b7c3aae&scene=58&subscene=0": "热门的开源互联网路由协议软件中含多个漏洞，存在供应链风险", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650967962&idx=1&sn=e3764c5fea9f8fb7b595c849daf1d783&chksm=8079cda8b70e44be76a22ad7bed9aef3a29c7433c5842f1555694da4691e4d6b0f48f66e5dbe&scene=58&subscene=0": "404星链计划 | Pocsuite3、Viper、veinmind-tools 等项目版本更新", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247536668&idx=3&sn=5d7d66434063bd6238799ec3e65b209c&chksm=fa93e6ddcde46fcb23f6d08480e265528d811f88cd26ea098c1b4fcf8fd9664279140d3a9792&scene=58&subscene=0": "英特尔CPU曝安全漏洞，攻击者大量窃取数据", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487061&idx=1&sn=cc96a55d1551c797222da18c18d77434&chksm=fb02830dcc750a1b5847cc863d90ff5e511dd11862a4fa3f26cdb7750875db04fa366ce9897d&scene=58&subscene=0": "BrokenSesame 阿里云PostgreSQL 漏洞思考 --详情见原文", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518580&idx=2&sn=617c114e08916bd96e5a15baf3c16e44&chksm=ce460264f9318b726ada26d432003f93a9630a5c6a6eb216c38b27034432c1e3ef8c1a5e331f&scene=58&subscene=0": "【漏洞通告】Apache CouchDB信息泄露漏洞CVE-2023-26268", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458503883&idx=4&sn=ebcb47ca8752979cffaef2c5a2519ddc&chksm=b18efa4186f97357030561e6ba732cdd619f617467df4e3dd42cf2c83876234af8ed424bbed9&scene=58&subscene=0": "CVE复现漏洞精讲-从基础到入门：现在报名立得20元优惠券", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516392&idx=2&sn=30f06254fcca6feb3228b78389c85056&chksm=ea94b182dde338944d1c48c872c538f5333e8de4ceb4594aede8579d82c069df184557fca031&scene=58&subscene=0": "思科电话适配器易受 RCE 攻击，目前无修复方案", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516392&idx=3&sn=f563d9d06d17140943a9006f9816fecd&chksm=ea94b182dde33894747c1e2aa9ddbd52a923d8f1cc8ec0edd712caa946b58d97a9ac1bda8ecf&scene=58&subscene=0": "研究员在微软 Azure API 管理服务中发现3个漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652033780&idx=3&sn=d718a5562f0748dbdf7a36eef3879d4c&chksm=f36ffeb4c41877a212ea69188a6804d0ebcf738036b1bcc76603330b475654ad212f9fc3fa8c&scene=58&subscene=0": "【安全圈】OpenAI 曝新漏洞，允许新用户“无限试用”", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458503921&idx=3&sn=ffc8785e954686794f023f73e7bb7f4c&chksm=b18efa7b86f9736d4aebb186d947a0c46e9bf2f0bc3cd01e844b786c2496df35e236504859bb&scene=58&subscene=0": "赋能企业安全！系统0day安全-二进制漏洞攻防", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491430&idx=1&sn=53bea7b2cea5eb21146f06dc64a6e58c&chksm=96f4000ba183891d98d9d66711bc5f5d017cc1195e6d64c2e83dde184fb45d4d4afdd582d8eb&scene=58&subscene=0": "漏洞风险提示 | Linux 本地提权漏洞 CVE-2023-0386", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516406&idx=1&sn=c826fb7f5e9179a2dd41fd8fe00141de&chksm=ea94b19cdde3388ab79dce0421053447244374dcf510572bc9b52942e7f1d77fea731786465d&scene=58&subscene=0": "OpenAI 账户验证流程存在漏洞，可导致用户无限薅羊毛", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516406&idx=2&sn=b0ac9c5e379181f6de71e5f0afdecc23&chksm=ea94b19cdde3388ae47cb6b4ff1e53afb3905e4b6e68d53559b0769ef5360da2cb7152a72bae&scene=58&subscene=0": "【已复现】Linux Kernel 权限提升漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516406&idx=3&sn=f6d52c7913cb9a7127079a424f287d22&chksm=ea94b19cdde3388a41d9382c14e8649d4db7f27382de8b638a8c2430d9fb7a6e3125a60ceed6&scene=58&subscene=0": "Fortinet 修复FortiADC 和 FortiOS 中的多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247536592&idx=2&sn=e54515133fe7c305b9b14808236628bb&chksm=c1e9c381f69e4a9797c5813053d992f241c78189e7fe0b1acd8deaba1f8f4c9d53b5659e0576&scene=58&subscene=0": "独家：Illumina测序仪再次爆出安全漏洞，可能导致结果篡改、泄露", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492101&idx=1&sn=353c4f8cf7f3e304eabbb942110989c8&chksm=fe26e704c9516e12ba04afa132fb69c926c129f1a2c5c8282324f0427e18b3bc17efa236b0bb&scene=58&subscene=0": "CVE-2023-0386：Linux Kernel 权限提升漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247536716&idx=1&sn=f6fe40eee492fbd478ace619a08ae18b&chksm=fa93e68dcde46f9bdb678ec24191f5c50ae5033ed0de6eea9296b232bda37188364fcfe42a89&scene=58&subscene=0": "独家：Illumina测序仪再次爆出安全漏洞，可能导致结果篡改、泄露", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247536716&idx=3&sn=9dccf30b49a6ea0f764103f16bf37681&chksm=fa93e68dcde46f9b0f0868278ad3047a8cdba326e875f0f186004c47ca35c044c08d42878c14&scene=58&subscene=0": "针对ChatGPT的隐私提取攻击：多步骤越狱漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498491&idx=1&sn=98b9815801067ca7640f0bb5b75e3b10&chksm=fe79de63c90e577579bcda4179e189ae371dd054ae59fef374a4861d8cbd68b8cbf1968df337&scene=58&subscene=0": "【已复现】Linux Kernel 权限提升漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488276&idx=1&sn=094e8b3eba2a20f5c460f8b80e448e97&chksm=c2c6441ff5b1cd09417d30595a84d2c0c92ca2ef4835a1f8abc23f52517cc22fb26f4e12e4fa&scene=58&subscene=0": "【漏洞通告】Linux OverlayFS权限提升漏洞（CVE-2023-0386）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458503947&idx=2&sn=d2ca3aa3565629e6d61a2d6380e29263&chksm=b18efb8186f97297dd452f5de872e5e84a998c31a0a196c545a2c7e8ba2f7024fd806153e056&scene=58&subscene=0": "直播预告 | 今晚7点！系统0day安全-Linux内核初探", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652033875&idx=4&sn=027f3f9b86e51bc9bb359b06b3c373dc&chksm=f36fff13c4187605b39ca647548862a89014321d699bf39886503e86b2362329cfab6037e9be&scene=58&subscene=0": "【安全圈】8220 利用 Log4Shell 漏洞进行挖矿", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487076&idx=1&sn=53dd511a84fc6db1766c8b5212759acd&chksm=fb02833ccc750a2ae14a819e0783eba6d98aa76b41d3b0188c4fda8918a180ca6c5d2c93f02e&scene=58&subscene=0": "阿里云数据库漏洞分析与思考", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498499&idx=1&sn=26b98eefba224dff75c7e62bdc0c1b46&chksm=fe79df9bc90e568d4ff545e7f03710377fc26d1f211c92e678ca9724be6c09768a51937cee84&scene=58&subscene=0": "GitLab代码执行漏洞(CVE-2023-2478)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516420&idx=1&sn=89d69a30e805ed5fabd9a6d3e57a5388&chksm=ea94b06edde339781e5c419630c9e72ffa180199862e815f7759f68b8f5998b0e102f93b4a3c&scene=58&subscene=0": "严重的西门子 RTU 漏洞可导致电网不稳定", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516420&idx=2&sn=e419c137b012ee8e70e8514f7bf3a2e1&chksm=ea94b06edde339787fa928cc50927bb993d84cb037cf64c8f353c0b7afc9b6064576dddb5f44&scene=58&subscene=0": "WordPress 热门插件中存在漏洞，200多万网站受影响", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458504102&idx=4&sn=e47932caba2baf983d8d964cdf9ac9c1&chksm=b18efb2c86f9723affda406effc026d5b30850d36c8629748f9e8ca842ca98f1f64f17a272e5&scene=58&subscene=0": "CVE复现漏洞精讲-从基础到入门：现在报名立得20元优惠券", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247488974&idx=1&sn=f1d962a933bea1fd677999af67004fc5&chksm=fe2eea45c9596353855c80233798c8109a90332e384fcc99742d5912bdbfc71a07d8cbbf4e8f&scene=58&subscene=0": "乔治梅森大学｜隐匿在commit中的安全漏洞（DSN 2019）", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518656&idx=2&sn=3c55cc4cb541a6ad164b659bd3619ff5&chksm=ce4602d0f9318bc62f156e05f74b3d361bd6d4a7783c57bad24fb8280e58d0bd6796b6448c8b&scene=58&subscene=0": "Linux Kernel权限提升漏洞CVE-2023-0386", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491438&idx=1&sn=c0b683b5887e2e6535b429b12ea7a054&chksm=96f40003a1838915b986da882639425aeec69f9db2bea33d33d3432643731ecc9a5dafb5f296&scene=58&subscene=0": "漏洞风险提示 | Gitlab CE&EE GraphQL添加恶意Runner漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498308&idx=1&sn=63adc5e821c1254bdb73699f1ae1bb12&chksm=973ac926a04d4030822a7094b9b98502c1299ef58830853c333620956a3b4847bbe07aff02e4&scene=58&subscene=0": "CNVD漏洞周报2023年第17、18期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498308&idx=2&sn=dd3dc41c3c7a9cd2a36e7afca1c08bc2&chksm=973ac926a04d403069ee33f69e497c03170761bc324ae0f54fd1e250982900ad8864cd82e928&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230424-20230507)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493326&idx=1&sn=b31abeb5a12fe912b86f0311c23b6bc1&chksm=fd74d607ca035f114d7515d89e8c22d48b37b10c4e0a64cf6808ef3138b5f168a9200bdc0639&scene=58&subscene=0": "CNVD漏洞周报2023年第17、18期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493326&idx=2&sn=35b560babe87fb3750fe61d5d2cb1cb4&chksm=fd74d607ca035f11a1a701b5817b8400697512ec41f5b7344ab1afd22b63d8ec68dfcee42fb9&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230424-20230507)", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492113&idx=1&sn=40bbf022aa96bda627a1fe51ec62bb15&chksm=fe26e710c9516e06e26ad98bbf68d10c5c62c33bcd5e1dc72a26a7da3c33425e33439758dd03&scene=58&subscene=0": "CVE-2023-2478：GitLab代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518723&idx=1&sn=5eb98f20cf316411995031d5ca109035&chksm=ce460113f9318805270f9e2256fc26467cb809f3a6f75f75f9f0f543853eed5f090bc8c75900&scene=58&subscene=0": "【漏洞通告】GitLab代码执行漏洞CVE-2023-2478", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652034021&idx=4&sn=7389e3ddf6dd0e1108b956e9a7832127&chksm=f36fffa5c41876b3e3b1793344b39896ac919261beac85def637eff0be6b77a154bcc575ed8f&scene=58&subscene=0": "【安全圈】苹果数据传输面临漏洞威胁： 新的Wireshark剖析器揭开面纱", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458504176&idx=2&sn=e70f2207658070a8da1ca18c00fed64f&chksm=b18efb7a86f9726ca7ca0e28051f959b5a43ff788dd5a2e4109251e5d42b1c267b1754061f89&scene=58&subscene=0": "ZEEKRSRC挑战信 | 单个漏洞最高奖励2w", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247536767&idx=3&sn=9f58c71262fe3144857b72136ff02895&chksm=fa93e6becde46fa8e271e3ee3d442ac405dd78776cf065f07e6fda44229b32fedbe6a980cafd&scene=58&subscene=0": "深度解析DARPA网络安全漏洞发现计划HARDEN", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487083&idx=1&sn=4160ac7d5ffa330e381b0862bb15427a&chksm=fb028333cc750a25570833c7efc774aff8154b2d615881582487a5c0d61e0c905173ca399306&scene=58&subscene=0": "漏洞风险提示 | Gitlab CE&EE GraphQL添加恶意Runner漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649784781&idx=2&sn=e24a474b3c116b93ebb4533abf50637b&chksm=8893b1a2bfe438b415baa135cc20dd8cca7b388d35af92001e6805167eb832c32bb2f519d2a9&scene=58&subscene=0": "【安全头条】 Linux被曝内核漏洞，攻击者可借此完全控制系统", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516449&idx=1&sn=17fb3428de6050c5e0ce8daaa751c406&chksm=ea94b04bdde3395de1c91c780a8796919fd059dce25c7d3ae460bbf340057ec40a3581920c4d&scene=58&subscene=0": "洞少事大：微软5月补丁星期二需关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516449&idx=2&sn=3d707d11e6ef16e4beb82600320a1003&chksm=ea94b04bdde3395db7478af8cdc09378319ac019551a410d1a90692898da9314af37ab22b878&scene=58&subscene=0": "Linux NetFilter内核新漏洞可导致攻击者获得 root 权限", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491444&idx=1&sn=c7e8cbf14c8adb12811e1d45999bf559&chksm=96f40019a183890f994c4d998cf065ff5ff375344b37037cd02e8ce73a6a4f6a6f034d58f502&scene=58&subscene=0": "漏洞风险提示 | 微软5月补丁日多个高危安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY0NTExNA==&mid=2247489413&idx=1&sn=c9d46582431adeb470fc48eb5b133850&chksm=fdf97c90ca8ef586e6a7fbdfe659bf3241c988b88b83f824acf02ec2b3fef87c640ed78926fa&scene=58&subscene=0": "云安全案例11: 溯源分析黑客如何利用Oracle云基础设施Attachme漏洞无需授权访问和篡改任意租户的存储卷", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652034088&idx=4&sn=c3bbfa78ff001268aa73a50a0969859d&chksm=f36ff868c418717e28bcc9e8f6722c314f78f2544a683555268fc003b299f90d8300e9d7f636&scene=58&subscene=0": "【安全圈】微软修复Windows 10∕Windows 11上BlackLotus UEFI漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247514377&idx=1&sn=b3791ab34c6e0edd9d2cb57935b39a78&chksm=eb706736dc07ee20b60cd072fcb2288c5d1f5a95faa81719d1ff741cd5a26388c82d45131040&scene=58&subscene=0": "2023-05微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498528&idx=1&sn=9d8e2d05d36d1d633b88ce811d5c7a7f&chksm=fe79dfb8c90e56aee6553bca93d97ca71ce656786d4886a58c9aa963dc2b35ab580ad90ae91b&scene=58&subscene=0": "微软2023年5月补丁日多个产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492119&idx=1&sn=72fe2d462267101bb192927e4b475d68&chksm=fe26e716c9516e008465281fa28c5bc484bf79c7cf05213a0ada3532b86ad58edb583c845a37&scene=58&subscene=0": "2023-05 补丁日: 微软多个漏洞安全更新通告", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247501142&idx=1&sn=4159db67338cbe3b34a387caa0f2d8c8&chksm=fa5210e8cd2599fedf775bae397a3c927871d25e913e4944bd38ad6da7172059ee117f8111ca&scene=58&subscene=0": "山石网科信创安全实验室获USRC漏洞致谢", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488285&idx=1&sn=90a1119f2b53da93e0403f791477e284&chksm=c2c64416f5b1cd002af1bae19d8f014fba5e7f4c348fdaf92f3357f77c5df4aa5f7029aaefa4&scene=58&subscene=0": "【安全更新】微软5月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045339&idx=1&sn=f108d08288a076f253678288e03da35b&chksm=803fab85b748229383099d18e2d2f65f3c3ae511df1e36106acd9490deef5a51ef8b1e19a88d&scene=58&subscene=0": "【漏洞预警】Apache bRPC代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516461&idx=2&sn=1319c4b17cbfce2602f31c1375378a21&chksm=ea94b047dde33951dc262c284fcf1d6aac308d66672887728510ab05882edc873667a4dcb89f&scene=58&subscene=0": "SAP 修复多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498546&idx=1&sn=37c3861644b3e52fa62f2b4be8b59068&chksm=fe79dfaac90e56bc032681bce9ce6c98437a58af8767809818c27f09494e6db02c7a5a351679&scene=58&subscene=0": "【已复现】Windows MSHTML Platform安全特性绕过漏洞(CVE-2023-29324)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664183744&idx=2&sn=16b2cd993f2a33ea858a9d9de489443b&chksm=8b593539bc2ebc2f58b8a664aff5e13a1afcdd82c794b59354190ce6e15b6240ecea2fd227d9&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491452&idx=1&sn=4060657dcce7004f457f3cf426676bc3&chksm=96f40011a183890730a653c10ef7ccce4fa58371ed907db948834c8cee7d9e15ec68a4e53a49&scene=58&subscene=0": "在野1day风险提示｜宏景人力系统 SQL注入漏洞（内附检测工具）", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247484165&idx=1&sn=758a6119eef77796827517d9f6b5ab09&chksm=c2b10173f5c68865cd0509f6322aa791826cd8486b59d149748b7f2274de6ed8df94ec34e3c9&scene=58&subscene=0": "腾讯安全威胁情报中心推出2023年4月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516473&idx=1&sn=f56859b3fc89bfc1ea259f355d5ea57b&chksm=ea94b053dde33945ba3fd2c0d75213db0b00c2d06a6798292b97054c90cd86bbf0e56d7f1c5e&scene=58&subscene=0": "微软将花近一年的时间才能修复这个 Secure Boot 0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492130&idx=1&sn=321f4c0c0d31f5987fdbd2557885ac8f&chksm=fe26e723c9516e35e84509f1dec22b670d39437efd80848c3b9b95954002988a248a9e99f933&scene=58&subscene=0": "CVE-2023-29324：Windows MSHTML Platform安全功能绕过漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498554&idx=1&sn=48a092be1127f0d584edca2f82ff81bc&chksm=fe79dfa2c90e56b40b49318e08c3e9d96163293a7a4ff6017982ad11fd99f0c44a7d8ba1f15f&scene=58&subscene=0": "【已复现】宏景eHR SQL注入漏洞(CNVD-2023-08743)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247500841&idx=1&sn=33c9b247586ffcfa1efa2fef39b20b31&chksm=ec9f1d5adbe8944cda97fd6acf1ce465c794c7fa65b9f09a958b50282d5563afb84eec872816&scene=58&subscene=0": "腾讯安全威胁情报中心推出2023年4月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247514406&idx=1&sn=3a11ec1ad062f13bf6e8b0ca87a1cad1&chksm=eb706719dc07ee0f12dc6a4261ccb9f9816cddb65ebff108eff555e0fc656d21df12eec41208&scene=58&subscene=0": "【火绒安全周报】Linux被曝内核漏洞∕推特网络攻击案主谋预被判七十年", "https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652313170&idx=1&sn=24321d16a88641c8a6f501418e74a6e9&chksm=8bc48bdcbcb302caf2549fd94e734e3f7027250d54211151bada0826382c59724ed8ae2f613d&scene=58&subscene=0": "【InForSec2023 年会论坛回顾】王帅：软件侧信道漏洞检测", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518793&idx=1&sn=452346e011e010b10f906b1cc3b1e695&chksm=ce460159f931884f4bfff424d4edec16e03d65f3e15cf1d51d9748147469216d1f80cc8e6ee9&scene=58&subscene=0": "【漏洞通告】宏景e-HR SQL注入漏洞 CNVD-2023-08743", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518793&idx=4&sn=0cd77eb9fc8e89f8c033b68cbf1d67f7&chksm=ce460159f931884ffa6201c6b26918e673d5dd76fcc15e9265ea1e0b2e1b1691bd79ec84fe4d&scene=58&subscene=0": "【漏洞通告】Windows OLE 远程代码执行漏洞CVE-2023-29325", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516487&idx=2&sn=a0bd3a1e5ae0747b856ff42a50636fa1&chksm=ea94b02ddde3393b8a0a1ef90ddb1b3ee7f686b99ca6be0fbe36815c0c1d139cd46fda753f61&scene=58&subscene=0": "CISA提醒：严重的 Ruckus 漏洞被用于感染 WiFi 接入点", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498568&idx=1&sn=01741813c0e3733a78dd83b0886f6256&chksm=fe79dfd0c90e56c66466aaf9ad2a47a2f3cba5017b36136ac387f49e6bfdc11a4aceacb2d91d&scene=58&subscene=0": "【已复现】Foxit PDF Reader及Editor任意代码执行漏洞(CVE-2023-27363)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493344&idx=1&sn=84ce337b7d1e2cd0a14b84be1e5bb7a7&chksm=fd74d629ca035f3fab8a7140e2970a147288c415847b2afc2bb455a98cfedc3481cf876f0c1b&scene=58&subscene=0": "CNVD漏洞周报2023年第19期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493344&idx=2&sn=1af5daf5e77d07abd3ed0ea96ecd4971&chksm=fd74d629ca035f3fe91225c72c074d6a64a913827d27202b90f380a2adef9af58b479f9976bb&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230508-20230514)", "https://mp.weixin.qq.com/s?__biz=MzA3Mzk1MDk1NA==&mid=2651908118&idx=1&sn=9d35cd44172636fc65732cde95a5dbbf&chksm=84e37b93b394f285d7ebd5f9562be0a9d98f74c7eb9ba9578a2135317a9f354bb8535fa93a15&scene=58&subscene=0": "DSRC漏洞奖励 TAI KU LA！快挖呀挖呀挖！", "https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657164518&idx=1&sn=676703a4222541f9bdd460442ffce0ff&chksm=f1d4ee03c6a367158ffaf5bacd1df0e2e72f35a29946cb0c9e8e96999e6a3268e24d1a159962&scene=58&subscene=0": "CVE-2023-32233 linux内核提权", "https://mp.weixin.qq.com/s?__biz=MzA4MDMwMjQ3Mg==&mid=2651868606&idx=1&sn=6379ef63644b645d3539afc2affe2bab&chksm=8442b559b3353c4fb7cd81f12eac3778602d81a78d5896d81f322e11c4fd6d424cb4e6f01a31&scene=58&subscene=0": "CVE-2023-32233 POC", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458504523&idx=1&sn=efa8d1d5a282655cfd12dfbf973a3c12&chksm=b18efdc186f974d78d20a6e7ed6a29099ff6664fb96a58de72172bd73f87b08f7ae0c248dd2a&scene=58&subscene=0": "CVE-2023-21768 Windows内核提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487090&idx=1&sn=da3ca4cfeb2a99ce68f1a5cfc358611d&chksm=fb02832acc750a3cef5c31decfae264f51736e0a1fe28aecbcb482707fb7da46c8c36391ba65&scene=58&subscene=0": "在野1day风险提示｜泛微Ecology信息泄露&前台任意用户登陆漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518822&idx=1&sn=e9109c0777c9684ca6ce3535d3b555a0&chksm=ce460176f9318860e105e1f8c6b692159bd362ebedcac504d33c8b343a64684762b6c25476a1&scene=58&subscene=0": "泛微E-Cology9 任意用户登录漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498326&idx=1&sn=972b6786c114d1043b06cf38e9491b45&chksm=973ac934a04d40229566184cf9624e001b03095b7fba6ed1920b8832395c2f726a253a047001&scene=58&subscene=0": "CNVD漏洞周报2023年第19期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498326&idx=2&sn=89020c1349dec9121ac5f5a0e429947f&chksm=973ac934a04d40226f1edfa9a7c3a9af403c4835dc1b0fa2bbaf09780480d40d295c68f7b99f&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230508-20230514)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458504553&idx=3&sn=caf8fb1dca574464e28d699e77c74c6c&chksm=b18efde386f974f567d6bb9e9e2d420ceee94570e8f262a4f1f5fcc26a924a0849b76b072ae3&scene=58&subscene=0": "CVE复现漏洞精讲-从基础到入门：现在报名立得20元优惠券", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516507&idx=1&sn=b78916339d8b011287a81705ae5bad84&chksm=ea94b031dde33927690ac184722ad174120f995e5e18207d26b03075f5d29177a92bb82a179a&scene=58&subscene=0": "11个严重的 RCE 漏洞影响数千款 IIoT 设备", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516507&idx=2&sn=4feb9d27621fad108f4bf0e243869f00&chksm=ea94b031dde3392716b432265d80ced2cfbd7405b059e17ff1bc8264c018c4987a6a30fd5e32&scene=58&subscene=0": "0day 可导致设备遭远程攻陷 贝尔金不打算修复", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247536792&idx=2&sn=4b64571e25df2baab9d644203dcf831d&chksm=c1e9dcc9f69e55df34c3c0495adf42daab0fb1b45ddb6a3ce4012f688ca82a17183243aea8d5&scene=58&subscene=0": "严重的RCE漏洞导致数以千计的工业物联网设备遭受网络攻击", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492148&idx=1&sn=290de8c8425d570a0c9bcf36632902db&chksm=fe26e735c9516e2338443e7b672b27cd5f8ccd530a955d98fbcfed29d43bb7a8c3c5f48db88f&scene=58&subscene=0": "CVE-2023-32233：Linux Kernel 权限提升漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492148&idx=2&sn=1d6818d43bd4902d72aa378b0d282784&chksm=fe26e735c9516e23e60a53839e11e83c88931294e918afdd15a65ffaa7f5bbb813dcde8cf858&scene=58&subscene=0": "泛微多个漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247536910&idx=3&sn=c47d6d2219c584c7cd12e2cbd419e2a4&chksm=fa93e7cfcde46ed951b6c9a3b8e33d1443eb1884a728a2fa42ea78a591ce1da3ac9192aee773&scene=58&subscene=0": "工业路由器曝光11个新漏洞，可远程操控数十万台设备和OT网络", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458504753&idx=1&sn=6e75e8af4a3669d23289177676d74213&chksm=b18efebb86f977ad431358e3815a24c1efc2912522e4f7aff2621beae46654056e2e4941db4f&scene=58&subscene=0": "Linux内核漏洞分析系列——指定版本内核编译及使用", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247489059&idx=1&sn=557049e158f2f5ba19f848d20f477e93&chksm=fe2ee9a8c95960be537e31cbc4b690b774370459a5d916f18f848146d6fb44807ddf5c047dca&scene=58&subscene=0": "美国国家标准局 | 对最危险软件安全漏洞的评估（ACSAC 2020）", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247490861&idx=1&sn=11df64bb80eddcf806dfdd402447a542&chksm=96db16f7a1ac9fe170af2b336905721f51fda142e9c02da3e227d0a7337a802c46e6f7574ffe&scene=58&subscene=0": "漏洞情报 | Linux netfilter UAF漏洞(CVE-2023-32233)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516520&idx=1&sn=b218e43205e7038adc4f452ffee4c6e2&chksm=ea94b002dde339147f0499b209d253c186277b9ecf0af4a44153ac18705dffd978ecbe379083&scene=58&subscene=0": "思科提醒：多款交换机存在多个RCE漏洞且利用代码已公开", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458504797&idx=4&sn=31d77bff4eebd40237f7c7f02f488a18&chksm=b18efed786f977c13121c7be694f69d288688609304e54142cfd0cea2292e4381f00fdcb704e&scene=58&subscene=0": "赋能企业安全！系统0day安全-二进制漏洞攻防（限时75折）", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498625&idx=1&sn=70828d24506bb2372aecbb7922fc5a28&chksm=fe79df19c90e560f4edebb0868cc494c69693bda453bbef12b3ac9293e78a6f8ebb836aadadf&scene=58&subscene=0": "Apple WebKit 多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649784890&idx=1&sn=76b2c376d5f45299a74e88e88179692a&chksm=8893b255bfe43b431c32dda40c8769a5c3645bed889abeb45c22d64060ace856b72d3ea51846&scene=58&subscene=0": "破纪录！LayerZero 推出价值 1500 万美金的加密漏洞赏金计划", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649784890&idx=2&sn=a201fea56c83b01f9307f40740905927&chksm=8893b255bfe43b43e19527683936885f24e577c736910dc862d8c659e256c54f985ef9f4a290&scene=58&subscene=0": "【安全头条】CVE-2023-2478：GitLab代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650177185&idx=2&sn=8cd17af9003cf8146ae00c7b16c41930&chksm=f448851dc33f0c0b6ddc2aa7a793f704163af77e606c1c9180a9250a3d877e5df33e7fdca70f&scene=58&subscene=0": "CSOP看点 | 微步在线樊兴华：漏洞情报助力高效漏洞运营", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516531&idx=1&sn=71b3e940c482c53d52c592cdfe3992db&chksm=ea94b019dde3390fb1ecf3bd947eb8852a1f27e29e28f9c88b97d9bb2087840f62be6d882d4b&scene=58&subscene=0": "苹果修复3个已遭利用的新 0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516531&idx=2&sn=bec3a163f15f4644b2f3e77f9bd07201&chksm=ea94b019dde3390fc8f528515aca82446e3ee7d9a840c5976c277f125edd5a476b402f161717&scene=58&subscene=0": "史上最高：LayerZero 漏洞奖励计划最高赏金1500万美元", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652034825&idx=2&sn=e67e4654b3ccf451d11593c12285f6e2&chksm=f36ffb49c418725f425458c0a275495fd206c53e47a2cd91c5ea45b4fda3ceb51b78589e75e3&scene=58&subscene=0": "【安全圈】快更新！iOS 出现严重安全漏洞：黑客可直接盗取你的通讯录", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458504808&idx=1&sn=7ecb49e9008d049c71e522d51082d956&chksm=b18efee286f977f498369005601452d6ed032a8d3a5dd11c615fd423cf047077db736f8df119&scene=58&subscene=0": "Linux内核漏洞分析系列——CVE-2023-0386", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247498153&idx=1&sn=09aecb24c4bab695755e584c3eaa592c&chksm=c1448b14f6330202334476c760c5758d08c7eacaaecfe19e1565e7df95b12b2a983863b1fd9a&scene=58&subscene=0": "从漏洞管理到风险暴露管理", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652034891&idx=1&sn=7aaa97cc21b81bb234d7b2ce9b0db538&chksm=f36ffb0bc418721d063842695efb29e81efc235263cffebc895ddc2ee29d008ad0b54fa83165&scene=58&subscene=0": "【安全圈】注意！苹果又曝 0Day漏洞，iPhoneiPadMac等全部受影响", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247506484&idx=1&sn=ce0525563b459be8e785fe4b7d5215f0&chksm=ea662d43dd11a4551d89c74cc3f5e1fea4f30622bd1de7df95a129473875def53c2c7dbf34e0&scene=58&subscene=0": "CVE-2023-28252在野提权漏洞样本分析", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492164&idx=1&sn=1514f16983921e7bd0731f9b78655914&chksm=fe26e745c9516e53f7d97caaa6c436ab78150b508206a15cfaa095601f382a6fe4dc4003af04&scene=58&subscene=0": "Apple WebKit 多个漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247561564&idx=1&sn=0d56ec2104c35ec586ed3f3fdc6f3954&chksm=e9142166de63a870d3ea6d1f3ad37e633813f7ec21ea1ba6f0362b6fdf1f7a7bf61e0aa515a2&scene=58&subscene=0": "AI语音克隆产生安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247561564&idx=2&sn=fccdbe7cbd01b4f8ceee0d447192ddeb&chksm=e9142166de63a8706a4433887a69c1261a14728aff5f32d88bd253165cb9fc781e01e3574c47&scene=58&subscene=0": "LayerZero发起最高1500万美元漏洞奖励计划", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493376&idx=1&sn=a5156aeeda3ef3cdf3827ada78660066&chksm=fd74d7c9ca035edf9f6b071516675cd5aa4aa0569b9fb5d7cde1e8c197c0a261516098d04edb&scene=58&subscene=0": "CNVD漏洞周报2023年第20期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493376&idx=2&sn=0cbdb37cbbba127b677fd9a6da003fc3&chksm=fd74d7c9ca035edf57f9fd47294eb2480e42c8f6a9f5071a96202fe67332687e4d0e95a9207f&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230515-20230521)", "https://mp.weixin.qq.com/s?__biz=MzIzOTE1ODczMg==&mid=2247496611&idx=1&sn=0790468b3f8ba1a63e9ef5869a0c3e36&chksm=e92ce700de5b6e16552796d530de183bdbd2284f4e60078982ddaf2cebf76b50adf2779de3d0&scene=58&subscene=0": "蓝军视角：阿里云 RCE 战火余烬下的启示", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498661&idx=1&sn=330bb331846e36562f1fcd32a59aca59&chksm=fe79df3dc90e562ba830817314220425bd7031724dc5e9a0103aa63aab799bd9be28a11618ff&scene=58&subscene=0": "【已复现】GitLab 目录遍历漏洞(CVE-2023-2825)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247497553&idx=1&sn=46f01acf8c15b06cbd1c8b5e7c41e0ec&chksm=cfc5500ef8b2d918bbcbdd3ac8c0f4ea0038dc69cd41d1db960e8762c2dfbeb43378c059c14d&scene=58&subscene=0": "“粽”享好礼 | 端午特辑 - 通用型0D漏洞提交学习计划", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516580&idx=1&sn=3e272b8a4ba9c8f7b596e5bc1c9f6576&chksm=ea94b0cedde339d8dee6f14566aaa4da84cb44e202cc0582353695ecd4620c832ba4c9ddab91&scene=58&subscene=0": "GitLab强烈建议尽快修复 CVSS 满分漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516580&idx=3&sn=167c3b3338d23cf14213471948cfc1fa&chksm=ea94b0cedde339d839a79eabe54cb687eb0f8bd5b2f135cadbc58cffcbc6b04f783f530dead1&scene=58&subscene=0": "使用广泛的开源框架 Expo中存在多个 OAuth 漏洞，导致账户遭接管", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247537612&idx=5&sn=69f0ec0f32b459125c4dff9af73fcca7&chksm=fa93e50dcde46c1bee15463b3eabfdf3413b92426a5eb501c99b6742623dfd90f71a05996a36&scene=58&subscene=0": "谷歌为其Android应用程序推出新的漏洞赏金计划", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518923&idx=1&sn=71a4d11d6e38781087fde158e848c732&chksm=ce4601dbf93188cd6361003c8ae5885b7acb4890acb0f63d0b63b3fbcc68906b6e69a06ee046&scene=58&subscene=0": "Gitlab任意文件读取漏洞CVE-2023-2825", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247501830&idx=1&sn=1e0b6bde70aff658c42dc49c0507e79d&chksm=cfcaab12f8bd2204835ef36a87ba65442f9fc045a62e3fbd489e352516dfb744111c1decb7f1&scene=58&subscene=0": "别急着修！GitLab满分漏洞（CVE-2023-2825）实际几乎无法利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516588&idx=1&sn=981ba7ac004cc1b05279618b3be57e1f&chksm=ea94b0c6dde339d00da0ef0e86a316035b22c4f86ccc177e5420b43bcffb6d47b13200edab35&scene=58&subscene=0": "D-Link 修复D-Link D-View 8软件中的认证绕过和 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516588&idx=2&sn=9de12fd66aca0db1dd5cf6843cf5172b&chksm=ea94b0c6dde339d067936cdf6ad3806f1669be3d65022c613d8544726872d4dca7d3377e4a9f&scene=58&subscene=0": "合勤科技防火墙和VPN设备中存在多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502015&idx=1&sn=39a4dd93fe5cc0a85dcb4aae28c6bf9c&chksm=f258544cc52fdd5a3ef748e125527cbe76d325b0b403ce359b686362a5cd923963e16faa2d45&scene=58&subscene=0": "泛微e-cology9 changeUserInfo信息泄漏及ofsLogin任意用户登录漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247537549&idx=1&sn=0ac962eb7f129c9bec78b28b0add2f1f&chksm=c1e9dfdcf69e56ca304ee03f22340418bc3701f1c0654d989b28738126d18d54d203ed7fd9b5&scene=58&subscene=0": "CVE-2022-24521：Windows CLFS 本地提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247537662&idx=1&sn=b1c12982eada7b757d915a4c3323c90e&chksm=fa93e53fcde46c29584968ace8430e5ab259aa77cdbdbaf7c5ae5ef045f8cb1349739cc3f885&scene=58&subscene=0": "CVE-2022-24521：Windows CLFS 本地提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247537662&idx=4&sn=4d497de5881dbc08e9217601a9bd6c01&chksm=fa93e53fcde46c29161ef5b609b5f7ae5b166c444162276cd06d33cf19ace0213cd75528fc3d&scene=58&subscene=0": "ChatGPT 和 Bing 的核心安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649784921&idx=1&sn=9d2a1306597b68332193319614bca078&chksm=8893b236bfe43b20989924d3c09c0426078fdd734219860ab44b277e60bcc16c67ce5677d457&scene=58&subscene=0": "GitLab呼吁：尽快修补高危漏洞CVE-2023-2825！", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649784921&idx=2&sn=47e30f07fc46aef27b9d212b25f54332&chksm=8893b236bfe43b206f9992da23f2f2b6916e781eea295c1e3e1329be7e563a19730972f4a1df&scene=58&subscene=0": "【安全头条】网络安全厂商ESG遭遇0day漏洞攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518929&idx=1&sn=f5378b09e2615a95d877152aa1ff0d75&chksm=ce4601c1f93188d7d0ada6ec92212859bbcd687d59036d9252881a509ccee8458dd79c44d571&scene=58&subscene=0": "高危漏洞占比上升4%，《2022漏洞威胁分析报告》复盘三大场景漏洞趋势", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247490892&idx=2&sn=1fd0550bfd9a5749f35838719a7ed1e1&chksm=96db1696a1ac9f8003fe5cad9709d0c8d14ff4e66f910def666aab5a91ba8ccb2601ce0d4f53&scene=58&subscene=0": "漏洞情报 | GitLab 路径遍历漏洞(CVE-2023-2825)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652035447&idx=2&sn=7bdbe45cf5e9efb340dbb03d686ff1a9&chksm=f36ff537c4187c21e8bc8fb25edb0b88187a614c60da5e21f4897dc5edaef81ecb442abc6b3b&scene=58&subscene=0": "【安全圈】Expo框架出现能劫持账号的OAuth重大漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516596&idx=2&sn=7cb9c52c6de509bd244e7ae651a5f1d9&chksm=ea94b0dedde339c84813054bbdbdd547ed52a95f29edf6a134aff5d6417917a6d6f16e49593a&scene=58&subscene=0": "利用5个0day的安卓恶意软件 Predator 内部工作原理曝光", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652035510&idx=1&sn=d94f2e7de28306deb75e9ff6a8468c5f&chksm=f36ff5f6c4187ce06c995b8f2bfc1db5a699a81b24cd7b2818a838331d43b8f585289d9c63f6&scene=58&subscene=0": "【安全圈】可让攻击者在有针对性的攻击中绕过保护，三星漏洞正在被黑客利用！", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247498256&idx=1&sn=a39f3b0f90f4e25c8e64e4a15ce5518a&chksm=eaa97230dddefb26955cdb3ba65e2c87652fcdf580ad8996e525980e9f856e3d0e67290e4a70&scene=58&subscene=0": "光速下班，用IAST挖CNVD通用漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247561983&idx=1&sn=d6fb71afe15689bf0d9927dfa66fbd7e&chksm=e91422c5de63abd309fbccb6ffff5b11b6326d997466bd36f7290788be7dda6dfe3a2c5e9c97&scene=58&subscene=0": "三星漏洞正在被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247561983&idx=2&sn=c2d07f53557935fffaffc413792a2036&chksm=e91422c5de63abd3807e3bb59bd50b2b92b943371ba19bfdb8a6f3ebd65dd517de495da3b802&scene=58&subscene=0": "针对安卓应用，​谷歌启动新的漏洞奖励计划", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247537628&idx=3&sn=bbeab0b7d9e1472fd9ae555e8324e0cd&chksm=c1e9df8df69e569b2e6a77e319b9075a14795039e22aaf7411b4b1d34fe806bb4e9665ee034b&scene=58&subscene=0": "OPC UA .NET Standard Stack 资源耗尽漏洞分析-05-26", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502022&idx=1&sn=21d7e4ffa00279fd1afcfa51f2a2cdc8&chksm=f2585bb5c52fd2a35041de9a4d5db3a6de71776bd4c0e4ca1004fcf896e53b4ead7149428132&scene=58&subscene=0": "雷神众测漏洞周报2023.05.22-2023.05.28", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247537739&idx=1&sn=6a91ff111dc9bd1745185c90a1723815&chksm=fa93e28acde46b9c542d831f67da382709a9c21d9329b2837884e62e064b54d874da799ac6b0&scene=58&subscene=0": "原创 | OPC UA .NET Standard Stack 资源耗尽漏洞分析-05-26", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493411&idx=1&sn=665a7171dda2aa864ee1256d22956528&chksm=fd74d7eaca035efcaff3a53c173087d73117ff25cb724954697a3dfef21d093236ef377fff46&scene=58&subscene=0": "CNVD漏洞周报2023年第21期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493411&idx=2&sn=fbc56dc7f45ace44c741f22faa0fff90&chksm=fd74d7eaca035efc1c72ba5e9518fef8345320e806fd44551d24c50c933b8b7bf3a0d25a7f1f&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230522-20230528)", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649784938&idx=1&sn=474c7049794606bedfa046788062beb6&chksm=8893b205bfe43b13e0b890b25454a8ca955c37463da2a5ee16878e2126bf355fb4ccca704290&scene=58&subscene=0": "开源平台Expo Framework 曝出高危漏洞，攻击者可劫持海量账户", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498358&idx=1&sn=9182081600bb49460cf05d15c5f38693&chksm=973ac914a04d4002662e86a1fe647f3d4e5d0963d201176d8703b378e5c38fc4bf5dea19f802&scene=58&subscene=0": "CNVD漏洞周报2023年第21期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498358&idx=2&sn=da427fb990d82b6a2bfb56d2b5cfdc46&chksm=973ac914a04d4002f16b4f22c07d30860e4bd22f57e1e867ca3cca42c052d2979a04301acfe3&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230522-20230528)", "https://mp.weixin.qq.com/s?__biz=MzU4NjY0NTExNA==&mid=2247489518&idx=1&sn=87ea73cd6e5750561ff7aab40cd8b671&chksm=fdf97cfbca8ef5ed9cc4afd75acacf9ecb9d219029ed236b6fa627730972a5dd23918a46b949&scene=58&subscene=0": "云安全案例16: Wiz在黑帽子2021上展示亚马逊云跨租户漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247537647&idx=4&sn=6b1cec65a434c2baa4031e8e5acb5b80&chksm=c1e9dfbef69e56a8eefbbbfbe7439e907264aee6b8ef54dc46723f3fb27a7d734225bc4bdcdf&scene=58&subscene=0": "针对安卓应用，​谷歌启动新的漏洞奖励计划", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498691&idx=1&sn=5150cd2327f31d12e76022e19beef645&chksm=fe79df5bc90e564dc23989f691b723875f80133d8816dd9d3f88fc54d79a6416682e82e2e65b&scene=58&subscene=0": "【已复现】Apache RocketMQ 远程代码执行漏洞(CVE-2023-33246)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652035632&idx=1&sn=3ec538535b6643b4374afef6a908bc78&chksm=f36ff670c4187f664f4390c1d94367e51711cfb13060de9c8f459720b258f419aeeb1f2ce0f0&scene=58&subscene=0": "【安全圈】微软发现 macOS 漏洞可让黑客访问用户私人数据", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247497740&idx=1&sn=4bb1141412585f887bf6a51f78201230&chksm=c0075590f770dc861ca242167e23543045090ca8014af755153e9fcc87b7461d8d9525bf41da&scene=58&subscene=0": "API NEWS | 三个Argo CD API漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516628&idx=1&sn=76b9f155a8fc5e1a9280131bb8c9a71c&chksm=ea94b0bedde339a86e6f4823421deb003dbbfdea7920b2ee0c60d27f88c6c00bf1c461413ab5&scene=58&subscene=0": "微软发现绕过苹果 SIP 根限制的 macOS 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516628&idx=2&sn=eb96b9d65915efbbd1f1b4c2d593f8ee&chksm=ea94b0bedde339a888633e30fcb2b3c54d03a36f0627a8c4fbc37aa593420cfd86fd86d9dbf4&scene=58&subscene=0": "黑客早在2022年10月就利用0day 攻击 Barracuda ESG 设备", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516628&idx=3&sn=e345f10a85be40cc222042b8747dfb66&chksm=ea94b0bedde339a84d0513845df5d1561cb160925121211045013fc286425c47dba6eaa93da1&scene=58&subscene=0": "这个Sonos One 扬声器漏洞价值10.5万美元", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247537792&idx=4&sn=4733f70e3a936b3b8900ba772f672599&chksm=fa93e241cde46b570aad3d64f4d47353b9976a9780e42213a6d2b57961835c0034710522440b&scene=58&subscene=0": "12 个漏洞！与勒索软件有关联", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487236&idx=1&sn=d220ca128eaa3df1a9f4823b88f347f4&chksm=fb02825ccc750b4ad253aa189277cf2147343c2e34e2cbf4057825db0c7a560a36acf677aa87&scene=58&subscene=0": "漏洞风险提示｜大华智慧园区综合管理平台远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491477&idx=1&sn=448e963910a5f67359c7251de56c45f9&chksm=96f400f8a18389ee0f49af5b07c9fb329027a96a78b5b8ec1ddb409ac9bd11f4a3fc72e1d109&scene=58&subscene=0": "漏洞风险提示｜大华智慧园区综合管理平台远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247562037&idx=2&sn=cbff2f1a8d1ea48dcd6d4ce408081b48&chksm=e914230fde63aa19388cc20d596034a3bab48666991091698ad24e23fde212f7575eca757fae&scene=58&subscene=0": "黑客利用 cookie 插件漏洞攻击 150 万个 WordPress 网站", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247489117&idx=1&sn=e9490c7d4f8f4477a44cbc5f41e7e5bd&chksm=fe2ee9d6c95960c06243799e2cfeed939a701305a21d4569776e28ae41056b43bbebb609a088&scene=58&subscene=0": "柏林洪堡大学 | 基于深度学习的Python代码漏洞检测 （IST 2022）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516632&idx=2&sn=6facb00a2129b1781ccdfcfda5ba6032&chksm=ea94b0b2dde339a4b08ad29601e05b57e19dce03c622d127ff45336a2fbabf8f8c427990f5be&scene=58&subscene=0": "Chrome 114 发布18个漏洞补丁", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045362&idx=1&sn=510588c77e5e0efa4aecf996ae33c7e6&chksm=803fabacb74822ba5eb5f941080b7e3cef73c523fdd11b4e9a6edfda8ece7396ddfc07e72a1e&scene=58&subscene=0": "【漏洞预警】WordPress Gravity Forms PHP对象注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492192&idx=1&sn=bf18e75366e077eeaa5fb597dd470c19&chksm=fe26e761c9516e77e9a5b3251437f19e701776ea3e911fdf3c03905950c4193228bd3b034f21&scene=58&subscene=0": "CVE-2023-33246：Apache RocketMQ 远程代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652035765&idx=1&sn=0a1881b5c128c668dddfaa651cddd6b4&chksm=f36ff6f5c4187fe3fbfcac2da9e4027b67a26f0c0a4dc69a28ac047812efd031da69b45ed351&scene=58&subscene=0": "【安全圈】技嘉曝“类后门”安全漏洞，影响约 700 万台设备", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247537811&idx=2&sn=bd4769d2754bb5f795afa53533ca3778&chksm=fa93e252cde46b4482e3045ecab878ea7a703f453842efc842b8283ee8b002a71c610cc8c03b&scene=58&subscene=0": "黑客利用 cookie 插件漏洞攻击 150 万个 WordPress 网站", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247501901&idx=1&sn=b07f02ce308232a5bb1f09b1427d9f5b&chksm=cfcaab59f8bd224fc741d81baffec5f44e2fea9142c7d6b42c57a5e57d50e7139a3d651c30d2&scene=58&subscene=0": "速修！Apache RocketMQ 曝 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664185432&idx=2&sn=cb97f76db371285d06c8b929df7df0f3&chksm=8b593ca1bc2eb5b7ceaf55833ef227ec3cd91018aa33eda0d0fba6a6124060382a5e767eb831&scene=58&subscene=0": "CNNVD漏洞奖励计划 | 积极促进开展漏洞预警及风险消控工作（二）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458505973&idx=2&sn=1a5a1042b8a06a2dae3ed108b6002ba4&chksm=b18ee27f86f96b695268b964bf1ac044432cd779d1f40ee7d4375d6dfffc2797504f30d1c958&scene=58&subscene=0": "CVE-2023-22809 sudo提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516649&idx=2&sn=8568497e673e6061401b953a0bb37e2d&chksm=ea94b083dde3399587e9f570cb506e4f4d17d2f23280a147343bc96a5a1c55eaa427de1dffb0&scene=58&subscene=0": "合勤科技修复NAS 设备中的高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516649&idx=5&sn=3a673400f9a00b2b334fadfda1b0a8a9&chksm=ea94b083dde33995e9079edc64941b6bda561e4fbb1c4406e76ffcfb5423d723243494cbb5af&scene=58&subscene=0": "WordPress 紧急修复影响数百万网站 Jetpack 插件中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650177376&idx=1&sn=6d11cd9d56aa8d90c669d5a07423c5ee&chksm=f44884dcc33f0dcaf3292abe8a0062794750ec81535e520e9e7a1fb5d5322f0f63fcb7d3a463&scene=58&subscene=0": "X漏洞奖励计划周年庆 | 一周生日，三周欢庆", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247537838&idx=3&sn=ad1bdb2bdaf5360fda4d083470772aa2&chksm=fa93e26fcde46b79d409f74c1eac3531ffbb2c82ef0b5e95dd612b365cd82b3616e91f262217&scene=58&subscene=0": "技嘉曝“类后门”安全漏洞，影响约 700 万台设备", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247508762&idx=2&sn=51b5d1e4541e9ee8217612dad470801a&chksm=ebfae43adc8d6d2c415e66f715b7c0547eac619b4d5bf4e4234b38c7ae6bd57849416e8625db&scene=58&subscene=0": "梭子鱼邮件安全设备零日漏洞被利用长达七个月", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458505990&idx=2&sn=6e321eaf6bde47657f2d343472c40fa1&chksm=b18ee38c86f96a9aa0a6d06be8b0bcfb4ee2f86314ee88d080898ea7704bd8aa3e84e3cc9e02&scene=58&subscene=0": "直播预告 | 系统0day安全-syzkaller 之linux内核蓝牙协议fuzz", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518962&idx=1&sn=8c1a61e35e15c48b4c7d0e31a9046467&chksm=ce4601e2f93188f4708b42cbb59973d95185fc5852dc8c240ca05cbfe093ca64fdebf21c9340&scene=58&subscene=0": "RocketMQ 远程代码注入漏洞 CVE-2023-33246", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502060&idx=1&sn=6929690d91581f8ab424c0004fea7d22&chksm=f2585b9fc52fd2890680143756ddb1b883c4b4e5cce096f91a49a6d0c21c2a5de33d0bae3396&scene=58&subscene=0": "雷神众测漏洞周报2023.05.29-2023.06.04", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516660&idx=1&sn=bb8f16701a800011a7e9bc8857cd59d2&chksm=ea94b09edde33988e2fee2cb9c23d0031149201a1722cfabc8899b76b31016a44a835836d8a9&scene=58&subscene=0": "MOVEit 文件传输软件0day被用于窃取数据", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516660&idx=3&sn=50c590fbcde8660028cb962e1ee37397&chksm=ea94b09edde33988842895577616f04e287bb0a7c46caf92527cd2429f348583f32f77e7c6c9&scene=58&subscene=0": "Splunk 企业版修复多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247508776&idx=2&sn=9495bc8c7adadd8558fd1cabf57bdae7&chksm=ebfae408dc8d6d1e11c3e0c29506e39c020de81e8b7d661ec4392b9ff8223dede92023882903&scene=58&subscene=0": "NIST发布《联邦机构漏洞披露指南建议》概述", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247497798&idx=1&sn=daf1fc65869ccd862c91e434ca16271b&chksm=c00755daf770dccced4def1e57cb98469665a2c1e19999249fe6f4a11e5ba20a8b60b8140d71&scene=58&subscene=0": "API NEWS | Money Lover爆出潜在API漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY0NTExNA==&mid=2247489533&idx=1&sn=907a9c32adbf3699efa7bfd7d1fb25ae&chksm=fdf97ce8ca8ef5fe204bd7d7218465b5acf993f9639b1227cfb82c59e57a4e031a745181a698&scene=58&subscene=0": "如何有效遏制针对通达OA漏洞利用活动", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493425&idx=1&sn=406ab215c90ab5ba821c661849e7d7d4&chksm=fd74d7f8ca035eeece1684ce08d327d4c6d3e0a0774d06ea96473378d48e01f6fba54319f30a&scene=58&subscene=0": "CNVD漏洞周报2023年第22期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493425&idx=2&sn=7da59f3af3a967322f4ac1c66ee5da15&chksm=fd74d7f8ca035eee1caa9a20e5351382d9c1e67949b5662adcca791a4cf466777ad7c20ea7bc&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230529-20230604)", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247528693&idx=1&sn=6ade045bffc6e92ddc565c2d85332670&chksm=eb849b55dcf3124309380646766b6335752e451b00903f90738c7b25b11d6000fe02ceef04ae&scene=58&subscene=0": "插件分享 | Headshot ⼀击即中，对指定URL进行漏洞批量扫描", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652036152&idx=3&sn=9163239840bff6cae8450825d8a26a6d&chksm=f36ff078c418796ead7b5dfe1e8c586707324f762c313022db9846624693594c237f62eaa0d7&scene=58&subscene=0": "【安全圈】Zyxel 防火墙曝出高危安全漏洞，现已修复！", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664185600&idx=2&sn=01eeff48ab0ee85e4d02674ec543c7ca&chksm=8b593df9bc2eb4ef61e32fd797976961b17a1f07ac2baa8eaec2daa59645516de245b4dc5f47&scene=58&subscene=0": "CNNVD漏洞奖励计划 | 积极促进开展漏洞预警及风险消控工作（四）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458506062&idx=3&sn=5daf7ce036fc94df3e11f661f4eca38d&chksm=b18ee3c486f96ad202cd1061e3fbbaaca602d2c6bc7a5e4ed68fc67b11c6ba188a6b5df6302b&scene=58&subscene=0": "赋能企业安全！系统0day安全-二进制漏洞攻防（限时75折）", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247537799&idx=4&sn=2948c119e30b4b8dfb7bbf8600f64805&chksm=c1e9d8d6f69e51c0a49ab9da489f52f26f2cd3a25e7a7dad76c97ea6f5317055513d5aedbf39&scene=58&subscene=0": "MOVEit Transfer 漏洞似乎被广泛利用", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498375&idx=1&sn=0db04d6cc956d8a9d5f69bcc7fbed560&chksm=973ac9e5a04d40f3bc31b1f00520cc0b43fbe038ce086b62c2da346d735a7f5cebce57551834&scene=58&subscene=0": "CNVD漏洞周报2023年第22期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498375&idx=2&sn=7da02de8518cd673a568adb1ce16f001&chksm=973ac9e5a04d40f3cf3ce43c130b7928c6068a63184309b35cb6a84d7e0aeaebc7e239eebeb9&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230529-20230604)", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487289&idx=1&sn=d89f0865420192343c03e450b1315d0e&chksm=fb028261cc750b77003915a7f1041378a9d47158210c223a41c491163c383744fd73ef1fa622&scene=58&subscene=0": "Azure API 管理服务上的经过身份验证的 SSRF 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519210&idx=3&sn=9343dfa8040d62b242762fa841a0f32f&chksm=ce4600faf93189ec31a29b3a84c1daaec61b30ab885f1fd7f332dcab66aa8fa3cff69e3c7927&scene=58&subscene=0": "【漏洞通告】Nacos 集群Raft反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519210&idx=4&sn=336d660569a37517798de300a70fbe89&chksm=ce4600faf93189ec59cfcc9b0689a61e2c927123031c88dc0286e14bfcb48a3b3dd63e5e52cf&scene=58&subscene=0": "【漏洞通告】Google Chrome 类型混淆漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498747&idx=1&sn=5edf6cbf885159278839eee7fbd7d927&chksm=fe79df63c90e567539d4ecd1eeb38a23bbeadc6752dd432c3c746e5a551817c11a20deda6e91&scene=58&subscene=0": "Nacos 集群Raft反序列化漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492204&idx=1&sn=deef214fbd770f4d8b795f264ef9e01c&chksm=fe26e76dc9516e7b66704f364a43d50c019fedcdd500260d0629a67a60e5ecdefd7ef31a5792&scene=58&subscene=0": "CVE-2023-3079：Google V8类型混淆漏洞通告", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651124264&idx=1&sn=2e3d84cd33dfefa1b22103ff6e3d3e9e&chksm=bd1442fb8a63cbed9027e7271d75a2b695b45941ef260cb02433255ed2b8f14ce4915bba50ff&scene=58&subscene=0": "OWASP发布大型语言模型漏洞威胁Top10（草案清单）", "https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651139579&idx=1&sn=e662f5e25e72a9c2f8cd646c1bdcd8e6&chksm=bd50bdaf8a2734b906b0f81aa883140d614bc674ad3dd26d30049877227cae270e589ce1c3c6&scene=58&subscene=0": "[漏洞分析] 【CVE-2021-3490】eBPF verifier 32 位边界计算错误漏洞分析与利用", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458506114&idx=1&sn=3de4c938a01579657384d414f8354047&chksm=b18ee30886f96a1eadb472d362824892580f3842a07b83805e619e01028fc05716f002df8616&scene=58&subscene=0": "【新课预售】学习Windows平台漏洞挖掘，为企业安全保驾护航！", "https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657164521&idx=1&sn=6031758ec055f571b10268b8ee283618&chksm=f1d4ee0cc6a3671a6d67c91391ecd816103ff2ec92063d9d7a066073ceeb2488cb69a42753bd&scene=58&subscene=0": "ISRC端午“粽测”，单个漏洞最高奖励可达万元！", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488295&idx=1&sn=2d31d457037e75b161c56f80a44cf6ed&chksm=c2c6442cf5b1cd3a82bbda20da3addf486e0f9d559cb464e46731c5f98201e7fc57e387e1a50&scene=58&subscene=0": "【漏洞通告】Nacos Raft协议反序列化代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247484240&idx=1&sn=58c308d646302ec2a6c223ff2f9acfa6&chksm=c2b10126f5c68830eb202afa508c2c65211dafa90dd98d5cb059babe4554bde985eddf54ede2&scene=58&subscene=0": "腾讯安全威胁情报中心推出2023年5月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487296&idx=1&sn=c89ca10c36824bb46089dad3085081a1&chksm=fb028218cc750b0e776b51446faf6808cb6c6e1794c6c65970e78700ae70e34666bf13a4168e&scene=58&subscene=0": "漏洞风险提示｜Nacos Jraft Hessian反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652036392&idx=1&sn=abde9f0a6a861bb927578678fc3025c0&chksm=f36ff168c418787e1ec87079e44304607077518d37a6ef4f539aecc56040f82d9670c7dc2ef2&scene=58&subscene=0": "【安全圈】尽快更新！苹果iTunes出现漏洞，威胁Windows电脑安全", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492213&idx=1&sn=314decc1448b53667999d7d6888b4407&chksm=fe26e774c9516e62642d754af129ba2530124d540879f0c2a6f0d5ba7260022e4add2b23c21d&scene=58&subscene=0": "Nacos 反序列化漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247487767&idx=1&sn=a014e0b07c2a7b1dc97db7495bd7bef2&chksm=fa5abffacd2d36ecc9292620b1ee52dc80e545c7462518b469e6acfd1aaaeb32164d785998fe&scene=58&subscene=0": "X漏洞奖励计划周年庆 | 一周生日，三周欢庆", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651124328&idx=1&sn=ae7137e7ad069bc850ebf98107f48131&chksm=bd1442bb8a63cbad29b5cb5ab83094b9ebcba585e429386103f43bed0dcb3efd3887f1f8b828&scene=58&subscene=0": "最受渗透测试工程师欢迎的10款漏洞扫描工具（2023版）", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247502098&idx=1&sn=25bb891c91472663d9021c43e520b651&chksm=cfcaaa06f8bd231065d04bb5a2d0540553ad6b07f842b17b8a62e84d157787cf506d66f3b692&scene=58&subscene=0": "0day通告|畅捷通T+前台远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491515&idx=1&sn=806c1fbdd42c8b457a0eb4bcd7400836&chksm=96f400d6a18389c0e771d035a4e9e7c723920633345c9013a6e07f5e98bdd52b948de9adb085&scene=58&subscene=0": "漏洞风险提示｜GeoServer SQL注入漏洞（CVE-2023-25157）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516696&idx=2&sn=f9d50b8697f67622344d6400a4246a35&chksm=ea94b372dde33a64677eb42039df16b745cc37313484a52d2b714d5b8c2fad89b1bc71258855&scene=58&subscene=0": "VMware 修复 vRealize 网络分析工具中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498759&idx=1&sn=a94a4f140c197d799071eb5682d719a2&chksm=fe79d89fc90e5189b6a1b86ad4625fefab7e1890bb4ab439d0039e9fbfb158d92589fe482321&scene=58&subscene=0": "【已复现】Nacos 集群Raft反序列化漏洞安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492224&idx=2&sn=17ba3b7815ac741fd75a4194d3b74a69&chksm=fe26e781c9516e97a25a9eefccb2df072227201443ac4f65406d93a4dda3ce12fa1d462b25a1&scene=58&subscene=0": "CVE-2023-20887：VMware Aria Operations for Networks命令注入漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247490921&idx=1&sn=31200ce95ca249f98c39de210679166e&chksm=96db16b3a1ac9fa54dfcb17eb9ac11440a2feb5b58544f89dc4021bcba3bbe62699d830c1aa9&scene=58&subscene=0": "漏洞情报 | Nacos 反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487304&idx=1&sn=e2c70c32b8c50ce020e61c0f9f645743&chksm=fb028210cc750b0623b9c74870d65c32332461903567efdffd20a5828678f918dcad81bee6c8&scene=58&subscene=0": "漏洞风险提示｜GeoServer SQL注入漏洞（CVE-2023-25157）", "https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650844765&idx=1&sn=79417ca56e3c2c90cd5cdc72e09a957f&chksm=80dbcdf8b7ac44eebaf71c96715e544fcd3f9f7cf15e27fe62ea0456e76f97d922a4c2f57cb6&scene=58&subscene=0": "新品预告 | 漏洞数量创10年新高，一键屏蔽神器将面世", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652036537&idx=2&sn=de9b9382006479ea420e02598f3cd1f2&chksm=f36ff1f9c41878ef7dcfeaad699f637563081b7a92ff0c92264316eedbaa23114fb663b42441&scene=58&subscene=0": "【安全圈】本田被曝存在API漏洞，客户数据正处于高风险状态", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247537847&idx=3&sn=37c594a0431fe841938bf19409fd6bcc&chksm=c1e9d8e6f69e51f00b1adffeed4370eea00d65e3e600dec1f9e99b2ff30a13cf226297bd0624&scene=58&subscene=0": "至今未修复的NASA 网站漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491525&idx=1&sn=366570ded64f752c78071aa7ec86cbda&chksm=96f400a8a18389bec1fb5c2b1070e033505cd0a397aeaf86dcf991e6fe7d5c9fde35cb55824f&scene=58&subscene=0": "漏洞风险提示｜畅捷通T+ SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498772&idx=1&sn=263188a175877ed8d0f664c582555541&chksm=fe79d88cc90e519aab93130067a2a47de3e9a0b4f9f7f1ee84b86f714f9e9a002a4122ab2cd5&scene=58&subscene=0": "【已复现】Windows Win32k 权限提升漏洞 (CVE-2023-29336) 安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498772&idx=2&sn=1d646f4a8ce13e3bc72d7c9581ac3430&chksm=fe79d88cc90e519a4671119defce846f196cfa586ac4159d0822ce8444cd42db5b4b29c323e3&scene=58&subscene=0": "【已复现】GeoServer SQL注入漏洞(CVE-2023-25157)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458506452&idx=1&sn=f359676578f92bb362d2a407284bd160&chksm=b18ee45e86f96d48c9ff1bca4d6044e238c140d4ff9b1af2ecef5bb9fba2f9cac045b34071dc&scene=58&subscene=0": "Chrome v8 Issue 1203122：IC类型混淆漏洞原理", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458506452&idx=3&sn=cf542635eed6b98578fe9412e0d5e39b&chksm=b18ee45e86f96d48ccf46c94e9e47bc2b2b6ab5d22d0ef36cd4e587346ea49ada09a8cc5518a&scene=58&subscene=0": "尽快更新！VMware修复严重远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045367&idx=1&sn=a1c50037a6811f484ff1dbba7110f280&chksm=803faba9b74822bf779d12fdc6c1ab0ca8f03cee1db098f6e3aa312aa40f8b3cc128c890b72e&scene=58&subscene=0": "【漏洞预警】VMware Aria Operations for Networks命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516704&idx=1&sn=6a051f71c4415e8ad5f9be754927a9e7&chksm=ea94b34adde33a5c62b6fd4ed5257ace796ceae62afe7d61ca91d818c2973aaa40cfbe68ff91&scene=58&subscene=0": "思科修复企业协作解决方案中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516704&idx=2&sn=90a401546772e7ddd611ed9a84fb46dd&chksm=ea94b34adde33a5c17d938d43cbd131ac5900fc08a3090769d517b6fa917aa91f939093de687&scene=58&subscene=0": "本田电商平台有漏洞，客户和交易商数据被泄露", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487312&idx=1&sn=06fcac2fea43c089a17386f67ec3534b&chksm=fb028208cc750b1e029e6dbf3a84c359b6ec6db990d6c7bceab7c754ff97fabf626f42eec402&scene=58&subscene=0": "漏洞风险提示｜畅捷通T+ SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247514585&idx=1&sn=dc64d67187d8437264d77ea9bba55613&chksm=eb7067e6dc07eef081eb115358c3ef7ed34caa74dca30f631be5f633c139d34282b6f7eb5e39&scene=58&subscene=0": "【火绒安全周报】微软因侵犯儿童隐私被罚两千万美元∕本田被曝存在API漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458506724&idx=1&sn=b1098632b2f5f551625fe6d246900f66&chksm=b18ee56e86f96c78a4cca9e92ace4ead5000146093581d87d2594f7f62387147ad04a98a9361&scene=58&subscene=0": "CVE-2022-37969 CLFS 提权漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519250&idx=1&sn=62e96748157b1360fbe1d629a6696eb0&chksm=ce460702f9318e149cbefa85bc2a61d1f1f51b7c0e53b8f60d8429c908862ef4b00817f9a1c7&scene=58&subscene=0": "GeoServer CQL_FILTER SQL注入漏洞(CVE-2023-25157)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519250&idx=2&sn=582a204bc02adc7699d973440b2aa24c&chksm=ce460702f9318e14fe3d199b79f91a83d3ecce24ef55e60fc1b20c6e1ba8f55be0b8fed74090&scene=58&subscene=0": "用友畅捷通Tplus远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458506725&idx=2&sn=09622bb71eadf9a21f8f106647a55609&chksm=b18ee56f86f96c7934cc378d2f7d0c7f4fa96fb6ed13d47ed7d9bfbe812cb252507787c98726&scene=58&subscene=0": "CVE复现漏洞精讲-从基础到入门", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652036779&idx=4&sn=8fe56768771b90a8fb4d6f8f5df99a45&chksm=f36ff2ebc4187bfd900477ac57e5d26cb7df3eee7b24b37115deaf55b1b98397d05bcf355b96&scene=58&subscene=0": "【安全圈】好端端的“驱动神器”，怎就成了安全漏洞？", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502100&idx=1&sn=d498e594d0809b6e6215b55dbe72a447&chksm=f2585be7c52fd2f10de56418dbb2740b0807160a8059b84838dac57afbba0f1a618508ea7ccd&scene=58&subscene=0": "雷神众测漏洞周报2023.06.05-2023.06.11", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650177528&idx=1&sn=7ee3f748202af2ef6c7b2587c0c85b86&chksm=f4488444c33f0d52153778c2e534c1cd94f6b4c6c10ae4fc741eacf41a6556a3e072f3837166&scene=58&subscene=0": "CSOP 干货直通| 微步樊兴华：漏洞情报助力高效漏洞运营", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516712&idx=1&sn=db056d3f152e8f52867cc5021679e6f1&chksm=ea94b342dde33a543f8d7daaae604ffb6f0a65f865bf3fd926dfee86ad48be7d6460b9107d7d&scene=58&subscene=0": "Fortinet 修复 Fortigate SSL-VPN 设备中严重的 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516712&idx=2&sn=a69d93a9d282a667bbbf33bc190b4dfb&chksm=ea94b342dde33a545caba266547e0a3d88b670ddfb23236984d8f468dfbefe639a55bb220239&scene=58&subscene=0": "速修复MOVEit Transfer 中的这个新0day！", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487373&idx=1&sn=c9edb1189d2365ca052f5d8cd4873d4b&chksm=fb0282d5cc750bc32728ffa6442944d1c929c24b788f387c633b8838be6cf730744282130dd7&scene=58&subscene=0": "Azure 机器学习服务上已验证的 SSRF 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247562497&idx=1&sn=e7f03f361765fcfb71dd6bc6156ad11f&chksm=e914253bde63ac2d5616ec8c9c7441baa0d64907db618234427bec2a80a0b4672b72524f1b5d&scene=58&subscene=0": "【技术原创】vRealize Log Insight漏洞调试环境搭建", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247508841&idx=2&sn=f0eaeaf4c5c0fbb5bef2807926a4a81e&chksm=ebfae449dc8d6d5fc19f83a511b9e22894aa0b16cf7cdb952ea41e74f7c2eef03de062d1f398&scene=58&subscene=0": "本田电商平台API漏洞暴露客户隐私数据", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519262&idx=1&sn=e6845507abb6be6fb07b0ffec4007483&chksm=ce46070ef9318e182e589f8cfe9ce61d176eec324d33a17e517d0299bdc8e6cd592bc8d71808&scene=58&subscene=0": "【漏洞通告】Fortinet FortiOS SSL-VPN 远程代码执行漏洞CVE-2023-27997", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498781&idx=1&sn=0cd380c63936520da367d6728eed9c2e&chksm=fe79d885c90e51934865d9a809115921c7783bde4f31c334923d4f670130407f7d4708d22281&scene=58&subscene=0": "Fortinet FortiOS SSL-VPN 远程代码执行漏洞 (CVE-2023-27997) 安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492235&idx=1&sn=4c455dc531e0499380f9cc349d9063dd&chksm=fe26e78ac9516e9c033ca8a02545ad2d879031a3337089e0c3bb40a796289549c5527b2e9425&scene=58&subscene=0": "CVE-2023-27997：Fortinet FortiOS SSL-VPN 远程代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493458&idx=1&sn=f1352f32285409baab588608226aa04b&chksm=fd74d79bca035e8d2f725f450948c0a0ad93185af032952287ad4d5795ec9ae7dc5d32fd87d3&scene=58&subscene=0": "CNVD漏洞周报2023年第23期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493458&idx=2&sn=fe55da1fdcc415c5ca80bd581e7141a6&chksm=fd74d79bca035e8daf61edddce7050b95aecda805ba0a0b758010df64dff0b50f655fcda9a8d&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230605-20230611)", "https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247509030&idx=1&sn=b8d81f649643466bca0c32b9ef100d65&chksm=e89d8cfedfea05e86dca8e3e9ef460c9c1ff56bf94f9a68caf107a8330da16d60342b12f2ac1&scene=58&subscene=0": "web3-solidity历史漏洞汇总", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458506879&idx=3&sn=f5aeab283fd1eee7a9e717bb8ac19e74&chksm=b18ee6f586f96fe3502f87c3f6c3ab84bd52c1f50bdff90c8720796b17b87e458d47a3d50379&scene=58&subscene=0": "【新课预售】学习Windows平台漏洞挖掘，为企业安全保驾护航！", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247537917&idx=3&sn=1e1814afd8dab37791f813590d4cc2a9&chksm=c1e9d8acf69e51bad870825cff11f890f96285415b6d821605f26f6d061e7b88641ea75c615e&scene=58&subscene=0": "本田电商平台API漏洞暴露客户数据", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487419&idx=1&sn=f58a5c9d69349a6c3ee0f3d8b36b46f4&chksm=fb0282e3cc750bf511cab2a35f9fc34d53182f1bc4bdb713a2decd23eeb6faece1f5167fc88b&scene=58&subscene=0": "CosMiss：Azure Cosmos DB Notebook 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247490950&idx=1&sn=1a583200400a90503979bf70bb004f33&chksm=96db165ca1ac9f4a4bf9345ba9bfed37e938b72f73336c4d6ac660f5791b86ef7c5f3c6c971c&scene=58&subscene=0": "漏洞情报 | 畅捷通T+ 前台远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491538&idx=1&sn=c51227367f656ce95b170527c047cf8a&chksm=96f400bfa18389a95cb29fdec892e36d794d4e1e0446ffb90c8f124936bb477ac2f4aef0b5de&scene=58&subscene=0": "漏洞风险提示｜Openfire控制台权限绕过漏洞（CVE-2023-32315）", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498403&idx=1&sn=61b3e925634c5fafcf1f54eb80213432&chksm=973ac9c1a04d40d7306d72e86256558c8bbe8f26a0a62ab96d8b69deccf94a46474c05fe3306&scene=58&subscene=0": "CNVD漏洞周报2023年第23期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498403&idx=2&sn=de442ce723184e101fd6a8478548783c&chksm=973ac9c1a04d40d77fe115bd164d5bd111e0a155a6a92192f9987e0fc22b90211e1cb127789f&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230605-20230611)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247562524&idx=2&sn=032e11d5bb7b981a9f9e9e87129dce17&chksm=e9142526de63ac3068c3faf374697a6de73dacc0285cc098cd2e66f2c7b2a54fb826bea89f31&scene=58&subscene=0": "Win32k 特权提升漏洞PoC公布", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247501401&idx=1&sn=6b9cb6de3dfd78fd92a8ec5c3e5338d5&chksm=fa5213e7cd259af12f83142fc0b258f0805636b4abaa77069f16511ba92948024d9b4338e791&scene=58&subscene=0": "openfire鉴权绕过漏洞原理解析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516727&idx=1&sn=a11760ca63822034757b0f90ea22ba76&chksm=ea94b35ddde33a4b4ab3d7f0981ca595959c1ccc03fc4652120de9da8c72927fb588b8bb0803&scene=58&subscene=0": "微软6月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247487793&idx=1&sn=666bca77416bacf6ea464941dd617167&chksm=fa5abfdccd2d36ca47f7e81381a0c112a737682653448040ce9e0f5af8039aefbb2c699c066a&scene=58&subscene=0": ".NET 群友分享某CMS漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498845&idx=1&sn=bba898f851a44e096eeedd81b71858c3&chksm=fe79d8c5c90e51d35c66a8e8d38a8bd7acb314f3a8f3bfe5ba69344f0d8641568e9af5262c02&scene=58&subscene=0": "微软2023年6月补丁日多个产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498845&idx=2&sn=1752d1c635495e77f5963ffa0fcda731&chksm=fe79d8c5c90e51d3c9b7f06d30e96ff07edb5c070fdbad9e32a3ac5699980c70183d65572c16&scene=58&subscene=0": "【已复现】Apache NiFi 多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498845&idx=3&sn=566986aaa9fa095a00416fc80289ba59&chksm=fe79d8c5c90e51d34980a18a44f6223d665193385af589dd20a041fac83d43439bcb66b1f4a0&scene=58&subscene=0": "【已复现】Openfire身份认证绕过漏洞 (CVE-2023-32315) 安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492245&idx=1&sn=e4f6d95c38e831fd88af9e67c9069a7e&chksm=fe26e794c9516e82453cc895a28929ee4c1fdce281e8267e0fd2c2fdaf0146d8a94b63bc4f40&scene=58&subscene=0": "2023-06 补丁日: 微软多个漏洞安全更新通告", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664186261&idx=3&sn=03f759b0fab62ae2d14e480dfa192dac&chksm=8b59436cbc2eca7a4f9357e666e00247742236c02fd07d05b20475d46e205df98a9e55d0fdbd&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247490965&idx=2&sn=5c3548137126ae4105fffea78a2c538c&chksm=96db164fa1ac9f597f04d210ccc22dfadf35646015ad4ebe08812162099043c675cd22953843&scene=58&subscene=0": "漏洞情报 | Openfire 管理控制台身份认证绕过(CVE-2023-32315)", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247514640&idx=1&sn=8b98286e52ebd7b992bdd824ebb5ca61&chksm=eb70642fdc07ed393bb615430dc7b428aef407176e1650da1e338297abe0e77371dbe974519d&scene=58&subscene=0": "2023-06微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247491043&idx=1&sn=7787e7ce8b46875084af5d7c32776bec&chksm=fa9ee6b5cde96fa3be68ae6289ff515b610da5341790d5c371880e375947804d607546f89a97&scene=58&subscene=0": "ByteSRC成长体系正式上线！单个漏洞额外加1200元-9000元！", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247562552&idx=1&sn=c02161a0cd6e095a2539115cc6f18daf&chksm=e9142502de63ac1459fc438fdccaa58c2731fb5988c2a4d889c902862170b523f54bb113fb7d&scene=58&subscene=0": "本田电子商务平台漏洞暴露客户数据", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652037048&idx=3&sn=ddc69e0ed488f7c458907d3b7cc6ca78&chksm=f36ff3f8c4187aee3534aea9cdd28681ec8f24432f2d50d5c89d8f0c41822066c43934a969ce&scene=58&subscene=0": "【安全圈】Windows和MacOS平台上发现多个Zoom漏洞，已发布补丁", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487426&idx=1&sn=daa7b82ade4af3b738c43d0cc90ff85d&chksm=fb02829acc750b8cc075d368aa17f20bfbb451b314afc3a5f2e64c486fe0a88394be1427cf9b&scene=58&subscene=0": "漏洞风险提示｜Openfire控制台权限绕过漏洞（CVE-2023-32315）", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651124391&idx=2&sn=9e4dcec0d4ce4470939bd21d8e30fe07&chksm=bd1442748a63cb6214ef453f8890f35cd61bb175c5aa18a28ec915cdaf1c2a77422306da69cf&scene=58&subscene=0": "CNNVD 通报微软多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516737&idx=1&sn=c4b5adfcf7e55915ef943fcfd4fd9a56&chksm=ea94b32bdde33a3d834b36d01e90e0a897698720411c56832829d175a4722dd94ba823e665d5&scene=58&subscene=0": "微软 Azure Bastion 和 Container Registry 中存在两个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516737&idx=2&sn=368349f3292248a0829924a329eab306&chksm=ea94b32bdde33a3d73ce830890ee3113abe962086d9059767525a81c0884679a6ca038ff9aa7&scene=58&subscene=0": "GitHub 上的虚假0day PoC 推送 Windows 和 Linux 恶意软件", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458506978&idx=2&sn=0f4bfb93302e9e73c4b61a0ac60f395e&chksm=b18ee66886f96f7e6f8d11a80766b8610f5685d7741e64bc827e24b22c4be16a27b34edd8d94&scene=58&subscene=0": "黑客团伙通过虚假PoC诱骗网络安全研究人员", "https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650844814&idx=1&sn=6fe88d005c5f1cf6a95f3d4c0b983487&chksm=80dbcd2bb7ac443d7ed9b9e3695eec15e7c67f9cb93d8f851a78ef8741d01f489567db8a887d&scene=58&subscene=0": "亮点速览 | 一张图GET漏洞屏蔽新神器4大亮点", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247502138&idx=1&sn=c01503fdc8a7d79bd393c85cf9f74fc9&chksm=cfcaaa2ef8bd2338cae24fcbfad2e14c7ebb02ac1b63541bce881725ea28b40ed467ccacb969&scene=58&subscene=0": "速修！金蝶云星空软件曝远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487491&idx=1&sn=c6466b0618fcd98b237654352495dee6&chksm=fb029d5bcc75144def3271795bff7b4fd4f22ce3df41bb9b01db165e98761495e02fa400c2c4&scene=58&subscene=0": "Azure Bastion SVG Exporter XSS", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247491072&idx=1&sn=f82a158b44f65fc68af647a4489ec261&chksm=96db15daa1ac9ccc0df6a5fc1bea8ac3643e0d1ae358930b9ef905e69a74ba40771fce6d531c&scene=58&subscene=0": "漏洞情报 | Apache NiFi 多个漏洞通告(CVE-2023-34468、CVE-2023-34212)", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488319&idx=1&sn=13398076e9b863c74a9b1e683fff9642&chksm=c2c64434f5b1cd228e29d8dbf134f8c9cda2d48212463d2b2a1c109e2b49899ba39c3375f39d&scene=58&subscene=0": "【安全通告】VMware Aria Operations for Networks代码执行漏洞（CVE-2023-20887）", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519310&idx=2&sn=d4df46aa53bdcc6f1a218ce5fdc47dce&chksm=ce46075ef9318e4884e48e737e92293230d1d4510df9c4c09e36b885e3972f0bc27ee8a5b7d9&scene=58&subscene=0": "【漏洞通告】Openfire身份认证绕过漏洞CVE-2023-32315", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519310&idx=3&sn=e5d81fc7aaba8081152d3ade00db58d7&chksm=ce46075ef9318e48c1020f36cff1b847f14e1b87a3a42567849076e906754c5fa2de03a8add7&scene=58&subscene=0": "【漏洞通告】Progress MOVEit Transfer SQL注入漏洞CVE-2023-34362", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519310&idx=4&sn=386fa59826a37a8091a8223c31171897&chksm=ce46075ef9318e48849b116e2cee0fcc677d96d61bd455d1badde315d93d72325678983df635&scene=58&subscene=0": "【漏洞通告】畅捷通T+ SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652037133&idx=3&sn=8de5dba663d95c8be539431938607398&chksm=f36fcc4dc418455bc2a08890dc75bfb3bcbab196d2cd2b7f876a121e100cb08e2143bdfa847e&scene=58&subscene=0": "【安全圈】黑客使用 VMware ESXi 0day漏洞在虚拟机安装后门", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247538050&idx=3&sn=7aaa79e173e57c411c9a245cb5c3dae0&chksm=fa93e343cde46a55887912003588e850df5c350a031274af2770600f0291b5e20c669976f8c6&scene=58&subscene=0": "本田电子商务平台漏洞暴露客户数据", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247562605&idx=2&sn=0a289f364661b94e8b7f7a8fd2751893&chksm=e9142557de63ac41253befafd0d436c32cdcdeeeecf7ba10b7efcdd89d8957726e2675bd5bbc&scene=58&subscene=0": "2023年十佳开源漏洞评估工具", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247498200&idx=1&sn=698e8ee889e0042d8f50e53e01ad6e62&chksm=c2d1857cf5a60c6a5a5a77e7a94645a38e0b44fe3f841496441b58df9b46062b4ac3236ca671&scene=58&subscene=0": "自动化神器 Yakit，风险与漏洞看得见！", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487498&idx=1&sn=7aaf798063772498b98477b44d8c7985&chksm=fb029d52cc7514446844c4c8a3a66416981c450fa885b4455f525e8a7c865a4d62243284338e&scene=58&subscene=0": "漏洞风险提示｜金蝶云星空远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247501488&idx=1&sn=ddeea63fd5deab6d4b6a1be5fc4e8330&chksm=fa52130ecd259a18cf59e21026ab3f8620e31a5f6468fb7252bde02b7ae0d3cfb77894ae018c&scene=58&subscene=0": "手把手玩转路由器漏洞挖掘系列 - 基础入门", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247498416&idx=1&sn=d0f54fd6648bf7b8217512d81481f009&chksm=eaa97290dddefb866140fd52b11e9ddd3d52f009a120887c673c2fb3b135c8db44119e08afea&scene=58&subscene=0": "CVE-2023-3009 TeamPass漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516743&idx=1&sn=3cb8165c2ddc920b17e02e78f61b7ee6&chksm=ea94b32ddde33a3b819e16044a6666b31db296c3fd4317448aa54816d9004cfa96e0a6d66c98&scene=58&subscene=0": "MOVEit 爆第三个 0day，美国多个联邦机构等受影响", "https://mp.weixin.qq.com/s?__biz=MzkwMTE4NDM5NA==&mid=2247486384&idx=1&sn=bd17ca3ce203445eca014892aa6a8b5f&chksm=c0b9e555f7ce6c437dbd93bf2ac507d0f8e212188a061b664edb261903949ffdf41240178f6c&scene=58&subscene=0": "【工具篇】漏洞扫描-最新版Invicti v23.6.0.40861", "https://mp.weixin.qq.com/s?__biz=MzA4MDMwMjQ3Mg==&mid=2651868669&idx=1&sn=ef642f2768a34ab4fb8c554297994b3b&chksm=8442b51ab3353c0c93a839c192dba3b0ba711add14cd423dea38feb7abdfc60b557b8fd1fee8&scene=58&subscene=0": "云渗透案例剖析 ｜ 阿里云PostgreSQL漏洞技术细节", "https://mp.weixin.qq.com/s?__biz=MzI3Njk2OTIzOQ==&mid=2247485176&idx=1&sn=2e70dd4297145e6cd806368ca861472d&chksm=eb6c2480dc1bad9673981cfd1aad398f2111607e63749642f5ad102eefee87af788705645b69&scene=58&subscene=0": "安全事件运营SOP：接收漏洞事件", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045378&idx=1&sn=396b53ac6c0285cce36f4387fac9ef88&chksm=803fab5cb748224a00fa8a923d33309bbed9031c130f8a9077dc3f69e3a8d7046700efc31642&scene=58&subscene=0": "【漏洞预警】Google Chrome V8类型混淆漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458507648&idx=3&sn=90e18ac93a4df9bf4803d28d287c3d08&chksm=b18ee90a86f9601c95377016e9ca80baad5dd8bc55e3672b877c27f6b52d28ca4678f23fd4b3&scene=58&subscene=0": "【新课预售】学习Windows平台漏洞挖掘，为企业安全保驾护航！", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247508899&idx=1&sn=766bbd43b4cd0917d9db8d18ca246822&chksm=ebfae483dc8d6d95ab0f5d0cf0a3ae53b6a8800ae9982a5b9bd11c57e1618a1ba080dcd75494&scene=58&subscene=0": "今年最大规模网络攻击：零日漏洞击穿防线，美国近百家大型政企遭勒索", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487505&idx=1&sn=415cb0d2e5ff136c57d57ea1ae6e5524&chksm=fb029d49cc75145f51fd19e155c2eac737ea59411b95b9fe00f94a3c6a49fd17e82b4349c27c&scene=58&subscene=0": "可RCE速修｜Smartbi内置用户登陆绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247501525&idx=1&sn=862cca5c62d3b6958a193629f606c8d1&chksm=fa52136bcd259a7dcb9e6af31e77d15af6c408f379ba8a284ae32e8bafe98e6e62d309d093fb&scene=58&subscene=0": "消息中间件RocketMQ命令执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491565&idx=1&sn=eb2af62a72167c6f82ae8ec3db878511&chksm=96f40080a1838996d0e9501e348fa8c8ff5a19b468f1dec3b6accc0c18a9fef5a5e32b5e7508&scene=58&subscene=0": "可RCE速修｜Smartbi内置用户登陆绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516754&idx=1&sn=a1e32820ac8d5bb8432eeb77bbd839e2&chksm=ea94b338dde33a2ee7103027b591018e1800ea1c4ff5971fcc4ff2b04d330fa5994acbc7174e&scene=58&subscene=0": "西部数据更新固件版本，修复4个漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493496&idx=1&sn=a11ff71655b544c3f004348df0a538f3&chksm=fd74d7b1ca035ea7bc1dbfb555d5353ffd3cca54019c34d795f20525f696fdfe971fb8d5ffe3&scene=58&subscene=0": "CNVD漏洞周报2023年第24期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493496&idx=2&sn=4e2c1d2e8be6bca100fb957773b04a21&chksm=fd74d7b1ca035ea7e2e9495916217f4ce907c2d3b75d107659c2fdc843cec13155ca5f575ae2&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230612-20230618)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516769&idx=1&sn=e00e30e1c0b1187da247a4f936d2761e&chksm=ea94b30bdde33a1d1e665e5aff83de4c7dc1f514f22b2f801b2394245122fa4c1d765b8d7585&scene=58&subscene=0": "华硕紧急修复多个严重的路由器漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247508916&idx=1&sn=2077341efdf975aff70c80c031d28d7e&chksm=ebfae494dc8d6d82c249f76beb08afea429de50f01c5e23a858e535f0c4c78534fe3e91f0234&scene=58&subscene=0": "运营商底层协议“漏洞”：通过手机号算出使用者的现实位置，几乎零成本", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247502313&idx=1&sn=8a703d5e0ff7c398d1dda1ace1e655bc&chksm=cfcaaafdf8bd23ebfcdfe7fa3c0a3b716a3119c1d4762e7b0a7192f5157e66482ca18c090218&scene=58&subscene=0": "速修！Smartbi 曝身份认证绕过漏洞，可RCE", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247538050&idx=2&sn=e3e95bb45169c4086dd60223b2825fcf&chksm=c1e9d9d3f69e50c55cd6eb67df759098da4913cc332457b02594850f622b5e0d4bc004892309&scene=58&subscene=0": "今年最大规模网络攻击：零日漏洞击穿防线，美国近百家大型政企遭勒索", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498967&idx=1&sn=6da6341fc95d2924da146a8fc32adb62&chksm=fe79d84fc90e5159d3aaf2a0e2eb1f8a2c7f21610629d07d4444b139e925428c5f708aa38259&scene=58&subscene=0": "【已复现】Linux Kernel 权限提升漏洞 (CVE-2023-1829) 安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652037480&idx=3&sn=92c94213fb28c164491aea642f8868cd&chksm=f36fcd28c418443ef815ea9dc974f30a3395a90f3670d294d7d384193da8013d486587061f74&scene=58&subscene=0": "【安全圈】华硕用户注意了！官方曝光路由器的关键漏洞，称尽快修复", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650968315&idx=1&sn=52018a3763c24f5ce799f543d6de313f&chksm=8079d2c9b70e5bdf94aa50bd89bdfa8cdbc904abd1f7f5043bf74678f4f2d78c39047c7e6f4c&scene=58&subscene=0": "原创Paper | Apache RocketMQ 远程代码执行漏洞（CVE-2023-33246）分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458507929&idx=2&sn=dea24421f0e1d25dfea01e642724ff0f&chksm=b18eea1386f963052a0621315aaa00235d483def239d751cea1933ade9d634dfdb4c5d8f6727&scene=58&subscene=0": "VsCode配置Wdk7600开发环境 以及 \"自动编译\" 和 sources文件简单介绍", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516795&idx=1&sn=4e3841d5ec2df12ab173f87cfff65c6f&chksm=ea94b311dde33a0794d17d8242e150e4a00dd604aaa3e2a712d13b6b431abe63f1221d8e095e&scene=58&subscene=0": "研究员发现微软 Azure AD OAuth 应用中的账户接管漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516795&idx=2&sn=0a8689d4ca1f5d7f44d3b17c702f6a4c&chksm=ea94b311dde33a071c30ec0b9109e9ab69948260bf38040c3f0a7266e8cac25eee9ec8afcef1&scene=58&subscene=0": "OT:Icefall：Wago 控制器中存在多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492309&idx=1&sn=bbb15e575262be9df93d40524f50b023&chksm=fe26e7d4c9516ec2fe8b74af786d5bbd6b8d6dbbae6927b451511f2f0271cc76fbd9b6d268b8&scene=58&subscene=0": "CVE-2023-1829：Linux Kernel 权限提升漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247508938&idx=1&sn=077b7d514eec061d985c49c5238ef4ab&chksm=ebfae4eadc8d6dfc9a252258d2edf189f6ab8292fe3c136a640aa6802855b844e64bdf29965b&scene=58&subscene=0": "re:Inforce 2023：亚马逊云科技聚焦AI驱动的安全", "https://mp.weixin.qq.com/s?__biz=MzI4Mzc0MTI0Mw==&mid=2247497488&idx=1&sn=3b86ca6c57a47b8e6c0a769b00fc34c7&chksm=eb84aa44dcf3235219d5258ac3fc3485e2c769d2309c2644041a535f3c803484039bbcd561fa&scene=58&subscene=0": "基于Win32k内核提权漏洞的攻防对抗", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247489154&idx=1&sn=8574bbdbff2facb30194064ab4027bf7&chksm=fe2ee909c959601f90eb3e9325cd77ace2327c2fed4e528f732dbb74427b5761aabfa5b16042&scene=58&subscene=0": "华中科技大学 | 一个图像启发的可扩展漏洞检测系统", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498440&idx=2&sn=f622ba8154c9f1a1b98c042f1c200cee&chksm=973ac9aaa04d40bc9d39fbd72c648b86be527c4b6c1a6322183aac0886d399d8f31525b99a93&scene=58&subscene=0": "CNVD漏洞周报2023年第24期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498440&idx=3&sn=302861ca4321ec263718be9d62e8eb40&chksm=973ac9aaa04d40bc5c8e21921dc848c04179a1890e60be80ef5bd60601bf5835e6c1e957a51e&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230612-20230618)", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247538104&idx=4&sn=7b3c72895e8656aa37cf8ce694216173&chksm=c1e9d9e9f69e50ffb6d7a7f184b58841405cbfa1e76a37c1803644d0190871455d738a3c74b8&scene=58&subscene=0": "运营商底层协议“漏洞”：通过手机号算出使用者的现实位置，几乎零成本", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652037555&idx=4&sn=d93875644510ec93c238b3c9ba2c8a3f&chksm=f36fcdf3c41844e5acc44c8b85d694dc9aaa1631225d56bd7d2d36179c701e37621782e4f600&scene=58&subscene=0": "【安全圈】已修复！Zyxel修复了NAS设备中的严重漏洞！", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498973&idx=1&sn=26fb13d40b117853343f7a6c1f5dbb11&chksm=fe79d845c90e515390603918faf3feb53c7798da6ffd84b1521529948d3fc8999938acd4c716&scene=58&subscene=0": "Apple多个产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652037650&idx=2&sn=f509c9456856a5424a8991e0ea21a148&chksm=f36fce52c418474429a9e96be7ed7d177fe79f27a442ae73505f2220d9b9eb60057304386ab2&scene=58&subscene=0": "【安全圈】微软新漏洞导致Win11文件资源管理器CPU占用率异常", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652037650&idx=3&sn=4d451fdcb3a14fe88639e3b0f97db3f9&chksm=f36fce52c41847441f5630c48400044362c485c3bc973ade84af81c2fc15e2d3056bca5afa28&scene=58&subscene=0": "【安全圈】苹果修复全平台系统中存在的 Triangulation 漏洞，被利用传播木马", "https://mp.weixin.qq.com/s?__biz=MzkwMTE4NDM5NA==&mid=2247486519&idx=1&sn=0c6fdeec969b1c23e033d4b35f276b9f&chksm=c0b9e2d2f7ce6bc41322570b502b55588e196ddb851e17fdf1e11bc500f83815cfe2b0538825&scene=58&subscene=0": "【工具篇】SRC自动化监控赏金项目 自动收集资产漏洞检测漏洞推送@laoyue", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498978&idx=1&sn=841d3de357a5c47c8054173948049dd2&chksm=fe79d87ac90e516cec2bf5ea0dc7f11be85e35ad729a37b09098cd2f73d3c8593d3e6b95df01&scene=58&subscene=0": "Grafana 身份认证绕过漏洞(CVE-2023-3128)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516818&idx=1&sn=1088fe2b36f5e1648053d9005c87f2ca&chksm=ea94b3f8dde33aee090d8160c827cb19fdabb2041da6ed2e472b13cf421105f734ea2276b4d6&scene=58&subscene=0": "vCenter 服务器漏洞可导致代码执行和认证绕过", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516818&idx=3&sn=7524bc2288375bbf06f9574e73e15a00&chksm=ea94b3f8dde33aeeeb1313ae4cb6608ffa6876baa1ba49cbdac2b97cf5307198a79fd41eed8b&scene=58&subscene=0": "Fortinet 修复严重的 FortiNAC 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516818&idx=4&sn=9a52564b1d6d8454dd34dce86019d266&chksm=ea94b3f8dde33aee6b782b9e8375062d482d95de70270edef8b5657685d76f0a6bd70c018c8f&scene=58&subscene=0": "Grafana 提醒注意严重的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458508052&idx=3&sn=5cd76794d7498841a694242daba850ba&chksm=b18eeb9e86f962882e6d956bccbe1c43d06f512dddc2d22e08eb82b9b0c38bbec7d8c40dbee5&scene=58&subscene=0": "赋能企业安全！系统0day安全-二进制漏洞攻防（限时75折）", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492424&idx=1&sn=5d55678132400cbfa4e55644b239344a&chksm=fe26e649c9516f5fe3c2fe85ed972d8989bd6478b63387c334a1c62467d306cf42325799c88b&scene=58&subscene=0": "CVE-2023-3128：Grafana 身份认证绕过漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492424&idx=2&sn=013b226c1fe4cc1b692a1e3827f92616&chksm=fe26e649c9516f5f17f6da28c7833aa8db097f531193607a75b08d635fcb78f3d579e1cd2d02&scene=58&subscene=0": "CVE-2023-33299：FortiNAC 反序列化漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502113&idx=1&sn=9c8c0cca963d0ee4606128283894dac2&chksm=f2585bd2c52fd2c415a2a5e11bcdf19cc5babb702d5f6707039b97258e10e72c5afeedd8d991&scene=58&subscene=0": "雷神众测漏洞周报2023.06.19-2023.06.25", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488353&idx=1&sn=cf6a60bb5e6d7c486527fc2957950016&chksm=c2c6446af5b1cd7c43927ac1e89bc8e69237080579fe8fabdc94588893e050b0da1f0b826cf7&scene=58&subscene=0": "【漏洞通告】VMware vCenter Server多个高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488353&idx=2&sn=c3f8c9c91802144824a86e52ce034576&chksm=c2c6446af5b1cd7cd92ebffbd1474e6cfe1f1c9706fe76e65578dc31c8bee9248f07bf39dd7b&scene=58&subscene=0": "【安全通告】Grafana身份认证绕过漏洞（CVE-2023-3128）通告", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493510&idx=1&sn=b8e27be2ecef3234351a65166f2e4bce&chksm=fd74d74fca035e59f2f3733df451e9ee29f3f0c7ec0da119b2260557e3b6c963b1d1528a4be5&scene=58&subscene=0": "CNVD漏洞周报2023年第25期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493510&idx=2&sn=4ff4e36f0ef5ec26a310c52203b2299d&chksm=fd74d74fca035e59d8753d4af0b4187b1614a6e1d2374c74423c344c445ca949dc7f6b55c0aa&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230619-20230625)", "https://mp.weixin.qq.com/s?__biz=MzUyOTkwNTQ5Mg==&mid=2247488139&idx=1&sn=21233d0e622ecdf50956a83cbebdfc17&chksm=fa58b0b0cd2f39a6c1edb563e5d594811232593421218dfab5a20ef7f7307b9088f54347141f&scene=58&subscene=0": "只有1%漏洞值得投入，但如何处理好这1%？", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516831&idx=1&sn=7580dc107a14d8421aa9e835398f57ff&chksm=ea94b3f5dde33ae35faadb81cb82d8b91fdb6e527eefe52e7663db9e5d8d31e7f1dc6a0156d8&scene=58&subscene=0": "CISA 必修清单新增6个已遭利用的0day", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652037853&idx=4&sn=b570a81855c56b5746d5eb0b58c25191&chksm=f36fce9dc418478b92b4fe31f52fcfbe9f0c401606013aa17b008b80177169ab2abf4ceba1ed&scene=58&subscene=0": "【安全圈】7月14日前完成！CISA 督促联邦机构修补 iPhone 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498442&idx=1&sn=22cda43bc84b62e80d2a36afa94f9c17&chksm=973ac9a8a04d40be5f279b310d3e75efab2bfe4a34babe74dc33ffe625dec8d06eab61c9fa3a&scene=58&subscene=0": "CNVD漏洞周报2023年第25期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498442&idx=2&sn=8ee67a21f50ffacc91756ddcc79affe4&chksm=973ac9a8a04d40be30784b70dd212e1f421d397d39d1b06915db5d9c4359003da4a8a3bca217&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230619-20230625)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519350&idx=1&sn=eebd1ed938d0f1ae56cd63aa21b8fb17&chksm=ce460766f9318e70ae6aedccc68da3babbcf1fd6b3fb832605e3d7f0a6da72d50449eb00d8ab&scene=58&subscene=0": "VMware vCenter Server多个漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519350&idx=2&sn=21b9848ef6657434b84616a9b4042ee5&chksm=ce460766f9318e7077a69a73fce6750ed54ccc45319ac04f91c581ef9dabcc2bc5aa42f8eab2&scene=58&subscene=0": "Grafana 身份认证绕过漏洞CVE-2023-3128", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247538282&idx=3&sn=7659694b00453585a6a1a71cbfef0257&chksm=fa93e0abcde469bdbb5eb416f8199b0470ec60c807beb0afa8ab26304d658d55e9f57bb25765&scene=58&subscene=0": "施耐德智能电表曝出严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247563005&idx=2&sn=ec3a43fc8a2665b4de5d247970ada492&chksm=e91426c7de63afd1d127322ca97ec859b107eee09e2c8b25beefe6fd9ca0095b5131c9a9a3aa&scene=58&subscene=0": "Win32k的内部结构以及可能出现的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502138&idx=1&sn=69bf2fc6a7a7ab720e094f4685982c4c&chksm=f2585bc9c52fd2df36a765b6608a3118b630a293bd9f3526741d4cea23209c4da9a68093926d&scene=58&subscene=0": "CVE-2023-32315 Openfire管理控制台认证绕过漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516843&idx=2&sn=08d47901f423ad544f407dead0344eef&chksm=ea94b3c1dde33ad7879cb6a504aa623576e7d749f80f139f04f047b1e28a6e6d949bea885041&scene=58&subscene=0": "Chrome 漏洞多：web 浏览器还安全吗？", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247528988&idx=1&sn=ce221e6ef302aa68a7a50b5946aab1ad&chksm=eb8499bcdcf310aac0dee3d4c1489b7eda0cb8f18ff91ba5f33608dec6e266c0f43fb53d8be4&scene=58&subscene=0": "漏洞分析｜死磕Jenkins漏洞回显与利用效果", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491574&idx=1&sn=043729e27577a851856c002cfb0409b8&chksm=96f4009ba183898d0f7c37a24ee56b6f826d4ba00987d160d6fef5d25f320f9cbc6be3dc3d93&scene=58&subscene=0": "在野0day捕获｜nginxWebUI runCmd远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487526&idx=1&sn=e65a6750c9f2e96c3ec0aba68f35f56c&chksm=fb029d7ecc7514688c5ae05fc811096e12acf2d1d11aa24aa61ec587313f505ebe87b667dd50&scene=58&subscene=0": "转发先知社区《SRC中的SSRF漏洞挖掘笔记1.0》", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487526&idx=3&sn=f3eec7a0c51ab1a45074d709748f051d&chksm=fb029d7ecc75146876938a65def6a0fb0a3c9dac4c53e01acc23f445345325b3a7843ed4038a&scene=58&subscene=0": "Azure 机器学习服务上已验证的 SSRF 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652038343&idx=1&sn=f0f908f052f9183d2cd720a5688663ef&chksm=f36fc887c4184191960ee25208e9ac774f30981ca3ec187af83f622376a5fe0e34ed1c893cbd&scene=58&subscene=0": "【安全圈】用户账户信息遭泄露！WordPress 社交登录插件曝出漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458508722&idx=3&sn=89b26b7375566edb262ae98430db35f9&chksm=b18eed3886f9642e14af0b227dc0eca6dc9931efd61246b00cf65c95413f7de472ca08ed5c95&scene=58&subscene=0": "CVE复现漏洞精讲-从基础到入门", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516908&idx=1&sn=3861a45ade1fc801daa3c767fef3f318&chksm=ea94b386dde33a90582ec8599b01780524bb88c9f1a2cd4cfd9874889611594313e5443e60b1&scene=58&subscene=0": "黑客利用WordPress 插件中的提权0day攻陷网站", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491582&idx=1&sn=b94836fcf0990550373c52e398bf153e&chksm=96f40093a1838985c8ad9bc7a7d44b5b926b7a7505cb66f40e69095798f0684269c3d342a39b&scene=58&subscene=0": "0day速修｜Smartbi 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247489199&idx=1&sn=495ff7aab614ef1759d0629ee9fd7c02&chksm=fe2ee924c9596032e4de4c27477dd6dc4f84edbe5f9b7066bb8657fc4c5f2834686a1932b231&scene=58&subscene=0": "香港中文大学 | TChecker：用于检测PHP应用程序中的污点式漏洞的精确静态跨过程分析", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519380&idx=3&sn=1eb4d07840e26a8f1b2813c106fe000a&chksm=ce460784f9318e92aa217d623b4d980afbc8fd3bcc686991e5fffdd3098e0ca79d3141de3f18&scene=58&subscene=0": "【漏洞通告】Parse Server远程代码执行漏洞(CVE-2023-36475)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652038457&idx=4&sn=52880f06f7551eda712226293d9d3269&chksm=f36fc979c418406f1c3c4c10459891e91bed62cfa3dab2e772d13a1d7c3a79a9581027964800&scene=58&subscene=0": "【安全圈】WordPress爆高危漏洞插件！可被用来创建非法管理员帐户", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499021&idx=1&sn=95e8b7dcc9ad8d311479840daf7dd205&chksm=fe79d995c90e5083f8a66c9c402ca15c2231a9296aae7b1c39987c3af3b5d4fe4df12fb1bae3&scene=58&subscene=0": "Smartbi 登录代码逻辑漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502167&idx=1&sn=3e73cef2ca89ecd30a74c7b1c7b89882&chksm=f2585b24c52fd2328758a520e4c47351510ed86b1fde8aa766ad9d1abdce0087e2798671b0ab&scene=58&subscene=0": "雷神众测漏洞周报2023.06.26-2023.07.02", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493543&idx=1&sn=fb14310e38e672ded98825c5db355c42&chksm=fd74d76eca035e78aa7637e9a2431d879cf655f16966d6b40f0990b04ce2163236cba23faa0c&scene=58&subscene=0": "CNVD漏洞周报2023年第26期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493543&idx=2&sn=e294f9e65916af0811b9c191280d42dc&chksm=fd74d76eca035e785b7386caaf361e50ab74c860a5f9d1d38dd69cd3c52c3d4333db3a816411&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230626-20230702)", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488362&idx=1&sn=3dccdc1e088b969858063526c4e35ffa&chksm=c2c64461f5b1cd775d8d1827cee51d9e57632b6ed7e8f7e0d739ce551133db7694bf84996197&scene=58&subscene=0": "【安全通告】Smartbi商业智能软件登录代码逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045393&idx=1&sn=1ec3675af09d4855a459b6ccac44832d&chksm=803fab4fb74822591618fcc114f06a5cfb76e818abc9e0d3e372af4e470e4e4c7b244000252c&scene=58&subscene=0": "【漏洞预警】Parse Server远程代码执行漏洞威胁通告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502180&idx=1&sn=1eebd0aa3734d92cc47e82ea22ffff73&chksm=f2585b17c52fd2012c291a8f5fe91eb9215f42a53c41409a7d056356db28d558e398048c2707&scene=58&subscene=0": "通用型漏洞收录｜雷神众测星网计划一期全面启动", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247538322&idx=4&sn=fabec25f4368791590c1d6b4fe5c2ca8&chksm=c1e9dac3f69e53d5ae761f92c80aec415d035d6d50653c41169f1241296087135ccc40b2d982&scene=58&subscene=0": "MOVEit Transfer漏洞成肉鸡收割机--受害者遍及20多个国家10多个行业", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498478&idx=1&sn=5b2745aec22580b7046f1fb1fb2968cb&chksm=973ac98ca04d409aaa63eb808108e0b3a56402445c5dd75e61d2fcb91729248088fdf27dc727&scene=58&subscene=0": "CNVD漏洞周报2023年第26期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498478&idx=2&sn=e4685fe9b71a1a907f85f445b51cf38b&chksm=973ac98ca04d409afa281f698238b016e74fea3683c39487a3af5ec7205729200106559a1981&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230626-20230702)", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492789&idx=1&sn=0a5855d699b8f31aab378f106ba474df&chksm=fe26e1b4c95168a2a788562cb62066bfcd24ede6e402f9d056e60c69b1f3da455e02a44571c8&scene=58&subscene=0": "Smartbi 多个高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516937&idx=2&sn=65d504384b5ecc49b9c872f25971c1d9&chksm=ea94b263dde33b75aa7bd18b0397741b6641cd7b8e5a8e4ccfb85a349ff055e359e2aaccdaf6&scene=58&subscene=0": "联发科漏洞影响智能手机、平板、WiFi 等芯片集", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247538459&idx=3&sn=e2bb415c602d0e6aaccc86c4dba85420&chksm=fa93e1dacde468ccdc71bada826ad891d6e32f86b5f427482209148531c517f604789f7587ce&scene=58&subscene=0": "超30万Fortinet防火墙仍未修复严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516957&idx=1&sn=0c991d0259551cf99a74bab4a9ff4d65&chksm=ea94b277dde33b61becbdad319212fd4bb06ba1b59e4ac18340519acf8bf4c6b36fdd4ca6c96&scene=58&subscene=0": "太阳能监控产品存在三个RCE漏洞，影响数百家能源机构", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652038691&idx=3&sn=9778f52fc1725dd3735903a9ed1f81ed&chksm=f36fca63c4184375638df8dd57db53eb89c9e2b9f6555d6e257dc4b583e27d6a268e67794b2f&scene=58&subscene=0": "【安全圈】警惕！仍有33万台FortiGate防火墙尚未修补CVE-2023-27997漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247501598&idx=1&sn=e426748336be285415bfd9944e8a0270&chksm=fa5212a0cd259bb63133a02725a8808efd8caa9d89416304a1707ab208736912469182c142aa&scene=58&subscene=0": "路由器漏洞挖掘系列之未授权访问漏洞及常见绕过技巧", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509086&idx=1&sn=4eafec8feee155417a8f9d25e701e976&chksm=ebfae37edc8d6a68941ea947937700d10737538660f9bf56c49780e65e243d78e41ab11f7c03&scene=58&subscene=0": "年审发现2万个关键漏洞且迟迟不修，这家政府机构遭通报", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247500859&idx=1&sn=03e415df425ccc60142debee4a1b3473&chksm=ec9f1d48dbe8945ef46d8c10c52f9b3feac2c139c4905c42c90e03ec99097502fa9ab65204e5&scene=58&subscene=0": "腾讯安全威胁情报中心推出2023年6月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247484340&idx=1&sn=575160a41eba6d83606beade85419c57&chksm=c2b101c2f5c688d45a77849de896f884c6ca8b22e42b68a40d61043ead70cb2a15f0fdfcba02&scene=58&subscene=0": "腾讯安全威胁情报中心推出2023年6月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652038793&idx=1&sn=917ef4773c2395938f186798eb0f3035&chksm=f36fcac9c41843dfba6d0d4f2749b18855a77c359fd4cee8e345b7c4efaa01e7f7037af42b4c&scene=58&subscene=0": "【安全圈】利用网络漏洞，“薅羊毛”赚100万！", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247498526&idx=1&sn=385b117935236a92bd29a2d6757cde0b&chksm=eaa9733edddefa28dc6fe2fcdaefbb8bb437cbdb250a76a4dc98c7a9390318e329653c930980&scene=58&subscene=0": "nginxWebUI runCmd 未授权远程代码执行", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458509141&idx=3&sn=612c31305342961b29a1fe9f96349e41&chksm=b18eefdf86f966c94f59f1a8a5944b549eb53587fcb00e0ef5673c1fae9b540b87ae66668dbc&scene=58&subscene=0": "9月1日正式开课！系统0day安全-Windows平台漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516974&idx=1&sn=f09811b20739fa443eccabea54c8e088&chksm=ea94b244dde33b5216cec0158383e1f235baa85de882dd9c75b416e85ece3869bfc6d17c36b5&scene=58&subscene=0": "速修复！Linux 内核严重漏洞影响所有 Linux 配置", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516974&idx=2&sn=179eead740cfb91b376bafa02e4fcb99&chksm=ea94b244dde33b524d84c5fad51227142548b6794645504ad026ef59442f37d9388673b96ff7&scene=58&subscene=0": "高危无补丁0day影响思科数据中心交换机，可导致加密流量遭篡改", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652038994&idx=3&sn=48179ef3929a58dacea37166693ee4b1&chksm=f36fcb12c418420476133d5fa69d70f662600e907d51dcb3f596450137c32df7f1cc190d975b&scene=58&subscene=0": "【安全圈】2万个关键漏洞！这家政府机构迟迟不修遭通报", "https://mp.weixin.qq.com/s?__biz=MzkwMTE4NDM5NA==&mid=2247486593&idx=1&sn=9657c2b166e696345fca82d40f171d9f&chksm=c0b9e264f7ce6b72f6ebd50793fbd0998a26258a059089a5f9c54ac54fc52613f373d35719dc&scene=58&subscene=0": "云上跨租户漏洞攻击面分析-RSAC议题解读", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651124680&idx=1&sn=121fec0fb399c233a4c7e9804de56867&chksm=bd14431b8a63ca0d2938e3b27fde257f3a93bafe389ff0528d5f9a761acef51cc3548e41ac75&scene=58&subscene=0": "网络安全漏洞（风险）扫描的12种类型", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502207&idx=1&sn=159ebc77b5489d559489bc1374defbd1&chksm=f2585b0cc52fd21ac811fa394a78b09d8100c0b1faa9c40e1eb6b8704887b8a00357c13df601&scene=58&subscene=0": "雷神众测漏洞周报2023.07.03-2023.07.09", "https://mp.weixin.qq.com/s?__biz=MzIxMDYyNTk3Nw==&mid=2247513159&idx=1&sn=bf8e6bec4497729447f9b208ae0b7726&chksm=97634091a014c98799427769dd1831b03f174f2236885984e9898f3070f2d3d086aafc287ad1&scene=58&subscene=0": "看一个经典的缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499049&idx=1&sn=d70500146286bd2b43128b9b149f8065&chksm=fe79d9b1c90e50a709d4a719277ad1dabdd72a3264bb69fe6a7b84d1b2c3d5fa4bf302733e71&scene=58&subscene=0": "【已复现】泛微E-Cology SQL注入漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247502420&idx=1&sn=f249c36b0c7851da88466fbf7473967b&chksm=cfcaa940f8bd2056480d5af27b51c8bf71133280b8d4f75c4672cd4940cf2f7e9fcd4ba53665&scene=58&subscene=0": "已复现！泛微e-cology SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493574&idx=1&sn=c56c298a69619441313c0011c5bc4529&chksm=fd74d70fca035e19812f137e9deb66951a6d229667bdced0df9bfb589920c10da2a4d3429943&scene=58&subscene=0": "CNVD漏洞周报2023年第27期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493574&idx=2&sn=6629e1ea3965d7e6ff5e59bc7565a42c&chksm=fd74d70fca035e19ca2c70baa1c1ab6fb66afdb669da398355ecc58eef556058da5b532ffa28&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230703-20230709)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516985&idx=2&sn=1314af5aa885e4849eef0319cfc6f5f1&chksm=ea94b253dde33b45266932db87448f0614dda574b5bb33e1598ef3acd97302e9bd4ab2ae157a&scene=58&subscene=0": "严重的 TootRoot 漏洞可导致Mastodon 服务器遭劫持", "https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247491790&idx=1&sn=0064387737127e6ab8a704d07b6fdea3&chksm=c18420dff6f3a9c96c3a61bae7751f8b7354937272a8f11cb9f5acb26391ebcda1e5757ecac6&scene=58&subscene=0": "CVE-2023-24941 Windows NFS 远程代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652039099&idx=2&sn=0d8bce0029b11f2d06a770552611b615&chksm=f36fcbfbc41842ede5989bec69b1aad95cd9fb7baa7feec7e8d534c59397f8021fe1d7dbbcd4&scene=58&subscene=0": "【安全圈】Progress Software再现三个新漏洞，影响 MOVEit Transfer多个版本", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652039099&idx=4&sn=d04069a547c743f069aa3379c730c5f9&chksm=f36fcbfbc41842edb9e2a5dc86d157d02e505081f7edae3995a6b51ff432f3bc6dc45643e21c&scene=58&subscene=0": "【安全圈】速看，三万个太阳能光伏电站面临严重漏洞威胁", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650969461&idx=1&sn=ed8ccdb489494086dced43a36a7e4caf&chksm=8079d747b70e5e517f2ff0cbe38915afaf9c32a9b18b9cb7fc8337a63c52543065ab4a8da528&scene=58&subscene=0": "原创Paper | 从入门 .NET 到分析金蝶反序列化漏洞学习笔记", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509114&idx=1&sn=7d7fb0fd13ddc54c9faf7825dca8fa6d&chksm=ebfae35adc8d6a4c3c39a4a09061890d7aadb2c84cbb4bcd77c2392c5ed547a5963a3d59486e&scene=58&subscene=0": "知名金融科技公司漏洞遭利用，近1.5亿元资金失窃", "https://mp.weixin.qq.com/s?__biz=Mzk0NzE4MDE2NA==&mid=2247487689&idx=1&sn=0756db46003dbed16ff371ff2224e40d&chksm=c37b9722f40c1e34c8f2b4caa0152e740bbaea439c5932ad2f1fe83ad8136efdf7aa87bc5c4c&scene=58&subscene=0": "Wordpress插件漏洞快速分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458509356&idx=2&sn=fa763caefd7f84e6a0c7ad852a20de2c&chksm=b18ed0a686f959b0a89fba3150d3b528c8ff08069e988f9bdcf7080f4d723a7c48d5a39c52bd&scene=58&subscene=0": "20万网站受影响，WordPress插件曝零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499055&idx=1&sn=64892fc6e10c57dd10abe34a4814c590&chksm=fe79d9b7c90e50a16a77d26089da4cc5f1e542d0e6f28df720b30da42a1c6127dfef03dcf4b1&scene=58&subscene=0": "Apple WebKit 远程代码执行漏洞(CVE-2023-37450)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516996&idx=1&sn=99077b8f872c126bf4abbae8c76123fc&chksm=ea94b22edde33b3872fa9d5e8336be03c61f1dbca04bd5821d460d5e0fcd1915fb4c2e9163a3&scene=58&subscene=0": "苹果紧急修复已遭利用的 0day", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487649&idx=1&sn=919546fdcbc846fc754dabd325270105&chksm=fb029df9cc7514ef749551ed34f948088036cdf04e6cd3591da05256f51fc76e213950b973ff&scene=58&subscene=0": "风险提示｜泛微 OA e-cology 前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491601&idx=1&sn=5a16c8b5375967d8ef1ccf54d95c4527&chksm=96f7ff7ca180766aa85b76c75b7a3a04079773034c84e33825ab90d518c8ee7c1c423fc4399c&scene=58&subscene=0": "风险提示｜泛微 OA e-cology 前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650844962&idx=1&sn=2a5946900a0942367c748e78008c2b15&chksm=80dbcc87b7ac4591f64c46caf9cd64d14d0023451139ef1942abe3ca8a3ae2f3e53983e61387&scene=58&subscene=0": "99.99%漏洞屏蔽率的NPatch，部署简单+业务0影响，是如何做到的？", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247538571&idx=3&sn=df0c9c6346eba40c28aaf5a4733a0110&chksm=fa93e14acde4685c8dbdfb272dde2ef6fc7aeef80647a83fac494285f90c2bf3a0a7c31ed402&scene=58&subscene=0": "三万个太阳能光伏电站面临严重漏洞威胁", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247538571&idx=4&sn=19ea0803dd81920a91f4dfe461db1803&chksm=fa93e14acde4685c2c8e11a8ffe2d936de4fc4a1b30de14d627b40c49e64bcf78fb8c819f897&scene=58&subscene=0": "CISA要求联邦政府尽快修复影响安卓程序的高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652039179&idx=3&sn=cfd94a9924c972edad805b74f572a7c7&chksm=f36fc44bc4184d5d8e45d135e150876a3b00070c052815ec74e93eb338913eb619d9db097ecc&scene=58&subscene=0": "【安全圈】安卓程序出现高危漏洞，CISA 要求联邦政府尽快修复", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652039179&idx=4&sn=acfa395a5f9b320ef6c8078ac3b5660e&chksm=f36fc44bc4184d5de23a4b760b44bc1d448297616385db9535f943d3316de373552317c70cc2&scene=58&subscene=0": "【安全圈】出现了今年第十个零日漏洞，苹果发布紧急更新", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247563680&idx=1&sn=66248957b31fd7c04862ec9a1c3a224a&chksm=e914299ade63a08ccc17ec1767d225ce5d53caaa4e670cd444e1a0645f3a77c9cbdbf2c32d21&scene=58&subscene=0": "【技术原创】GoAnywhere Managed File Transfer漏洞调试环境搭建", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498490&idx=1&sn=25773c618473632eeb2ec8194127796f&chksm=973ac998a04d408e2711d89f093f6029c78a11dd630e4f7e875b82a5f34576cb286965bcc8b5&scene=58&subscene=0": "CNVD漏洞周报2023年第27期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498490&idx=2&sn=2c4202556e4a61c9bb2533313966fdcc&chksm=973ac998a04d408ee371aa7a6869361c659948f2603716865f31fcb878c28908b37b8477caab&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230703-20230709)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458509499&idx=2&sn=6ee5f2e1932d0ae1abe2a829e7de3408&chksm=b18ed03186f95927392d3bf24233851ec58d16b7678aed59477b870ae63ef3ff19ec8b7f5cdf&scene=58&subscene=0": "苹果修复导致任意代码执行的0day，但该补丁会使Safari浏览器不可用", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247493151&idx=1&sn=6a3db31bda7de5cc4d309671ad0f0e46&chksm=fe26e31ec9516a08cc3d655f54de5dff022f545dc3c75c1994b715e388e3af4519faac48298b&scene=58&subscene=0": "2023-07 补丁日: 微软多个漏洞安全更新通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517016&idx=1&sn=5074282ae6c24bac3355b40d1cabb8fa&chksm=ea94b232dde33b24e9adff41dd364497012cd4fe06f43ac2e6579c5f297ce1443c3c745b757b&scene=58&subscene=0": "微软7月补丁星期二修复132个漏洞：5个已遭利用0day且1个无补丁", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517016&idx=2&sn=8edf5db583691ce70b6b4910729e5c5b&chksm=ea94b232dde33b241569143c1e9ebd78ef7b09e8ff2e3c45fd633d3d5f55ff51c0e2e4ed9dd5&scene=58&subscene=0": "工控补丁星期二：西门子、施耐德电气等修复50个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247503364&idx=2&sn=c11e68db755e6c1b320f9caea8093076&chksm=e9d305e6dea48cf0a614999ffb44d069bdb3b8d54008d6dc5f7372873fab77d77c386994a731&scene=58&subscene=0": "定制化白盒检测 | 越权漏洞治理分享", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247514936&idx=1&sn=de2a8a2b28bfde5b560dfe831c0e6251&chksm=eb706507dc07ec1182b90814fcc25931bece4740aaa45116234760f1c038a557142f1db4a1a1&scene=58&subscene=0": "2023-07微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491615&idx=1&sn=9b5db3d5e156bdfbdfec2bb90a3c7d83&chksm=96f7ff72a18076648c2e5021573fae783e0a9876fd72605997f55588ed9cb23ba6ea26ff8b14&scene=58&subscene=0": "风险提示｜泛微OA e-cology XXE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499060&idx=1&sn=0d0d9bc4ee7f6846d4f6b65c6e2340da&chksm=fe79d9acc90e50ba53a8daf9ad123b6d90b64269d9fb3c9ed1f9abd334b348a08fb1c80bf3a7&scene=58&subscene=0": "微软2023年7月补丁日多个产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488371&idx=1&sn=fc26d950d432c24595fec2e7729da150&chksm=c2c64478f5b1cd6e0af037ff7b0e8fd89ce4256a08f830c5750c92a1a290bd66a3fae819c04e&scene=58&subscene=0": "【安全更新】微软7月安全更新多个产品高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652039283&idx=2&sn=40f2febe4085e40b1bf331a4e4975ec6&chksm=f36fc433c4184d255e4b460de41bbd49e4b2c5fdb040103b350f18c2e424c1d33bc59553b8af&scene=58&subscene=0": "【安全圈】危险！哈佛大学网站现高危漏洞，可导致数据泄露", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458509525&idx=2&sn=e1c336aa109e0f61024e6900c1c28ebd&chksm=b18ed05f86f95949f8c33ccb531c78cb856953536f302d1847de55d0e04fd32c12006be170e9&scene=58&subscene=0": "哈佛大学网站存在严重漏洞，易受远程代码执行攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458509525&idx=3&sn=43b58e0946288c379cc274fc8d1fba69&chksm=b18ed05f86f95949ff530d339912cf7224098214ee10392107c7015b04c79a26c380c645d06b&scene=58&subscene=0": "预售报名中！系统0day安全-Windows平台漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491631&idx=1&sn=645c7d7b62b70a420ad8a33be9d53373&chksm=96f7ff42a1807654f75ec668d6aded0cbfb5ecc9687a4db0f3cb664f4bec18a9d51059810b8b&scene=58&subscene=0": "风险提示｜Apache RocketMQ远程命令执行漏洞（CVE-2023-37582）", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499087&idx=1&sn=cf7553080245afbf9db4ea2e2dfa1798&chksm=fe79d9d7c90e50c190055ec511b9e087e55892d06b4a400171fc6f52a70b254f70e461cdb7af&scene=58&subscene=0": "【已复现】泛微E-Cology XML外部实体注入漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499087&idx=2&sn=92b6663b5161cd160f90f2b702f8baa6&chksm=fe79d9d7c90e50c1547c4e1541af9d5eb132ea6fcffe1a96dcaa8eeee5e928386c39df8ab244&scene=58&subscene=0": "SonicWall GMS∕Analytics 多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499087&idx=3&sn=211a64a83198ece48ded5c6d5ef041a8&chksm=fe79d9d7c90e50c16ba9ae014e4b29d2180cd413859e69361f7b24d9f244fbec5e611ee8f216&scene=58&subscene=0": "FortiOS和FortiProxy 缓冲区下溢漏洞(CVE-2023-33308)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499087&idx=4&sn=82c0d7d39ea68786f13a6928a4fad896&chksm=fe79d9d7c90e50c131d5a30d36b37a5503448f185ff909ff9edc9c0d3e18f1d5ae14a6b3921f&scene=58&subscene=0": "Artifex Ghostscript 代码执行漏洞(CVE-2023-36664)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247538616&idx=3&sn=f27c606a606487ca735cb0efe8907c0b&chksm=fa93e179cde4686fd55605cccb583ba8b6a80c7811a98212aa01d372dfd9d6ca6ceb198e74bf&scene=58&subscene=0": "苹果紧急发布iOS、iPadOS、macOS和Safari零日漏洞补丁", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045400&idx=1&sn=1b306dac29b0a2485a341e02e43c768c&chksm=803fab46b74822508cef1982c3c615b7747cec1a6c89d73796ccbd446d138eb5699c32299d57&scene=58&subscene=0": "【漏洞预警】VMware Aria Operations for Logs反序列化漏洞漏洞威胁通告", "https://mp.weixin.qq.com/s?__biz=MzI3NDY3NDUxNg==&mid=2247496151&idx=1&sn=3abcb0c72f223758053d44b35430c24a&chksm=eb12d7ecdc655efacf9e3990e8a6ca646c562a1f6ba44f8f4285e8a057ebcdf74639294a5bd2&scene=58&subscene=0": "被忽略的API逻辑漏洞，可能引发大规模数据泄露风险", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487669&idx=1&sn=0a41c0d6151023009245cd63e5542ba7&chksm=fb029dedcc7514fb9c385efc36a59cfed4655ac9a14fe893de4cab47ec0a846701555b47aec6&scene=58&subscene=0": "风险提示｜泛微OA e-cology XXE 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519523&idx=1&sn=34bae7755bcdd90765fc93d430c3342b&chksm=ce460633f9318f25b066264931f8a8fbe21835819bd447b7f741bdc31de65d8ec366e3497cfa&scene=58&subscene=0": "【漏洞通告】微软补丁日安全通告|7月份", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519523&idx=2&sn=f70930943af9274faf9e874ec56fc566&chksm=ce460633f9318f25fffef3945bf4e91208171db379014137115f4ab3af1a9b326d164fe15f6f&scene=58&subscene=0": "【漏洞通告】Apache Johnzon 反序列化漏洞CVE-2023-33008", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519523&idx=3&sn=4be3178fb0f39ac325e096961e94d128&chksm=ce460633f9318f253c4b2397044b05b81452870d335e5df2ac9a486e0c85fd17feddafe74e3d&scene=58&subscene=0": "【漏洞通告】FortiOS∕FortiProxy栈溢出漏洞(CVE-2023-33308)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664187963&idx=4&sn=c07bca6b8c628328603d847039527ca7&chksm=8b594ac2bc2ec3d4d1012abd28072261d7493c9fb6920ae45a2b9c6964eabdf785852f83c0c9&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652039401&idx=3&sn=b100a7bcb2dcca7a55c1e3b873b8f3f4&chksm=f36fc4a9c4184dbf7e1c897eef611338adeaa505819e7b16c89f6f1b98ebb1b834a8c384b84d&scene=58&subscene=0": "【安全圈】Ghostscript开源PDF库中发现关键漏洞，需用户尽快更新", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517034&idx=1&sn=278a8688600c329d28ed0d3b4a718a2f&chksm=ea94b200dde33b16a06dee1ccc74e730dbb4bc108f1ca32266a7baf602bd1ef37e83faf331e1&scene=58&subscene=0": "SonicWall紧急提醒：速修复多个严重的认证绕过漏洞！", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517034&idx=2&sn=0e6034be825eac879386635841578fa0&chksm=ea94b200dde33b16e5b00a74e6327aca06b3192a6c9501d14cc86edab7c248c3044a44ff1a9c&scene=58&subscene=0": "Fortinet：速修复 FortiOS、FortiProxy 设备中的严重RCE漏洞！", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517034&idx=3&sn=98d9cf7e622b692b63ba4d74e3e4668b&chksm=ea94b200dde33b16646cb3f47455884bc322a6f139a1486a3c3a8ac13bfe6030f4bf1d493bb5&scene=58&subscene=0": "热门开源PDF库 Ghostscript中存在严重的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517034&idx=4&sn=6e2b7be2533c1e454539a3b4905483c7&chksm=ea94b200dde33b16f46f5c52b43bc116d9a9ed99bf381bbe9dbd8d1b3902ca57cb785c81a283&scene=58&subscene=0": "Citrix 修复 Ubuntu 版本安全访问客户端中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651124776&idx=3&sn=4c341a9dcf9f7e37dfeb4e132686eeba&chksm=bd1444fb8a63cded111e9261138185062acedead574ea803a2af4509d656344f949b71714a6e&scene=58&subscene=0": "CNNVD通报微软多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247502470&idx=1&sn=c0d38876db69fdab48b2ffba0b28f966&chksm=cfcaa992f8bd2084b80252e971b8dafdc0b16a83806d7c4221a967a17f3630d73266bfe03c6a&scene=58&subscene=0": "紧急修复：Apache RocketMQ 曝远程代码执行漏洞，攻击门槛低！", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517057&idx=1&sn=3cc4f03b1925ae57509bdbf2be1dd327&chksm=ea94b2ebdde33bfd6913c1087dd83618db3713959965348bee9a2af707862b9ac83d892845c1&scene=58&subscene=0": "Zimbra 紧急提醒手动修复已遭利用的0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517057&idx=3&sn=ac0e0bde77420df4712fba006d14f767&chksm=ea94b2ebdde33bfd540cb9d9cd4757ae8042142e812d7913a4f1c2bfa3c36967e61192a4c9d0&scene=58&subscene=0": "Linux 内核漏洞虚假 PoC 发 GitHub，专门攻击研究员", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652039478&idx=4&sn=b7bbfe62da4a8678d2e8f3704245710f&chksm=f36fc576c4184c60fa204697d86b8c36dc8916c102e9078ca78d3ce0b7c80d3e373aba62b724&scene=58&subscene=0": "【安全圈】受 MOVEit Transfer漏洞影响，德意志银行确认其供应商泄露客户数据", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488389&idx=1&sn=f36b07b590b42ebe813b6d076de03802&chksm=c2c6448ef5b1cd98aa7e5945c4774da1c3605abf1526f9789030c477919085d687015cae8f24&scene=58&subscene=0": "【安全通告】Windows错误报告服务权限提升漏洞（CVE-2023-36874）", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488389&idx=2&sn=a934ad9eaf7b49fa13a6a26107c43f38&chksm=c2c6448ef5b1cd98a9263f201950ecfd0255d95dc2202f7c3f2f9ed958cb099cb6d61e6a11a4&scene=58&subscene=0": "【安全通告】FortiOS和FortiProxy堆栈溢出漏洞（CVE-2023-33308）", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499103&idx=1&sn=302e71595751c4e7cd989e54a18612af&chksm=fe79d9c7c90e50d1809e9e61166ef6204eab0f8643430c9c76d8e37c68bf3ff1d80693707388&scene=58&subscene=0": "【已复现】Apache RocketMQ 远程代码执行漏洞(CVE-2023-37582)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247497626&idx=2&sn=78b443ab7a1c324a18e96943ee140c72&chksm=eaf9bfd6dd8e36c04c87ca6263ba5825c094f2c802fb92d8ea994b06d4e50f8606c697321e80&scene=58&subscene=0": "现金奖励| 2023补天通用型漏洞专项活动第一期来啦！", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247491126&idx=1&sn=11be852b68a417d54fee57533b4e9309&chksm=96db15eca1ac9cfa0f9147957287b12922278532647b5dfb412ea90644c797070c2026e9fb36&scene=58&subscene=0": "喜报丨斗象科技入选移动互联网APP产品安全漏洞治理十大优秀案例", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247491126&idx=3&sn=1ee282d981e917c443d96fc764a254b8&chksm=96db15eca1ac9cfa3cadf196a050a3ed3faa342e7ae6982bd9274d7b9b53bf3a16feeb513ad7&scene=58&subscene=0": "漏洞情报 | Apache RocketMQ 远程代码执行漏洞(CVE-2023-37582)", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247514971&idx=1&sn=ea718f968db2bcbd140105d900f33883&chksm=eb706564dc07ec720ee6223f2a311fa7e8e24d34e8f6a67951e5088436375bde9402641142c2&scene=58&subscene=0": "【火绒安全周报】哈佛大学网站存在严重漏洞∕游戏装备雷蛇发生大规模数据泄露", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247563902&idx=1&sn=e6617aad97c6564f3dc6dfa50099f517&chksm=e9142a44de63a352530b7c91421f57c74384444ddbc19b76ca8ac32d00c46f1374c2e5fca56e&scene=58&subscene=0": "CVE-2023-36884：Office 0 day漏洞被用于北约峰会攻击", "https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651384863&idx=2&sn=9948dd8d257a3d0f74b6130b20260670&chksm=8d399d97ba4e1481d73a10373f4569a91fcc259697f1eb5526fb6007648737a7efdd3c172dc2&scene=58&subscene=0": "长亭获评工信部移动互联网APP产品安全漏洞专业库支撑单位", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458509569&idx=2&sn=9f1a70041682a54624f9165fe0e12e1b&chksm=b18ed18b86f9589d4c84ee7249f43dc207f17870cbb2440a2eecbad4633a8108bfa3afcd02d3&scene=58&subscene=0": "赋能企业安全！系统0day安全-二进制漏洞攻防（限时75折）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652039562&idx=1&sn=9b46614b93c2ac4eded5b87ed1b980c2&chksm=f36fc5cac4184cdc2498a3afc177118bca4c77d8afc77a06d3f26771385621688a0e8a692dc9&scene=58&subscene=0": "【安全圈】高达139个安全漏洞！微软：已发布漏洞修复补丁", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458509570&idx=2&sn=daa7d181522c147e9fd67594b79cfb0b&chksm=b18ed18886f9589e8dae924c36ece6d985c2f4807a68e2a4a1b4c283453b5a3b8f6769a187f1&scene=58&subscene=0": "CVE复现漏洞精讲-从基础到入门", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247563992&idx=1&sn=a29853f205a362a3828873d8f9a152d7&chksm=e9142ae2de63a3f4845cef0b4116cce1914d6c0d9e2b32ec80eb692b022832811cf43c62a68d&scene=58&subscene=0": "被大肆利用的漏洞导致数百个太阳能发电站面临威胁", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517076&idx=1&sn=5d64e3975416d9a2acd6b0ae94ceec96&chksm=ea94b2fedde33be8db007deb0d5e30088fbd4d8a0748739733378f6ba498f8ec8e4997102ba5&scene=58&subscene=0": "罗克韦尔提醒关基或遭APT组织RCE漏洞利用攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517076&idx=2&sn=7062958ef499c9d253edf70f467f8bde&chksm=ea94b2fedde33be891e7da5d57174e952f57f47382684f02bd3d5e2c37370e44dce20a358785&scene=58&subscene=0": "Reddit替代品 Lemmy 开源软件遭 0day 利用攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517076&idx=3&sn=5783890433df33edd46704822b336e2f&chksm=ea94b2fedde33be8ccaa53780a4f81e980c66987f64df773bfa2efe676c804eaa707f59d61fa&scene=58&subscene=0": "霍尼韦尔 Experion DCS 和 QuickBlox 服务中存在多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502221&idx=1&sn=296ad88a02ad5c1f7ae4d6a182e13a4c&chksm=f2585b7ec52fd268ca90c33632efcafc20c2c78597d556a9e5a026cd7b1180fb79ce6d86872e&scene=58&subscene=0": "雷神众测漏洞周报2023.07.10-2023.07.16", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499138&idx=1&sn=f1b780fd2f6c7c609f1d875cbf1fd09c&chksm=fe79d91ac90e500cbcff998db9b3172b65b2c3d28c75ae2b21f59b7c60d8809809f406d924e7&scene=58&subscene=0": "【已复现】Linux Kernel 本地权限提升漏洞 (CVE-2023-31248) 安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509146&idx=2&sn=d2b8155a7e8b294e92ab3c71248055fb&chksm=ebfae3badc8d6aac994236ed6baaaaff1ff3851ae4e1e87872138438b1b5afe84780d4a40ee8&scene=58&subscene=0": "国家漏洞库CNNVD：关于FortiOS∕FortiProxy安全漏洞情况的通报", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664188250&idx=6&sn=33caa47b5418c8ebab3affc456107ef3&chksm=8b594ba3bc2ec2b51fd68400c6b41f71965b55927b7a9f56d2a6ebdda2f3141d880f80ee561f&scene=58&subscene=0": "CNNVD | 关于FortiOS∕FortiProxy安全漏洞情况的通报", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493588&idx=1&sn=b8dabb69611c1c1560cc536447d668a5&chksm=fd74d71dca035e0b6d427fdd82bc442be5d736c46a21e5843a32fa0094b720a3fa126fac5883&scene=58&subscene=0": "CNVD漏洞周报2023年第28期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493588&idx=2&sn=65cbca6997dc1f9d3be3d427600848dd&chksm=fd74d71dca035e0bc39a1f6c5e8c8f8a423310a8378a647fd4775c425ad1910c99c7c1e9876f&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230710-20230716)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519640&idx=1&sn=7a5d1b3ecfaa1302554a4e1384aa19be&chksm=ce460688f9318f9e67a07e5fa7951bafe5baf5fe61cb9fc15dd419707df715cb9a1805cee4b7&scene=58&subscene=0": "【漏洞通告】Apache RocketMQ远程命令执行漏洞（CVE-2023-37582）", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247498171&idx=1&sn=07fcedcfc0e86cf88fa2424a544755b8&chksm=cfc55ee4f8b2d7f20b6f31c163f6a6e881221d1f88917e868e5f74fb9b461ba17d61aba708bd&scene=58&subscene=0": "协办单位！360漏洞云应邀参加2023年度首期移动互联网APP产品安全漏洞技术沙龙", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247538578&idx=3&sn=75a2d5b81dda3b82b76249bb93b13b14&chksm=c1e9dbc3f69e52d5aca305c2e2a4b371c2db1bf7420803bbded6ebdbb709cf0eee19cc130d93&scene=58&subscene=0": "艾默生电气成为MOVEit漏洞攻击受害者-疑客户和员工数据被窃", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247538578&idx=4&sn=f0198b0c98791c58376f0d9d310a1664&chksm=c1e9dbc3f69e52d551844ee631833dfb2d2574bdd7d16057989fa435d44a68b510d132522437&scene=58&subscene=0": "被大肆利用的漏洞导致数百个太阳能发电站面临威胁", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247538682&idx=3&sn=b7ad9d3c0a751d19967273c567157205&chksm=fa93e13bcde4682d03ffd09d6f4d10335b639bc1878b22c7280dec1853b69b641355506e8b83&scene=58&subscene=0": "微软：利用0Day漏洞，黑客组织攻击北约峰会", "https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247489823&idx=1&sn=c5c9e44649c7fdfd82f7af647988111d&chksm=ea4bb358dd3c3a4efa60f6deb5c5e157371eb79ddb98fa3895b4820639a5772b8c58e275cfda&scene=58&subscene=0": "如何解决防火墙拉黑Nginx转发的漏洞扫描流量问题？ | 总第198周", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458509678&idx=1&sn=99f695d745b8d499152f5b1ab7d09cd0&chksm=b18ed1e486f958f27bba7fe46705b572b6fe1d3c5c60f5a0c4360bc22c0424a986233465e0d4&scene=58&subscene=0": "TP-Link WR740 后门漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650969484&idx=1&sn=6ca0c3cd34fffeaeda419b9cd95d47c0&chksm=8079d7beb70e5ea80d54d1e89be616fa770b19ceb51ed9b69ff459ef5b97c4519f70820d18a8&scene=58&subscene=0": "星际奇兵第7期：必备神器！开源远程漏洞测试框架 Pocsuite3", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498502&idx=1&sn=3e163d0130e6bfe0b50136fc1f4f9baa&chksm=973ac864a04d4172ba77eb5f5177770803d12f668cabe16b5b2f42e91b94d4390efeb719e2fb&scene=58&subscene=0": "CNVD漏洞周报2023年第28期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498502&idx=2&sn=29a7fed6146124e64416404494b6a143&chksm=973ac864a04d41722a7926c400fa0e61843d06bb60a216c1a7ab2738558fae88dbda864399a5&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230710-20230716)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517089&idx=2&sn=d00e1d0fe24db8bf16d2d2b13ca24261&chksm=ea94b2cbdde33bdd104cf70c1e39dc9aa9a50a4a440cfb4040c51ffb19d02aa65883822b0e90&scene=58&subscene=0": "严重的思科 SD-WAN 漏洞可导致信息泄露", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247493498&idx=1&sn=27fb36d34fb3189131c1331c6a4dc810&chksm=fe26e27bc9516b6dcd1e06f286a3df392a36d3bc2decafb74bcba0d5e9f97a224d420c2171b8&scene=58&subscene=0": "CVE-2023-3519：Citrix ADC∕Gateway 远程代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499147&idx=1&sn=ceb7547c1973dec74ab29cc614f791b3&chksm=fe79d913c90e500516e036dd3bcd64aada69adc856aa9764920528f7be8c032d525d330d22f0&scene=58&subscene=0": "Citrix ADC 及 Citrix Gateway 远程代码执行漏洞(CVE-2023-3519)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499147&idx=2&sn=0bcedc63f177adb297cebf2535e7945f&chksm=fe79d913c90e5005fc444c984b35741e6b02b8c8d9fc7f2c7ed633ff0dccda7ee1586367befa&scene=58&subscene=0": "Oracle 2023年7月补丁日多产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517101&idx=1&sn=b0c111a99bc956b2107431d6ebb95ab6&chksm=ea94b2c7dde33bd16109770cd4770a6f7f989e459557db59356249469c17b8d71240693faa1a&scene=58&subscene=0": "Google Cloud Build 漏洞可使黑客发动供应链攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517101&idx=3&sn=4586afd90d79f3ea05777c153e54e3b9&chksm=ea94b2c7dde33bd1f6e95273014ab0c8f7b74d0fc58e85898d7611dcd45fce260bb851d6ebfb&scene=58&subscene=0": "CVSS 4.0 发布，助力评估实时威胁和漏洞影响", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247491357&idx=1&sn=000a3e4c9ae19ef9fea2edb143d9333a&chksm=96db14c7a1ac9dd10b688a03e96aa79c6147a2ffb1215f1a963c844432954358f825be48f9c4&scene=58&subscene=0": "2023攻防演练必修高危漏洞集合", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045433&idx=1&sn=894de6e0f80de8813ca812b0e7eeaec1&chksm=803fab67b7482271ea3eca2005bec5145d42a523ffb40cc9d85b8a3064ba949037bf68117ccd&scene=58&subscene=0": "【漏洞预警】Linux Kernel 权限提升漏洞威胁通告", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488410&idx=2&sn=75607f118aa6bc12041cedfef0096376&chksm=c2c64491f5b1cd87dbb6428f1141d33c8b10928c9a8aadc76cdc9cf42981034d96ec60d5973d&scene=58&subscene=0": "【安全通告】Citrix ADC及Citrix Gateway远程代码执行漏洞(CVE-2023-3519)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519686&idx=2&sn=8390b80d386d4d107942a3418c1cb7d3&chksm=ce4606d6f9318fc0cb6b93af87910437602829d46be0198655b5c0af62a72fc04c3e2999e16b&scene=58&subscene=0": "【漏洞通告】Citrix ADC及Citrix Gateway 远程代码执行漏洞 CVE-2023-3519", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519686&idx=3&sn=2a51c2499b7c6f2474f75bbc4f4fdc40&chksm=ce4606d6f9318fc055a23e79fdf9990d3cdbcfc048fe80faea573235809863c02bcd5a8fb3e9&scene=58&subscene=0": "【漏洞公告】Spring Security 身份认证绕过漏洞通告(CVE-2023-34034、CVE-2023-34035)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664188610&idx=5&sn=c249fab50e5492c9559105a2e91f9976&chksm=8b59483bbc2ec12dcaa5ecd11305de75d1b61839b33a9dbc3dda00d56077a4cfc579739c46f3&scene=58&subscene=0": "CNNVD | 关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247497684&idx=2&sn=e93c8cdd4837ba647b9a61d2b8b7cc4c&chksm=eaf9bf98dd8e368edd37b3384678f0760730b61ebdc62eb8e8358db5ed3180ea4a1a1149af44&scene=58&subscene=0": "现金奖励| 2023补天通用型漏洞专项活动第一期来啦！", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519696&idx=1&sn=d6ec619c4af40a939aa2d0c4c5983dad&chksm=ce4606c0f9318fd6960f75538081bcc23f14c65abb2a29a418a81b01b0ac836b5e8a79cab6a7&scene=58&subscene=0": "【漏洞通告】Atlassian Confluence 远程代码执行漏洞 CVE-2023-22508", "https://mp.weixin.qq.com/s?__biz=Mzg5OTQ3NzA2MQ==&mid=2247486801&idx=1&sn=45042aaae9fd45a42d840dc3ac29a58d&chksm=c053f67bf7247f6da477351737d3192afbd045841f8af864022a23730bfe356db92354081686&scene=58&subscene=0": "CVE-2023-34192 —— Zimbra XSS To RCE", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247507248&idx=1&sn=713ad24b77c2c71419f9e2c735065bfc&chksm=ea662a47dd11a351c62b60f5f172302ca85912e2931af83ac4d979f4fdc53f9e5fa2aa5e85cb&scene=58&subscene=0": "BCS2023威胁情报技术论坛——《漏洞情报：走出漏洞处置的泥潭》", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499208&idx=1&sn=e99f6397a57e63b8cb415fcf586b0473&chksm=fe79d950c90e504603460538fbca4a08e80e7785568286a786620e604c09b22b6ffe3d114a34&scene=58&subscene=0": "BCS2023威胁情报技术论坛 ——《漏洞情报：走出漏洞处置的泥潭》", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499208&idx=2&sn=4fce93f53577e992ba0ecb0df96f8882&chksm=fe79d950c90e50465547dcc5215d1d879fc3b97fceda1fb4b73b7e5155e30064d9eec8031308&scene=58&subscene=0": "OpenSSH ssh-agent 远程代码执行漏洞(CVE-2023-38408)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499208&idx=3&sn=ea78ed01984c8162e634097022707909&chksm=fe79d950c90e50461b3bf692fdb737afb57039bdace80e60b1aa0c113c74e0be7d2d5603299a&scene=58&subscene=0": "Atlassian Confluence Data Center & Server 远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499208&idx=4&sn=69661c101bfd2941e3d18cf1ecd98a79&chksm=fe79d950c90e50460932242b4a4011b7826c238ad124d7ce520687bdb6b0286a2dc9e3bc019d&scene=58&subscene=0": "Spring Security 身份认证绕过漏洞(CVE-2023-34034)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509203&idx=2&sn=857e3f3f7d75c7ab00a0cfe58bac34b5&chksm=ebfae3f3dc8d6ae52d72e529a33b898fd95520430bd64ef2ee8fdd4670cc5acd294affe0f31d&scene=58&subscene=0": "国家漏洞库CNNVD：2022年度网络安全漏洞态势报告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247493624&idx=1&sn=8a14583af1defacd2babe8e294ffc010&chksm=fe26e2f9c9516befd11c73b35650a36f2d7c59c28209b012b0ecac86d2fd9b5bf92d370ec0a2&scene=58&subscene=0": "CVE-2023-38408：OpenSSH ssh-agent 远程代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651124919&idx=2&sn=1b4783e4159523cf12f31fdccb4a89ea&chksm=bd1444648a63cd72073b0b1e5551e543c5980a4f9b98a75c325e427c4af896f0259fd3cff431&scene=58&subscene=0": "CNNVD通报Oracle多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664188940&idx=1&sn=2cda9ca456151e503d2ab37bae82c5c0&chksm=8b594ef5bc2ec7e39814453a5fa57ccbd7ec86e086bdeaddfb60290ff60befb8edfcc3513231&scene=58&subscene=0": "CNNVD发布《2022年度网络安全漏洞态势报告》", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247497695&idx=3&sn=890274cc139a71747d20b481f503a63f&chksm=eaf9bf93dd8e3685494a3fa206c7e9fb77d7f24c525f60d6e9455735f45310d5c6ea78e3f1f5&scene=58&subscene=0": "现金奖励| 2023补天通用型漏洞专项活动第一期来啦！", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517127&idx=1&sn=74e944a2a7142293f94b417dd8e62970&chksm=ea94b2addde33bbb2f499dd4d4e1637c58c5a7c66b5757d75699678391447fc6feadccdeb10a&scene=58&subscene=0": "AMI MegaRAC BMC 软件存在多个严重漏洞，可触发供应链攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458510132&idx=1&sn=89ff1eb23af91def9ef50a1dc3a28878&chksm=b18ed3be86f95aa8083bcf5d09670cf6debd41a6ab5f68fb58c1bc957a058b35db474703e0d4&scene=58&subscene=0": "命令注入漏洞CVE-2022-26258复现", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651124938&idx=1&sn=62869991ab75d8c01f3130120ce13230&chksm=bd1444198a63cd0fa8b8a6c12a1055d4963ff07b863cc8ebd691744787b202432f3a16ee5c0f&scene=58&subscene=0": "开展网络安全漏洞扫描的10个关键步骤", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499238&idx=1&sn=1a817786920836087f286c10ef072993&chksm=fe79d97ec90e50682acab11d45ffef11b815ae4600335630e540b13480f5123178078e3ade4f&scene=58&subscene=0": "2023年Q2季度 | 漏洞监测报告", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247564396&idx=2&sn=bde45456f2d1ab03e06d2fedba143d33&chksm=e9142c56de63a54058aaf6e8471f2e7e992fcf7df08c9b02b62d73c9d80373b8232463330fe6&scene=58&subscene=0": "恶意软件伪装成漏洞PoC进行传播", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519718&idx=1&sn=0020681837b853f7bb190029406ecebc&chksm=ce4606f6f9318fe025af9b57facc1ed87cd2684216a3f96ae468272762a330eed234873bc3fc&scene=58&subscene=0": "【漏洞通告】OpenSSH ssh-agent远程代码执行漏洞CVE-2023-38408", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493633&idx=1&sn=dc74311bc14a72762a1eb08746ae319b&chksm=fd74d8c8ca0351de9ad10dce982e15b68371f567dfe602219d107aa36d78e8a1f7cd32d6033a&scene=58&subscene=0": "CNVD漏洞周报2023年第29期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493633&idx=2&sn=395d4c159f58ef831fb507dbb8c2a1ba&chksm=fd74d8c8ca0351de1400460e03664e7b2b7a66ad30eede96c2b112b099da0423166cdf3e3282&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230217-20230223)", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502228&idx=1&sn=26b90b4c7f24d5f14440033c5cb1e187&chksm=f2585b67c52fd271163bd7fff3f1bf81e204e8ef119ed37ee29bcb66cc5d883816f838877058&scene=58&subscene=0": "雷神众测漏洞周报2023.07.17-2023.07.23", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247538859&idx=4&sn=c0a559298993feefb94a2b3db45ea99c&chksm=fa93ee6acde4677c61a5ee22dad8c0b2dedd4e97a2c5b9498ff8be2338995299b0c0112f801e&scene=58&subscene=0": "数百万台计算机中的固件漏洞可能使黑客获得超级用户身份", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458510261&idx=2&sn=95534e1d9859ce12ff979f19e0893861&chksm=b18ed33f86f95a29de6ca959c0ed435aede7cc2093d0c9de0209ddfa143fa9b6d72cee985280&scene=58&subscene=0": "黑客正在利用Citrix新0day漏洞，全球超过15000个Citrix服务器易受攻击", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498515&idx=1&sn=320b954692dd394322c84aa36d0f27e2&chksm=973ac871a04d41672cc4e6fd9841a8396e69decca3260f8151cea03a3d99822b81e8c9742c75&scene=58&subscene=0": "CNVD漏洞周报2023年第29期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498515&idx=2&sn=2fdac7dc1294a7427d0ca594ba856f70&chksm=973ac871a04d4167664ee1aa4a56fd9001f4e2c812def1a67bee35cc507cf1dff8f3f1979e95&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230217-20230223)", "https://mp.weixin.qq.com/s?__biz=MzIzOTAwNzc1OQ==&mid=2651136567&idx=1&sn=8eca396b89ef4f9b1bb67f44e8dd2ffb&chksm=f2c12357c5b6aa415d837ee98a4e9bc19b0a088bd9aade1a2b19739ce3a2601f22209565697c&scene=58&subscene=0": "KCon演讲议题巡展｜Tai-e: 基于程序分析的安全漏洞检测框架", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499250&idx=1&sn=e69ac9665b28dcbf593b57b22373b16e&chksm=fe79d96ac90e507cbee1460132be111df391a4ab9b07d72ba79c1458f08eb2159d20099484fb&scene=58&subscene=0": "Apple kernel 安全特性绕过漏洞(CVE-2023-38606)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499250&idx=2&sn=849de8a1b63d6468f2c4ee76a22c3e31&chksm=fe79d96ac90e507c34e6986978d6b68795c519b5b273bc8222c6d1bbe1af81c11a2490e728a9&scene=58&subscene=0": "Metabase远程命令执行漏洞(CVE-2023-38646)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519766&idx=3&sn=626b32056bb5d2e49f449d5e455c89d4&chksm=ce460506f9318c10406f8ee79b6f56705dd4011b77467ac14e9fc7d8a9784f3478b3e77ebb13&scene=58&subscene=0": "【漏洞通告】Apache Shiro 目录穿越漏洞CVE-2023-34478", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487732&idx=1&sn=19e48397819e052e795c4fb282d65ca8&chksm=fb029daccc7514ba69f41fc6cbed948032b92dfdbe71c671dc716f54e8c46d96b07efb162ed1&scene=58&subscene=0": "好工具分享：Web漏洞fuzz神器 Arjun", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247538754&idx=2&sn=77f861e3caa4f22514ff83a71f8c92f5&chksm=c1e9d413f69e5d05165a935cb84402707620902ec96be1aaaa5449a572d1e2521f6f11e92d9b&scene=58&subscene=0": "恶意软件伪装成漏洞PoC进行传播", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491655&idx=1&sn=e7ba2a26b4db9f5c1adacac5300f7048&chksm=96f7ff2aa180763c1329aae675b3570d10e14f96855cce8bd0e4ac0c834c234d9c21f0476f5c&scene=58&subscene=0": "风险提示｜Metabase远程代码执行漏洞（CVE-2023-38646）", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247502621&idx=2&sn=15346f6e1fe6ac6a68bd29d747c98849&chksm=cfcaa809f8bd211f7f65c559849c9d47127d75e8136182a4e94bc53d0bdb33421c118e7e47d7&scene=58&subscene=0": "别急着修！Apache Shiro 最新身份验证漏洞实际很难利用", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499263&idx=1&sn=486a35d69c07545d3efb8a1d322c9ea8&chksm=fe79d967c90e50710bfcbb52fb39615338f894dcf3ddd080fc1fdfd42d16ec9e6ff7c3284509&scene=58&subscene=0": "【已复现】Citrix ADC 及 Citrix Gateway 远程代码执行漏洞安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499263&idx=2&sn=d05107c61448ff746d2b08162fcb72c7&chksm=fe79d967c90e507187ad54cc0778c72ad3685d9a847105c1817f16603326d3321ad27131874d&scene=58&subscene=0": "【已复现】Metabase远程命令执行漏洞(CVE-2023-38646)安全风险通告二次更新", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499263&idx=3&sn=563e9d181ce1ea4d3dc8ddc9d3fc1356&chksm=fe79d967c90e5071271e8681475c78a770188268833e3bfe56a35b49e3548cb2a33148eef68e&scene=58&subscene=0": "【已复现】Apache Shiro 身份认证绕过漏洞(CVE-2023-34478)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652040378&idx=4&sn=a6770cb53a5583f0e8b921778dacfca5&chksm=f36fc0fac41849ecaefef66e916873551746f8c0e7a59be9c75cb86aab177b0f7d36120b18f8&scene=58&subscene=0": "【安全圈】所有 AMD Zen 2 CPU 均受影响，专家发现 Zenbleed 远程执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517225&idx=2&sn=cfa4e9c7c012a88ff6a1ca8ada75564c&chksm=ea94b543dde33c556be2fcb984ebb556ca8d5f6654c7938d9996636b045518ace000eb82f2b6&scene=58&subscene=0": "新Windows?! 苹果再修复已遭利用的新0day", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509264&idx=1&sn=8ef440293d0677177f5b04eb1cf8696f&chksm=ebfae230dc8d6b26084833e5006dcce396fcb5e145f9c54e57223de7ed1e615d7432312a6e08&scene=58&subscene=0": "TikTok未修漏洞节省数千万美元，一年后在海外大选期间遭利用", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247491380&idx=1&sn=2f40dddc4328508d2b91786d45e8b300&chksm=96db14eea1ac9df856a953e4845a7f53ff87ecd25135280183d097f26654d15d852c02a03e82&scene=58&subscene=0": "漏洞情报 | Metabase 远程代码执行漏洞(CVE-2023-38646)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458510764&idx=2&sn=4c9839f9d021cdb18fa11e50c7846ff4&chksm=b18ed52686f95c304025d30b081318adae6451ee201c61b732540291b705724581c41038a7c2&scene=58&subscene=0": "研究人员披露MikroTik RouterOS安全漏洞，数十万设备面临风险", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247502633&idx=1&sn=383cc8a77f6ba489c0e9bc6c722828e4&chksm=cfcaa83df8bd212b7efebaa31d91ac9762b7d3cb78e83bdb126aacab47f46caf6c71fe0b0c96&scene=58&subscene=0": "漏洞通告 | 泛微 e-cology 前台文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247493879&idx=1&sn=180d8c09cd0e3aab39eb42305fc18ac2&chksm=fe26edf6c95164e0d2d08314778f2cbb6a822574d80a56dac1ecf1a4a446dc00b0cf534da1b4&scene=58&subscene=0": "CVE-2023-34478：Apache Shiro 身份认证绕过漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045457&idx=1&sn=81fcd58dca0f94a944c9276dd8db1a03&chksm=803fab0fb748221971735f68c8bf6a7e48264465b7ab4685707e4f756208942e1b8e0fbfbf16&scene=58&subscene=0": "【漏洞预警】VMware信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517243&idx=1&sn=a9d490b0fe3c69b9beed676a4ccc3e0e&chksm=ea94b551dde33c473e54e115f39d74066be049818db17f214e1674f3045916cd7ee85729c8b7&scene=58&subscene=0": "MikroTik RouterOS 存在严重的提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517243&idx=2&sn=329c721e1fa372f0edbd3acd7c5e9f14&chksm=ea94b551dde33c473259bf586af36e37db0dd338a1c952035c402307d640678be061c2fcc4b5&scene=58&subscene=0": "Ubuntu 内核存在多个提权漏洞，近40%的用户易受攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517243&idx=3&sn=aec30860da6f2a9d9af2ea532a32b258&chksm=ea94b551dde33c4713eeba8084b8b9a9eff3f5fb6ef34ea6ac25267f911bc21fd317e9ca8c8d&scene=58&subscene=0": "Apache Jackrabbit 中存在严重的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517243&idx=4&sn=511caf97dafdcde1dd21fcb95768e980&chksm=ea94b551dde33c47b6a71354af1737e8e593836833549d175113a7bb57e05b10bb109b58b71b&scene=58&subscene=0": "TETRA:BURST：热门无线通信系统中存在5个新漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247502373&idx=1&sn=207a1c3151f1cda503bda8fed22ffd2b&chksm=c2d1b681f5a63f970a603d98bcfe84360bf5d318483b449598c256e23f2a18a78d62e0103e2d&scene=58&subscene=0": "发包工具大升级：poc", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652040464&idx=2&sn=439d05a020a648840737075413ed0e38&chksm=f36fc150c41848464d2a601bc750a28094c84df6c389ae4aba261c7434e4e00489f268506baf&scene=58&subscene=0": "【安全圈】Ubuntu 曝出两个Linux漏洞，近 40% 用户受到影响", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652040464&idx=4&sn=2b549225fcaa4938d23bca7cd57cfa46&chksm=f36fc150c41848461342ac41eeae245ac066f245eaf8da28e03462fb2c505e0f60b7f26a8c4a&scene=58&subscene=0": "【安全圈】TikTok未修复漏洞节省了千万美元，结果大选期间遭攻击", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487739&idx=1&sn=1c7a6fd32c1c2e6dcdc897a8504543eb&chksm=fb029da3cc7514b584e1e88942b44bd119c54154b3d1fc2908e60a8a17c00ec8c05919cd5632&scene=58&subscene=0": "风险提示｜Metabase远程代码执行漏洞（CVE-2023-38646）", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247538929&idx=4&sn=3b84bafaf5ff532f976de265e9e9bee9&chksm=fa93ee30cde467261d08acc70e00e6a0cd896b3a252ad6feec21fd4b4411f7a38efb2d7d0cb0&scene=58&subscene=0": "超级管理员权限提升漏洞使90万台设备面临风险", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247538835&idx=3&sn=bd00c6fc2d5b61352ce92b7713f1f3f6&chksm=c1e9d4c2f69e5dd452b18a1a1610a55bbe71890013ea44876ead81b171d52a52a136967c750e&scene=58&subscene=0": "TikTok未修漏洞节省数千万美元，一年后在海外大选期间遭利用", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651125017&idx=1&sn=dfe8a7a6887a760f1a2c871958f03814&chksm=bd1445ca8a63ccdc7fd04e18773945023c942acfab39a3a8092ce31cc9723e3da68843bf40b9&scene=58&subscene=0": "云安全漏洞管理的原则与实践", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247502641&idx=1&sn=2717d7710bcb50d64e6fdc702fd8e57d&chksm=cfcaa825f8bd21334d74444e8733c4fbf93bcfb6367a352dc433b78e438e0cea81f3816166f9&scene=58&subscene=0": "漏洞通告 | Metabase 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247529429&idx=1&sn=823772f28e4bf9dc1f387eebad6e25e5&chksm=eb849875dcf31163432df4fd6959b52d7d01f5b9a7283c2e060f36a9d6975e354284d017a20b&scene=58&subscene=0": "漏洞分析｜Metabase 远程代码执行(CVE-2023-38646): H2 JDBC 深入利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517276&idx=1&sn=4af5856a408590c04f66b8cf7944909b&chksm=ea94b536dde33c20a349d0ce168088e20f1710c32321c5af387665d68fc566998f5763f5cf27&scene=58&subscene=0": "谷歌发布2022年在野利用0day年度回顾报告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517276&idx=2&sn=0fe8d060cc5c519d99f3e936383d6905&chksm=ea94b536dde33c20a01f016bee84519b7931877eb62ae99de7f03d559b786d4f88d6bd29678e&scene=58&subscene=0": "开源BI分析工具 Metabase 中存在远程代码执行漏洞，未完全修复", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491664&idx=1&sn=ef84c66afc7804d32d00460f9238fb5b&chksm=96f7ff3da180762bca9bff1e75b08cd01bfdbe601db9daf0322774fa149b8eeab87711d37881&scene=58&subscene=0": "风险提示｜泛微OA e-cology 前台文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247515119&idx=1&sn=103827169ed08a4ed01999526e2a3eb4&chksm=eb7065d0dc07ecc64f07b36a8ea95df4e43aedab6c9ac65ad998243571e3c1f8c01a3b916f7a&scene=58&subscene=0": "【火绒安全周报】亲兄弟合伙窃取教育机构学生信息∕TikTok未修复的已知漏洞被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247497758&idx=3&sn=c2433bbba53640eaba4a2271b28decd6&chksm=eaf9b052dd8e39441064734b2f3b87f07e7e513cdb7f403b3bc51ec698d09cf0bae2433af52a&scene=58&subscene=0": "现金奖励 | 2023补天通用型漏洞专项活动第一期来啦！", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652040612&idx=2&sn=f0543a5651872e75d69b8047d73e12b0&chksm=f36fc1e4c41848f23937fef04ce89aa8feeb7e76df05da12a8b662261747e2c5ba507a59c608&scene=58&subscene=0": "【安全圈】全球92万台！RouterOS漏洞曝光：设备面临大规模攻击", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247564759&idx=1&sn=3b5923ba278b90efdb0b1180b6178b70&chksm=e9142dedde63a4fbc4cc75725f526489af19ce5e823b6a3c6171c71db10035a48e8b7ae9d368&scene=58&subscene=0": "【技术原创】Veeam Backup & Replication漏洞调试环境搭建", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520309&idx=2&sn=af5f74514a34486d2c33e695ac25c3de&chksm=ce461b25f93192330e8bd6089e33c7babf8588ab5c3774eb2991b80af04b41d04445f2df3821&scene=58&subscene=0": "【漏洞通告】Metabase远程代码执行漏洞（CVE-2023-38646）", "https://mp.weixin.qq.com/s?__biz=MzA4ODc0MTIwMw==&mid=2652538336&idx=1&sn=d8cb4b43c71cdf945602ebc11147ef78&chksm=8bcba1dcbcbc28ca7e7de8e59cfcc6b4afef50e93ea526cd1c23de528ecaa9b999c0bb5a91b6&scene=58&subscene=0": "奖金累加上不封顶！BSRC启动首次隐私安全漏洞众测", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247498327&idx=1&sn=e0ba190529b0f7d3af107b002efbbb6d&chksm=cfc55d08f8b2d41eac418635b9576da3ad7516718cc901abe0d93b9733394512d0d16d7a126f&scene=58&subscene=0": "发力车联网漏洞治理，360提升车联网安全防护能力", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652040716&idx=4&sn=bee4a78022fb8a8baa8d665df35fcd78&chksm=f36fc24cc4184b5a5fcf151fa95b907050c1cff9fc0a6800d36ab8b997f3e7ccf5f86526dad3&scene=58&subscene=0": "【安全圈】WordPress Ninja Forms 又被曝出严重安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247488142&idx=2&sn=c152b396aac5d6635333777ab3e0b59f&chksm=fa5abc63cd2d35750c79f8b8d5bf5618031bc8b1ce6e86d29fd3270a8b1fa3bb0173bd57b135&scene=58&subscene=0": ".NET ViewState反序列化 (十三) ViewState RCE", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652040793&idx=2&sn=902fb0fe35e67f134b17cc8e446c5de7&chksm=f36fc219c4184b0fd48ce5b541ab374793858b947331126216393414fa3d2f60fa7a2b097cb8&scene=58&subscene=0": "【安全圈】全球紧急服务通信协议曝出五个零日漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458510986&idx=1&sn=0d028b0c7abaeade83a18ae861373954&chksm=b18ed60086f95f16409be42955524e847e0dfb90bb341cc573caa3f9f3fe9a823b7c8dcacb4e&scene=58&subscene=0": "命令注入漏洞CVE-2022-34527复现", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458510986&idx=3&sn=d1e528af52c6a28389dffa23d351c311&chksm=b18ed60086f95f16031c4d6ed5bceafc1e888963cfe3f76101c8fd7cde836c1189dac9a0261e&scene=58&subscene=0": "赋能企业安全！系统0day安全-二进制漏洞攻防（限时75折）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517282&idx=1&sn=92bc54d50120e90cdb14ffdc9575e7e5&chksm=ea94b508dde33c1eb06b110c0e5f8a197bfcb980488faddce9fee996ea1be88dc50821b49082&scene=58&subscene=0": "挪威政府机构遭攻击，黑客利用的不止IT巨头 Ivanti的一个0day", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502246&idx=1&sn=c985517412ae45a2a3eaac1432271002&chksm=f2585b55c52fd24371534ce41d7268c17acadbdcc4e5d46c6364a11930d3b6254d8d70d93883&scene=58&subscene=0": "雷神众测漏洞周报2023.7.24-2022.7.30", "https://mp.weixin.qq.com/s?__biz=MzIzOTAwNzc1OQ==&mid=2651136790&idx=1&sn=1a50f5b8dc85cd4c3af37fb659849003&chksm=f2c12276c5b6ab602378c81d3c3c3bd997c854c47d0c9197e73229adf7f069b18b0b4aaf9915&scene=58&subscene=0": "KCon演讲议题巡展｜AI对于代码审计和漏洞挖掘的作用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652040914&idx=1&sn=a861d568b75d247080ea3a4d52defcae&chksm=f36fc292c4184b84e0cc5811ddb95f946ff77dc4a66f5813ec814cb6fbc8d759789f73a70e7f&scene=58&subscene=0": "【安全圈】勒索赎金超7亿元！2023上半年最“费钱”的漏洞来了！", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493665&idx=1&sn=7b66b974f4526698636015196931c379&chksm=fd74d8e8ca0351fe28a72a41ad55ed723450f08b49c94ed636088b58d7490e37d14178c060c8&scene=58&subscene=0": "CNVD漏洞周报2023年第30期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493665&idx=2&sn=3c70abce74aa7615d35e001dbb4f18ad&chksm=fd74d8e8ca0351fe7b7fdf665c10a091fc52ad7c1211240660b98c6038436ce898669e77dfa2&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230724-20230730)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247502715&idx=1&sn=bb7ffa48bd998f01a59b5fa047be069b&chksm=cfcaa86ff8bd2179c9b829dc7d93bea4c5ab0521192f9bdfdf86ffe26839543c60b469788743&scene=58&subscene=0": "漏洞通告 | Smartbi 权限绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458511138&idx=2&sn=4a1d4fa601f495dd5eeaae9fdfc9b9da&chksm=b18ed7a886f95ebe3cd2ab7fde7fc963b9becd947858048e04da6452470336aff7236f0c6447&scene=58&subscene=0": "热门游戏《我的世界》模组存在RCE漏洞，已被多次利用", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499289&idx=1&sn=82c70d805070e91f33a0de8d9cbf1f43&chksm=fe79da81c90e5397f945a682983879408e1707be9b6416d97898c8cfe3136c9e2397f856909b&scene=58&subscene=0": "【已复现】Linux Kernel权限提升漏洞(CVE-2023-3269)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517295&idx=2&sn=2c61b03a254eb41986877bc9977f28d5&chksm=ea94b505dde33c137d2d2dcec01ebd94afa1b449dd12ce0261075f458567109501412321929a&scene=58&subscene=0": "美澳提醒注意 web 应用中的访问控制漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247494064&idx=1&sn=5a5f2d18cdf4ac177c334046c95b20c8&chksm=fe26ecb1c95165a7f746f0bccfb5866df6b1f5637e1633578d782304bd8ca4dcc3a4b5051c80&scene=58&subscene=0": "QNAP 多个高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247501899&idx=1&sn=9e7937d4b847dcfe2be780200c020741&chksm=fa521df5cd2594e386f80c9ce1b702f757297a9bc63a491a3ccd7d39723eb93393028c2c7b2e&scene=58&subscene=0": "Vyper 智能合约重入锁防御失效漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498573&idx=1&sn=6378da1a6d84b564151c5ff60c3dbdb6&chksm=973ac82fa04d41393ae79e16622e0e58a8aab3f1aaaa62179a1dffd255623e6dde2c8b3aa59e&scene=58&subscene=0": "CNVD漏洞周报2023年第30期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498573&idx=2&sn=56503dd44dc678c6459ba987434abcfe&chksm=973ac82fa04d4139b2010ffaebf54d43ed53cc01fe7f5dab2af2c455d31e0c4c7cd531846c8e&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230724-20230730)", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491680&idx=1&sn=5a3e981c1052bd15ec5f6e2483132a11&chksm=96f7ff0da180761bb48d115b5b6efdd2edf45b0a257a10454dfa577920b9c6dc511a77225281&scene=58&subscene=0": "风险提示｜Smartbi 权限绕过漏洞导致后台接管", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247564910&idx=2&sn=1b173c442d7d628b2b76514306484dbc&chksm=e9142e54de63a742bb33bb9fe90e53feca460d42d3b70b259834bfa51a6d1f7e7976488374c0&scene=58&subscene=0": "综合分析CVE-2023-23397漏洞初始攻击样本", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487760&idx=1&sn=7d39d8966ac8fac50e5540e4d549f5c2&chksm=fb029c48cc75155e9e4de8405985f8b2806bb4e128a232b5bea8250710ff225672a7bdf3510d&scene=58&subscene=0": "风险提示｜Smartbi 权限绕过漏洞导致后台接管", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499295&idx=1&sn=1b3a8a3387f2cc4c90405bd501270b66&chksm=fe79da87c90e53916f816d20c0e2a7d098ea0dde447e03517b6a00f57ee3e1dc63a0bb9c5e1b&scene=58&subscene=0": "【已复现】Smartbi身份认证绕过漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247529590&idx=1&sn=1c31354c67dd41b2a44e0b3205c01ab5&chksm=eb849fd6dcf316c01d09f9ba703dafa48132b0205be239fb78c38a9a76ca801f2a5b2a3738a6&scene=58&subscene=0": "漏洞分析｜Adobe ColdFusion 序列化漏洞（CVE-2023-29300）", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520319&idx=1&sn=15cfe96185c4eb2f100b1773da3cef8c&chksm=ce461b2ff9319239bc6f2082c9642f8484f316f00c80c4284e33225809870131a486697b2633&scene=58&subscene=0": "【漏洞通告】Apache NiFi 代码注入漏洞(CVE-2023-36542)", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247491395&idx=1&sn=7792892771fb7c40cccccee7eb8ebf0f&chksm=96db1499a1ac9d8f47f8a756dce0d06cffa4ef05265e4ab56d4cb695b1b1eb8a2ed142935b95&scene=58&subscene=0": "漏洞情报｜Smartbi 未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652041097&idx=1&sn=b39d2ccb74fbcd5cfadc2cf52d7535b8&chksm=f36fc3c9c4184adf36a9fac63f571b445cd449b0e9244654be9c5f5f753a48345bda297766fa&scene=58&subscene=0": "【安全圈】Ninja Forms漏洞危机：900,000+站点面临潜在风险", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487762&idx=1&sn=857d02153eb02af80d942c8464b65197&chksm=fb029c4acc75155cd3b8eee46a7cca03a112108f5f4fcbb6b7bcd560925809520ba4833feecb&scene=58&subscene=0": "nacos 身份认证绕过漏洞(QVD-2023-6271)", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650969682&idx=1&sn=797855374d00ad6985c62c1abd053e38&chksm=8079d460b70e5d76fbd5b83786ee943e008c8bc7dd7d78a15957181d700211072b0c3f7df6b7&scene=58&subscene=0": "404星链计划 | 5 款全开源的免费漏洞探测工具", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509405&idx=2&sn=d21181bbdd306c3f1da1022ef7d4a887&chksm=ebfae2bddc8d6babe39030cf64a2f51703d2e29c098e8905754573c4e90098a5d9db557f585e&scene=58&subscene=0": "热门游戏《我的世界》模组存在RCE漏洞，已被多次利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517307&idx=1&sn=26cfad6c669ec577ec8907950826b5c8&chksm=ea94b511dde33c077dd3527a4599003fb1642d19fa4d39f96bb7d85c79dc6bf7f0166a73df88&scene=58&subscene=0": "Salesforce 邮件服务0day用于钓鱼攻击活动", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247502367&idx=1&sn=7bc6a334a6c3f43abf6fa757e470e1dc&chksm=c144b8a2f63331b4bc3f96294f00a179c6c671e5eb9c922631ead7651d3720ea67deaf93b233&scene=58&subscene=0": "“卫星安全”背后的秘密：软件和固件均存在漏洞，几乎是“裸奔”状态", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247491517&idx=1&sn=94aa89cfa11fdf1c9458914cb6905452&chksm=96db1467a1ac9d713ece80e49690d49527896fe9185940f03626b368ee140e981c8304445285&scene=58&subscene=0": "2023攻防演练必修高危漏洞集合（2.0版）", "https://mp.weixin.qq.com/s?__biz=MzIzOTAwNzc1OQ==&mid=2651136930&idx=1&sn=7812346600e1480ce80d045f317603d3&chksm=f2c122c2c5b6abd47e0c74491b05e30ca36f04043013229dd43107001f189d737d83b64d15ec&scene=58&subscene=0": "KCon演讲议题巡展｜闭源安卓系统下的漏洞自动化发现之旅", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458511529&idx=3&sn=8c8ddb0e02e8cd33ea9217b33212db10&chksm=b18ed82386f951353a0aae66f5f36fc03c622ece13520a71496744eb4d40da526c72f9473358&scene=58&subscene=0": "CISA公布了2022年最常被利用的12个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657164611&idx=1&sn=cdb1e4da26943252a22c5e771b16a8a0&chksm=f1d4efa6c6a366b03c5745a214272fe28c16f064afe54e186539b40021fb97cc05cdbf6d4e6a&scene=58&subscene=0": "CVE-2022-30887（文件上传漏洞）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517324&idx=1&sn=fcb1dd9543642ee629606aecbbeff4bc&chksm=ea94b5e6dde33cf09a7babed3a61a2379955914e7340c99d74a64dd82396dc612b8fb0b73ddf&scene=58&subscene=0": "五眼联盟发布2022年最常遭利用的12个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517324&idx=2&sn=148eb4867662d131943cf25c80175992&chksm=ea94b5e6dde33cf0d8a2d47cf997596fef2f4a4cce32ddcc3df68065796ee8ad4be5dc6c9d66&scene=58&subscene=0": "Milesight 工业路由器受数十个RCE漏洞影响", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509423&idx=1&sn=34a6099e6da1476ed7f315831b3e2c7b&chksm=ebfae28fdc8d6b991002af660bfcb4626b96cc4786bf707679a730c4d623f1d922df8a2baa81&scene=58&subscene=0": "抓紧修复！2022年最常被利用漏洞清单，Fortinet五年老漏洞位列第一", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045463&idx=1&sn=acbc4594ee0cc580232576e4875215ec&chksm=803fab09b748221f48e54bc80be6e991a33a4c60eb3e3556bc493b124de359487b4e3404b741&scene=58&subscene=0": "【漏洞预警】Apache NiFi 代码注入漏洞漏洞威胁通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520333&idx=2&sn=3c5ace9d336ccc603bd0ff6313a09f79&chksm=ce461b5df931924be7b0faa9417d4352cf3598d23467095b7ec6fd81ccfd297454c6b506e421&scene=58&subscene=0": "【漏洞通告】Metabase远程代码执行漏洞（CVE-2023-37470）", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520333&idx=4&sn=3b9063bc22ecfe16c5ddcc1da593b941&chksm=ce461b5df931924bde0762381c5efcb81edc59647984455b7b4ba5fa60e03f25344b4118ac3d&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230217-20230223)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520333&idx=5&sn=4731e7b86bf1266ff336bde4a1e43414&chksm=ce461b5df931924b1fc3f53b39fbd367f2f31a1ae62b8b8f0220991ab91a4ce599521f620dbb&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230724-20230730)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520333&idx=6&sn=c4c67e0ae167e90567b80a508f692459&chksm=ce461b5df931924b5233b2d88c07ba82efea7d74513dbdbdd517f339268e46f4a8e172de43f3&scene=58&subscene=0": "CNVD漏洞周报2023年第30期", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247538955&idx=3&sn=e96eadeac1bd8b6617e411a9603a4051&chksm=c1e9d55af69e5c4cf8dfca2260b0f37c5861dd6a62b24302253ca407bdbe81a4657c7c84f2eb&scene=58&subscene=0": "半数人工智能开源项目引用存在漏洞的软件包", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520335&idx=1&sn=8b5dff9e555c4758efea49a6093727ef&chksm=ce461b5ff9319249e9fdc814058b306159de76e321d62aa7ca49477d00a36aa38885ad8ef5a8&scene=58&subscene=0": "CNVD漏洞周报2023年第28期", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458511583&idx=2&sn=5abcbfe9689cc31587ec3fa07f5217d3&chksm=b18ed85586f951433532f6e06b1e342136c87c64b365e740d5b7428e53edc06be6f464b0524a&scene=58&subscene=0": "赋能企业安全！系统0day安全-二进制漏洞攻防（限时75折）", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247502799&idx=1&sn=87f72b432bd40665572c9d626fd14045&chksm=cfcaa8dbf8bd21cd8cc6905079e58592f100388b0aca30a17833807e895f71ca17aeb4e1a418&scene=58&subscene=0": "红队最爱50个高危漏洞，马了赶紧修", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517335&idx=1&sn=fb6f828cad2dd147b64eb18c25e34e7b&chksm=ea94b5fddde33ceb6bbdf2cd3e5cda0f1103d555edec4b0e6008b76a45ecf4d51beda67e6305&scene=58&subscene=0": "PaperCut高危漏洞可使未修复服务器受RCE攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247498430&idx=1&sn=be6fc1d853f25c1e8c365885c615d832&chksm=cfc55de1f8b2d4f71eae248fd7dc0a6a94390ca699926751eea264a9ec10ade49d7537d074f5&scene=58&subscene=0": "三年内攻防演练实战总结，200+必修高危漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247500881&idx=1&sn=c86fbf5c42f9178d591341d7100546ba&chksm=ec9f1d22dbe8943498923c08aeac1fc8371be74811fc2f7a02a0325cc736cd32978f74d0777b&scene=58&subscene=0": "腾讯安全威胁情报中心推出2023年7月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247484443&idx=1&sn=6a309a5029ab2670567d199816289765&chksm=c2b1066df5c68f7b50f74899e797c12a7de169dc78d2073017e4bd59fff7c2bf1d4e4a5d3f87&scene=58&subscene=0": "腾讯安全威胁情报中心推出2023年7月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652041451&idx=1&sn=6f5bd9b3a6801ab469fbc602a5998ecf&chksm=f36fdcabc41855bd943a95afcae93ee70122e56d148dedcbc9a4889c3111c7efeeec4e43b48c&scene=58&subscene=0": "【安全圈】黑客组织Clop发动零时差漏洞攻击，近600家企业遭殃", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520353&idx=1&sn=9965a19f51dfd4649a08ef06e913a2ab&chksm=ce461b71f9319267934d98badbbe56e84eacf2cd3181e29f102d022339fc7dabd5ca9efe5108&scene=58&subscene=0": "【漏洞通告】通达OA SQL注入漏洞(CVE-2023-4166)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520353&idx=2&sn=bca1eb7c09f375b2242d1b33ebcdc214&chksm=ce461b71f9319267a3262f0203e6d288609486957b479200587e64796a021d20dd5b17f1eb06&scene=58&subscene=0": "CNVD漏洞周报2023年第29期", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247565101&idx=1&sn=bf4eb692fd6ed4fae912ea01a97de36d&chksm=e9142f17de63a601b18a4678e18f787a6efa9b17e9f648e459ece1c8785d7c280d5fe34634fc&scene=58&subscene=0": "【技术原创】ADAudit Plus漏洞调试环境搭建", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493679&idx=1&sn=8b02c6da20ec3ad8ee699a7515981433&chksm=fd74d8e6ca0351f0c08f285eec79d8a52d436fb98fa463481c13f5a8848534556585573c658f&scene=58&subscene=0": "CNVD漏洞周报2023年第31期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493679&idx=2&sn=654cbb4eaca0b8bfe157ba8b1b8c50df&chksm=fd74d8e6ca0351f080adfd0a3c9b3d0f6ec570f7e52de89ca157e6d6eb8e124c1cca1a6f5742&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230731-20230806)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247502858&idx=1&sn=fc907d27e828caf719a54d9717116813&chksm=cfcaaf1ef8bd2608bf7492e8e3ac078bcad968c637e7777625a0e5a878923f5da5a53c5771fe&scene=58&subscene=0": "漏洞通告|致远OA文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517346&idx=1&sn=dcb42c27a9ed130e2ed414e92a522703&chksm=ea94b5c8dde33cde439ed84e902f38cec723ed64a1fc2cd77d5d8c72b7068883f9bc90788a74&scene=58&subscene=0": "被别家CEO狂怼，微软火速且老实地修复了严重漏洞后......回怼", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502255&idx=1&sn=b605aa0fc6d1ef5726d3cd0d78b6e394&chksm=f2585b5cc52fd24a89b49198824fa84f7c9096e012f0e7bed381838f9b9ee3b8aa21796695bf&scene=58&subscene=0": "雷神众测漏洞周报2023.07.31-2023.08.06", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499326&idx=1&sn=02037a8614e42f34cedecd8261a7eb9e&chksm=fe79daa6c90e53b00ac3283d996d6c72db3ccc95b9d885dd8d79f8a43568ead5d6b6365d359f&scene=58&subscene=0": "攻防演练收敛已知漏洞攻击面，请更新这些软件到最新版本！", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498594&idx=1&sn=01a5a495981d7df06109ebc330f60efd&chksm=973ac800a04d41160f4a0d75dcf39e7cf69dc56e1f46df4a54cf08361f9e6a6f0b58dc1f061c&scene=58&subscene=0": "CNVD漏洞周报2023年第31期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498594&idx=2&sn=7719cb859059087ebc614a952ab650c0&chksm=973ac800a04d411667b1570f8c0c2ee3dfc953e11b449b452025a34ae55e71c3ef2c6392f496&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230731-20230806)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652041526&idx=3&sn=da030aad92f0c611891337fcf921fa75&chksm=f36fdd76c418546003f96f0c0506229f3d0d179149f90e6c560ea5c6c01ff41fd47345a2975d&scene=58&subscene=0": "【安全圈】Facebook企业账号危机:Salesforce漏洞成黑客入侵新通道", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247539126&idx=5&sn=6c4e84b4f46c0ba4445d5f10002748a5&chksm=fa93ef77cde466617355f2a8e0f58d207e8ede5638858dedbb0d39b449127e92432ce16f6548&scene=58&subscene=0": "Facebook企业账号危机:Salesforce漏洞成黑客入侵新通道", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247502867&idx=1&sn=bdf4ddb32305e594c8cc9e0aacf9264c&chksm=cfcaaf07f8bd2611dad27aa939c7501e82316625e89dabd1376f3640fd08ac7103b5fd346e16&scene=58&subscene=0": "漏洞通告 | WPS Office远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247496039&idx=1&sn=13869cb9d150fafc58b51bf95d27178e&chksm=c063dfbef71456a84d7b59116e1dbaab0b1744b269c7f4d17b0b43cf7fecbd10811c4a7c6e0e&scene=58&subscene=0": "G.O.S.S.I.P 阅读推荐 2023-08-09 又见CPU瞬态漏洞~", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247494434&idx=1&sn=5fb75f3662223304e580c2fe87b58d55&chksm=fe26ee23c95167350ffc596b89c8554e01ff439a05f54b818f610e385b31920079f5f02cdf92&scene=58&subscene=0": "2023-08 补丁日: 微软多个漏洞安全更新通告", "https://mp.weixin.qq.com/s?__biz=MzU4MjEwNzMzMg==&mid=2247493593&idx=1&sn=c4af3b00377a8692514c3bb95b8c9ef6&chksm=fdbfce72cac847649d805bd1c7890a84942e094f194175660cf5fa05e76de9d1e227292a19cc&scene=58&subscene=0": "IAST技术专栏 | IAST下基于请求调用链的漏洞验证方案及其问题", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499331&idx=1&sn=5c2f7f14cfed7d76ce94f142caf9a11b&chksm=fe79dadbc90e53cdd88c22b3346d91f3b0b84a6fe2c9b0893185026f0d4ab8567fdcf8ea2f12&scene=58&subscene=0": "微软2023年8月补丁日多个产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247491597&idx=1&sn=bf626eed5b4ebc12087b425bbeb4459b&chksm=96d8ebd7a1af62c16333baa973b44ef41825f550b67045094a35cf02a175b50d5db6b4a58f34&scene=58&subscene=0": "2023攻防演练必修高危漏洞合集（3.0版）", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247515219&idx=1&sn=53b40e26ce1636a1107b3cf2e00a52ff&chksm=eb70626cdc07eb7a1ea78cbd7bcf6a22561c647a9863dc58c288eabeaf834ed84fc0baad5d8f&scene=58&subscene=0": "2023-08微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247539147&idx=1&sn=9d7262b7f5c8d77f061a17ac5cd91a55&chksm=fa93ef0acde4661c255f06fe9923e7abc3939689877c148d689e98919243839a5f9897a26c25&scene=58&subscene=0": "航旅业大地震：常旅客积分系统曝严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045469&idx=1&sn=146ffafeda746741d69606fd61537efc&chksm=803fab03b748221568d58eaf72654e28de9ea3d60b47c11700f92f36774061979a7be01f16d1&scene=58&subscene=0": "【漏洞预警】通达OA SQL注入漏洞威胁通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458512398&idx=1&sn=e94173003b672140560834fae162b2e1&chksm=b18edc8486f95592f8a4f3736efb33b9069bd8cfa4c4abe6a1a5f1a4c6077e2486da858831d2&scene=58&subscene=0": "CLFS信息泄露漏洞CVE-2023-28266分析", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247502524&idx=2&sn=ffc138bf8851d6946411e5e8d660c7db&chksm=c144b801f6333117119431fe5ddd23dffe694179025286da07d5c4f6784f500c4b02ad2687e8&scene=58&subscene=0": "2023攻防演练必修开源组件漏洞合集", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499349&idx=1&sn=6bdcb194908f4694661fbb48a2e37582&chksm=fe79dacdc90e53dbfb2134731ee7926479bf097f8b9f835ac5ea9f4fdeeb2d74f5fecd1d808c&scene=58&subscene=0": "【已复现】Smartbi Token 回调地址漏洞(QVD-2023-18159)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509480&idx=1&sn=1e6e1dd3e9bb9d765a595f725995be0f&chksm=ebfae2c8dc8d6bde207bf527c9f499343a09e2c7ad6767cf15049a4fa322a2996f3b8410fc7b&scene=58&subscene=0": "美国政府发起超亿元奖金挑战赛，悬赏能挖漏洞的下一代AI", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487792&idx=1&sn=17ec955dc15f82ca9c7961629d3888b4&chksm=fb029c68cc75157e692bf21c513b8056a4971a73efdf5910b661ef44b33b88fa44ebd7a2f4b5&scene=58&subscene=0": "GraphQL API 漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458512618&idx=1&sn=ab32e94019edabc828b92b00bb04b7ef&chksm=b18edc6086f955767a1dfc37e9375ab96447f5b8016d0e91d40d9dcee5cabd84541963c85852&scene=58&subscene=0": "D-Link Go-RT-AC750命令注入漏洞复现", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458512618&idx=4&sn=1c44c2ee9b7113706c57aaada44c8d66&chksm=b18edc6086f95576bfaccbc7606dc29fc528de2f92ca30f588d20220ca0857b13f99b54978f9&scene=58&subscene=0": "预售即将开班！系统0day安全-Windows平台漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517364&idx=1&sn=0937446fd50333a9a8fb6fe1f809bcb8&chksm=ea94b5dedde33cc8d61486458ef5a6c7588c031fb6dfce3c05350366debaedb3f7c0da9d2ff4&scene=58&subscene=0": "西部数据、群晖 NAS 漏洞暴露数百万用户的文件", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247539067&idx=3&sn=a7a75c79cc1778a589610c6804055f7f&chksm=c1e9d52af69e5c3c21d1626f98c421ca0efeaa81688cc3425b877459112f76941dc8ccede5c2&scene=58&subscene=0": "严重的AMI MegaRAC漏洞让黑客可以瞬间使高危服务器成废砖", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652041765&idx=3&sn=7122da67020670cfad662194bcef4799&chksm=f36fde65c41857735c9a6201de60c3a60ea19f6641dc350828879ac639e3ee59ba1ba92046d2&scene=58&subscene=0": "【安全圈】EoL-Zyxel 路由器五年前的漏洞仍在被利用", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247498621&idx=1&sn=dac4974847665c8a871a92df14b94fd4&chksm=eaa9735ddddefa4b368f264a7a4289cce27077ca46743862746e9701c86a7db319bde3b39068&scene=58&subscene=0": "【代码审计】WordPress 插件 download-manager 神奇的漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247539197&idx=3&sn=262e2ab73b0f48bc5de9daafc5f2a813&chksm=fa93ef3ccde4662a21b8cba48ec708cc63eb470c16754f15ef69a42cce3cc03cb381ae807163&scene=58&subscene=0": "基于风险的漏洞发现和补救措施", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458512632&idx=2&sn=88ccdabafa9395c6bb807f35f1092f93&chksm=b18edc7286f955642f78e20e03d92c0a00b96987592e21ede6914a7707dd7984fef27104e2b5&scene=58&subscene=0": "CVE复现漏洞精讲-从基础到入门", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652041839&idx=1&sn=aa98805b041a61a1609e985298bbf60f&chksm=f36fde2fc4185739f7745bdc78faaf0b18b100e728bc1cfdaf87e12c1106c5073ed48705f77c&scene=58&subscene=0": "【安全圈】英特尔CPU被曝存在重大安全漏洞，可窃取加密秘钥和机密数据！", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247489319&idx=1&sn=922e12880a69292afb9f92d80c0c1371&chksm=fe2ee8acc95961bada79af1b82467967d078254881430abfb8d5bf3b04914389346a1a225af5&scene=58&subscene=0": "清华大学 | 通过攻击意图同步增强Web应用程序的漏洞检测效果", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517374&idx=1&sn=12d034509187f5a1ffad1d3d7be93a19&chksm=ea94b5d4dde33cc26330d27ea0f0629dceaeb2c31603dc8c6b20989ca3fda14c8fc08fca76fe&scene=58&subscene=0": "15个CODESYS V3 RCE漏洞影响全球工业PLC", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517374&idx=2&sn=6d9a155300780ffb8b966b2bbc21d887&chksm=ea94b5d4dde33cc296b93b32e5cd32ac9615348457175affa0556a82c0a3015f42839582329b&scene=58&subscene=0": "Python URL 解析漏洞可导致命令执行攻击", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487832&idx=2&sn=b9f5d6f9c29044cb0bc17cc87122420a&chksm=fb029c00cc751516c5167c97319fe8ad7bccf8838d34b51b7a7d5eb8e82267a0791ee4572732&scene=58&subscene=0": "零容忍！保护你的容器环境免受镜像漏洞威胁！", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247565557&idx=3&sn=5b98c359860331189626ae7f60dd2d65&chksm=e91410cfde6399d90632dafa41c795082c16c6ce9cf10c52e57eb795477da8d17e37d17bd059&scene=58&subscene=0": "进化中的勒索软件：不断发展的漏洞利用技术和对零日漏洞的积极追求", "https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657164625&idx=1&sn=d5d74b11c433aab63bd093ab7cc75982&chksm=f1d4efb4c6a366a2a47763e8dfab958667fa4919d50279c8f224ea72a37d91deb7633a482e73&scene=58&subscene=0": "Lexmark远程代码执行漏洞(CVE-2023-26067)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458512939&idx=1&sn=4c513a941804b06e9170713dc1bad023&chksm=b18edea186f957b7e4b8440ad8635500916b4dbdee105d88a0555bca05ca2cce962262b3eb43&scene=58&subscene=0": "Windows 2000 系统资源管理器的一个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517384&idx=2&sn=a3ac27cb893f93f4d515bb9f2533225d&chksm=ea94b5a2dde33cb45dfb944387b01581c10e3427af2b480354fb1f1599bc067b982a0c128fb5&scene=58&subscene=0": "福特车载娱乐系统中存在缓冲溢出漏洞，可导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247539123&idx=2&sn=760abe8e1dbad6f5c4808b804619ecee&chksm=c1e9d5e2f69e5cf4033fc97a9e51155825c4e58eaf37e24ec35aa24de59d755b1f4b9583e808&scene=58&subscene=0": "进化中的勒索软件：不断发展的漏洞利用技术和对零日漏洞的积极追求", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498604&idx=1&sn=7ef6681da2649da60211fe559b8fdc30&chksm=973ac80ea04d411840e9071f4b43d907a5c76ccc9e8ea935bfe54ca2a55e1db5042541bc3c93&scene=58&subscene=0": "CNVD漏洞周报2022年第32期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498604&idx=2&sn=6fe1670c9e562c37ff791732488dc680&chksm=973ac80ea04d41181ffe32cf9d30a19cd11c661f4c5c72aa44f72ae2533df09acae5485a9196&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220807-20220813)", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247539252&idx=1&sn=f009d4e5bd3c8c77d6e594137033fc00&chksm=fa93ecf5cde465e34267f43ef427566328af020d5f71f6678efc0fd675c725ea0f810aac326a&scene=58&subscene=0": "福特曝WiFi安全漏洞，官方称仍可安全驾驶", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247539252&idx=2&sn=9eacb38a086b87938029b7616e4e231b&chksm=fa93ecf5cde465e366185cad03eb8d9d2bb8fb38b7e4a299022bd3bcbb7470e55b43e92c9178&scene=58&subscene=0": "潜伏于数据中心的威胁-电源管理软件漏洞可导致关机、恶意软件横行和隐蔽数字间谍活动", "https://mp.weixin.qq.com/s?__biz=MzIxMDYyNTk3Nw==&mid=2247513977&idx=1&sn=cf750f1a90bba048223aeef96a721e90&chksm=976343afa014cab9f59c02e29a2c391b0f914f9ca11d8d1b762ae19b281cf942f4d45030ee1e&scene=58&subscene=0": "从命令注入到空指针：IoT漏洞的挖掘", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247491320&idx=1&sn=c69c9959c14499978f1717fd616db70d&chksm=fa9ee5aecde96cb86cb712905ed260b1166e550447e38c96a0cf0d2910662019ecc14b8db45c&scene=58&subscene=0": "单个漏洞4.5万元，特殊漏洞额外奖励最高20万元！", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247539278&idx=1&sn=b4ffacaf2e9e7d7f261ae1cad53665b9&chksm=fa93ec8fcde465992bc744ad47fb66e479a884d05a26ac3081a43ce059d08b17302d0d65115f&scene=58&subscene=0": "潜伏于数据中心的威胁-电源管理软件漏洞可导致关机、恶意软件横行和隐蔽数字间谍活动", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247539278&idx=2&sn=39cc8c976dae414ba5babaacc6210890&chksm=fa93ec8fcde465996537a0b0d79d16a69297e6a76a5d97410dcec7e868e016d4ad772a790828&scene=58&subscene=0": "红队发现关键漏洞，可远程控制ATM机", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247488320&idx=1&sn=63fed8f75e4fbeabd4e59bebdda271b8&chksm=fa5abdadcd2d34bbaa257321867dac8a27c567e4ed92f34dd9437cee264c2777ddc6b600e3b1&scene=58&subscene=0": ".NET CVE-2023-36899绕过IIS身份认证漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247489857&idx=1&sn=a37d7b0787c0870827750662907eca0d&chksm=ea4bb306dd3c3a10978fe38eceabc29530cd554ec751b6179c29c20f5873bbe2cb4872eb8102&scene=58&subscene=0": "关于企业移动办公场景下如何管控数据安全的杂谈暨近期漏洞情报共享｜总第202周", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652042092&idx=2&sn=89f98bd211f39aed55c44c2be710de4f&chksm=f36fdf2cc418563a4c096debba5d52d58075829476d5899eb0360e2c785647a628ff27a6e19c&scene=58&subscene=0": "【安全圈】几乎所有VPN都中招！这个漏洞潜伏了二十年终于被发现", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652042092&idx=4&sn=61e2a2a7169dee35e88ecc5cccd88a87&chksm=f36fdf2cc418563a0bb8ac7ca28ec3eee5e0ce32e4f00a4197533a5c40e3e2b9508172496060&scene=58&subscene=0": "【安全圈】红队发现关键漏洞，可远程控制ATM机", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458513337&idx=3&sn=4f8e5fa296ce4305e7a138340feb0d55&chksm=b18edf3386f95625c676b35409cba94307e6d078f0b9afa82bfab4e3c9041837c6b6ecfa61e2&scene=58&subscene=0": "Mac安全专家揭露苹果漏洞，其恶意软件检测工具可被绕过", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045487&idx=1&sn=11cd16907fd384e8564c40a46f91e298&chksm=803fab31b74822274646c14d65e84b9ca0c9005d70b81887c02273460ee25962fd74c78751d9&scene=58&subscene=0": "【漏洞预警】Ivanti Avalanche多个高危漏洞漏洞威胁通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509533&idx=2&sn=6c880079a471cc8b5ce9681a833e32a0&chksm=ebfae13ddc8d682bec177cfece7ee73f89c9af206aa300e0b6bbe32cfe590a1bac751ec79194&scene=58&subscene=0": "微软2023财年发放了超1亿元漏洞赏金：平均每个漏洞8.5万元", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652042168&idx=2&sn=7bba6e213a662904caf3ccbac3e58e76&chksm=f36fdff8c41856ee81fa602795e80057d4c66694da8daeb8c528b87289a5da8f7ad26e5a8cb6&scene=58&subscene=0": "【安全圈】 MOVEit软件存在安全漏洞，致普华永道泄露8万名用户信息！", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247539334&idx=3&sn=a15eab86009640463de09aeb30e8ad6a&chksm=fa93ec47cde46551e0d16daafe0b98cfc11fec6b99ba5ec9747a2d752b50d83f0f28f93df819&scene=58&subscene=0": "潜伏二十多年漏洞曝光，几乎所有VPN都中招！", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247565735&idx=2&sn=fdbda8d890550e9484a70120f5ab6db4&chksm=e914119dde63988b6483541ac7cbd894823c13209c66decf091d09de7a907a718a53f24c5272&scene=58&subscene=0": "有史以来最严重的七个软件漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247509273&idx=1&sn=aa97d785cf8263314ff48f77a3fbcff7&chksm=c2d1d9bdf5a650ab32cc68fc46bc369fce7a1954cb558054911bc373c616a4017824ccd8d2e7&scene=58&subscene=0": "URL重定向漏洞检测插件", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517401&idx=1&sn=97cc9af4b78a594813c2d5db37dddef1&chksm=ea94b5b3dde33ca5e1e2efd3fd3111eefb9dd04cd588a68ac12db6c0e4699427d59de46573a7&scene=58&subscene=0": "PowerShell 多个漏洞可引发供应链攻击，微软说修了但仍可复现？！", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247539213&idx=1&sn=7caab3f7fa8f033a6c7a57ef07aa8c90&chksm=c1e9d65cf69e5f4ae257acc92e42949c3a3ed3cdc0979f43e5309886a7f7d0d89a00e8b9b559&scene=58&subscene=0": "有史以来最严重的七个软件漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247565798&idx=3&sn=60dd415b12abf231818756ad8521fa24&chksm=e91411dcde6398ca55e61bb0177eb5704993d7e9e7223ef8fd411efd2afe958db8fad895b190&scene=58&subscene=0": "全球各地的工业PLC受到CODESYS V3 RCE漏洞的影响", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247492453&idx=1&sn=2c0dd010126ba1d532cfd8a9d0bee8fd&chksm=fa78e229cd0f6b3feb3d5309f43858836108ac3f458713b0993800515faae48d63d1499c5d07&scene=58&subscene=0": "【众测挑战赛】第5期-单个漏洞最高奖励可达20万！OPPO浏览器与快应用专场", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458513713&idx=2&sn=cad5fa8eaf17f525b1ef7e6b4b53a00d&chksm=b18ec1bb86f948ad847e9ed538f3c1f2780bf8314117555ec06dd10a85c35dbda575e7e7790c&scene=58&subscene=0": "Fuzzing101 Exercise 4 - LibTIFF CVE-2016-9297&CVE-2016-9448分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458513713&idx=3&sn=35dd2369a3bdc8350a871fc6adf81abf&chksm=b18ec1bb86f948ad906cfd19eebf74901c2accfe80d83bcb3f63f4956b37bbac1b5593f579a0&scene=58&subscene=0": "满10人，9月1日开班！系统0day安全-Windows平台漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247509314&idx=1&sn=e37d29fb0e24cce3ba88fe0a9d88ba04&chksm=e89d8d9adfea048c6b33f9ab9e9726d684009303b381dc6bd6b0705db91d88bf0114d8990d54&scene=58&subscene=0": "CVE-2022-42475-FortiGate-SSLVPN HeapOverflow 学习记录", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458513730&idx=1&sn=d4a5fd43679ba3475e4cb7e061f214ae&chksm=b18ec1c886f948de54c7a8fd5b5384fa146af98293db97dc238990f1bcc5e233697a69ae404e&scene=58&subscene=0": "CVE-2023-28252 CLFS 提权漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657164691&idx=1&sn=32c1ece19dd3d48a92cb736669d8f5fa&chksm=f1d4ef76c6a3666028260b654b5c6ebcceb8ede41b0a62e5a1408890f21692ff0199504d1d94&scene=58&subscene=0": "【干货】HW2023POC收集", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652042341&idx=4&sn=e7b22e8152aeaf9e0bd49d7e82861c2c&chksm=f36fd825c41851333abbd3e89070cd6dbf43298e18403cfdccc11b29033c09b8b2691d92a87b&scene=58&subscene=0": "【安全圈】请尽快升级 WinRAR 至 6.23 及更高版本，新漏洞可远程执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517407&idx=1&sn=05e2d2e97807df0ba39c7ef3ac5d51bf&chksm=ea94b5b5dde33ca35b8400aefa41a5828e3b415b6b156f9d119ed338b388bad433656c88fedf&scene=58&subscene=0": "速修复！Juniper Junos OS 漏洞使设备易受攻击", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493747&idx=1&sn=1d11dd84c9f99f6ee3342c7843c6e100&chksm=fd74d8baca0351ac431413b3a15305f5f5e9a57e5e5e004b3834a7aee724e040aee05773cf4e&scene=58&subscene=0": "CNVD漏洞周报2023年第33期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493747&idx=2&sn=31bac182e60b4cadfa638a9e78352923&chksm=fd74d8baca0351ac75161d09d03693f8b65062ba46bab74d3024f40b9de87aee09267106a68e&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230814-20230820)", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247539383&idx=2&sn=fb2d2e0bf8f923ed9c6bc3fbf3f67886&chksm=fa93ec76cde46560f4cf8dc1e03de5588d806c58f053e6d224e4d2f6461d39f8dc1c1a5abc50&scene=58&subscene=0": "确定漏洞优先级排序的操作指南", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247565938&idx=2&sn=e94de07b5918d311ac58ececb705e27f&chksm=e9141248de639b5e146f651388b122294560065e24d6ecf353460ec908978341575ea877871e&scene=58&subscene=0": "CVE-2023-40477：WinRAR远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458513816&idx=3&sn=76510c97acfecc2566ea7c396931a12d&chksm=b18ec11286f94804837e73384db17cc87399a2c3a6eb97ecc1597d160cfff3fc2fbfc0bfdafd&scene=58&subscene=0": "WinRAR解压缩软件存在漏洞，允许黑客执行任意代码", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458513901&idx=1&sn=ad23ea7c50ecf652aae13144efe21d48&chksm=b18ec16786f9487179120d200cc43b42474229ab7d7722e077c18c4a0e8c61294d0854374748&scene=58&subscene=0": "从零开始复现 CVE-2023-20073", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517421&idx=1&sn=31756dd565b1bbd216e954def83c61dc&chksm=ea94b587dde33c91e83a737ae3eb0a14c48a427523b94dba12823b03eac1cecf97a890e21afa&scene=58&subscene=0": "Ivanti 紧急修复 API 认证绕过0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517421&idx=2&sn=dc8679fac09663662db54780d91b1a0b&chksm=ea94b587dde33c919ddad97730995e5dbd757afebf8436ee2cae3d3f3ecbc90788b004e929e9&scene=58&subscene=0": "WinRAR 高危漏洞可导致设备遭控制", "https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247494660&idx=2&sn=d480b539c93668bad2baefe043da4677&chksm=feb66d17c9c1e40115b728c1dc5a4f240f2d3c78c8439e66f4457c004f28331802fc36d8e8b7&scene=58&subscene=0": "确定漏洞优先级排序的操作指南", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247491350&idx=1&sn=af9088bb4fcb582b39b215dda577a46a&chksm=fa9ee440cde96d5687f86e47973cdaf27aca2856f9254683e69a2ce58865b1d3675c8b3ed9e2&scene=58&subscene=0": "字节跳动IoT产品漏洞奖励计划V1.0", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247565992&idx=3&sn=4b808e57870a7448f22077286ed896e2&chksm=e9141292de639b84d03a0340fc2f25d497a8fd7f09cebc0414e0b8c77247ee4e92046f4242ea&scene=58&subscene=0": "对SugarCRM零日漏洞（CVE-2023-22952）的防御", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498616&idx=1&sn=4ea176be13532ebe152731722ad27cb7&chksm=973ac81aa04d410c7831acde7df54bf2dfe0ba00f4dcf2a6be4be22800c237d2ebb42ce1fdf8&scene=58&subscene=0": "CNVD漏洞周报2023年第33期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498616&idx=2&sn=1282cbe38bffc673b9af8c6c52d87f26&chksm=973ac81aa04d410c50f1f20a72f6c1653395f22f5fe60aea52be5e66706a84d0734e81a8006e&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230814-20230820)", "https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247509459&idx=1&sn=189276e7edf91a3c036e10906a9be4d7&chksm=e89d8d0bdfea041d1807319f7677f8152f7fb44d43e4a61f6f8d0c294c513a3c9d62f3a36a81&scene=58&subscene=0": "TOTOLINK CVE-2022-25084 漏洞分析&复现", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651125350&idx=1&sn=84a4efa7b0eff924c7c5fbafd1c89ee0&chksm=bd1446b58a63cfa391267d289e1fb4495e360760a1be9acc32421ee4c41efc472b898bac6c54&scene=58&subscene=0": "软件漏洞检测场景中的深度学习模型实证研究", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458514480&idx=1&sn=2a7941beebe6b131ff8c1ad918b85156&chksm=b18ec4ba86f94dac7aabcb5f4fadbe9c7aae818d259f5185aaab849b95fafd658ca6b2ac6671&scene=58&subscene=0": "CVE-2020-22253后门漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458514480&idx=3&sn=81c6eef6b84729d196793a6f08398a08&chksm=b18ec4ba86f94dac4dab4a5943317441605ff9140ee726b361c5ec5340359cc5f2ad750058c4&scene=58&subscene=0": "TP-Link智能灯泡存在漏洞，黑客可以窃取WiFi密码", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458514480&idx=4&sn=221c3c57af478d26e8ce605281e4ffc5&chksm=b18ec4ba86f94dac94b7b6e1f963d5cecd006001fdf92175fb503a83a1f6955155aa1e635f02&scene=58&subscene=0": "预售满10人开班！系统0day安全-Windows平台漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517437&idx=1&sn=561e8ad37f584120784a95e9ad1c33f4&chksm=ea94b597dde33c810a56421fadb562f0a4fbab00589ec4d11a1fb82d61b17dffcab841d4546a&scene=58&subscene=0": "CISA 将Adobe ColdFusion中的这个严重漏洞列入必修清单", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517437&idx=2&sn=b43eb67509ce31f1726c7bb953adb331&chksm=ea94b597dde33c816cc6b6b60429447908b3cbafd3b5194aa4e547412a0c05805aa001546707&scene=58&subscene=0": "Apache Ivy 注入漏洞可导致攻击者提取敏感数据", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247507897&idx=1&sn=5a2f184159e0bad26253655e899fa913&chksm=ea6628cedd11a1d870c7c4426da3a5a34f0eb95201d9051d4e8145cf3cc5e1f7ce6e74f544b4&scene=58&subscene=0": "嗅探文档中的WPS 0day漏洞气息", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650178473&idx=1&sn=30f83f3c9c7287f7ed01cb10cc683df9&chksm=f4487815c33ff103c43ec46d58b4f6ea206e5c2bc6519df319b4879d0e1b6dadbf6a794683de&scene=58&subscene=0": "干货！如何检测发现WPS的未知漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNjYwMTMyNQ==&mid=2247489563&idx=1&sn=4304324f5f58c4b87ed2ca7be0e204cf&chksm=971e7519a069fc0fe5b9851c9d83539ba52317c961ce07326b46e690a5b2dbb3064e378a227d&scene=58&subscene=0": "奇安信的漏洞管理实践", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458514823&idx=2&sn=a4540b5441c3bbd54fe05b0219c880fb&chksm=b18ec50d86f94c1b0411408b5f824ecd3edea4b91f336f9f2230b6509476b36858f519fd4015&scene=58&subscene=0": "命令注入漏洞CVE-2023-27216复现", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247539431&idx=2&sn=ca9873be2b3e61c563f9ccaf8def6485&chksm=fa93ec26cde4653073d6f95fd1b6b806a53d13ca87ca6385082bee11c41047150d587d4debe8&scene=58&subscene=0": "美国国防巨头Belcan曝出漏洞！40多个联邦机构陷入危机", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499420&idx=1&sn=55c5c00b7fc1df2a8e175c0bc85097b3&chksm=fe79da04c90e53120b62ddd29d00d330f1b068343849e50d0f67d3f8b825e0b5218a7d60217f&scene=58&subscene=0": "【已复现】Smartbi身份认证绕过漏洞(QVD-2023-19579)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499420&idx=2&sn=a27e57d80fe11dd58a28d9695dfec274&chksm=fe79da04c90e5312bd90adcfb6851438d75a5d1766637117a5eda7f88db9ae10558aa237d8e6&scene=58&subscene=0": "RARLAB WinRAR 代码执行漏洞(CVE-2023-38831)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247566108&idx=2&sn=0afc61998690ccf56c022ed2116df07b&chksm=e9141326de639a300028f520cf97f1eb57b9701d47c181f6729e5993642cd27fcf0376f530c1&scene=58&subscene=0": "TP-Link智能灯泡漏洞可窃取目标WiFi密码", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517453&idx=1&sn=46ad95e6457a6e91acad1e31dccc833a&chksm=ea94b467dde33d7139c65d06a237e0ff638752ec0b58e00c0d4aa3c0f2795c6b267d15e8feeb&scene=58&subscene=0": "罗克韦尔ThinManager 多个漏洞可导致工业HMI 易遭攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517453&idx=2&sn=251402ddfd4c8a150b8758f1c605b2af&chksm=ea94b467dde33d7195d23ecc995280d0ef6b19557e14a8330945c641004b75bea1871b2c82a6&scene=58&subscene=0": "多个高危漏洞可导致思科交换机和防火墙遭 DoS 攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247498218&idx=1&sn=e12250462c06941ec281296b003cbd5d&chksm=eaf9b1a6dd8e38b0bedd20638dc8476845e0e05a5d24ba700b0909bfc30fb9a8599e8502cc4c&scene=58&subscene=0": "重磅发布|“全网大语言模型产品漏洞悬赏”守卫计划", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499430&idx=1&sn=d5475a44f2c9580c79cd8baa14030c17&chksm=fe79da3ec90e5328728e7c32494b34b07a0abe77beb0b30f9eea9c8e8b49bf5d8013ebc3189d&scene=58&subscene=0": "【已复现】Windows 错误报告服务权限提升漏洞(CVE-2023-36874)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499430&idx=2&sn=562314516f810c01def3815d7ce56cf5&chksm=fe79da3ec90e53284e69f40169653e6215592bcac4d1475db26a50baa2210a9ccd0546997eaa&scene=58&subscene=0": "【已复现】RARLAB WinRAR代码执行漏洞(CVE-2023-38831)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458515354&idx=1&sn=282663afdadcd7ef0efccff8b4a84470&chksm=b18ec71086f94e06b9b4a5f6d56402738283e665f6656a7c01acb1ad2c0fcdebbdeda0a23a6d&scene=58&subscene=0": "CVE-2021-4034分析", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247504739&idx=1&sn=4d503cdad7ee0ce6029c6f934873535b&chksm=cfcab077f8bd39619242fddee99daf125b994b080d9ed01f55ce7b81cfe1989e0183142cf1f9&scene=58&subscene=0": "极有可能被黑客利用，Outlook远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518892&idx=1&sn=b7220370e3340f240091cca34c399d57&chksm=ea94bbc6dde332d024909d576d7b563018e16c1e79f3ee057e9cec70d8d5837a228f47fbf6d0&scene=58&subscene=0": "速修复！Joomla 漏洞可导致RCE攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518892&idx=2&sn=21e7796662495b4b807b3393dafd9890&chksm=ea94bbc6dde332d07356a2e54be40ffbdc88a3cac47f21912107d477815155335555fe2c827d&scene=58&subscene=0": "WiFi漏洞导致安卓和Linux设备易受攻击", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247490776&idx=1&sn=59653d64fc3ad7a06be3b0429a384e44&chksm=fa5ab235cd2d3b23a0ea4336f71b869b80ab7a2a15dee0466db73aa874a53cfa3849c6e66d23&scene=58&subscene=0": ".NET 文件上传漏洞在不同框架下的差异", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498980&idx=4&sn=81a93d21e714f441268e54c242cf498d&chksm=973acf86a04d469015f8ce11f4ff8a185768cd295eba073988429f6fbc8dfd33dd7e7312168d&scene=58&subscene=0": "CNVD漏洞周报2024年第6、7期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498980&idx=5&sn=8258d4a8405977d6bb178cc8d79ff9ce&chksm=973acf86a04d4690da6ae0a4cc4eb22b2665b12afbe068fc565f3f2a2e8affdd109dab3b438d&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240205-20240218)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522147&idx=1&sn=35d55d648f76703c3d5a5c40e828bdf9&chksm=ce461c73f9319565b01c9f563cb4d1ba21d41f7b92879efd427236ce466c205eb4dfb1391189&scene=58&subscene=0": "【漏洞通告】Spring Security 访问控制错误漏洞CVE-2024-22234", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522147&idx=2&sn=8bb2cce9e98dc40498cf1bc7b2b483e0&chksm=ce461c73f93195657b39e7887da2d77225cd3ca8fe3914cde5b24a939a380c18a22a6490cdce&scene=58&subscene=0": "【漏洞通告】PostgreSQL JDBC SQL注入漏洞CVE-2024-1597", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247494172&idx=1&sn=15a8eaba243f04d99e6f0a835af409e1": "Chrome 122、Firefox 123 修补高严重性漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652105193&idx=3&sn=8b6cd41523d8372a1a64b8a6712f017e": "人工智能开发供应链披露的八个漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500553&idx=1&sn=7ec2582d717304a81f79ae70f8bea4d9": "【0day漏洞】Internet快捷方式文件安全特性绕过漏洞(CVE-2024-21412)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247485815&idx=1&sn=5af4cf54878e30673b971661dbbbdf5a": "最新Invicti-Professional-v24.2.0.43677漏洞扫描器下载", "https://mp.weixin.qq.com/s?__biz=MzI2NTc1ODY0Mw==&mid=2247485835&idx=1&sn=65d13400264d3ec7e2a1c00dec13bcaa": "JAVA代码审计之XSS漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485348&idx=1&sn=f8fa0576b9bb01bd97a1b95ad844e70d": "WordPress的Bricks主题存在远程命令执行漏洞CVE-2024-25600 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzI5MzU4ODE5Mw==&mid=2247485081&idx=1&sn=1c2dba72fa99737637771f7aaa292640": "[漏洞复现-101] 免费星球它来了-马赛克安全情报共享（限免）", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092582&idx=2&sn=dc1bcd633b72d3dba8fe558268a96360": "【漏洞通告】Spring Framework URL解析不当漏洞（CVE-2024-22243）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652054348&idx=4&sn=954e62d1619b2db694807191fd923070": "【安全圈】注意！苹果快捷方式漏洞 (CVE-2024-23204) 可以暴露敏感数据", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651259481&idx=3&sn=12206f5035a799689313896b2f514b15": "微软Outlook中#MonikerLink漏洞的风险和大局观", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487605&idx=2&sn=788d7382d2137697316f665db950b70c": "【漏洞预警】GitLab 16.9存储型XSS漏洞CVE-2024-1451", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487605&idx=1&sn=da9aac066b43c21cc80cf24eeb60367d": "【漏洞预警】Spring Framework URL解析不当漏洞（CVE-2024-22243）", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247493624&idx=1&sn=73deb76aab1e2dc602b25e3841077cd7": "SRC案例 | 某公司小程序四个漏洞挖掘过程", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247502796&idx=1&sn=ce48dd867994ddaaef86e0dea742ce4f": "CVE-2024-21413：Microsoft Outlook 远程代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518905&idx=2&sn=89ec572b50147fe28714126b1d8bcb55": "苹果 Shortcuts 零点击漏洞可导致数据被盗", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518905&idx=1&sn=d78b42cf79ea9e1666eb0759db2961cb": "开发人员注意：速修复这个严重的 Fiber Go 漏洞！", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247501013&idx=1&sn=7a640ed1c6dde0c8398c7da2e6614a08": "【成功复现】WordPress Bricks Builder远程命令执行漏洞(CVE-2024-25600)", "https://mp.weixin.qq.com/s?__biz=Mzg4Mzg4OTIyMA==&mid=2247485451&idx=1&sn=cf4fa900e8d3d8f07cca2b23bdcaefb8": "Spring Boot系列漏洞（一）", "https://mp.weixin.qq.com/s?__biz=MzAxMjE1MDY0NA==&mid=2247507413&idx=1&sn=460ca20ea8dee7e50c89364fbeeffcfe": "权威认可｜中孚信息荣获工信部CAPPVD漏洞库感谢信", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247487662&idx=1&sn=cd04fc0d0c5eabe96ce62fd7bcd49c3a": "WordPress爆炸性0day，直接RCE！附POC", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247499491&idx=1&sn=6957abdfa1ebc4191c6183196f228b62": "【云原生安全】K8s安全漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzU0MjEwNTM5Ng==&mid=2247516313&idx=1&sn=7f32426859a5f2629c1cd5642b36fa62": "新 Wi-Fi 漏洞导致 Android 和 Linux 设备近乎“裸奔”", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484271&idx=1&sn=e750929882df1d736b095e6e2c8557e9": "YouDianCMS友点系统漏洞合集", "https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651723304&idx=1&sn=a79a057e60b3f88b012ef6bddd5d1fbf": "Outlook高危远程代码执行漏洞，启明星辰提供解决方案", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247573734&idx=2&sn=d3281066b883701bcf89b718c0efb478&chksm=e91470dcde63f9caea217c3ce6edd5028e2475620ddd6b26ee3712dbe814c255e78268ec8c70&scene=58&subscene=0": "新的 Linux glibc 漏洞可使网络攻击者获得主要发行版 root 权限", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247502796&idx=1&sn=ce48dd867994ddaaef86e0dea742ce4f&chksm=fe26cecdc95147dbb119205ba33d9435d588d710143435157b91c257756a8016d27dcf569798&scene=58&subscene=0": "CVE-2024-21413：Microsoft Outlook 远程代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518905&idx=1&sn=d78b42cf79ea9e1666eb0759db2961cb&chksm=ea94bbd3dde332c51c454b850627d9a2bcfa4a86187bd1924e82f853f7b0f8fad6bf8d94d59c&scene=58&subscene=0": "开发人员注意：速修复这个严重的 Fiber Go 漏洞！", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518905&idx=2&sn=89ec572b50147fe28714126b1d8bcb55&chksm=ea94bbd3dde332c507d0bd517efb3a88849ef91c65ed3b863479408bd332068071f546a9914c&scene=58&subscene=0": "苹果 Shortcuts 零点击漏洞可导致数据被盗", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500545&idx=1&sn=d9f990d1990fcac777ec01aff28ad72e&chksm=fe79e799c90e6e8f8253fd98dc7849e67980986d1c1b53bcf10d71a0b8bc0e6d1f6eb58eb694&scene=58&subscene=0": "【已复现】Microsoft Outlook 远程代码执行漏洞(CVE-2024-21413)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzk0NDUxMjAzNw==&mid=2247485744&idx=1&sn=8da10f3a600f04ffe7712617274bdbd2": "【漏洞情报 | 新】WordPres Bricks Builder 前台RCE漏洞（CVE-2024-25600）", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485558&idx=1&sn=6179e910ad96335b34531bddf83d1b4c": "用友U8 Cloud smartweb2.RPC.d xxe漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247512722&idx=1&sn=bf29855b6639267b5ace0b6b948f7804": "实战中遇到的一些莫名其妙的漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247490763&idx=1&sn=5679824f14ab5a20530e89c3dfb7662c": "dedecms之汗流浃背的审计1day", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485379&idx=1&sn=cad3f569bd587a121cc02e29c1307a9e": "Edusoho网络课堂cms存在任意文件读取漏洞 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247514913&idx=1&sn=dcfc3b6f42ce854b41897b340a1beeb8": "某CMS的通用漏洞挖掘过程 | 干货", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493616&idx=1&sn=64370cfcc3e5436519f5ead1e91b0781": "漏洞挖掘|一次某站点的任意用户密码更改漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651259482&idx=1&sn=1008e0f1cbcb4e6e1c4fb75dfd16369d": "新 Wi-Fi 漏洞导致 Android 和 Linux 设备近乎“裸奔”", "https://mp.weixin.qq.com/s?__biz=MzI5MzU4ODE5Mw==&mid=2247485083&idx=1&sn=c48dda5dc6293eeeaf88dcc818d93ba2": "[漏洞复现-101] 免费星球它来了-马赛克安全情报共享（限免）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652054423&idx=3&sn=59f460185f705e3183b470edb4249bcd": "【安全圈】Joomla 发现5个漏洞可执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247616632&idx=1&sn=88e2fc1e1f46d78bd487711269c92822": "在看 | 周报：华莱士系统漏洞被薅羊毛；16人买卖100万条个人信息；2中国公民骗5000台iPhone被抓", "https://mp.weixin.qq.com/s?__biz=Mzg3Mzg3OTU4OQ==&mid=2247489795&idx=1&sn=986afe445585dec512cbe585fff2863c": "“虚拟号码\"场景下的逻辑漏洞挖掘（全网原创首发）", "https://mp.weixin.qq.com/s?__biz=Mzg3ODk2OTcxMw==&mid=2247484834&idx=1&sn=d735b31942af97843c80f32e910f154d": "漏洞复现-用友U8-OA协同工作系统doUpload.jsp任意文件上传（附poc", "https://mp.weixin.qq.com/s?__biz=Mzg2MTg2NzI5OA==&mid=2247484178&idx=1&sn=a2034ae8f489afbf420b5d3b815ff86f": "内部漏洞库，福利开局", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247606268&idx=1&sn=a8c307de4ee79b67f9acc85e22f89376": "某恩特文件上传漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247485452&idx=2&sn=29049e56196bc99050ac9ff7e0917768": "研究人员详细介绍了苹果最近的零点击快捷方式漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649790506&idx=1&sn=7e18a18c2ae6ab1ac7a37dcbcce6d495": "ScreenConnect 漏洞（“SlashAndGrab”）被广泛利用于恶意软件传播", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650943479&idx=1&sn=985eed34b58c3e2c662b5e792bc49ba2": "万象漏洞扫描器", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522161&idx=1&sn=a972b86a73c67766c6fbdd8d20d523ee&chksm=ce461c61f93195774f0d7d884e9478817274bca8370d6504a3fd63e4971407b0022629c8c4cb&scene=58&subscene=0": "【漏洞通告】Microsoft Outlook 远程命令执行漏洞CVE-2024-21413", "https://mp.weixin.qq.com/s?__biz=MzkyNDI2NjQzNg==&mid=2247491938&idx=1&sn=c5d911b1e5592c184339a43fa8878ae5": "CNVD通用型漏洞挖掘思路-平台漏洞列表一眼定睛法", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092584&idx=2&sn=76092b3906e9df239142d3a5b2043892": "新 Wi-Fi 漏洞导致 Android 和 Linux 设备近乎“裸奔”；", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652054495&idx=2&sn=9a62c38f083509de6baf57d55e58e03d": "【安全圈】警告！ConnectWise 漏洞正被广泛利用，数千台服务器面临危险", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247552430&idx=1&sn=6455f4ab69c62b66af0a1081058fc7d8": "[经验分享]-SRC漏洞挖掘之道", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247504254&idx=1&sn=f7e0ac845b99d7b329c2040d30e3e0ac": "开源应用程序导致 XSS 到 RCE 漏洞缺陷", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485519&idx=1&sn=80832a0520e64e299927733bbdfe503d": "【高危】浙江大华技术城市安防监控DSS系统存在信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485391&idx=1&sn=aa5d5dbff3236275de3b833f3fbb352e": "万户协同办公平台ezoffice text2Html接口存在任意文件读取漏洞 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzI5MzU4ODE5Mw==&mid=2247485085&idx=1&sn=8e60b3b61f4ce67815414bb0f9a3bf19": "[漏洞复现-101] 免费星球它来了-马赛克安全情报共享（限免）", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485626&idx=1&sn=9751623bdf034a5dc517561dc4c46e3c": "CVE-2024-1709", "https://mp.weixin.qq.com/s?__biz=Mzg4MDkyMTE4OQ==&mid=2247484041&idx=1&sn=e8ff705f07c1d81a6497c8f04084aeec": "多个赏金漏洞直播思路分享", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247512784&idx=1&sn=4075993006e45ab603831176e7a5ff67": "Finebi反序列化漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkyOTMxNDM3Ng==&mid=2247488211&idx=1&sn=771ba4d5329e121e1b56281e844a4397": "关于通达OA存在反射XSS漏洞的预警", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493657&idx=1&sn=7097162fe771e7e2bc7c8e232e86e367": "记一次EDU漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487620&idx=1&sn=4b8a2a3d5db65ae09343105b9d9487db": "【漏洞预警】aiohttp 路径遍历漏洞CVE-2024-23334", "https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247502895&idx=1&sn=8a46111ec72b3d17d4bd91885261a868": "未然通讯社：2023年供应链攻击同比增长78%；微软Exchange Server曝出高危权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652054725&idx=4&sn=d9ccbfa3d57ec25a2877c596ac66c08b": "【安全圈】Apple Shortcuts 存在高危漏洞，可能会导致用户敏感信息泄露", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652054725&idx=3&sn=29edac4c99bd8a74e59e4be9a3fd1060": "【安全圈】WordPress：严重 SQLi 漏洞威胁 200K+ 网站", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652054725&idx=2&sn=087f0f17e0dbc7f14be7247bf3000723": "【安全圈】台湾合勤科技证实，Zyxel 修补防火墙产品中的远程代码执行错误", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484525&idx=1&sn=66b5eea337873594e346c5d7ac86b3e9": "【复现】aiohttp 路径遍历漏洞（CVE-2024-23334）的风险通告", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247496716&idx=1&sn=6538671ce2b7e305ab75ca53bb387d2d&chksm=e84c52d3df3bdbc5037e9cc1f265e3d783013a066a2ee3e91111f92718756cfcbc2982bf24c9&scene=58&subscene=0": "绿盟科技星云实验室获微软MSRC致谢|Azure数据库服务存在RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247504751&idx=1&sn=f90c46b44fc0ea7706b98adfc3c342ee&chksm=cfcab07bf8bd396d1a6e98e9d80a82a83dfc64f5fa99b3df4128b26ad1393cf1c04ea15ee2dc&scene=58&subscene=0": "漏洞通告 | aiohttp路径遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247502939&idx=1&sn=06adc8dc9bec1a11b9306ce8b8d39871&chksm=fe26c95ac951404c830e8379426dc7d1eba3018623bf22f320e2aa6065bcea95eae38594d7f6&scene=58&subscene=0": "CVE-2024-25600：WordPress Bricks Builder远程命令执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247492376&idx=1&sn=11fd3392c7e6456edf8452e18e031bb4&chksm=fa9d184ecdea915845c1a32070c66ed727a4e197c9b87b58f049f2c8a56dd5e16b38a32ca3fe&scene=58&subscene=0": "漏洞单价10万元！ByteSRC规则V6.0奖励计划叒升级！", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498982&idx=1&sn=d1a1dd16c930ce1bb66d32c874d7906f&chksm=973acf84a04d4692d806b8904b0037b5308ff7f65b477cb49ae0603b4099f2a708f7d5eedb37&scene=58&subscene=0": "CNVD漏洞周报2024年第8期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498982&idx=2&sn=af832212e91fa01b57b9c1a9f99e62fc&chksm=973acf84a04d4692e670fbf0d307a5bb55fcce93339e99a2dc5e0d2563a904d981aace7c1f69&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240219-20240225)", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484525&idx=1&sn=66b5eea337873594e346c5d7ac86b3e9&chksm=c12af9ecf65d70fa10a0ce434cb50027806de51eb8813d72c6b18d46bf447f312c23b4d87f68&scene=58&subscene=0": "【复现】aiohttp 路径遍历漏洞（CVE-2024-23334）的风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493657&idx=1&sn=7097162fe771e7e2bc7c8e232e86e367&chksm=e8a5e27adfd26b6c807531bf88fcd88b24d05b8ca6cc2c507e1dc1ac6353cd3a2d1440b45adc&scene=58&subscene=0": "记一次EDU漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247485526&idx=1&sn=316cfca21c48869e0100d71724b9955d&chksm=c1f44c9ef683c5886d170dc2831a116a08509487ce006a273f4d2699f36d60b1c5b02eb9d1ee&scene=58&subscene=0": "「深蓝洞察」2023 年度最“软”的硬件漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247503138&idx=1&sn=e334a14fb04d75405cc0a1d4539e169f&chksm=fe26c823c9514135dedc31b31d0fb92598d25ab2add32e5a112bffc501ef511711894b59db30&scene=58&subscene=0": "CVE-2024-25065：Apache OFBiz目录遍历漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518970&idx=1&sn=6962ea177a62fac9410b186624a2cd9a&chksm=ea94bb90dde332865540fed5893fa0fe3b2438bba6108c0ec68ea0e789667b29c274b976ec73&scene=58&subscene=0": "思科修复 Data Center OS 中的多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518970&idx=2&sn=ea8bb2c114507ab3f98fa4427698219b&chksm=ea94bb90dde332865dd9fda4c5f4e051fb6e7d411ca28b91a28207ce2369ec116626bad0b38a&scene=58&subscene=0": "Lazarus黑客利用Windows内核0day发动攻击", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650180393&idx=1&sn=99f1b59068443cb0dc5b538cc3eecbb3&chksm=f4487095c33ff983a03aadfd64f98fbbff7d507d92a7615c9e468e313d95d9d874e986578a41&scene=58&subscene=0": "又是一年春光好，漏洞奖励少不了~ 限时奖金上调，X春日礼盒发放中！", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458542842&idx=2&sn=e0b56e24805662155ef9525c0eef338e&chksm=b18d527086fadb6658367050bd0cce9e1407a71db5fae13432ecf47a919871119c5b08ad7120&scene=58&subscene=0": "攻击者能够接管任何账户，安全研究员披露Facebook一个零点击漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzYzODU5NQ==&mid=2247484523&idx=1&sn=14ab8377ce235265249b1249656a5679&chksm=cf1ea2c7f8692bd1228e3ae03f0dd98ffdfcf520e8a297132ec13197bec4d447eea5a3a20794&scene=58&subscene=0": "记一次绕过限制进行漏洞利用", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522184&idx=1&sn=0f5a1dfe58d147f30570d750bc7adbd0&chksm=ce461c98f931958eaef25d92a5f4306162862025f095aeb0b75b8d4ff627c6305165ccd3a8ee&scene=58&subscene=0": "【漏洞通告】Apache OFBiz目录遍历漏洞CVE-2024-25065", "https://mp.weixin.qq.com/s?__biz=Mzk0NDUxMjAzNw==&mid=2247485818&idx=1&sn=e0785eec65cbbb842e0a2950c76bd6b8": "【漏洞新情报 | 附POC】蓝凌EIS智慧协同平台SQL注入", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247512396&idx=1&sn=ce52a1ac8195bb69b46606e267f4199a": "跨平台漏洞扫描器 -- EZ（2月29日更新）", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485469&idx=1&sn=6b0db9054c4fa4a459192e13e6a76564": "蓝凌EIS智慧协同平台rpt_listreport_definefield.aspx接口存在SQL注入漏洞 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092594&idx=1&sn=fdbe1c36c08a52f3e80c7e18cfef9e33": "Windows 零日漏洞正被黑客利用，以此获得内核权限", "https://mp.weixin.qq.com/s?__biz=MzkyNDI2NjQzNg==&mid=2247492239&idx=1&sn=ea393ca4bb77a3350710a4efc1f94eb5": "cnvd通用型漏洞挖掘思路-从逻辑漏洞到拒绝服务漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458542928&idx=2&sn=11b71c70fd0d855a0ce7208c4f22a0e8": "近日更新：命令∕代码执行（二）Bypass技巧—CTF训练营之Web篇", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247504612&idx=2&sn=3b331b4ba79b9f51bc84d4c02ba15525": "CVE-2023-42942：xpcroleaccountd Root 权限升级", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247606466&idx=1&sn=7522223a7a1d5f490a8a1a5822288c18": "一次h1漏洞提交记录", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485764&idx=1&sn=59fff1505259c5f0c8af6e1e12bf582a": "CVE-2024-25419", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651260329&idx=1&sn=510c64d2efe80d2f814055908f198fb8": "WordPress 插件存在漏洞，500 万网站面临严重安全风险", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650588155&idx=1&sn=c21709a87370dfdda0560127239d47eb": "诈骗受害人的自述：感觉智商受到了严重打击！；|深圳制造商Eken10余款智能门铃曝安全漏洞 黑客可直接获取摄像头画面", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650588155&idx=4&sn=e0b67e54386c36006edf02200ab14c62": "一款集成高危漏洞exp的实用性工具", "https://mp.weixin.qq.com/s?__biz=Mzk0NjE0NDc5OQ==&mid=2247523051&idx=1&sn=5a860e4eb7f781d156d8d86385fe7f53": "Spring漏洞综合利用工具", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247490905&idx=2&sn=00b75876f110369771f5cc64f7219135": ".NET 文件上传漏洞在不同框架下的差异", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650944089&idx=1&sn=2e95782fd7bdd1429902fce4c47acdc5": "CVE-2024-23897 Jenkins 未授权任意文件读取漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500578&idx=1&sn=f7f767f62adc6bdce5c6666e0137cb06&chksm=fe79e7bac90e6eac43c6e1a031a9ce9df3f17e78d3ba487e9f1874b137548132adb8f0982120&scene=58&subscene=0": "【在野利用】Apple iOS 与 iPadOS 多个在野高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247503694&idx=1&sn=940eec278a32df7ee61d69579b271c85&chksm=fe26ca4fc9514359c445283700d4301c40239d06560cd21e26c6a3e82fc65b2397afa2e292d7&scene=58&subscene=0": "CVE-2024-27198：JetBrains TeamCity 身份验证绕过漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519003&idx=1&sn=87b2f80deede9f2cb8e1092e9732820f&chksm=ea94ba71dde333675f4150799bb36ccc5360912e77c0af8aef77e7426b9b0c244aabb76833e4&scene=58&subscene=0": "苹果紧急修复已遭利用的两个新 iOS 0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519003&idx=2&sn=c494f1df6adfe5a6b91c813d2d236c8c&chksm=ea94ba71dde3336793921a1d4a9852067a51546a77a39e5c25ed0836ffe1f6e0706fb9618530&scene=58&subscene=0": "VMware修复多个严重的ESXi 沙箱逃逸漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458544969&idx=1&sn=473822d99738dc8c20cf0c7df866adea&chksm=b18d5bc386fad2d597b3b73e9bbd6d243e83e0191527db7cf84f277ac8c455b590956d5da778&scene=58&subscene=0": "winrar(CVE-2023-38831)漏洞原理", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493789&idx=1&sn=cadf3c5c97133e2c0e40d48f0875bd4f&chksm=e8a5e2fedfd26be8321c768fe4a690fed9c6c0dfaac259dfa4786652178fa061cc6fae2a2723&scene=58&subscene=0": "一次十分详细的漏洞挖掘记录,新思路+多个高危", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485938&idx=1&sn=7c07f8f79391a393cb45ddea6e7b9dfe": "CVE-2024-27198漏洞复现（POC）", "https://mp.weixin.qq.com/s?__biz=MzkxNDU2ODc0Nw==&mid=2247484040&idx=1&sn=90773fb05e51f8f362f4e5cb5eea9f18": "Reporter内置报表管理系统敏感信息泄露+远程RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247485999&idx=1&sn=4f480238d3e92ddfecfc032c2bd318e2": "最新Nessus2024.3.1.1版本主机漏洞扫描∕探测工具下载Windows", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247620068&idx=4&sn=517d37cadb872451621be187cd1f1449": "苹果曝出两个 iOS 系统 0-Day 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493796&idx=1&sn=b53d102fab8b87888185a7f0a4dcb38c": "浅谈js在挖掘CNVD通用漏洞中的思路，附实战案例", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487692&idx=2&sn=06b7789472a705ff53eeb3044970889f": "【漏洞预警】Apache InLong反序列化漏洞CVE-2024-26580", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487692&idx=1&sn=3a151b0f870b5783fcaf842b887b6e4e": "【漏洞预警】GitLab 身份验证绕过漏洞CVE-2024-0199", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247498696&idx=1&sn=054e8edc20ed99390940a67525645b58": "OA漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkzMjQ0MTk1OQ==&mid=2247483946&idx=1&sn=f11eb50e8fd170fd5329bdeb01f3e4c2": "Aim Web API 远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664206559&idx=2&sn=3fe5875d83ef70b9971756fd2452e894": "行业 | 绿盟科技中标重要项目 助力云南移动漏洞管理平台建设", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092598&idx=2&sn=d3e9e47ba77d7d40e12d09fb0e5f2bf9": "【漏洞通告】Apache InLong反序列化漏洞（CVE-2024-26580）", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092598&idx=1&sn=9d3484340943974bd3995278fb740934": "【在野利用】Apple iOS 与 iPadOS 多个在野高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652055379&idx=2&sn=652d4300b439e300723b7b702396e800": "【安全圈】Android发布3月更新，解决了38个漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458545106&idx=2&sn=37769e599a88afda3213c69a7cd4c34e&chksm=b18d5b5886fad24e8fd645429bb9109c40b802651bf8ff7c214b07f642ae0c872352dda72a91&scene=58&subscene=0": "更新VMware！多个漏洞可导致沙箱逃逸", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664206559&idx=2&sn=3fe5875d83ef70b9971756fd2452e894&chksm=8b599226bc2e1b30bc571a1eab9733bdf00129c8216aac6fbba0b6a416b2e558c0e5f81e517a&scene=58&subscene=0": "行业 | 绿盟科技中标重要项目 助力云南移动漏洞管理平台建设", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247543321&idx=3&sn=7a9bce694078bea43058fa36977e1b02&chksm=fa939cd8cde415ce8899550aa089fa6b912b58641845f9f7efae9423832bdc47b256920450bd&scene=58&subscene=0": "苹果修复了两个新的用于攻击iOS的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493796&idx=1&sn=b53d102fab8b87888185a7f0a4dcb38c&chksm=e8a5e2c7dfd26bd1be3f7ed9686ea13a70804769206cc99d84b708d62c5b7df3068710f643ac&scene=58&subscene=0": "浅谈js在挖掘CNVD通用漏洞中的思路，附实战案例", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522223&idx=1&sn=39f2b6d8eacdc1093b2cca17395db60d&chksm=ce461cbff93195a9d74bd443b8577648842c06b83a2c1a4def32f19ec8b89925742ee68c4eef&scene=58&subscene=0": "【漏洞通告】JetBrains TeamCity 身份认证绕过漏洞CVE-2024-27198", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519025&idx=2&sn=9f5aa3afc5e6ee3f439bd94c36a8f2ce&chksm=ea94ba5bdde3334dbbb580cbb52dc01d9b7a0de98233c5e79d4a4bf0758bdf9bec08800e86fb&scene=58&subscene=0": "JFrog Artifactory 多个漏洞威胁软件供应链安全", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786271&idx=1&sn=1519f0aa105aefc8422972fb122dc22c&chksm=8893b7f0bfe43ee6bad34ce8f8a13a84d3e6b150722807d50813b2c22971f68b77f401e12817&scene=58&subscene=0": "思科修补 VPN 产品中的高严重性漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522236&idx=1&sn=c5ae94da4a043a6537afde69135e05ba&chksm=ce461cacf93195ba157ba71eb360df87971ac36b7ea50e82a8b9fe7bc67f52244ad896b36bf3&scene=58&subscene=0": "【安全通告】VMware ESXi 释放后使用漏洞等多个漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzA3NzE2ODk1Mg==&mid=2647790063&idx=1&sn=88adf918d77088701cbec8db9a4bb464&chksm=877099b8b00710ae86d32831d057d79b2f4342018a46f89eba8c978f4d1db00a8b383314f711&scene=58&subscene=0": "供应链高危漏洞披露 | Winmail邮件系统曝出存储型XSS漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493802&idx=1&sn=28e6ae27f70efd218102293c780f867d&chksm=e8a5e2c9dfd26bdfc98cba763a7a3d9c0b7908b734df2bd82210d079759ac19107770124cef5&scene=58&subscene=0": "教育edusrc-越权漏洞案例集合", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486017&idx=2&sn=1235deb7412e45dda71981657a27afcd": "CVE-2024-27199（POC&EXP）", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247497481&idx=1&sn=c7f5a3db82d131565163df18f5d44f4d": "Spring漏洞利用工具 -- Scan-Spring-GO（3月7日）", "https://mp.weixin.qq.com/s?__biz=MzI0NjA3Mzk2NQ==&mid=2247493351&idx=1&sn=2696fdafdc1882870a37c2607888a91d": "漏洞实战(1)：NACOS默认密钥漏洞QVD-2023-6271", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493809&idx=1&sn=5dd53565883e5ea283fecd371d80aa4a": "实战SRC|某交友APP一分钱买会员漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485524&idx=1&sn=677302fa74ebb64eacd4d41198329aae": "帮管客CRM jiliyu接口存在SQL漏洞 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652055476&idx=1&sn=e2cf122361637a74206b3ee986ca6cdb": "【安全圈】VM虚拟机重大漏洞！立即升级", "https://mp.weixin.qq.com/s?__biz=MjM5MTg0Nzk5Nw==&mid=2247484555&idx=1&sn=0735de28b6845a595fd79aca44f6a196": "锐捷Ruijie-UAC online_check.php存在RCE", "https://mp.weixin.qq.com/s?__biz=Mzg3ODk2OTcxMw==&mid=2247484875&idx=1&sn=e1f9743c511537551c84058cc9a964b7": "JetBrains TeamCity 身份验证绕过漏洞(CVE-2024-27198)-附py", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247485493&idx=1&sn=98b08164437c89204bc9f29f886cbebc": "Java实战篇-XXE漏洞利用从潜到深", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247486631&idx=1&sn=cfc3a59792191fcc5ad2d86992bc7b20": "第89篇：方程式工具包远程溢出漏洞图形界面版V0.3（内置永恒之蓝、永恒冠军、永恒浪漫等）", "https://mp.weixin.qq.com/s?__biz=MzU5Mjk3MDA5Ng==&mid=2247485915&idx=1&sn=14e8a7154b17d3f61d8cad00c39cc1df": "Microsoft Designer AI SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MjEyOTE4MA==&mid=2648519998&idx=1&sn=c7cc8284186fd8b5ac08895b43635471": "聊聊漏洞管理那点事儿", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247504789&idx=2&sn=55075484b067359e788367cf2688f40b": "CVE-2024-27198 和 CVE-2024-27199 身份验证绕过 --> JetBrains 之前的版本中的 RCE", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247504789&idx=1&sn=d77e9e912a3670acc198e5d23920eaaf": "CVE-2023-25365 ∕ Bypass通过文件上传XSS", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247483990&idx=1&sn=b93613ce90d6f777620349d11a5108d1": "朝鲜APT Kimsuky 团伙利用新ScreenConnect 漏洞作案", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247485875&idx=3&sn=742751765e529ce14a7698fa0ccf349b": "CISA警告：JetBrains TeamCity漏洞被利用", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247485875&idx=2&sn=c7bef7c3907452042fecf2fef24d3910": "思科Secure Client VPN劫持漏洞修复", "https://mp.weixin.qq.com/s?__biz=Mzg5OTY2NjUxMw==&mid=2247511219&idx=1&sn=11653c0ff6ef280c2fa79b63fb2e8dcd": "Google 开源漏洞扫描系统 Tsunami", "https://mp.weixin.qq.com/s?__biz=Mzk0NjE0NDc5OQ==&mid=2247523075&idx=2&sn=d63533df9b17c0cdd9ef031f119564d4": "一款集成了JS接口提取漏洞扫描及内网渗透的工具", "https://mp.weixin.qq.com/s?__biz=MzUyMTA0MjQ4NA==&mid=2247548700&idx=1&sn=45c9a7cda52c24d81f3f153f4ef61a08": "LeekSacn：一款可在线漏洞扫描的工具", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247485603&idx=1&sn=a7e100a8390944b28da42c6e90fe5fcb": "一次十分详细的漏洞挖掘记录,新思路+多个高危", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650588549&idx=2&sn=1548bdac7173a5b9c4f8fbd0ee5e261c": "苹果修复了两个新的用于攻击iOS的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493809&idx=1&sn=5dd53565883e5ea283fecd371d80aa4a&chksm=e8a5e2d2dfd26bc4ed9ec04aa634aa0713eeb7b751b348e94703d8f2cf2c8a3aa2567686baed&scene=58&subscene=0": "实战SRC|某交友APP一分钱买会员漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247486631&idx=1&sn=cfc3a59792191fcc5ad2d86992bc7b20&chksm=c25fc3dcf5284aca8b11e081e5219952b4c3278a3b4c2f3fb3756d4bec905b06f3dc11e08bea&scene=58&subscene=0": "第89篇：方程式工具包远程溢出漏洞图形界面版V0.3（内置永恒之蓝、永恒冠军、永恒浪漫等）", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486034&idx=3&sn=99442b714bc1b314b444543772868a54": "CVE-2024-0188", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486034&idx=1&sn=ad67fd8a1878c1d86a8251b1e221991f": "CVE-2024-2330漏洞复现（POC）", "https://mp.weixin.qq.com/s?__biz=MzkyNDI2NjQzNg==&mid=2247492535&idx=1&sn=329287e42362930ae6e0055e9c73ccc3": "一次证书站逻辑漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486049&idx=1&sn=d807f7d09baee0d667ef7c71ef5f0904": "Vscan二次开发的版本开源、轻量、快速、跨平台的网站漏洞扫描工具|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727836263&idx=1&sn=294a4f6199ae1398f4b613d6ea707d6f": "【活动】京东健康逻辑漏洞挑战赛即将上线！", "https://mp.weixin.qq.com/s?__biz=MzU3MzE2ODAyNA==&mid=2247484842&idx=1&sn=05680492e743b40d8f05f0ae15ca7b39": "论当今白帽子到底有多法盲之倒卖漏洞牟利", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247485033&idx=1&sn=d318781e76c1c31f873e04caef98ad4f": "redis 4-unacc 未授权访问漏洞复现及其利用（全网最简单后渗透利用方法！！！）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652055545&idx=3&sn=696df55150dcdbe280ec7b78be4287bb": "【安全圈】谷歌修补Pixel漏洞，CISA发现可能被商业间谍软件供应商利用", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458545484&idx=1&sn=ba54c0bae5a9c91ff71d0b350478c90e": "CVE-2021-32760漏洞分析与复现", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458545484&idx=1&sn=ba54c0bae5a9c91ff71d0b350478c90e&chksm=b18d5dc686fad4d02e9f1e23bda7e71a5a989d9d336764ef055bc4a9bf6ae6883f4154bf4a2f&scene=58&subscene=0": "CVE-2021-32760漏洞分析与复现", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247490975&idx=2&sn=0a0316fd4f446e2f508071b476de2e4f&chksm=fa5ab372cd2d3a6423f946b5b1699fdd0cd925cdc6fef69d51ae5cd2f2b751d5dcf837280743&scene=58&subscene=0": ".NET 反序列化Xunit1Executor漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727836263&idx=1&sn=294a4f6199ae1398f4b613d6ea707d6f&chksm=8050adefb72724f9a14e2f10f73af965192b421ad101b9d33034c48e0870f19e7c2c15c94200&scene=58&subscene=0": "【活动】京东健康逻辑漏洞挑战赛即将上线！", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486092&idx=1&sn=e8145a9f9845afdf6d624c2ff86305fd": "记一次犯罪链条中的URL跳转的挖掘-漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkwNTQxNDc1MQ==&mid=2247486469&idx=1&sn=a106a6e05dadfdd866cb025a7170bc34": "JetBrains TeamCity权限绕过（CVE-2024-27198）分析与利用", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493821&idx=1&sn=cf922b9c1823334936a8be709bac6e60": "赏金猎人|兜兜转转拿下平台充值漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247512476&idx=1&sn=67968f8e870c1d40b8e15e5a121c183c": "ThinkPHP5.x远程命令执行（getshell）测试工具", "https://mp.weixin.qq.com/s?__biz=MzI0NDYxMzk1Mg==&mid=2247500860&idx=1&sn=074223d28f89ac347d153613db7db00e": "附下载 | 高价值漏洞采集与推送工具", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487704&idx=1&sn=fbd663eb378c8d4b464e4446a3474adb": "【漏洞预警】Fortinet FortiOS & FortiProxy越界写入漏洞（CVE-2024-21762）", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247620216&idx=6&sn=c22cf49edbf102fbd71c979292779e7d": "美CISA因漏洞攻击紧急关闭2个业务系统，此前就此多次发布预警", "https://mp.weixin.qq.com/s?__biz=MzI2MDI0NTM2Nw==&mid=2247490054&idx=1&sn=17ac77bb053303b46f5eb7c030cf6587": "OpenSSH升级到9.6P1以修复CVE-2023-51385漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1MTA4ODM4MQ==&mid=2247485164&idx=1&sn=e6b4b5671f8d4f3bc5029b4e72c8fca0": "一篇文章说清楚Shiro-550漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMDU5MzY0NQ==&mid=2247484005&idx=1&sn=b5b8c70154cbb450f384b300f05fb349": "lineCTF-22Gotom复现含docker环境", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652055614&idx=2&sn=e085c55917a6e9387a603b5f1b4e3b9e": "【安全圈】一天就完成！Magnet Goblin Hacker Group 利用漏洞成功部署 Nerbian RAT", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247515146&idx=2&sn=48e43b3d8df0dad0288ba8597a3650d7": "干货 | Redis的漏洞总结(建议收藏)", "https://mp.weixin.qq.com/s?__biz=MzkzMDE5OTQyNQ==&mid=2247484870&idx=1&sn=753ebd3f33a3b79e2638d8cbee8791a6": "漏洞挖掘|从edusrc转战到企业src的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649290812&idx=1&sn=9fcda2b66df0ccfdf2d2f2a0d8e418b8": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494511&idx=2&sn=683c1634af28cd4d91c8ef9f277548cf": "上周关注度较高的产品安全漏洞(20240304-20240310)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494511&idx=1&sn=c2014a6e9946e9288a0336fdf1b17626": "CNVD漏洞周报2024年第10期", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247492426&idx=1&sn=a14346da449ffabad42316df664fcdf2": "龙年首场「漏洞攻防安全」| 第13期安全范沙龙开启", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458545766&idx=2&sn=e8896921407797229cfc38f89a1358dd": "可未经授权远程破坏系统，威联通披露其NAS产品三个漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786278&idx=1&sn=d11d3cdb95c15f5ab540492a77b1dd83&chksm=8893b7c9bfe43edf5a45b90af35d19070b027b86e8ab50bcb1e70416bb8215cdbf71cdcd46cc&scene=58&subscene=0": "Tesla Model 3新漏洞：一部智能手机即可把车开走", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458545766&idx=2&sn=e8896921407797229cfc38f89a1358dd&chksm=b18d5eec86fad7fa6e2330ecda6a34d0d16b9b652d3ddb882f06038e7ba7d0cf7f5d5fd30ba9&scene=58&subscene=0": "可未经授权远程破坏系统，威联通披露其NAS产品三个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502821&idx=1&sn=a726d1e7d0fd5858ea4a02fd1552c50f&chksm=f2585896c52fd18007fb23447f3c3be858e7263b092635d5dea25377bc8fd7158f4340e9f9fb&scene=58&subscene=0": "雷神众测漏洞周报2024.3.04-2024.3.10", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519033&idx=2&sn=59f095fb0e0636ab2257aaf9cc7d7e27&chksm=ea94ba53dde333458f33894831a44c39ac69f925de1b9e7262ba526c9c4ebe0f113e84a4f2e5&scene=58&subscene=0": "QNAP提醒注意NAS设备中严重的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494511&idx=1&sn=c2014a6e9946e9288a0336fdf1b17626&chksm=fd74dba6ca0352b0696487c028c3c8786ce67b52f8d32a2a84ccccb8e5520b89595654bc4866&scene=58&subscene=0": "CNVD漏洞周报2024年第10期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494511&idx=2&sn=683c1634af28cd4d91c8ef9f277548cf&chksm=fd74dba6ca0352b0626f92e177419ce851c41135e19e361b5ed1622e2d00e8034dfe701c8a88&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240304-20240310)", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511165&idx=2&sn=e80c8e6bb5c755f5cac73eb229bf9601&chksm=ebfaeb5ddc8d624bd2e40d59b2b1f119658c556f6380e4775f043c0b94c7287ae0d533c610fe&scene=58&subscene=0": "美CISA因漏洞攻击紧急关闭2个业务系统，此前就此多次发布预警", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493821&idx=1&sn=cf922b9c1823334936a8be709bac6e60&chksm=e8a5e2dedfd26bc84456d5e381b47cd8c217b01385ac153d9bc980f6efd3a0fd73a832b34400&scene=58&subscene=0": "赏金猎人|兜兜转转拿下平台充值漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500591&idx=1&sn=b587312d96aff4aefa32e4e2f400f3f6": "微软2024年3月补丁日多个产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247485949&idx=2&sn=24bdceb7bbf705eba3635fb078b3448b": "弹出生成器WordPress插件漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzkyNDYwNTcyNA==&mid=2247483900&idx=1&sn=8d38151cfb7a733630bd2f88a5198b80": "抓包学的好，劳饭吃的饱，利用Burp Suite插件进行自动化漏洞挖掘【附完整代码】", "https://mp.weixin.qq.com/s?__biz=MzU0MjE2Mjk3Ng==&mid=2247486766&idx=1&sn=f0680c4774d2d478ef0cbf4602521ab9": "Ultimate Member Plugin 漏洞致 10 万个 WordPress 网站遭受攻击", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485541&idx=1&sn=fd39771e892032ccceac8b65b214c0fd": "【高危漏洞】 北京亿赛通电子文档安全管理系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649790610&idx=1&sn=c2f9038a54cc989cb4988511b2ee8a72": "Microsoft 发布2024年3月补丁日安全更新，修复了60个漏洞，包括18个RCE", "https://mp.weixin.qq.com/s?__biz=MzkyNzM2MjM0OQ==&mid=2247492165&idx=1&sn=f36f1d1da44024625102c1b4bb5ee146": "小白学习日记：路径穿越漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwNjYzMjc3OQ==&mid=2247484134&idx=1&sn=b5aa55c8bddc6ad74aa0e43766ea7b8c": "[0day]FLIR-FLIR-AX8某接口存在任意文件读取", "https://mp.weixin.qq.com/s?__biz=Mzg2OTk3ODYzOA==&mid=2247485270&idx=1&sn=336d7d5b0a04c8cc8e08956022823281": "weiphp5.0 scan_callback 代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MjAwNQ==&mid=2247486321&idx=1&sn=2d732fc4485abeee8c1cd43fc8355ea4": "CVE-2024-21413：Microsoft Outlook远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650944988&idx=1&sn=50d0617b43d5ccf3614e64cabcf27760": "About一个高价值漏洞采集与推送服务", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487970&idx=3&sn=7be58c5b37aad0bba6276ec09b42768a": "漏洞预警 | QNAP NAS身份验证缺失漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487970&idx=2&sn=087799527e10d6126e6600a0b0f43e4b": "漏洞预警 | 畅捷通T+ SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487970&idx=1&sn=4b038a4e0bf203e9b515cda7afd4cd70": "漏洞预警 | Fortinet FortiOS & FortiProxy越界写入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500591&idx=1&sn=b587312d96aff4aefa32e4e2f400f3f6&chksm=fe79e7b7c90e6ea1675fade19dcf34f949100c121ad391dc6520f512d337109c95d232564160&scene=58&subscene=0": "微软2024年3月补丁日多个产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247504284&idx=1&sn=d69bd1856e912ba63ff5c47429c50fb4&chksm=fe26d49dc9515d8baf6f665555e0133efeb4dfe39b6acd4d69ed914e7e749a666d66ab62b9b3&scene=58&subscene=0": "2024-03 补丁日: 微软多个漏洞安全更新通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519052&idx=1&sn=f7f3e5630b942ebc8cd1ed12142096a0&chksm=ea94ba26dde33330163b7ef2afd5eea7b2d39a964b3be22ca3c651c70ba3e9df6478b2177356&scene=58&subscene=0": "微软3月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519052&idx=2&sn=d5b9f6a7d087ce1726d9e0679cc933b4&chksm=ea94ba26dde333307a450f63f68590bc4791675780d23d65dd3bb4bc44f6f0006aacb375962f&scene=58&subscene=0": "谷歌2023年共发放1000万美元漏洞奖励", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247502892&idx=1&sn=f77346f7b09284b47fbf1e7aeaf19821&chksm=eaf98460dd8e0d7668bfb38e1ad2fe0ee430b97feee1ce1b7fe3ef457af4690df3937921f3f1&scene=58&subscene=0": "奖金翻倍| 2024补天通用型漏洞专项活动第一期上线！", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493831&idx=1&sn=6586cd1b5f207d86a1b40c9dc9a70dfc&chksm=e8a5e2a4dfd26bb2fe37b5ecd69513866815798c87202fa79a2fe08e9de5fb5351a6e75df60e&scene=58&subscene=0": "浅谈渗透漏洞思路分享-水平越权", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786330&idx=1&sn=45f7c3571c50b65a04e3626b948108aa&chksm=8893b7b5bfe43ea381f7bd31ad3c7b9072b0d19c0383f28e813028d2485c03f9080082928571&scene=58&subscene=0": "黑客利用 Windows SmartScreen 漏洞投放 DarkGate 恶意软件", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519060&idx=1&sn=bd31e9a884e83396402ed8ca25c23ecd&chksm=ea94ba3edde333283d9736a8148c06430f74a8742642b854653fb130487618d9bdd7fb00804c&scene=58&subscene=0": "Fortinet 提醒注意端点管理软件中的严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247496824&idx=1&sn=98efa1a8fcc9dfb28968bd12718d824c&chksm=e84c52a7df3bdbb177ce5a2a81d11a334a7987654713bccea7f0ff95a07bc9cdda13a05ab8f4&scene=58&subscene=0": "【云原生攻防研究】— runC再曝容器逃逸漏洞（CVE-2024-21626）", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664207621&idx=5&sn=66af2194c689ba5ac8d6cdecfa054b2d&chksm=8b5997fcbc2e1eeabe1bd7d9f7c4b261258e43a933b43523d47547b31dd16ac260746eb0b40b&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247492466&idx=1&sn=84b2b31cdce477897b57ef42e20cb21b&chksm=fa9d1824cdea9132e1d32af2365f3c5222aac03b790233d0b8a1d5feadf421382564c01cfce4&scene=58&subscene=0": "一图了解「漏洞攻防安全」安全范儿技术沙龙", "https://mp.weixin.qq.com/s?__biz=MzI2NzI2OTExNA==&mid=2247516454&idx=1&sn=1956c3ef3690d050946a83f25057779f&chksm=ea83a7b3ddf42ea5cb19be41217f2692a412184362cf7ad1abc018b7c6d92b7cb7d4deab70f2&scene=58&subscene=0": "龙年首场「漏洞攻防安全」| 第13期安全范儿沙龙开启", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493836&idx=1&sn=34277489072e7273b2d6d6c0ceeaffdc&chksm=e8a5e2afdfd26bb9da14cc0d98404868a7c125c5a7eaa14c86a021155fa6e5086e11892de1ce&scene=58&subscene=0": "漏洞挖掘|从edusrc转战到企业src的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247517847&idx=1&sn=09660dbfa3c5b39351c9e176021aa7d1&chksm=eb7058a8dc07d1bed9c9b0efdf2831d0b77af47fc5431040a516a43149e80447afa986c93a7c&scene=58&subscene=0": "2024-03微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkxMTIyMjg0NQ==&mid=2247494318&idx=1&sn=bc3ee5634fc0913755f52db584b4af09": "方程式工具包远程溢出漏洞图形界面版V0.3（内置永恒之蓝、永恒冠军、永恒浪漫等）", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485783&idx=2&sn=8233958995868f7379fa9a0d4f7f803a": "用友NC base64接口存在SQL注入漏洞 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493843&idx=1&sn=80af60f272bcc5f544c88825b59cea95": "教育edusrc-漏洞挖掘-逻辑漏洞篇", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247491493&idx=1&sn=d30548547320bc0924639b8897d34ff1": "一款Spring综合漏洞的利用工具，工具支持多个Spring相关漏洞的检测以及利用", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247513901&idx=1&sn=a959091489ae2baa232f9f04424fc66e": "从历史漏洞学习漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511212&idx=1&sn=9916d583c2e3125ee6f8f1f48d464987": "谷歌2023年发放了7100万元漏洞赏金，近年累计支出超4亿元", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522315&idx=2&sn=f1e11bbe5b00d6c0ce316a3c9ccd93af": "【漏洞通告】Fortinet FortiClientEMS SQL注入漏洞CVE-2023-48788", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651262326&idx=1&sn=e8373e1ba0836c2f54e314721d95aba1": "安全左移是责任左移吗；漏洞重复出现怎么办 | FB甲方群话题讨论", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652055890&idx=3&sn=d22a6994c0c950c556f4a1340243f76a": "【安全圈】Fortinet 修补关键漏洞，以防目标服务器上启用远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652055890&idx=1&sn=2948324905b60f87a186b698c3a76da7": "【安全圈】Windows Defender SmartScreen 漏洞可被黑客利用，微软发布声明：已修复", "https://mp.weixin.qq.com/s?__biz=MzkyOTMxNDM3Ng==&mid=2247488390&idx=1&sn=17b9a8ee698021cdf5a5da237a972222": "畅捷通漏洞大全集合", "https://mp.weixin.qq.com/s?__biz=MzU2ODY0ODk2Nw==&mid=2247488434&idx=2&sn=f23bec4962948a8bb54574c6f9360a9b": "【漏洞情报】Fortinet FortiOS & FortiProxy越界写入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247485151&idx=1&sn=204683a6583f0f4228dea5db8b323e6b": "软件安全评估之软件漏洞基础", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487738&idx=2&sn=9463f84809c26e433b5d7a2f775fb7e6": "【漏洞预警】Argo CD 存在 CSRF 漏洞(CVE-2024-22259)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487738&idx=1&sn=4e2572401b6122e2bf9b1e1b90662917": "【漏洞预警】Spring Web UriComponentsBuilder URL解析不当漏洞(CVE-2024-22259)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500607&idx=1&sn=5ad5d2c73b6894dcc021668868e6760e&chksm=fe79e7a7c90e6eb104753409eb662c6f5c055fca36269020b9becb667d0ffb9981be58e4e2be&scene=58&subscene=0": "Fortinet FortiClientEMS SQL注入漏洞(CVE-2023-48788)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247504978&idx=1&sn=4f2ea6f11a637a543bd101c27b5fa2c7&chksm=cfcab746f8bd3e50ab1a6b53fc6411d7f17cf05c8e5b9911cbb3b5bd283e13e14610adb49d36&scene=58&subscene=0": "漏洞通告 | 通天星CMSV6车载定位监控平台系列漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511212&idx=1&sn=9916d583c2e3125ee6f8f1f48d464987&chksm=ebfaeb8cdc8d629aa5ae9bb53fcb9efd900336e72b4a17981264e14c7cba48be9307ed5d6436&scene=58&subscene=0": "谷歌2023年发放了7100万元漏洞赏金，近年累计支出超4亿元", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786340&idx=1&sn=d209747c78142916f2c8600b6e313b37&chksm=8893b78bbfe43e9d18701181f612e57b7fd39f7b3c4537bdcfd9c37df3d556d0de9d1f4334a7&scene=58&subscene=0": "开发和安全人员看过来！Kubernetes RCE 漏洞允许完全接管 Windows 节点", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786340&idx=2&sn=291fb586743de6e13ce2b961936a7dfe&chksm=8893b78bbfe43e9d2214cd6edc5cae67012392cc6c5525f9df6b05da587326a86b9114004205&scene=58&subscene=0": "360漏洞情报：Fortinet FortiClientEMS SQL注入漏洞发布", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492405&idx=2&sn=c3371791d224a3c42f39de7e9ef631b9&chksm=96f7fc58a180754ec0513bd36a1e92a89b9dcc0fe355f2229ff39a1e2add09ce4d32f3ed42ab&scene=58&subscene=0": "【已复现】 通天星CMSV6车载定位监控平台SQL注入致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247542764&idx=1&sn=e554b0f49130a582bb664ef055dba234&chksm=c1e9abbdf69e22ab8814100e69cf6c97fde14686ffb4d24d0cf92811d7285aae89d7574fe5ab&scene=58&subscene=0": "基于人机协同的漏洞挖掘框架设计", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247543456&idx=1&sn=c99c920003f5cf167c8f2687b1755e5e&chksm=fa939c61cde415773e6af6a4a2ac1dfbee18b3e1c37b73e7b5106880d25030c048dfc856df04&scene=58&subscene=0": "已发布PoC，神秘GhostRace攻击可窃取Intel、AMD等CPU数据", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493843&idx=1&sn=80af60f272bcc5f544c88825b59cea95&chksm=e8a5e2b0dfd26ba6feda2cf71d8ee6b2705a79f8191c060b1a247944f1b7d45d9b15210d8008&scene=58&subscene=0": "教育edusrc-漏洞挖掘-逻辑漏洞篇", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247604735&idx=1&sn=2e0eb92a0a2aaaab53de277b53141bc7": "基于模拟仿真的蓝牙协议栈漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493859&idx=1&sn=402e374d761ebe2bb4ffea2943ebddd0": "五千块-某金融赏金SRC漏洞案例", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247484351&idx=1&sn=e0252ffacf7fabee8604c3fdbe6c783d": "记一次项目中快速挖掘漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4OTI0MDk5MQ==&mid=2247491030&idx=1&sn=c430c2aee6624b48934633fd0464b7a3": "kali 系统 利用MS12-020 （CVE-2012-0152）", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247505034&idx=2&sn=5298725d36661589e1d9fb6fdd204c57": "使 Mojo 漏洞利用变得更加困难", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247505034&idx=1&sn=eea20c0c0223dfdf55befd611c74a45d": "CVE-2024-2432：Windows设备上Palo Alto 程序权限提升", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247515199&idx=1&sn=b0c7fd91ef175d68332757e86cb3847b": "若依最新版后台RCE | 干货", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247489700&idx=1&sn=9279c112ca09f4a01fd363689ff4118d": "某OA 0day审计分析", "https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651140292&idx=1&sn=525c0180c43ad8028deadaa683e50c9d": "【漏洞分析】CVE-2021-4145 dirty cred漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650588838&idx=3&sn=b160b30ba7660978d0790b7422eba2dd": "海康威视iVMS综合安防系统任意文件上传漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488012&idx=3&sn=bfeec874574fac755c10bbab355b52f9": "漏洞预警 | Fortinet FortiClientEMS SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488012&idx=2&sn=1a50c6638ef897bc16be47c382c9b289": "漏洞预警 | Apache Pulsar任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488071&idx=3&sn=2b667f30a0cd91b552d2cd851c471de8": "漏洞预警 | 麒麟堡垒机命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488071&idx=2&sn=34b74fe79660ad7594eca129abf96232": "漏洞预警 | SCM一卡通平台系统未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488071&idx=1&sn=36c48dffeaec8531d88d75e7a2329288": "漏洞预警 | 74cmsSE任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MzkwNDU1Mw==&mid=2247484422&idx=1&sn=6d125acc7c2a843c0afcd48b5893ae05": "Spring Framework URL解析不当漏洞以及绕过", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247494475&idx=2&sn=5942889f2a7dd05c693b3409a472017f": "2016 年以来五角大楼收到超过 50,000 份漏洞报告", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650258219&idx=1&sn=6164bb078302d43929d5fe7b7ad2d145": "继续Citrix传奇：CVE-2023-5914和CVE-2023-6184", "https://mp.weixin.qq.com/s?__biz=Mzg4NDk4MTk5OA==&mid=2247485230&idx=1&sn=e11b52f841dd450314592bce5049542e": "0day！！0day！！—RCE—飞鱼星上网行为管理系统企业版前台", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487775&idx=2&sn=c71dca01c5e9ddc3422198c900cf9c99": "【漏洞预警】Parse Server注入漏洞(CVE-2024-29027）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487775&idx=1&sn=333c91643fb2319d4ab6677a68890123": "【漏洞预警】Confluence Data Center&Server路径遍历漏洞(CVE-2024-21677)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247509982&idx=1&sn=72095e2216ac522b0e41dda75db6ee83": "RCE 遇到受限 shell 的突破", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485855&idx=2&sn=8fc959e7aec9b58c48f4b93aaf12b1ba": "京师心智心理健康测评系统MyReport.ashx存在敏感信息泄露 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485855&idx=1&sn=57b14b10cfc2c52e3e590c252fe44dea": "用友NC runScript接口存在SQL注入漏洞 附POC软件", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU3OTA4Ng==&mid=2247484006&idx=2&sn=401889b31fc25ba76370d15862bc77a6": "【1day】宏景e-HR的report_org_collect_tree接口sql注入", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU3OTA4Ng==&mid=2247484006&idx=1&sn=1f603175d723d55a844bc2f32a11e28b": "【1day】正方教学管理信息服务平台ReportServer存在任意文件读取", "https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650275274&idx=1&sn=f5a239440164daacc33e2c5f7212a88c": "行业突破，再添标杆！盛邦安全中标中国工商银行全行漏洞扫描项目", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092616&idx=1&sn=3891e1692d582efbd1674e2d553698ff": "全球知名游戏竞赛选手电脑遭漏洞攻击，总决赛被迫中断", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247488112&idx=2&sn=82acf69228d66418c92a808840b7001a": "漏洞挖掘|从edusrc转战到企业src的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247488112&idx=1&sn=026c6701d7cdbddf64fff5080b2f26cb": "自动化进行目标资产探测和安全漏洞扫描", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651263072&idx=4&sn=3742cabf56b61ebf0bc3cbb1475d7b7b": "如何使用Rayder组织编排漏洞侦查和渗透测试工作流", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652056176&idx=1&sn=aced7ef67a0dcab4ca07374264708b12": "【安全圈】电竞总决赛现场电脑遭漏洞攻击，影响选手比赛，最终被迫中断", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247618336&idx=1&sn=a3d24b112da8ea903d700b2b3a51c544": "压力使人倦怠，倦怠让安全漏洞百出", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522328&idx=1&sn=4f0c1bf023dc08dfe12fe5f945fd5999": "【漏洞通告】Atlassian-Confluence路径遍历漏洞CVE-2024-21677", "https://mp.weixin.qq.com/s?__biz=MzIzODAwMTYxNQ==&mid=2652144870&idx=1&sn=04ed37834d666107df6d492e27c5b160": "平安银行邀你来测！单个漏洞最高2万元", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247542840&idx=4&sn=32bd510d08b43f813787df68a7925d40&chksm=c1e9a469f69e2d7fb4dba068a0e13c9e09211712b301da53083ad7aa2e9c593cc62e1df5ccb0&scene=58&subscene=0": "全球知名游戏竞赛选手电脑遭漏洞攻击，总决赛被迫中断", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493908&idx=1&sn=cd2cd2fdfc83a2d3d7b1097ef973267e&chksm=e8a5e377dfd26a61bb23382d9f768913c2ddc3e46e2387a836c5649849bb4c012eca0540943b&scene=58&subscene=0": "从开放重定向到远程代码执行", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522328&idx=1&sn=4f0c1bf023dc08dfe12fe5f945fd5999&chksm=ce461308f9319a1ed8a605451590f603e94fea652f6b29d862a3f4c9d2c8c93459315833b26f&scene=58&subscene=0": "【漏洞通告】Atlassian-Confluence路径遍历漏洞CVE-2024-21677", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493931&idx=1&sn=b9672b427b9f4fade9a615d2bd744cfe&chksm=e8a5e348dfd26a5e929e59762c284e381d643e2c74b964276378ee6b92ab392af5f913239426&scene=58&subscene=0": "记一次捡漏通杀未授权访问,拿4本CNVD证书", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493936&idx=1&sn=eb55bc68b28d81a40c318124bd404847": "抖音: 重定向跳转 -> XSS漏洞 -> 升级高危", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485889&idx=1&sn=dfa8832002b3a1c53e633b23b0060f6a": "华天动力OA8000办公系统TemplateService存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247537261&idx=1&sn=5d1a643ab3061e05904648eafd5e83e2": "支付类漏洞挖掘技巧总结", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247620625&idx=4&sn=cb73388acbc4120330234002c765e818": "AWS曝一键式漏洞，攻击者可接管Apache Airflow服务", "https://mp.weixin.qq.com/s?__biz=MzIyNzU2NDIwOA==&mid=2247489481&idx=4&sn=9878bfda9caf026a9332f10be7ba8c9f": "飞企互联-FE企业运营管理平台uploadAttachmentServlet 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyNzU2NDIwOA==&mid=2247489481&idx=3&sn=519d82d2db6562bf55d5b7065e170398": "​飞鱼星企业级智能上网行为管理系统​ send_order.cgi 前台RCE漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkyNjU3NDQ1MA==&mid=2247487815&idx=1&sn=c937b495aeb6e6815e5513c4e4c326f8": "【漏洞复现】CVE-2024-24747：MinIO权限提升", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652056367&idx=4&sn=77218186bd8b695558705b716f6cbc23": "【安全圈】苹果 Apple Silicon 芯片被曝安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247505317&idx=1&sn=bd95f9a23b7e3dbfc214d3a17598e680": "Pwn2Own 2021 Parallels Desktop VM 逃逸漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247505317&idx=2&sn=9d00b3264d87b35b88553ee60bbba72b": "Pwn2Own 2021 Jscript9 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247607086&idx=1&sn=aca64303efc7aa22d2db92e16c9e53be": "记一次黑盒摸鱼意外挖到的0day", "https://mp.weixin.qq.com/s?__biz=MzkyNDI2NjQzNg==&mid=2247492908&idx=1&sn=da8db85bead460d776789880b81531ac": "edusrc证书站漏洞挖掘(垂直越权)", "https://mp.weixin.qq.com/s?__biz=MzkwOTQ4NDMzOQ==&mid=2247483943&idx=1&sn=60b7a6831c8090435b90da18b6b99a65": "CVE-2024-1698", "https://mp.weixin.qq.com/s?__biz=Mzk0NjE0NDc5OQ==&mid=2247523242&idx=1&sn=a10203344730ec8f9003c6d9d6002fea": "记录一次万元漏洞赏金的挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652056367&idx=4&sn=77218186bd8b695558705b716f6cbc23&chksm=f36e076fc4198e794df890fc182268f49776f460285135cf0a362b9bf989554fc5894cff04de&scene=58&subscene=0": "【安全圈】苹果 Apple Silicon 芯片被曝安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493936&idx=1&sn=eb55bc68b28d81a40c318124bd404847&chksm=e8a5e353dfd26a4564dd3f9e36db6e41a81cbd5fb0cfdadbca7071ea5d773950d2b1f44be80a&scene=58&subscene=0": "抖音: 重定向跳转 -> XSS漏洞 -> 升级高危", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247605407&idx=3&sn=8f870cc713c839a722dcebb1fc9c4cf8": "逆向分析在漏洞挖掘中的应用", "https://mp.weixin.qq.com/s?__biz=MzkyNTU4MDc5Mw==&mid=2247485429&idx=1&sn=6bcd80377c2cf421105d0ba804b22c7b": "【漏洞复现】用友-畅捷通T+-RRATableController-命令执行", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247510011&idx=1&sn=592135c4e6680aa23347d1c0b3ad5e28": "伪造账户接管之路：价值$$$$的复制密码重置链接漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486190&idx=3&sn=f9c6424d23f9495252f1445b1bda66c1": "CVE-2024-1208", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486190&idx=1&sn=fbff0368f4440af721619e1e482219b4": "CVE-2024-1210", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493941&idx=1&sn=40aae1010c6b37f969b260817de084b0": "通用0day挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652056486&idx=1&sn=81f3778a0f6ca6b630531e0ede055a93": "【安全圈】震惊！AWS曝一键式漏洞，攻击者可接管Apache Airflow服务", "https://mp.weixin.qq.com/s?__biz=MzkzMDE5OTQyNQ==&mid=2247484928&idx=1&sn=27a66ae01ff4594ce19221c29be80ef9": "赏金猎人|SRC简单拿下某公交后台系统多个高危漏洞思路及试探通用型漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458548845&idx=2&sn=8d3776912d03b70254f1f5514a704dc8&chksm=b18d4ae786fac3f1855e7e0e8a1457b5e41007b85ae345102c033762b8eaf15a31af40f0a79a&scene=58&subscene=0": "利用漏洞，黑客能够轻易打开全球300万家酒店门锁", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519143&idx=2&sn=dc771e1d0ed09825b9fb60e06a9c8291&chksm=ea94bacddde333db8eb4ff27c6f46bccc6a819c55ebd58f8f6b71a42833f11ad76c92012ba76&scene=58&subscene=0": "AWS修复 Airflow 服务中严重的 “FlowFixation” 漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247492534&idx=1&sn=8024e7f79f4579f7bd08982706c4076c&chksm=fa9d18e0cdea91f6b20e3405679f9c51aed601dd96740c8974c28a3b538d6fec3b1169ec2078&scene=58&subscene=0": "ByteSRC专测第19期！敏感数据相关漏洞享2倍积分！", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247542990&idx=6&sn=f21898455e708f1f3743801855f65bfa&chksm=c1e9a49ff69e2d89188e880d82e25cad86b17fb4c3af2a7ed2006211ca827ace3bcdd5fdf941&scene=58&subscene=0": "AWS曝一键式漏洞，攻击者可接管Apache Airflow服务", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493941&idx=1&sn=40aae1010c6b37f969b260817de084b0&chksm=e8a5e356dfd26a406f27ae6624039d73e765a4419ac0de63a4078daadc346671bfca727cacf1&scene=58&subscene=0": "通用0day挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494563&idx=1&sn=9fc26454f6e7a9261890e06b35582738&chksm=fd74db6aca03527c9b9028c0d84f8f25558638bc24f0ea2517e06c3aa7cd8fb251a9b3535c3a&scene=58&subscene=0": "CNVD漏洞周报2024年第12期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494563&idx=2&sn=96ed4f66057751d3d49872ac7f55c56e&chksm=fd74db6aca03527c5f7392b1236094bf0e607606b8b33d0018b61671417ecf76e43b8a221b16&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240318-20240324)", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247485865&idx=1&sn=2ce8e3c9766b51278815e1dcaa6c4468": "漏洞分析 | SeaCMS v12.9 中 SQL 注入", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486207&idx=1&sn=9ed9da75383eb02de9b9dcbb24375496": "CVE-2024-27564", "https://mp.weixin.qq.com/s?__biz=Mzk0MDQzNzY5NQ==&mid=2247490481&idx=2&sn=dea01a356635876fca3447bd89cfbecd": "【红队】Spring漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkyOTMxNDM3Ng==&mid=2247488403&idx=1&sn=7fb618fcced375d6c7cec2eaf154453b": "致远OA ucpcLogin密码重置漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485915&idx=1&sn=fb907fd3f7b0b94098a000456d575a45": "飞企互联-FE企业运营管理平台ShowImageServlet接口存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247515399&idx=2&sn=a5470421719afcbe904cca202065b27b": "漏洞挖掘 | EDU小通用漏洞分享", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247515399&idx=1&sn=6627e9eb67588949812cccda94657d61": "实战 | 黑盒摸鱼意外挖到的0day", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487809&idx=1&sn=fe1ec3bf919d15673c15fa587b285345": "【漏洞预警】checkemail Check & Log Email代码执行漏洞(CVE-2024-0866)", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247484223&idx=1&sn=ca87cfd364ac1db85cd2101bc7fa814b": "金和oa协同管理平台历史漏洞分析三则", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500639&idx=1&sn=786acdc97a6d5123183053ce4dcb74ae": "【已复现】Adobe ColdFusion 任意文件读取漏洞(CVE-2024-20767)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651264201&idx=4&sn=a9456b463682b1146d0f885cbbaf08ac": "如何使用route-detect在Web应用程序路由中扫描身份认证和授权漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3MzQzODg2Nw==&mid=2247485162&idx=1&sn=c734506fd43ddf6af271eda7cb76ad2b": "价值3k的漏洞挖掘分享（漏洞已修复）", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247492591&idx=1&sn=6eb38827f25aa04aebd0869a6928299d": "文末有奖｜「漏洞攻防安全」PPT、回放来啦", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458548918&idx=2&sn=7ef737b6b8265be41c3dcb64fc615884": "Pwn2Own温哥华黑客大赛落幕，火狐浏览器连夜赶工一天修复两高危漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458548918&idx=3&sn=9ce968f889e8981d78d12bf72ab17865": "学硬核技术！系统0day安全-二进制漏洞攻防（第3期）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458548918&idx=2&sn=7ef737b6b8265be41c3dcb64fc615884&chksm=b18d4a3c86fac32a825d100d75e1a370632e8b5756f08c9e98d4dde8f2202f64758d32df02be&scene=58&subscene=0": "Pwn2Own温哥华黑客大赛落幕，火狐浏览器连夜赶工一天修复两高危漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458548918&idx=3&sn=9ce968f889e8981d78d12bf72ab17865&chksm=b18d4a3c86fac32a343e105d2bbb5665dc60d25df92b7f31560b61c01c87471c87618be9feac&scene=58&subscene=0": "学硬核技术！系统0day安全-二进制漏洞攻防（第3期）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519154&idx=1&sn=3f4209efe9a510274abec479b51dcceb&chksm=ea94bad8dde333cec265a5c93f4ed89b687c3a2301fd4d5045252f76ea8505a6aa3b125f9070&scene=58&subscene=0": "Mozilla 修复Pwn2Own大赛发现的两个 Firefox 0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519154&idx=2&sn=e5156dc817f213bae9628a3a674da4e8&chksm=ea94bad8dde333ce498ee36da84dbfce9ddeb839294d45a9916983f7515549e2bd774f39bb8b&scene=58&subscene=0": "CISA督促软件开发人员消除SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499056&idx=1&sn=3b5177323cd2fbc152ae8ce7079dffba&chksm=973ace52a04d474481b55c4bc2543ebcc391e23899a6781a07e81eaaa8f062a3baedbd9dcb49&scene=58&subscene=0": "CNVD漏洞周报2024年第12期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499056&idx=2&sn=b50a81bb94f1eb31a684a0b383a78f5d&chksm=973ace52a04d4744f3e9b5e4ae01b2fae72242ded228d3a2d462ca9b78e346c8d3a6b2eca980&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240318-20240324)", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502840&idx=1&sn=d74c5314f0cfdb74edb0d60961c35995&chksm=f258588bc52fd19d3aa3e16d264a6a1ce649f40a1f69627c5dc896e34c922f7dd9adc888aee2&scene=58&subscene=0": "雷神众测漏洞周报2024.3.18-2024.3.24", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488647&idx=1&sn=f2a10f535769b3453789cbc2bf07b706&chksm=c2c6438cf5b1ca9a11cfb8620d56b5b18b415c735e07c7a48397869514a26d27242f3b4849dd&scene=58&subscene=0": "【漏洞通告】XZ-Utils供应链后门漏洞（CVE-2024-3094）", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650977901&idx=1&sn=d9200fcaa853656a5b7310333a4c52bc&chksm=8079f45fb70e7d497ad8e1e241b1791686dd6c9a9f9143d3a33b8d9ec1f535e6a7cf14eef2ab&scene=58&subscene=0": "【知道创宇404实验室】警惕Linux生态xz-utils软件包被攻击并植入后门（CVE-2024-3094）", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247510108&idx=1&sn=726338571c7d1bb396f47d07fa83e2d1&chksm=ea665f2bdd11d63d5db5c710e5e19d0949065f144ca783d25061761f7816e68dd906b871994c&scene=58&subscene=0": "liblzma∕xz库被植入后门影响SSH事件紧急通告（CVE-2024-3094）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458549352&idx=1&sn=c45c212b8db20154dbfa9edeaaebc593&chksm=b18d4ce286fac5f415b3697517f2c12d523f7c13d1d143b25d895a980a49a2e420d79e5a46f8&scene=58&subscene=0": "CVE-2022-2588 Dirty Cred漏洞分析与复现", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458549352&idx=2&sn=4f896f0f8644a3c8984ec9ef0c04cf7b&chksm=b18d4ce286fac5f453954862bb18ba139e33d42aa6231fb393a771a6f36a125f66b5f8d2d831&scene=58&subscene=0": "明晚19点直播课！欢迎报名《系统0day安全-Windows平台漏洞挖掘（第2期）》", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247496594&idx=1&sn=e09266aaa54a6ad0e8188a288084ef7f&chksm=ce96beacf9e137ba3f5cf5b3fe2c25d938f100aeb6d1fef231b0e044081c3c86649e0b627e96&scene=58&subscene=0": "【风险提示】天融信关于liblzma∕xz库5.6.0、5.6.1版本后门事件（CVE-2024-3094）的风险提示", "https://mp.weixin.qq.com/s?__biz=MzI1MjQwMTAyOQ==&mid=2247483855&idx=1&sn=13a48a1e2c31decad06367213547f917&chksm=e9e50525de928c3339c75a7cc8471208a57fe6c0ba4ef069fa40711148b9c148ef88183e1b0e&scene=58&subscene=0": "xz xz-utils供应链攻击CVE-2024-3094初步分析", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494000&idx=1&sn=dba6edab2fd2c650fc34cd11978c2867&chksm=e8a5e313dfd26a052af18c1cee2918e7798acc109376a23ca81e185030a41db8eb6ee42df16e&scene=58&subscene=0": "子域名接管漏洞: 赚钱小技巧", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502847&idx=1&sn=16b495176592ad2fec8611a1dafe6934&chksm=f258588cc52fd19a8353d6b8928785dfd6cc8622d4f8c218eb4a968f46738742c2fb0e8a3dcb&scene=58&subscene=0": "雷神众测漏洞周报2024.3.25-2024.3.31", "https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657165462&idx=1&sn=449cfe25143f2b0e51cca7cbc5efb668&chksm=f1d4d273c6a35b655e853a017a8ce4b9bccdf19c6510614462d602dca17ac449fdc67724e844&scene=58&subscene=0": "Linux内核提权（CVE-2024-1086）", "https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486319&idx=1&sn=e22f7130d587359aa8c94b49be6f7443&chksm=ec6fec6fdb186579fb397aa6569fd83608613a04c2830005741c1fa8ed30b1505a8fe321e8fa&scene=58&subscene=0": "【风险通告】XZ-Utils 5.6.0∕5.6.1版本后门风险（CVE-2024-3094）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519204&idx=2&sn=6fc646b9575f6837ef0f55d569c11709&chksm=ea94ba8edde33398e567236352d40e34414aa12c9e4bd4d838bff320754289021c2fafcc02b8&scene=58&subscene=0": "思科IOS 漏洞可导致未认证的远程DoS 攻击", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247543108&idx=2&sn=661494379fd07b40946385687f93d29f&chksm=c1e9a515f69e2c037852cb56eefedacfc20201c3ebee681f2501149df14300916b36528c327e&scene=58&subscene=0": "谷歌报告显示：2023 年 50% 的0day漏洞利用背后都是间谍软件供应商", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247543108&idx=4&sn=2b0b1e6bb59fbeac67261b7ecce9a7e4&chksm=c1e9a515f69e2c0323805452df95a048e066342060b67e5564e19c41aa89e913b90d9be525c8&scene=58&subscene=0": "ScreenConnect 管理员应尽快修补关键的 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247543827&idx=1&sn=f727ecb6dd35ada1a09372f3c027faf5&chksm=fa939ad2cde413c493ea2f17e46df7f8ecd64c7c2c4d20c8126a5b7d933bb41d72db366979ee&scene=58&subscene=0": "谷歌报告显示：2023 年 50% 的0day漏洞利用背后都是间谍软件供应商", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664209397&idx=6&sn=be9efc82bc65c10ad880920bca6539ca&chksm=8b59990cbc2e101a22501e072869374dba513f99849a2d5b4ef7ed8041fb3656706ca2b7fe12&scene=58&subscene=0": "评论 | “免密支付”的漏洞亟待填补", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484539&idx=1&sn=e6419879ea1b37b020f493fb1b6e54e7&chksm=c12af9faf65d70ec6c2189a77b34bef906796152064310cd302b706f565746c625049d66f304&scene=58&subscene=0": "【复现】JumpServer 后台模板注入漏洞（CVE-2024-29202）的风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494007&idx=1&sn=3f9011bbf0046f9d7102ff0daddd29fc&chksm=e8a5e314dfd26a02eda594408b2cfeef2aa015ddff2a2f0e8da675183fcfedcfced57e5cd79c&scene=58&subscene=0": "命令注入漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494599&idx=1&sn=945617df0078d55f0a5a3cd84dd0dae6&chksm=fd74db0eca03521862a78027187cc0135393aad039de89dbf7adb9d7501296f7f90c46f5e75a&scene=58&subscene=0": "CNVD漏洞周报2024年第13期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494599&idx=2&sn=19a1236472ccab941ee13b0311a7f3aa&chksm=fd74db0eca0352186be3b42594debf031a3fe38ffcd7635dd42e5c2b4b740a9f128fa8f39a48&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240325-20240331)", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650590410&idx=2&sn=936d8ce5574f30c74e6439b80f98e8bc": "被忽视的“高危漏洞”", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247475&idx=1&sn=fe99fc58f51eec9c92d9a2080b8283fe": "某办公系统反序列化漏洞分析复现", "https://mp.weixin.qq.com/s?__biz=MzIxOTQ1OTY4OQ==&mid=2247484379&idx=1&sn=9302f859d29315e1b88390191d0c8354": "关于xz核弹级漏洞，看这些就够了？", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486015&idx=1&sn=6fd61fb957dabec717b5b034b468516d": "用友NC Cloud importhttpscer接口存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247491139&idx=1&sn=efccf7a88b6041fd559d9b1a3604dfec": "符号连接替换漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494022&idx=1&sn=7ac77a24e1c151c2246d1b041b7fcf29": "实战之常规漏洞快速挖掘", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247515503&idx=1&sn=862a23d0a30fe9822b17885a8b5bcdd1": "干货 | 支付金额类漏洞挖掘技巧总结", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247491188&idx=2&sn=1c624fd62b1c810203bf4fd183513fed": "谷歌解决了两个被积极利用的Pixel漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247491188&idx=1&sn=b5eb54268da4929559a66f697d9d39d3": "谷歌解决了三月份 Pwn2Own 比赛中利用的另一个 Chrome 零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247538697&idx=1&sn=eaacfb4cf3681c0ddbccc55f17410c32": "漏洞挖掘 | 某证书站Bypass sql", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247554964&idx=2&sn=7ae5fd07a3a684153358b3a77496bb2c": "实战中遇到的一些莫名奇妙的逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247484245&idx=1&sn=39fb8d813619c8b2e44262d36bbbe6f0": "朝鲜APT Lazarus利用AppLocker零日漏洞部署rootkit", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652057293&idx=4&sn=965b31a78636ecd723b8b5207417ca97": "【安全圈】WP-Members 插件中的安全漏洞导致脚本注入", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488283&idx=3&sn=afb6380e1a16409d0267f9369d73820a": "漏洞预警 | Apache Fineract SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488283&idx=1&sn=53b339e76177b6240b0a4f84d6f49554": "漏洞预警 | JumpServer JINJA2注入代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488283&idx=2&sn=208c1ab85b235a315e4426c16055a701": "漏洞预警 | 用友U8Cloud SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649790792&idx=2&sn=df13ca830ce19a60c0716fb7ed6e019f": "欧盟警察机构遭遇严重安全漏洞：高级官员的敏感文件失踪", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494022&idx=1&sn=7ac77a24e1c151c2246d1b041b7fcf29&chksm=e8a5e3e5dfd26af372c2c34271ebc40f24a789820fa09bbb8a9fba5a6aa0c318e28e5b97b365&scene=58&subscene=0": "实战之常规漏洞快速挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652057293&idx=4&sn=965b31a78636ecd723b8b5207417ca97&chksm=f36e028dc4198b9b77f14a7be388387867d282a4b40aec251acf38ab6d95bbdfa21e0956fbf5&scene=58&subscene=0": "【安全圈】WP-Members 插件中的安全漏洞导致脚本注入", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458549820&idx=1&sn=73458e68b807dae75e6a79d17550f812&chksm=b18d4eb686fac7a026d9cfe3ccecbebdb1242912bac315b2c31a0a7088d33ff1dd50daea12b5&scene=58&subscene=0": "CVE-2024-0015复现 (DubheCTF DayDream)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494043&idx=1&sn=c967124b95eaae8f0ee5615bd69709c2&chksm=e8a5e3f8dfd26aee66a5b8dab05336d51aec15c186ab8abbb88b7186c1617b25c71e456b5f81&scene=58&subscene=0": "支付类漏洞挖掘技巧", "https://mp.weixin.qq.com/s?__biz=Mzg5NDg4MzYzNQ==&mid=2247486403&idx=1&sn=37ae23f1bc1bf4646e0f37208ac83f79": "中间件安全-CVE漏洞复现-Weblogic+JBoss+GlassFish", "https://mp.weixin.qq.com/s?__biz=Mzg2MzkwNDU1Mw==&mid=2247484457&idx=1&sn=6228ec33344f78434b67e0363e5ee754": "支付漏洞渗透测试思路", "https://mp.weixin.qq.com/s?__biz=MzkxNjQyMjcwMw==&mid=2247486023&idx=1&sn=a9aed6df7df53368fe5f52b391051c37": "实战 | 记一次某报表系统漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247491256&idx=1&sn=cb4258d5dddf56a302b4fc746784f7f8": "dst-admin饥荒管理后台相关漏洞合集", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487875&idx=2&sn=8f108bd7f47ebc89f7f3ee65a9553153": "【漏洞预警】Progress Flowmon命令注入漏洞（CVE-2024-2389）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487875&idx=1&sn=edccd6122407c13a5eeed762fb16d388": "【漏洞预警】HTTP∕2 CONTINUATION Flood拒绝服务漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODQzNTU2NA==&mid=2247485739&idx=1&sn=43b07a879757ce786603b57f91abfcc2": "实战 | 教育SRC漏洞挖掘获取rank以及证书获取", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092634&idx=2&sn=143b2301d4a1ca677c66847c464e4a28": "俄罗斯称利用WinRAR 漏洞的攻击活动与乌克兰有关", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652057486&idx=2&sn=9b2fe9c936492d052e96683f6c334db6": "【安全圈】男子利用网络漏洞刷取游戏金币，非法获利413万，被判刑三年六个月", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247501287&idx=1&sn=a94e6420ef446afc23b7abd0f9dac6a9": "【成功复现】Telesquare TLR-2005KSH路由器远程命令执行漏洞(CVE-2024-29269)", "https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247485533&idx=1&sn=28aa38d2a9264ae5ec6cd557ed4e9144&chksm=fb04cb35cc7342235918310d4701d0e1f516e31a3ba89a0630a6a8afc29094879983ac7be1bc&scene=58&subscene=0": "灰色地带需求井喷：零日漏洞价格再创新高", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519231&idx=1&sn=5f9f5009dffb1ec140664df249e99fae&chksm=ea94ba95dde33383baddf488f4094e6fa0cd272867dd83693a008407c6112765694a7f8ef1d6&scene=58&subscene=0": "谷歌修复遭取证公司利用的两个 Pixel 0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519231&idx=2&sn=b7b32d73cbe2046719780c03304729ce&chksm=ea94ba95dde333834c93da6e263ab3af72ce14f2a171799c65802dab992336cd0c1a96492159&scene=58&subscene=0": "思科提醒注意Small Business路由器中的XSS漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247543157&idx=3&sn=f495bd399aea42837957b112d223e204&chksm=c1e9a524f69e2c324b88e88a435623bb379e7aba2463231edf0280c7ce29d934d6ff2f98b11f&scene=58&subscene=0": "俄罗斯称利用WinRAR 漏洞的攻击活动与乌克兰有关", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652057486&idx=2&sn=9b2fe9c936492d052e96683f6c334db6&chksm=f36e03cec4198ad8ce2fdac5656b608aad3c6f77652628a0e71a316000343a684930b615f730&scene=58&subscene=0": "【安全圈】男子利用网络漏洞刷取游戏金币，非法获利413万，被判刑三年六个月", "https://mp.weixin.qq.com/s?__biz=Mzg5NDg4MzYzNQ==&mid=2247486406&idx=1&sn=7589fdf7a535788081c3ed0047d93f11": "中间件安全-CVE漏洞复现-Docker+Websphere+Jetty", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486305&idx=1&sn=93580403e5545fb119e0145b8043b197": "CVE-2024-25869", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486402&idx=1&sn=b641fe8f630d6a05506205432dffbd3a": "记一次小程序渗透并拿到后台管理员权限-漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247537414&idx=1&sn=f90e0199a445f85a57a49694cfba0323": "某oa命令执行漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486098&idx=2&sn=ca5e0f55bc7ea9c3474d2017047ba345": "畅捷通TPlus App_Code.ashx存在远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486098&idx=1&sn=a73ca152dbb0b24fc06474932072b496": "D-Link NAS设备nas_sharing.cgi接口存在远程命令执行漏洞CVE-2024-3273", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487887&idx=2&sn=c7d5f6729a047143000776043e874da6": "【漏洞预警】pgAdmin远程代码执行漏洞（CVE-2024-3116）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487887&idx=1&sn=79a97db0c4509d1662d5d68401f62393": "【漏洞预警】Adobe Magento Open Source命令注入漏洞(CVE-2024-20720)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652057549&idx=3&sn=e9657c747c3e254c76f6156c11ffa313": "【安全圈】HTTP∕2 协议被曝安全漏洞，被黑客利用可发起拒绝服务攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652057549&idx=1&sn=d444948a104679ef92393004fce2dea5": "【安全圈】7名新能源车主被抓，他们找到了系统漏洞免费充电", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519242&idx=1&sn=6c9094b038e67aea0f2968fffbb125e0&chksm=ea94bd60dde334764a9154d61f5809e1fd0a977ba3617a96d698def9b968b04b3039d7ecc3b2&scene=58&subscene=0": "产品中又现4个漏洞，Ivanti 宣布安全大检修", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652057549&idx=1&sn=d444948a104679ef92393004fce2dea5&chksm=f36e038dc4198a9b4eaf60fdc91c939148576e0e07abfc01c222da1103a2e03e21a98d011f05&scene=58&subscene=0": "【安全圈】7名新能源车主被抓，他们找到了系统漏洞免费充电", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652057549&idx=3&sn=e9657c747c3e254c76f6156c11ffa313&chksm=f36e038dc4198a9bab7edac07dc3336e1697a90a593b39ac241b675528aa7d8187f24189366b&scene=58&subscene=0": "【安全圈】HTTP∕2 协议被曝安全漏洞，被黑客利用可发起拒绝服务攻击", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494631&idx=1&sn=f7bb6973a42b05d5dfb8d3c054854408&chksm=fd74db2eca035238404e0318d694ccb2b65dc27f54afeec5e095620c2f343d69317910ea3689&scene=58&subscene=0": "CNVD漏洞周报2024年第14期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494631&idx=2&sn=2c5e695296640c48c784e367332e14ec&chksm=fd74db2eca0352381d7c5e7d84815e1ef40234e621530b239598619167ab5e48e5df2396d80e&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240401-20240407)", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247545610&idx=1&sn=fc68572f3dac32cb743ebd68f5f855b8&chksm=eb84d8aadcf351bcf0af30549c858b2e6c7a5f71c2e686adcc20cdf0ca90d114833794aaf7f0&scene=58&subscene=0": "技术分享｜某办公系统代码执行漏洞分析及检测优化", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500805&idx=1&sn=144ae8281feb31c590c9613eaa0bdbed&chksm=fe79e09dc90e698b5ee25d7a0ef967c3294aed4fca1bcc91bfa170e3010bc0c0388014aaac4f&scene=58&subscene=0": "Rust 命令注入漏洞(CVE-2024-24576)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550184&idx=3&sn=460ecdad566d58a41244507c95605b30&chksm=b18d4f2286fac634a8eea451e4b8339e7a3030ded7c275d0f0bb221bd074ac8644a5a75936e0&scene=58&subscene=0": "二进制系列之Pwn篇-逐步掌握二进制漏洞挖掘的技巧和操作系统底层知识", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664210309&idx=4&sn=b0bb2aca1b0c8db8ba91010ab77ec3e9&chksm=8b599d7cbc2e146ab302cde39ecd3c2a2a0f276afe11965c4b281e6c9d5027cf499d19bf31b2&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522464&idx=1&sn=a768ef9a7d868cc6a4b3634693c49f13&chksm=ce4613b0f9319aa644d9451f1473ec0fe1e645cc139af8f188cbe3a5cf6cc07855c68cfaff54&scene=58&subscene=0": "【漏洞通告】Rust命令注入漏洞CVE-2024-24576", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247505357&idx=1&sn=526b993d31f6b6d0ce1f87daddeca19a&chksm=fa520073cd25896569480bce7e34b0322302bb3fd971dfd014940ade0be29e39e586d40c7028&scene=58&subscene=0": "微软2024年4月补丁日重点漏洞安全预警", "https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247537544&idx=1&sn=f4cecd23d72c740c47af236c985f7dfc": "0day Telegram核弹级漏洞 ？1day Telegram Windows客户端RCE漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzg3MDY0NjA5MQ==&mid=2247484219&idx=1&sn=d3b6865f992372bf6a3bde54e372f931": "Tomcat 中间件漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247510516&idx=1&sn=5dd03ff1a2fa6985aa6c3def33d26873": "一次曲折的JDK反序列化到JNDI注入绕过（no forceString）", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494230&idx=1&sn=3d60b938d2f7194662aad014135943dc": "五千块-某金融赏金SRC漏洞案例", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092646&idx=2&sn=6af6dd5841739e8435b25fb02ffe74d0": "CNNVD关于Fortinet FortiClient代码注入漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650590818&idx=2&sn=8736cdcc9dba1cfa3ea78d7832e7f39c": "英特尔、联想等服务器曝出难以修复的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652057923&idx=3&sn=09ef5dc82240d4c898117b6d7be0e8ae": "【安全圈】微软安全漏洞暴露了员工的敏感凭证和内部资源", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247503998&idx=1&sn=332988b40b127d770f6525695889df84": "[在野0day预警] CVE-2024-3400 Palo Alto Networks PAN-OS 命令执行", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550274&idx=2&sn=53a4f8f7f37c588a16a18923a12a8a94": "周日19点直播：《系统0day安全-Windows平台漏洞挖掘（第2期）》", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550274&idx=1&sn=83844418c6e1fb22d4d8c2033abdea5e": "V8漏洞利用之对象伪造漏洞利用模板", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247608055&idx=1&sn=0b542051cce6198c805aed2d10476498": "通过补丁分析Jenkins任意文件读取漏洞（CVE-2024-23897）", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247539001&idx=1&sn=388050fed116b9eedbac487d44ee6630": "实战纪实 | 几个有趣的漏洞导致的连锁危害", "https://mp.weixin.qq.com/s?__biz=Mzg5NDg4MzYzNQ==&mid=2247486415&idx=1&sn=398603e7cb7800d99ec2ed966d448104": "框架漏洞-CVE复现-Apache Shiro+Apache Solr", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506254&idx=1&sn=0461a56548adc3433d5ef3146aea4a44": "Telegram Desktop RCE . \"pywz\" VS \"pyzw\" 开发的手抖经典案例", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649790874&idx=1&sn=cd83c5569ad5e24f61370ce12b85570e": "不明黑客利用0day漏洞对 Palo Alto Networks 防火墙进行后门攻击", "https://mp.weixin.qq.com/s?__biz=Mzg4NTczMTMyMQ==&mid=2247484816&idx=1&sn=f6673de3d6698e44d132f584fa097d0d": "智能合约web3.0都有哪些漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650590818&idx=4&sn=eb886a17b2c3919d9b51fe645fde2cd8": "HW 必备|一款通用漏洞扫描器", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485198&idx=2&sn=d5ffb48a03c958a702b178fa9d9a5be2": "CVE-2024-21378｜Microsoft Outlook远程代码执行（RCE）漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485198&idx=1&sn=9fb16ba413e9330ee9bb4e828efedc37": "N∕A｜0day！Telegram Windows客户端存在RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247491369&idx=2&sn=b79f1b564a012e5458dc6d3347af35dc": ".NET 复现某OA 3个SQL堆叠注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550274&idx=1&sn=83844418c6e1fb22d4d8c2033abdea5e&chksm=b18db08886fa399ee2927fefc6f01c0213e126ef3248a8ecc439231526e9e56e69f937a29a3c&scene=58&subscene=0": "V8漏洞利用之对象伪造漏洞利用模板", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550274&idx=2&sn=53a4f8f7f37c588a16a18923a12a8a94&chksm=b18db08886fa399e04619563008d98102129421d4247de20afc48d275ed642e1163630d5de33&scene=58&subscene=0": "周日19点直播：《系统0day安全-Windows平台漏洞挖掘（第2期）》", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494230&idx=1&sn=3d60b938d2f7194662aad014135943dc&chksm=e8a5e035dfd26923581b972254162fc4b98e1eabe0635f7c879e8e67a1e865ef485f06e9bb09&scene=58&subscene=0": "五千块-某金融赏金SRC漏洞案例", "https://mp.weixin.qq.com/s?__biz=MzkwOTQ4NDMzOQ==&mid=2247484112&idx=1&sn=e509eac25656f1e296286a47884bb666": "CVE-2024-28255", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247513366&idx=1&sn=02b55f3c9d8d57be9032e9eb35ba1bf5": "漏洞分析 | LangChain代码注入漏洞（CVE-2023- 36281）", "https://mp.weixin.qq.com/s?__biz=MjM5NDcxMDQzNA==&mid=2247488796&idx=1&sn=71904b1ab0cf9c917c99abd6601ece7d": "msf Exploit+ssh priKey：DerpnStink1靶机", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494240&idx=1&sn=b7882d6d1f1dba7c20ac68457c0e15f7": "如何在一个目标中获取两个RCE", "https://mp.weixin.qq.com/s?__biz=MzkwNDQxODMzNg==&mid=2247484629&idx=1&sn=3ca94535ef902fbe9504deae6866e0d9": "el表达式注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506303&idx=3&sn=ca3bd38aeffe49cbbbf80d08e4f019f9": "GlobalProtect 中未经身份验证的远程代码执行漏洞的0day利用 (CVE-2024-3400)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506303&idx=2&sn=6dca41aa657e1bb06b3694a7206b1f59": "浅谈JSONP劫持漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506303&idx=1&sn=7bde7dc361bd64dfca7f8834b7a428a4": "CVE-2024-20670 报告 - “新 Outlook”NTLM 泄漏和文件执行", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494240&idx=1&sn=b7882d6d1f1dba7c20ac68457c0e15f7&chksm=e8a5e003dfd269150343a69669ec0d1410c28c04a3de51b07d157a3fb561e38f8c596e8d7ee6&scene=58&subscene=0": "如何在一个目标中获取两个RCE", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486382&idx=1&sn=fabb5d7f88a1664bf66aea41f714d6ac": "CVE-2024-2389", "https://mp.weixin.qq.com/s?__biz=MzU4OTg4Nzc4MQ==&mid=2247501893&idx=1&sn=6cfe6bf3d098b7c28990dda8574b0515": "招聘网络安全分析师(漏洞、病毒方向)、渗透测试工程师、密码应用安全工程师、工控安全渗透工程师、产品安全渗透工程师、芯片安全渗透", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486503&idx=1&sn=61bee8a9763700af95cfab1dfe7d9153": "通天星CMSV6车载视频监控平台Logger接口任意文件读取漏洞|漏洞预警", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247497814&idx=1&sn=01aefbdd8ac5ca5f28e1dfc28eacdd3f": "G.O.S.S.I.P 安全事件 2024-04-16 PuTTY 高危漏洞 CVE-2024-31497", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247501476&idx=1&sn=1e275c526ef34241eec5348cda6838b9": "【成功复现】Apache Zeppelin 远程代码注入漏洞(CVE-2024-31861)", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247539080&idx=2&sn=e0cd0acddc26263ca4119d42a72952d8": "蚂蚁数科发布ZOLOZ Deeper防范AI换脸 设百万漏洞悬赏", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487943&idx=1&sn=b4f882c5a7658d31dd5a065ef12e9c98": "【漏洞预警】IP-guard WebServer < 4.82.0609.0任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550427&idx=2&sn=d9a271f5a233c557b7d7775102e3bbaa": "可绕过安全警告并自启Python脚本，电报修复其Windows桌面客户端中的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489062&idx=3&sn=c00124bb8440d01f50c7e146bec5f6ab": "【已复现】IP-guard WebServer 权限绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489062&idx=2&sn=fc63f02f9a2443b0b405d8c71651a84d": "SnakeYaml 中不安全的反序列化漏洞 (CVE-2022-1471) 有感", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489062&idx=1&sn=0b22555b73684bc3311b2f7a6749a29c": "Apache Pinot SQL注入与远程代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506392&idx=4&sn=04ec73c45bc47e62c97a5d0292d78c68": "已修补关键 PHP 命令执行漏洞CVE-2024-1874漏洞等：立即更新以减轻攻击", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506392&idx=1&sn=e09c67a310cf301c23d15b68d4462db0": "针对 0day Windows 内核特权提升漏洞 (CVE-2024-21338) 的 PoC 漏洞发布", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500870&idx=1&sn=8c9b48f9aeb86f839bf5b3d9d6628f6e&chksm=fe79e0dec90e69c8cfad2ddb033e473edd93b42e2c16e7a7258cafd3471d7ccdcb1bb163aaaf&scene=58&subscene=0": "安全热点周报：本周新增三个在野利用漏洞，10w+设备易遭恶意攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247505502&idx=1&sn=6ef977ad6be5e7f57360cc32233db7bc&chksm=cfcab54af8bd3c5cd34b7b0505d716d33fe5a9da6cad9aecb2d0f86554607a36b1d84d4c9f92&scene=58&subscene=0": "漏洞通告 | IP-guard WebServer权限绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492460&idx=2&sn=7a18e706b8ef14ceb195095fac536313&chksm=96f7fc01a1807517aabcd21da41645883c1d567c1db54bf95d1861a9f30d556e7b740cc79bb7&scene=58&subscene=0": "【长亭科技技术支持】关于防范利用xz-utils恶意代码植入漏洞实施网络攻击的风险提示", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247497814&idx=1&sn=01aefbdd8ac5ca5f28e1dfc28eacdd3f&chksm=c063d68ff7145f999ccdc00ceef1e45e333ec2319376449ca8f7d26002fa4f6701356cd85254&scene=58&subscene=0": "G.O.S.S.I.P 安全事件 2024-04-16 PuTTY 高危漏洞 CVE-2024-31497", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550427&idx=2&sn=d9a271f5a233c557b7d7775102e3bbaa&chksm=b18db01186fa39070e59c7e32889805692b5bfe71730b44c2ee4da01a779254e2c9a553b9029&scene=58&subscene=0": "可绕过安全警告并自启Python脚本，电报修复其Windows桌面客户端中的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544084&idx=1&sn=fc9fe1827166aabecba3e94a8dae0372&chksm=fa939bd5cde412c3d1125b97ec201987e7ecc4b8c540a6b2659b17315034914647a4918478a0&scene=58&subscene=0": "通过这个0Day漏洞，黑客对Palo Alto防火墙发起后门攻击", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489062&idx=1&sn=0b22555b73684bc3311b2f7a6749a29c&chksm=fb029b7ecc7512689922e4191f8ea25be384df45ff3ff56ebdde151cb0f737efe3cc898fed00&scene=58&subscene=0": "Apache Pinot SQL注入与远程代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489062&idx=2&sn=fc63f02f9a2443b0b405d8c71651a84d&chksm=fb029b7ecc7512686a980e209ab0875348bd17e714255f8930e10ee7f8896775cefce7c2dee1&scene=58&subscene=0": "SnakeYaml 中不安全的反序列化漏洞 (CVE-2022-1471) 有感", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489062&idx=3&sn=c00124bb8440d01f50c7e146bec5f6ab&chksm=fb029b7ecc7512680a6f7cda46b559a7f9f45317777d4013d6957d97e392f85cac8ff8845edf&scene=58&subscene=0": "【已复现】IP-guard WebServer 权限绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499093&idx=1&sn=04697292fa2c44f2485abdfab464ac9e&chksm=973ace37a04d47219d012a830774941d9e79a0a087a0873b61f03d086f0ad7c34443abfd17c8&scene=58&subscene=0": "CNVD漏洞周报2024年第15期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499093&idx=2&sn=cb9d8680ae74c1014e25c8fe1f6ee87d&chksm=973ace37a04d4721fddbf4a96a5beb747f346b0f7ff1186146ea3abc1b04dd841c65465b37e3&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240408-20240414)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247574685&idx=2&sn=ba97b28ed17a690b1a43d00ae298d355&chksm=e91474a7de63fdb1997a56007d8d00b64e3fe12d2eb097e727f1c1f644f9b4507762d0914898&scene=58&subscene=0": "黑客利用 Windows SmartScreen 漏洞投放 DarkGate 恶意软件", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486395&idx=1&sn=471cae5f635e3315a0d3265f04ca13b4": "CVE-2024-3400", "https://mp.weixin.qq.com/s?__biz=MzkwNDUxNjg4MA==&mid=2247483928&idx=1&sn=d8f1ec842c0bca41d6d921450aa70aa9": "(互联网未公开)建云科技系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247501521&idx=1&sn=195dd51ba38be0e6d30d68e254078c03": "【成功复现】Palo Alto Networks PAN-OS 命令注入漏洞(CVE-2024-3400)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486514&idx=1&sn=37328ba4a1c519818900c82fe0ebf460": "Burpsuite被动探测与递归目录探测插件|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzA3MTM0NTQzNA==&mid=2455773111&idx=1&sn=5a12877d0629ccbd5b657dc68dc7f6c1": "2024年网络威胁概览（05）| 供应链安全：漏洞的连锁反应", "https://mp.weixin.qq.com/s?__biz=Mzg4NTczMTMyMQ==&mid=2247484878&idx=1&sn=41811a994524c6035018b71f94d73a9d": "CVE-2024-3400 操作系统命令注入POC来咯", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500885&idx=1&sn=7ec8e4fd113f243c830250396629a553": "【已复现】IP-guard WebServer 权限绕过漏洞(QVD-2024-14103)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyOTMxNDM3Ng==&mid=2247488470&idx=1&sn=3cf9f8d4d3fd8348e5892153d565b395": "Nacos 漏洞利用姿势大全-附批量工具", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247485361&idx=1&sn=bc81a96ea2d67cc527574ebe47a218e1": "工具 | 命令执行不回显但DNS协议出网的命令回显场景解决方案", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486198&idx=1&sn=971121723b24414642a6efd672c22ecc": "泛微e-office系统ajax.php接口存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzIxMDYxMw==&mid=2247500248&idx=1&sn=e4d95b2841b1b7b2599fd007b7c7f5d3": "RCE 遇到受限 shell 的突破", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487963&idx=3&sn=98afbca0734c907d40d49660755e7d75": "【漏洞预警】PuTTY密钥恢复漏洞（CVE-2024-31497）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487963&idx=2&sn=a5ad7ad26a5a4c2009eafb735e67ecf8": "【漏洞预警】Oracle WebLogic Server 4月多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487963&idx=1&sn=d6da1a252e7adf5f35a234ad7b275939": "【漏洞预警】kkFileView 4.2.0-4.4.0 任意文件上传导致远程执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMjk4NzExMA==&mid=2247497628&idx=1&sn=8b8adc602b7e57aca551e59dc468c7e3": "CatDDoS僵尸网络正在利用CVE-2023-46604进行传播", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247505520&idx=1&sn=297bf9a8ae5cfd00d83ebdd276cc56bc": "【已复现】Palo Alto Networks PAN-OS GlobalProtect 命令注入漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506426&idx=3&sn=7060f36d7142eed1a4bb2ae88abe3e34": "TP-Link AC1750 漏洞挖掘的文章 （2022）- Pwn2Own 2021", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506426&idx=2&sn=a70329aeda95fdbe27e7ce2be95ae9b5": "Java 应用程序远程代码执行场景", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550539&idx=3&sn=099f86598c4ae81395d8ff63cabb3ed8": "可能允许攻击者在Windows设备上执行恶意代码，Node.js披露一个命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550539&idx=1&sn=99d99a504e0b364140e6cfe6c561f0b1": "揭秘Chrome V8漏洞利用！体验攻防实战全解析", "https://mp.weixin.qq.com/s?__biz=MzUzNTkyODI0OA==&mid=2247525982&idx=1&sn=ce0b28c7a1e068fe04d635cea56d9e51": "Secx专访丨擅长入侵类漏洞挖掘，成功获得百万赏金！", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492467&idx=1&sn=f049bb5e657abe929a2e4379052605cb": "【已复现】kkFileView任意文件上传致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MTI2NDQzNg==&mid=2654551430&idx=1&sn=7738dc378f7a173e654e1e24a43efdc0": "2024-04 Oracle补丁日｜漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519303&idx=2&sn=e86decfa003bf7ebcb19d43552440c7f": "Ivanti：注意！Avalanche MDM 解决方案中存在多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500871&idx=1&sn=8b6edac403c2c8a90bdf1050ebaa2eca&chksm=fe79e0dfc90e69c91ff6729091ab42b4f9cc1537ec43a77666d33d8be8bcde7e3ed481d92f2e&scene=58&subscene=0": "Oracle 2024年4月补丁日多产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492467&idx=1&sn=f049bb5e657abe929a2e4379052605cb&chksm=96f7fc1ea1807508eb66a8ec22c730481899ad867060989cf86fc5254d9a47b2aa4c1a902225&scene=58&subscene=0": "【已复现】kkFileView任意文件上传致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519303&idx=2&sn=e86decfa003bf7ebcb19d43552440c7f&chksm=ea94bd2ddde3343b1eba25473eb57c432ce40d7ded22623619060fbc6c299c461dc0087f1d1b&scene=58&subscene=0": "Ivanti：注意！Avalanche MDM 解决方案中存在多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550539&idx=1&sn=99d99a504e0b364140e6cfe6c561f0b1&chksm=b18db18186fa389736b29f09c357e9d8c3ecbc37c6411d7664c2876cb7d8d99311810e406a4c&scene=58&subscene=0": "揭秘Chrome V8漏洞利用！体验攻防实战全解析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550539&idx=3&sn=099f86598c4ae81395d8ff63cabb3ed8&chksm=b18db18186fa3897caaf5ced92f8a04413d0742f0620475ebd65b7b3eec2dd5079b4f5d5f979&scene=58&subscene=0": "可能允许攻击者在Windows设备上执行恶意代码，Node.js披露一个命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544112&idx=4&sn=c9f423a017f17fa96e851c46e0a2fde1&chksm=fa939bf1cde412e77d910bcdbddf500cb4f6ddb6cf832a288dfb6c34b2fd6aec0a40f4b7571a&scene=58&subscene=0": "黑客利用 Windows SmartScreen 漏洞投放 DarkGate 恶意软件", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247505701&idx=1&sn=7fd765de21052272a66ad4fd5c0219d0&chksm=fa52029bcd258b8d9bc651d69ca03c55a7bbfb7c7cec85eabc6f43f1f830c39af5ae9280867e&scene=58&subscene=0": "手把手玩转路由器漏洞挖掘系列-WIFI安全威胁", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522543&idx=3&sn=f2cde13325167d9c9f7a7bdb3d381f10&chksm=ce4613fff9319ae9518125731e5d2d4d1e80b7b28987224099e363ca2b8ee1e916dfb8c0a9b9&scene=58&subscene=0": "【漏洞通告】IP-guard WebServer权限绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489068&idx=1&sn=cd0aa9faa84043366affb06ddab7fd90&chksm=fb029b74cc751262342350d998f6826e3e868d6a872da9da83c4e2b4d85aca289153cf10117b&scene=58&subscene=0": "【已复现】kkFileView任意文件上传致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484573&idx=1&sn=fd18eea55ae9cd68173825003e1a888d&chksm=c12af91cf65d700a6b02d2062a901bcf475d5f7154df4f83a58f619bab78b12d9bd74f12c8a6&scene=58&subscene=0": "【复现】WebLogic T3∕IIOP 远程代码执行漏洞（CVE-2024-21007）的风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486516&idx=1&sn=bb872e554bb4c49eb532ab3445740412": "最新Nessus2024.4.18.1版本主机漏洞扫描∕探测工具下载Windows", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247494793&idx=2&sn=199140d6419c35bee91668db9e76ee20": "Oracle使用2024年4月CPU修补了230个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487969&idx=1&sn=c38cc6e3ea4ba97c34518d352af2a73a": "【漏洞预警】Cisco IMC CLI命令注入漏洞（CVE-2024-20295）", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486235&idx=1&sn=797e70d49305df0d175e890a846fa980": "用友NC Cloud doPost接口存在任意文件上传漏洞2", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247485545&idx=1&sn=fa0a12f2c4413f4596c2d355be26b924": "宏景任意文件读取漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247507509&idx=1&sn=8938b90ac359492d60f13dc2f8767bac": "漏洞通告｜kkFileView 任意文件上传致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522593&idx=3&sn=b04edf7ab7ac7baccfa10e155a273c55": "【漏洞通告】kkFileView任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522593&idx=1&sn=2798fee47ac3def4197336ec31c7674d": "这是一篇避雷贴！OpenStack这个安全漏洞你修复了吗？", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652058288&idx=4&sn=2200667348e3e2717f60f203b4de886a": "【安全圈】Chirp智能锁存在远程漏洞，数万家庭受到影响", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511429&idx=2&sn=d030eeef1a0b08d3301f132e9b261a04": "立级修补！PuTTY曝出密钥泄露严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506491&idx=4&sn=75a8dee7a1664d7d53638d78d3e9b28a": "Google Flank 中的一个模糊操作工作流程漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506491&idx=3&sn=58405a68e570408c9d7ff6d442b851c6": "CVE-2024-3400 活动和 Upstyle 后门技术分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550630&idx=3&sn=ba36af0d63c944bed413574923662884": "AI已经能够通过阅读安全公告利用1day漏洞，成功率达87%", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511429&idx=2&sn=d030eeef1a0b08d3301f132e9b261a04&chksm=ebfaeaa5dc8d63b3790f87bcd66a91ae6bbd726555943a5f72874c5da8ec04d68c856ab22d95&scene=58&subscene=0": "立级修补！PuTTY曝出密钥泄露严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519311&idx=1&sn=d41f0d79f130254f124a7ea7404a3b12&chksm=ea94bd25dde33433a3f6fee230eea0ec03c4f96a3c2c63e2978e87fe79ae4a7a724a521d65e4&scene=58&subscene=0": "思科修复IMC 高危根提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519311&idx=2&sn=401025ac3e395a09d42e0c4010e1c700&chksm=ea94bd25dde33433f71c98400a340b5dd1b85b7b53eb90e6408a59135e76522aa1e07c595050&scene=58&subscene=0": "OpenMetadata 已知漏洞被用于在 K8s 上实施 RCE 攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550630&idx=3&sn=ba36af0d63c944bed413574923662884&chksm=b18db1ec86fa38fa4f8889129620cdf0fb1902d9315ddf2f98431feecbe5c0d6520f0fdfc134&scene=58&subscene=0": "AI已经能够通过阅读安全公告利用1day漏洞，成功率达87%", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484580&idx=1&sn=475d11873f5ce8b62f309d3d27462bef&chksm=c12af925f65d703381e9e3f67fe1b66fee810a6e02b0d6f1d3fdc8dc29d41429222db339da2f&scene=58&subscene=0": "【复现】kkFileView远程代码执行漏洞的风险通告", "https://mp.weixin.qq.com/s?__biz=MzI1MjQwMTAyOQ==&mid=2247483860&idx=1&sn=3de40d5aa7f864b87631eff73283563d&chksm=e9e5053ede928c283e4e4700898f1ce99cccc24de154423c3c99a5fc506dff334fa3a48b66fd&scene=58&subscene=0": "供应链后门检测方式以xz xz-utils为例（CVE-2024-3094）", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651129189&idx=1&sn=74a9fce770bc3e210e24b580134390e8&chksm=bd15b5b68a623ca0e5dd3425d5e0e6697665bd8f898a4e77bcf62c2a4d0f2f62abd8cfa55628&scene=58&subscene=0": "从漏洞管理向持续威胁暴露管理演进的5个关键要素", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247491427&idx=1&sn=6686133df3318e5de5e8bad34b321401&chksm=fa5ab18ecd2d3898392df0170f87de92af5a9a012c8f363e578dae292303154174041a9473de&scene=58&subscene=0": "干货 | 分享一个.NET逻辑漏洞绕过的Tips", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500912&idx=1&sn=cae3656e770ff4dfb4cf538fcd935ec0&chksm=fe79e0e8c90e69fe9858293fdbd2b018d250b8b87f5278c1a4f630dffecfd47f1bf2a076456c&scene=58&subscene=0": "【已复现】kkFileView 远程代码执行漏洞(QVD-2024-14703)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519321&idx=1&sn=598d5437db9f0b64d4fa21e3acdace51&chksm=ea94bd33dde33425370408e4f61a45bca326dc5f14f114781593555366c5c30543440154be0a&scene=58&subscene=0": "一眼已攻陷：GPT-4仅凭阅读威胁公告即可利用多数漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550737&idx=2&sn=6c80e67db097d8326fdc8389b970f672&chksm=b18db15b86fa384d35ad052622f396488b7c30e7b605a32a1b2c3cd2ad556541965d896449f3&scene=58&subscene=0": "西湖论剑2024 IOT赛后复盘及mqtt rce详解", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247543388&idx=2&sn=ed95337790ab274755b175ce203dc5ac&chksm=c1e9a60df69e2f1bf83d528411de2cd0c9f7320fa0c67e4d7b17220f4e618d0184276de689e0&scene=58&subscene=0": "英特尔和联想存在永久的安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247505733&idx=1&sn=cdb1237783f3ee41c70bb1c6ce2c5c91&chksm=fa5202fbcd258bed0c97031cec3dc565e5d125976b343520dd4db1223221dd10744167d5df26&scene=58&subscene=0": "Palo Alto Networks PAN-OS 命令注入漏洞分析（CVE-2024-3400）", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247574749&idx=1&sn=5332a7ff0cba0cf900829dabd188645a&chksm=e91474e7de63fdf1ee6770e729eff85ec897c2983e3f2fd8f15496b004c12a616c599b791fb6&scene=58&subscene=0": "多个僵尸网络利用一年前的 TP-Link 漏洞进行路由器攻击", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664211278&idx=4&sn=e4de21613365aeacdaf08d5da06b5203&chksm=8b59a1b7bc2e28a147111295854054753d06d75895d6cbb77440f03c11ec314cf7880ad79de3&scene=58&subscene=0": "CNNVD | 关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485230&idx=3&sn=e5dde220eecc73505d3580be8646957f": "CVE-2024-3721｜TBK DVR硬盘录像机命令注入漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485230&idx=2&sn=1a7e2db8d66b6d96c04e806ca38f1735": "N∕A｜kkFileView 任意文件上传导致远程代码执行漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485230&idx=1&sn=f2dc70906cf7d43bb91d8e61599b879d": "CVE-2024-21007｜WebLogic 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494328&idx=1&sn=bcd935177f51157bcbbcf674c6a18e18": "实战 | 一次敏感信息到接口fuzz-RCE", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652058441&idx=2&sn=d64040092e2636ebb14a8f9ff7cd36b3": "【安全圈】多个僵尸网络利用一年前的 TP-Link 漏洞进行路由器攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550827&idx=2&sn=465b7c6a176881671763605bfea22586": "视频资讯 | AI已能通过阅读安全公告利用1day漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550827&idx=3&sn=1f22436b6c59a3c7352c1009adeea50a": "解锁Windows内核漏洞之谜：跟随大牛讲师深入学习EXP编写方法", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550827&idx=1&sn=133060020f3fe673589f8029a401e44c": "vctf apples leak libc操作复现(高版本libc overlapping)", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247555740&idx=1&sn=48273bba598ce292691df6f64977be7c": "0day！POC管理和漏洞扫描小工具", "https://mp.weixin.qq.com/s?__biz=MzkzODU3MzA5OQ==&mid=2247483931&idx=1&sn=aad7be198de2e3f580b2670b4b6e87b7": "用友U8 Cloud hr SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492464&idx=2&sn=7f7dd968e45f49fc589e8bc981dca571": "漏洞复现 || IP-guard getdatarecord 任意文件读取", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5Mzk2OQ==&mid=2247485801&idx=1&sn=f77e0320c971208bf8d2eb1c31823cc6": "SpringKill的0day|若依后台定时任务存在SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247539246&idx=1&sn=8e46baed61a7f36e17f196b807b72ac5": "Geoserver漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247518477&idx=2&sn=b3b2003221f4077ced3efaa73f97cdb6": "英特尔等设备供应商存在永久的安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTczMTMyMQ==&mid=2247484926&idx=1&sn=27f9d63b638e89be88f8608a6b001af9": "CVE-2024-20356 是思科 CIMC 中的命令注入漏洞。", "https://mp.weixin.qq.com/s?__biz=MzkwOTQ4NDMzOQ==&mid=2247484156&idx=1&sn=1a2612169f0d111a79f766df4c95b166": "CVE-2024-24725", "https://mp.weixin.qq.com/s?__biz=MzI3NzI4OTkyNw==&mid=2247489226&idx=2&sn=3b69f5b5bbe201284d25d3ef8c99f461": "魔方网表存在文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODQ0MDc2Mg==&mid=2247484872&idx=1&sn=1832bb5729cda6692b4bfe6b4d48c50c": "JAVA代码审计-EL表达式注入漏洞(配套视频)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488485&idx=3&sn=60f8f15b2d187c21df9502d7753528e7": "漏洞预警 | MajorDoMo远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488485&idx=2&sn=18e5aa8204985883cd4b8a305dbbd8c4": "漏洞预警 | 锐捷EG易网关信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488485&idx=1&sn=b9ba30ecde31f9af6527988d851c628b": "漏洞预警 | OpenMetadata身份验证绕过和SpEL表达式注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649790936&idx=2&sn=42495f2c49a37aa1b955133b89aabf0d": "GPT-4 只需阅读威胁通报即可利用大多数漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247491438&idx=2&sn=66faa537ccef7a6265f6567806651d49": ".NET 复现某CMS系统未公开SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550827&idx=1&sn=133060020f3fe673589f8029a401e44c&chksm=b18db2a186fa3bb7a8425c0dc5fe92703091b50086abb0d2de14d516d30679d573f2294e8838&scene=58&subscene=0": "vctf apples leak libc操作复现(高版本libc overlapping)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550827&idx=2&sn=465b7c6a176881671763605bfea22586&chksm=b18db2a186fa3bb738a7e710813b059c7015b0a998cf4cdc8e27059241bbb4980eb574b52f03&scene=58&subscene=0": "视频资讯 | AI已能通过阅读安全公告利用1day漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550827&idx=3&sn=1f22436b6c59a3c7352c1009adeea50a&chksm=b18db2a186fa3bb752989642c38c9b01f79feebad1b3de24848b27e96faf47e63eae72d8e324&scene=58&subscene=0": "解锁Windows内核漏洞之谜：跟随大牛讲师深入学习EXP编写方法", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494328&idx=1&sn=bcd935177f51157bcbbcf674c6a18e18&chksm=e8a5e0dbdfd269cd407b133af55c5621d5d24a02367a1c2eb86a5cebbfcd266980a5b9fbd10f&scene=58&subscene=0": "实战 | 一次敏感信息到接口fuzz-RCE", "https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247491264&idx=1&sn=fc4b37ed596976b24a5293420ca52ee7": "漏洞修复时如何确保业务不受影响？| 总第242周", "https://mp.weixin.qq.com/s?__biz=Mzg2MzkwNDU1Mw==&mid=2247484578&idx=1&sn=b9ed7fc5e61b68de8cb58bc5a92d295e": "任意用户登录漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486294&idx=2&sn=b90cb034d55c1f6a53708dc904f5c00c": "时空智友企业流程化管控系统formservice存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486294&idx=1&sn=170fb1b72f2e33077f59120ee9ed73af": "用友U8-Cloud api∕hr接口存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjQwOTc4MQ==&mid=2247489254&idx=1&sn=f3ce2efbb735f74ed34aa0008f9e0256": "从漏洞管理向持续威胁暴露管理演进的5个关键要素", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247621935&idx=4&sn=4ebf7b87a138c01190b9c9836ee4a866": "GPT-4化身黑客搞破坏，成功率87%！OpenAI要求保密提示词，网友复现ing", "https://mp.weixin.qq.com/s?__biz=MzkzMjQzNjg1Nw==&mid=2247484792&idx=1&sn=23729250b7d04fee5ab227abade943dc": "kkfileview远程代码执行漏洞复现--保姆级复现", "https://mp.weixin.qq.com/s?__biz=MzkzODU3MzA5OQ==&mid=2247483935&idx=1&sn=e9c963cc561866b7c7cf0e136337d5cb": "从0到1 学会究极RCE", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652058517&idx=4&sn=1303a6dbc3664c88e254b4b87fb01967": "【安全圈】kkFileView文件上传代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4OTkwMDc1Mg==&mid=2247484675&idx=1&sn=1148cd865c27c6e1cd8c14466f53cb6e": "时空智友企业流程化管控系统 formservice SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247494118&idx=2&sn=2d29aa656e39c52dcc25066e737f7339": "Secx专访丨擅长入侵类漏洞挖掘，成功获得百万赏金！", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550849&idx=2&sn=608b9698cbb5be73c7b8cc3f595013a3": "揭秘Chrome V8漏洞利用！体验攻防实战全解析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550849&idx=1&sn=b8850e0b29af4bdd94cce4572aac98a6": "以栈的视角来认识格式化字符串漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5ODQzNTE3NA==&mid=2247485408&idx=1&sn=60b91c13dadfe6388c862dc27fc1fc4b": "geoserver漏洞解析以及测试方法", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247491450&idx=2&sn=6813ceca0fcb468af794aeb7419bbb75&chksm=fa5ab197cd2d38815883dc57b0e60a29acd076adc6a86db1cf94eec7ab47b41a447f635ecbba&scene=58&subscene=0": "干货 | 分享一个.NET逻辑漏洞绕过的Tips", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550849&idx=2&sn=608b9698cbb5be73c7b8cc3f595013a3&chksm=b18db2cb86fa3bdd12091303c401e38b61f67aa3c5cb77f92f7743a108e8f4723cd475260620&scene=58&subscene=0": "揭秘Chrome V8漏洞利用！体验攻防实战全解析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519338&idx=1&sn=ec0b92257a640cd98dd5d59c00746548&chksm=ea94bd00dde33416a366cb12677dd49947a98c7871d8fdd4a46fd91ade629a7273a99af8f64c&scene=58&subscene=0": "CrushFTP 提醒用户立即修复已遭利用的 0day 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519338&idx=2&sn=c65a447c216d55afbb9483c48c34f453&chksm=ea94bd00dde334161df74aa1e15e2b728e866bddfe2a1e21bfb5e44dfcf65213634e19fe8ad7&scene=58&subscene=0": "Apache 项目中存在依赖混淆漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544211&idx=4&sn=97fc8c299063cc0b44a5ac66de97f70c&chksm=fa939b52cde41244a6c2e1c43cc3723d289a2f67a817d2a1ad8717df42bd10f1a725c62bb9a9&scene=58&subscene=0": "从漏洞管理向持续威胁暴露管理演进的5个关键要素", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247494714&idx=1&sn=5142c17db8c6a2903a7fa2d3d8ecb51e&chksm=96d8e7e0a1af6ef6c5aa74425cc16e306002f4070d242a575a9cafe82bb81a347168ca862705&scene=58&subscene=0": "斗象“世界五百强”客户案例巡礼之「漏洞运营管理」", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652058680&idx=4&sn=62f5ed929c2a7d7b026ec0c82ebc3108&chksm=f36e1878c419916e4b7154cc97b398f3f143c291bb8932a3e835c645d48ef93ec0f25c72289d&scene=58&subscene=0": "【安全圈】立即更新！思科发布 IMC 高危漏洞 PoC", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522623&idx=1&sn=3151bca16b924b789c6f894de55ff22a&chksm=ce46122ff9319b395eaa28a152d600bb08bb74c129f1b0946a2d65d9bb59751e043a5d5aaed0&scene=58&subscene=0": "【漏洞通告】PuTTY密钥泄露漏洞CVE-2024-31497", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494367&idx=1&sn=7dbac7db68bf0dd8d66ef40f381411ce&chksm=e8a5e0bcdfd269aa6d8d642f814b52b4566a59e3b297d3f62000be301c66d56c37af890bbcf5&scene=58&subscene=0": "一个$1600的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499103&idx=1&sn=cddc0f5e7d4b8beeddb99da413eb0fa6&chksm=973ace3da04d472bdc8b273b76608a1b7cc750f74c29e53b6b31f8d43bbbcb7b3f875ad21d10&scene=58&subscene=0": "CNVD漏洞周报2024年第16期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499103&idx=2&sn=440b2537425f32892b82ba7a5ada72ad&chksm=973ace3da04d472b1cb374b0dda3da0d88ba9a07f8df5fa9d86ec4855f8b659365dda5a3e1c3&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240415-20240421)", "https://mp.weixin.qq.com/s?__biz=Mzg5NDg4MzYzNQ==&mid=2247486445&idx=1&sn=e2b2e389f8a5d91f9acfa0e90b82e57b": "漏洞利用-PoC-in-GitHub+msf简单利用", "https://mp.weixin.qq.com/s?__biz=MzkwMTUzNDgxOA==&mid=2247484406&idx=1&sn=c419e40a587c938212a57b157b232875": "漏洞速递 | Microsoft微软最新RCE漏洞（附EXP）", "https://mp.weixin.qq.com/s?__biz=Mzg5NTkxNzg4MA==&mid=2247488794&idx=1&sn=72a28179c13cd108a0d48db70f503b91": "新瓜速递--微软最新RCE?!", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486606&idx=1&sn=d551b0ad928684620835639f4ea1e092": "Venom流量转发-自动化捡洞∕打点必备神器|漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247491393&idx=1&sn=f934692a268910ecf9dd00d6f383d0a3": "RFD漏洞原理浅析", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494400&idx=1&sn=dcf9e942b499c3b49f49f3cfa1162ce0": "任意文件读取rce记录", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247511010&idx=1&sn=b5f1c0c3e57d76924bfb4a33e082ad4b": "我与逻辑漏洞的爱恨情仇", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511484&idx=1&sn=c133b3c2669ed1967b52e137ee822d36": "八大主流中文手机输入法曝出泄密漏洞，仅华为幸免", "https://mp.weixin.qq.com/s?__biz=MzAwNDUzNDExMQ==&mid=2247484380&idx=1&sn=d71220b5ddc425e99941c674e4ef54c8": "CIA组织MikroTik软路由攻击场景复现及后门加解密剖析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652058881&idx=2&sn=06c71b1369aebba0ff5f1eaf0426bce9": "【安全圈】警报：思科 ASA 防火墙平台遭遇“ArcaneDoor”0day攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652058881&idx=3&sn=0a21f1de27fc8dcacedba41d5e1d4383": "【安全圈】GitHub 被曝安全漏洞，可被黑客利用伪装成“微软”分发恶意软件", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500949&idx=1&sn=0884b6bc0d1ab6b385ac694edc308959": "【已复现】CrushFTP 服务器端模板注入漏洞(CVE-2024-4040)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2ODY3MzcyMA==&mid=2247505914&idx=1&sn=b771d6003b53b8482a93112d782648b8": "漏洞通缉令——FSRC诚邀各位师傅挑战！", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488012&idx=1&sn=56f7a1361227ba816195055867ef1ed1": "【漏洞预警】Primeton EOS Platform jmx 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488012&idx=2&sn=6a23a0180abe86194e031e4ccfada139": "【漏洞预警】CrushFTP 认证绕过模板注入漏洞（CVE-2024-4040）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519358&idx=2&sn=398290f1e1cbf32a9f72ff26e3d708c4": "速修复Progress Flowmon中的这个CVSS满分漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519358&idx=1&sn=080e82a553f5a1d52ba96fc6f20d14c3": "国家黑客组织利用思科两个0day攻击政府网络", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786498&idx=1&sn=58d3061354592a77d6438635891189fb&chksm=8893b8edbfe431fb236143e04680e9f5b2c83362b1f0a147ac21b608db8ed458bd5194933099&scene=58&subscene=0": "多款中文输入法存在重大安全漏洞，暴露了超过10亿用户的击键行为", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500949&idx=1&sn=0884b6bc0d1ab6b385ac694edc308959&chksm=fe79e00dc90e691b2a23da9cc5733683ee02964bc21cb1b301bc50c52b6088962d9e57e26dea&scene=58&subscene=0": "【已复现】CrushFTP 服务器端模板注入漏洞(CVE-2024-4040)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519358&idx=1&sn=080e82a553f5a1d52ba96fc6f20d14c3&chksm=ea94bd14dde33402ba398352628a6ab2995cc8e1c950313b8a1b9fb5752d5c3d7a2f00098df9&scene=58&subscene=0": "国家黑客组织利用思科两个0day攻击政府网络", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519358&idx=2&sn=398290f1e1cbf32a9f72ff26e3d708c4&chksm=ea94bd14dde334025bccac4bf83cd4b90113971ba22d26184385ccc5d530c62314ca6d06d349&scene=58&subscene=0": "速修复Progress Flowmon中的这个CVSS满分漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511484&idx=1&sn=c133b3c2669ed1967b52e137ee822d36&chksm=ebfaea9cdc8d638a0da1ae2791263c2d28ffadf705b4d9197c980bd6ae130e0c5f5750d53d45&scene=58&subscene=0": "八大主流中文手机输入法曝出泄密漏洞，仅华为幸免", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484587&idx=1&sn=09f983ed61a819c47982eddccc4481f6&chksm=c12af92af65d703c37d174a0f2a47f140f34d819fef8aaa3868b61b83b9e739f11a151792fad&scene=58&subscene=0": "【复现】禅道项目管理系统身份认证绕过漏洞的风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494400&idx=1&sn=dcf9e942b499c3b49f49f3cfa1162ce0&chksm=e8a5e163dfd268757140ea87d8daafaccfce0b3b5a7916c043aa1ac756cb14922116417eb8cd&scene=58&subscene=0": "任意文件读取rce记录", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522648&idx=1&sn=60ed9ffc7caf52796e7d1c416df4f39e&chksm=ce461248f9319b5e2f94fb3551673d86536c49edea3f6396606c0e645457f5c7d84d4d5a9149&scene=58&subscene=0": "【漏洞通告】Primeton EOS Platform远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522648&idx=2&sn=3c5663596e9de910f32940f685606d1e&chksm=ce461248f9319b5e778463ac649df8866ab0835fd621402bb403a5b6557339965fc14a68c917&scene=58&subscene=0": "【漏洞通告】OpenMetadata身份验证绕过漏洞CVE-2024-28255", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489081&idx=2&sn=7604b0fea0e059c91c4d0c566dec7d9d&chksm=fb029b61cc751277b9c36f945b2baa1e4de91221f697c81aa7f96105a70c1c418c68513a75c0&scene=58&subscene=0": "Primeton EOS Platform jmx反序列化致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247488967&idx=1&sn=d7a5d788e5dc5e8c07321d79d5520a50": "【更新版】Tomcat漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247620851&idx=1&sn=cfaf998fb7fc13f45fca4021d0a889a6": "在看 | 周报：国产输入法曝重大漏洞；支付1.5亿赎金仍被泄露数据", "https://mp.weixin.qq.com/s?__biz=MzkyMzQ5NjYwMw==&mid=2247484473&idx=1&sn=0dfd34ec9dbbf7e81ed7012a1ac0e75e": "安全情报，X达OA down.php 存在信息泄露漏洞！！！", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247497162&idx=1&sn=1ae364238106a40e59a5cc95ea525a9b": "RSAC 2024创新沙盒｜VulnCheck：漏洞优先级挑战的解决方案", "https://mp.weixin.qq.com/s?__biz=MzkxMDMwNDE2OQ==&mid=2247492107&idx=1&sn=8d4b7a6b65e9f406656da90a236368a9": "Swagger API Exploit 1.1", "https://mp.weixin.qq.com/s?__biz=Mzk0NjE0NDc5OQ==&mid=2247523984&idx=2&sn=df826a8a0231d26dcfa5455493f222b0": "CVE-2022-42920 BCEL 任意文件写漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5OTY2NjUxMw==&mid=2247511779&idx=2&sn=cd5ba32df8e7f60e013451e0032e1394": "常见未授权访问漏洞总结及验证方式", "https://mp.weixin.qq.com/s?__biz=MzU2NjgzMDM3Mg==&mid=2247491109&idx=1&sn=bd36d5611de33f571cff265161dbdf4c": "过W的漏洞被质疑是造假", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247608947&idx=1&sn=fe9bbe5567c7e2d35beddc6fa2fdbff9": "高JDK的JNDI绕过之复现某比赛0解题", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247539466&idx=2&sn=a69535ef83245eeaa4e9aaa0201be86c": "输入法重大漏洞曝光，近10亿用户受影响", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247499797&idx=1&sn=1d29cb3af3354861ebca4938c4655d46": "实战|记一次女朋友学校漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzUyMTA0MjQ4NA==&mid=2247549590&idx=2&sn=1498064403c18467dfc487a4dc2f2976": "渗透测试 | 一次实战远程命令执行漏洞并提权", "https://mp.weixin.qq.com/s?__biz=MzUyMTA0MjQ4NA==&mid=2247549590&idx=1&sn=f1ac9cda7ee149962417b76ff5e704a3": "漏洞扫描系统 -- 临兵", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651272975&idx=4&sn=195f2d44b08819da4e94acdddf4c5ee0": "MetaHub：一款针对漏洞管理的自动化安全上下文信息扩充与影响评估工具", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651272975&idx=2&sn=0486e941c5e906cdf83f2dd545fb067c": "FreeBuf 周报 | 乌克兰关基设施被破坏；GPT-4 会自己发起漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzkyOTQ1MjQwMw==&mid=2247484092&idx=1&sn=1b440d7ae798211edfb7727ac73d77d5": "MM-Wiki 文档管理器未授权访问漏洞（附POC）", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486527&idx=1&sn=20e2bf2b5b5b899cb1e5ea1a137c8232": "用友NC grouptemplet 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664711469&idx=1&sn=78ea93de526742d9cad64ecc551ed076": "03-Git信息泄露及其漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247485923&idx=1&sn=ae289c6bef92d840d22592e5817f7dc3": "Primeton EOS Platform jmx反序列化远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488039&idx=1&sn=26445b72831245cfb3c7517d39cec06a": "【漏洞预警】runc <1.2.0-rc.1 systemd属性注入漏洞CVE-2024-3154", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494419&idx=1&sn=bacef83776b6d2e3d7db06d2f2c85a47": "一个25,000的RCE", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247516098&idx=2&sn=b86e254ce704472f84b75aa1331f8bd6": "漏洞挖掘 | 记某SRC邀请处逻辑越权到组织管理员漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247516098&idx=1&sn=30f5f57a3cc44a2e6da4e4f11e8f0a26": "Tomcat综合漏洞利用 | 工具", "https://mp.weixin.qq.com/s?__biz=MzI1MzQwNjEzNA==&mid=2247484069&idx=1&sn=8b9062933b916b4c11d273039380e257": "app漏洞产生知识", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651273295&idx=4&sn=a83425dd81079f41869f5756dca7f966": "firebase：一款功能强大的Firebase数据库安全漏洞与错误配置检测工具", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511500&idx=2&sn=9b437667c52632f6eb92981ac85d8232": "CISA将在今年底前全面部署应用自动化漏洞预警系统", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458552129&idx=3&sn=40e99a1392a775cfc35321843f0d2ac8": "WordPress Automatic插件漏洞允许完全接管网站，已观察到数百万次攻击尝试", "https://mp.weixin.qq.com/s?__biz=MzU0MjEwNTM5Ng==&mid=2247517937&idx=1&sn=503f13ae1a50b21f12b6c79ce658c250": "GPT- 4 会自己发起漏洞攻击，成功率高达87%", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511500&idx=2&sn=9b437667c52632f6eb92981ac85d8232&chksm=ebfaeaecdc8d63fa4de8d3d469d01cb536694d5e920349b246ee78a665b4136d7581359e93ba&scene=58&subscene=0": "CISA将在今年底前全面部署应用自动化漏洞预警系统", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458552129&idx=3&sn=40e99a1392a775cfc35321843f0d2ac8&chksm=b18db7cb86fa3edd425e400a903b3530e083b1f71e554a278ed3401737edab294b2123fd07e5&scene=58&subscene=0": "WordPress Automatic插件漏洞允许完全接管网站，已观察到数百万次攻击尝试", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494419&idx=1&sn=bacef83776b6d2e3d7db06d2f2c85a47&chksm=e8a5e170dfd268666a69a53dcbf3b1f9f86e8d1dab0cabe366e6ce9047486b252fe7eb37d96a&scene=58&subscene=0": "一个25,000的RCE", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486665&idx=1&sn=e460bf2924ee1bf023a1acbbaba35765": "一款未授权∕敏感信息∕敏感关键词∕接口JS文件指纹特征识别插件|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488056&idx=1&sn=ad2ac51d4bf9dfd29b0eb949ea34632e": "【漏洞预警】onethink安全漏洞(CVE-2024-33443)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488056&idx=2&sn=123c07d21046d759ce40d251aa6bb565": "【漏洞预警】 јizhiсｍѕ v.2.５.4跨站脚本漏洞(CVE-2024-33338)", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247497887&idx=1&sn=929eab0791c4fcfa122c6b241bbd06a8": "G.O.S.S.I.P 资源分享 2024-04-30 EXPLOIT.EDUCATION", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247507176&idx=1&sn=82a4ecfa728880cbcbbe5e1caf3e0814": "研究人员发布了 Windows 内核 EoP 漏洞的 PoC 漏洞 （CVE-2024-26218）", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY3OTc5Mw==&mid=2247483898&idx=1&sn=60653ce49a1c3b8f92563de4803cdaeb": "【0day】KingPortal运行系统信息泄露漏洞【未公开|附poc】", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458553405&idx=3&sn=72480427ed37e5f604e9e1d14b11483d": "内容更新！人气讲师带你揭秘Chrome V8漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519400&idx=1&sn=66cec4a7fd3d72c14f92738147c6d83a&chksm=ea94bdc2dde334d4b90886120c2d35848bb06c0cb45b93d2e709e6ceeacef8ea6b680ebbac16&scene=58&subscene=0": "R语言中的新漏洞可导致项目易受供应链攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519400&idx=2&sn=e79b7a5da52b70449d7f2d6c99c8cab2&chksm=ea94bdc2dde334d48c4fc1fc698133c71550c937353091502e020643ff271de8656b39d98e84&scene=58&subscene=0": "开源的Judge0 中存在多个沙箱逃逸漏洞，可导致系统遭完全接管", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458553405&idx=3&sn=72480427ed37e5f604e9e1d14b11483d&chksm=b18dbcb786fa35a1dcf7a5beb107fc8d6562c85720cf0c5831083f6242434851e171e169eb65&scene=58&subscene=0": "内容更新！人气讲师带你揭秘Chrome V8漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544353&idx=4&sn=c4345a7d4befb2ee37dd1dd4f44a2722&chksm=fa9398e0cde411f60ca41b0d019e560a98f379bdea923b94060a4e567e17cc7d0b4c886547bf&scene=58&subscene=0": "利用微软office七年漏洞！乌克兰遭网络攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247497887&idx=1&sn=929eab0791c4fcfa122c6b241bbd06a8&chksm=c063d646f7145f50e50835bd039eca1bc7b88852f2199ad9e2ec1568e14f1860b307d8516c32&scene=58&subscene=0": "G.O.S.S.I.P 资源分享 2024-04-30 EXPLOIT.EDUCATION", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499116&idx=1&sn=7712ecc8501214a220cbe3a414b195f3&chksm=973ace0ea04d47183d9e3b923e703c5603fb7235f063e031c8afee7d84fc4d1670cfe8da6a3f&scene=58&subscene=0": "CNVD漏洞周报2024年第17期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499116&idx=2&sn=c62c1d526bc88ef678a6a02dab932701&chksm=973ace0ea04d4718591b1a1c7a19915efb8ec337eed24d64ce79e45ef6bca57a334de5bcca5d&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240422-20240428)", "https://mp.weixin.qq.com/s?__biz=Mzg4NTczMTMyMQ==&mid=2247485240&idx=1&sn=2206b11124ce084e0938cbbcf01224fd": "Hackerone 附件功能存在IDOR越权漏洞15000$", "https://mp.weixin.qq.com/s?__biz=Mzg4NTczMTMyMQ==&mid=2247485231&idx=1&sn=517ffdc05d2b556167d8fad310ae9026": "使用扫描工具在同一网站的不同页面上发现了 4 个 csrf 漏洞！！！", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494478&idx=1&sn=d0def8633adc8488f9bdf152bf302300": "漏洞挖掘之某厂商OAuth2.0认证缺陷", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485251&idx=3&sn=5f20e1d3e3fb8091bb9f2e6a2c8df503": "N∕A｜Jeecg commonController 文件上传漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485251&idx=2&sn=a5e3bb1742e53371e2a85d0f35945065": "CVE-2024-4040｜CrushFTP 认证绕过模板注入漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485251&idx=1&sn=7598223ae3b4b591ace83cc8e1843488": "N∕A｜禅道项目管理系统身份认证绕过漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDExMg==&mid=2247484461&idx=1&sn=4fa4201d386b0785aadb0c260f04e018": "【漏洞复现】ZenTao（禅道）身份认证绕过漏洞（QVD-2024-15263）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652059142&idx=4&sn=7deb8017aa70156f687fc27a99e3e4a8": "【安全圈】5000 多台 CrushFTP 服务器被零日漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492516&idx=1&sn=bd9f7ce4f679a8baf4680bd256f21592": "漏洞复现 || SpringBlade dict-biz∕list接口SQL注入", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247507224&idx=4&sn=29632a807ce108a4b3ecf2bc27c3a828": "（CVE-2024-25648）福昕阅读器 ComboBox 小部件格式事件 UAF", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247507224&idx=3&sn=5f59951bac47803d0685d21da887fff2": "（CVE-2024-31852）福昕阅读器条形码小部件 Calculate 事件", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247507224&idx=1&sn=0e781cdf33f9a934aa769e0ff0287f27": "PPPwn - PlayStation 4 至 FW 11.00 的内核远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247609092&idx=1&sn=cbc54c842151fd9e433cb2eac28e4d3d": "任意文件读取&下载漏洞的全面解析及利用", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247490566&idx=1&sn=1f943829de3bdbcc76baae593ba14f44": "禅道最新身份认证绕过漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649791016&idx=1&sn=4c9d428152f4b13675b3f28c3976ce59": "R 编程语言中的漏洞可能助长供应链攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5NDg4MzYzNQ==&mid=2247486460&idx=1&sn=adb23478ece61b88e28c3153477d40f6": "WAF绕过-漏洞利用篇-sql注入+文件上传-过狗", "https://mp.weixin.qq.com/s?__biz=Mzg4MzA4NTM0OA==&mid=2247490219&idx=1&sn=03a4c2f8c18ca5cf605c4ced06cee801": "如何利用关键 Ray 框架漏洞来入侵全球 AI 机器？", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488647&idx=2&sn=ef303fa031df94814966ded54e8b11aa": "漏洞预警 | JeecgBoot任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488647&idx=1&sn=3fe7d11b4b95e4a807093abebf9507c3": "漏洞预警 | 若依druid未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494478&idx=1&sn=d0def8633adc8488f9bdf152bf302300&chksm=e8a5e12ddfd2683b95290ae15a01c87a1355cff3f9e993df80c1d87fb96d965810f0df0bfb43&scene=58&subscene=0": "漏洞挖掘之某厂商OAuth2.0认证缺陷", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458553429&idx=1&sn=d5674757eedccb83f6e0063db0a5205c&chksm=b18dbcdf86fa35c90d21a8db9c292c73f5adad26a9111751b5c4d2c718ea88c46623724de5d2&scene=58&subscene=0": "CVE漏洞复现：Maglev中VisitFindNonDefaultConstructorOrConstruct的类型混淆", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458553429&idx=2&sn=a7a32731738b87ae9193ca4b54e2fe47&chksm=b18dbcdf86fa35c9cad5b804f83951af76e5b353adc24246dcb18ede995eaff0187ed2b1e138&scene=58&subscene=0": "从零开始，掌握CVE漏洞复现技能", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494486&idx=1&sn=10286369df3533012ecaba68da80c2a5&chksm=e8a5e135dfd268230250cef0bdd8aeb8a04ff00b10cc17f1aeabbc3c1ac52a589348d249d5b7&scene=58&subscene=0": "记一次从登录框到前台rce", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247505492&idx=1&sn=19ea061613352f2f11f107abbc78c206": "Hackerone 被黑，看我如何窃取你的POC！", "https://mp.weixin.qq.com/s?__biz=Mzg2MTc1MjY5OQ==&mid=2247485480&idx=1&sn=6c1d2713a7478949c1ae65bdc3f31ee8": "任意用户注册漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494493&idx=1&sn=813f79d75e12afa42d4a4437f808868b": "src漏洞挖掘浅谈", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486678&idx=1&sn=802f8e5854b78a5e21540668e68c7c0f": "AJ-Report数据大屏系统存在命令执行漏洞（未公开）|漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247507316&idx=3&sn=085d57978dadf0e659d3372ae838e4c1": "CVE-2024-32114：Apache ActiveMQ 中暴露的高严重性漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247507316&idx=1&sn=de5d500b3990a9c5071b5f2e1a7377c4": "Okta 验证 Windows 远程代码执行 – CVE-2024-0980", "https://mp.weixin.qq.com/s?__biz=MzkzNjE5NjQ4Mw==&mid=2247538070&idx=1&sn=8e37d5ad8a52a70c17f24e3d2c12ede3": "漏洞利用3倍·数据泄露翻番｜Verizon DBIR 2024报告·附下载", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651274447&idx=2&sn=f74d9503a7e83bd641ccb00a5fca5cd8": "一次收获颇丰的Google漏洞挖掘旅程", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494493&idx=1&sn=813f79d75e12afa42d4a4437f808868b&chksm=e8a5e13edfd268285404dfccc3c441edd2f0beccb9de83dad8fd6954f75861ce6ef8f3b14c58&scene=58&subscene=0": "src漏洞挖掘浅谈", "https://mp.weixin.qq.com/s?__biz=MzU2MDE2MjU1Mw==&mid=2247485444&idx=1&sn=81ef7eae995934888e3689f48f18fe68": "物联网安全篇——Sapido RB-1732路由器命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDExMg==&mid=2247484490&idx=1&sn=a50dabe0455f0b8e89575b0a8947fb1d": "【漏洞复现】kkFileView任意文件上传漏洞（QVD-2024-14703）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458553431&idx=2&sn=6a811b6c6ec0fa04b5f83e533744bf50": "0day 2期-更新第7章：Windows服务漏洞原理讲解", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247556517&idx=1&sn=a032e629aceef7ba09122b144fdda41f": "一次h1漏洞提交记录", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247484471&idx=1&sn=146c2c6d1ea2195b33157d5d7083afee": "AJ-Report代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247487077&idx=2&sn=6808649102931b354834638b4a3cf92c": "[渗透利器]全能工具=信息收集->漏洞扫描->EXP调用", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247507334&idx=1&sn=e359b6c2c192e14a2f2421a045809885": "GitLab 中的 Devfile 文件写入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247507334&idx=2&sn=ccf6b10e9283d97d7d0456161b3bf894": "CVE-2024-2887：Google Chrome 中的 Pwn2own 获胜错误", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649791049&idx=2&sn=0a0db9de2b8f990c67c23c412aaef4d9": "电子邮件安全漏洞是朝鲜社会工程攻击的最新途径", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649791049&idx=1&sn=5287d1bcd697cad32aadb808f89c805e": "福布斯：安全研究人员警告20个安全漏洞“对小米用户构成威胁”", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650949651&idx=1&sn=0fbd82ad214476d4035faa5b741ef032": "任意用户登录漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247486084&idx=1&sn=d675d97743f3286e815172ef0b1067f0": "H1：价值4860$的 CVE漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458553431&idx=2&sn=6a811b6c6ec0fa04b5f83e533744bf50&chksm=b18dbcdd86fa35cb1e6cf0a558fa3fe2d8545edeb2484e52704f66d4cfb69d1793215cdcebc1&scene=58&subscene=0": "0day 2期-更新第7章：Windows服务漏洞原理讲解", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486547&idx=1&sn=ccd54ba2467078cc1a4809c4ab91aac1": "CVE-2024-1212", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486722&idx=1&sn=d29c47e65347c78f9e192eb62be63936": "最新Linux_Nessus2024.5.6版本主机漏洞扫描∕探测工具下载Linux∕Windows版", "https://mp.weixin.qq.com/s?__biz=MzU2MDQ0NzkyMw==&mid=2247484811&idx=1&sn=910d8f71952c18404a78433339ba3733": "有手就会？记一次绕过防重放的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494526&idx=1&sn=f3f30bd91943d1e1da9a8919f97657ec": "记一次绕过防重放的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486420&idx=2&sn=6a461c6f7a17fdcdb37ce5181a0437a8": "图创图书馆集群管理系统 updOpuserPw接口存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486420&idx=3&sn=5bf37bdb307fc21378ce1a5ac9b85a17": "图创图书馆集群管理系统SSOServlet接口存在未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486420&idx=1&sn=554681943252463531f2ab502b1e6f50": "用友时空KSOA linksframe∕linkadd.jsp接口存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MTg0Nzk5Nw==&mid=2247484638&idx=1&sn=5d239f3910b71388d8d5ffc3df48ddad": "打靶训练——Netlogon域提权（CVE-2020-1472）", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247485461&idx=1&sn=9aed3cd124004258059098ef4e49edd7": "【护网必问】Vcenter后渗透漏洞应用！", "https://mp.weixin.qq.com/s?__biz=Mzk0NzYyMTAwNw==&mid=2247484485&idx=1&sn=cd825856d1681e05b283928989e0b228": "Ncast高清智能录播系统存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651274677&idx=4&sn=dfa221ca3eeb561e06ca6189bd85fc2a": "如何使用resource-counter统计跨Amazon区域的不同类型资源数量", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651274677&idx=3&sn=df364817b521461e5677e5bb2e15e1cb": "3.5倍！组织修补CISA KEV列表中的漏洞比其他漏洞要快", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651274677&idx=1&sn=690841047c44e4d2379e1332d44d9b12": "微软披露严重安全漏洞，受影响App安装量超40亿", "https://mp.weixin.qq.com/s?__biz=Mzg4MzgwMDE2Mw==&mid=2247487251&idx=1&sn=d52b7484e72ac9d9799b3e7db02385b7": "SploitScan帮你发现最新漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291019&idx=1&sn=844bd8f052c142a9826d16661deb1327": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500982&idx=1&sn=01f21b986415a5a6d16103d6efda5b2e&chksm=fe79e02ec90e6938aa007712dd3277dd23f48b046149ac9b8a0a5ad975ca5288215b981f9c85&scene=58&subscene=0": "安全热点周报：本周新增两个在野利用漏洞，成功利用可导致供应链攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519411&idx=1&sn=71d7f62af378983948cbcfd164e479e7&chksm=ea94bdd9dde334cf0ea19613ca4a0e169aa3a40e91e48a6e0bf7ddcd1baf7dd1713e112b9cb6&scene=58&subscene=0": "CISA督促软件维护人员修复路径遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519411&idx=2&sn=ce0a25d6937eabdc487272441bd3019d&chksm=ea94bdd9dde334cfe771b6fd011febb7616a978a4699a95ed386884efc11435c75b8f9cdf67a&scene=58&subscene=0": "谷歌安卓应用的RCE漏洞最高赏金45万美元", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458553456&idx=2&sn=7d11fa5255fca67b5d6f56c2b689f563&chksm=b18dbcfa86fa35ec4d968125dd5ce2e108dd0a34d72ce5a6a951be8636bec182b2027a1de2ad&scene=58&subscene=0": "微软披露Android应用中普遍存在的严重漏洞，受影响应用安装量超40亿次", "https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653040540&idx=1&sn=6231eb3dc149209e66a046a13e718e03&chksm=7e57522a4920db3c1a02a461bd7a533b1f1001eb4bdd1723e540b85abb6898b301657ab23fd6&scene=58&subscene=0": "微软发现严重漏洞，涉超 40 亿下载安卓应用；iPhone 16 电池壳改用不锈钢；苹果「AI iPad」或明日曝光｜极客早知道", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544389&idx=3&sn=734a0b2e81822614531a01b0fb820078&chksm=fa939884cde41192c274f3323d6c14a905dbf4cd6019689437052b2a4792497ae4844d97918b&scene=58&subscene=0": "从最初的漏洞利用到最终的部署勒索软件 历时29天", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247484963&idx=1&sn=6f5011a3c2f64b08e0878f25251b9718": "多个 CVE-2024 CData 路径遍历", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247513695&idx=1&sn=166e9fec37b5ff4213a46aa076165666": "0Day CVE-2023-26615：某路由器密码重置漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247494997&idx=2&sn=8f6fe2823fc0bdbb4d72a0a6109d3ff5": "CISA、FBI要求消除路径遍历漏洞影响", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486731&idx=1&sn=669d6212ead6dd39cb424edeba338777": "JScanner一款隐藏Url接口探测∕目录递归访问请求工具|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247485929&idx=1&sn=25af8b8d5cebd5561c79eaba1cbdefe4": "大华智慧园区综合管理平台 pay 远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486445&idx=1&sn=8bdb62ea27278bf299374c0b49268a95": "畅捷通TPlus keyEdit.aspx接口存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486445&idx=2&sn=7b14db1be77a421682eb286ddfa642cb": "开源数据大屏AJ-Report存在远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247507397&idx=2&sn=d84561efd669d3aec3a3c0e269af4dca": "LLM 渗透测试：利用代理集成进行 RCE", "https://mp.weixin.qq.com/s?__biz=MzkyMzI3OTY4Mg==&mid=2247486669&idx=1&sn=a57e8cce05df72bd31863f468f2338cb": "漏洞挖掘 | 使用HaE与CaA组合挖掘高危漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651274864&idx=1&sn=b0f80e985d92616655b1b96236218190": "Tinyproxy曝出严重漏洞，影响全球52000台主机", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247538336&idx=1&sn=4fd61611539de09b487f35f0ea9b819e": "微软发现普遍存在于Android应用中的“Dirty Stream”安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMDE5OTQyNQ==&mid=2247485344&idx=1&sn=9e513e2aab080c39541f8585299cd6df": "实战学习|保姆式实战等保测评Windows镜像(邀请码+全流程+未公开漏洞)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652059393&idx=4&sn=f6952adeaf1b5050f2c2afdfd8ab153c": "【安全圈】Tinyproxy 曝出严重漏洞，影响全球52000 台主机", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652059393&idx=3&sn=5643ee0278b70287a5d11765458f2825": "【安全圈】开源编程语言 R 曝光存在 8.8 分代码执行漏洞 CVE-2024-27322，可引发供应链攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652059393&idx=2&sn=3248937a939063fb6ee6d17c4068af0f": "【安全圈】微软披露严重安全漏洞，受影响App安装量超40亿", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519419&idx=1&sn=3bb85759ff76414bd555bb55aa1b3c16&chksm=ea94bdd1dde334c73add716fd4c17f5d7be8d21d23464d3e187d43446f34d83e52d9482ed5cd&scene=58&subscene=0": "Citrix悄悄修复相似度极高但严重性不及CitrixBleed的高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5OTMxNjkxMA==&mid=2247485306&idx=1&sn=4bc5681431940711f2ae68ffab6eae90": "真0day分享！用ZoomEye发现通用组件0day漏洞的新姿势！", "https://mp.weixin.qq.com/s?__biz=MzkxNjQyMjcwMw==&mid=2247486218&idx=1&sn=9c11537a6eac646ddb8687dbbae74d9c": "实战 | 记一次无聊闲逛到某设备RCE", "https://mp.weixin.qq.com/s?__biz=MzkxNjQyMjcwMw==&mid=2247486218&idx=2&sn=bbd63198babd387181c6b48af9234e13": "第91篇：shiro反序列化漏洞绕waf防护的方法总结（上篇）", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247494423&idx=1&sn=e1d0e5b340ceffad6dad5ea1e1e9ad78": "QVD-2024-15263：禅道身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3MTk4Mjc3NA==&mid=2247485418&idx=2&sn=b25f9f9e864f7ad321bc1f5d8e92ab0f": "【安全资讯】攻击者利用 TunnelVision 漏洞暴露用户数据", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247622411&idx=4&sn=6d5464101c4cea669873bb83c5363c09": "Tinyproxy曝出严重漏洞，影响全球52000台主机", "https://mp.weixin.qq.com/s?__biz=MzkwODUxMDUwMg==&mid=2247483793&idx=1&sn=42c68bd3acf0c13723704af42add1c96": "【0day】瑞友天翼应用虚拟化系统", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489311&idx=1&sn=7309b4a75390573b14fbd0fcbcf147c3": "【风险通告】瑞友天翼应用虚拟化系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1MzQwNjEzNA==&mid=2247484103&idx=1&sn=41517b5852785ffe7c08516c0d069bb0": "模糊测试：强制漏洞挖掘wfuzz", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652059452&idx=1&sn=32d0ba2ab948ab3cc96dc4597617c32a": "【安全圈】CNNVD关于Apache ActiveMQ安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458553736&idx=1&sn=fa9d04982a90b1c0cf6c375efce65314&chksm=b18dbd0286fa3414de804dbd2315099238c1ec027489de8a51a7a6dd663b3a239d6768593497&scene=58&subscene=0": "CVE-2020-9802：Incorrect CSE for ArithNegate 导致的越界访问", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519427&idx=1&sn=2eb6613f503e93d2de22af9bc452b3a1&chksm=ea94bda9dde334bffc72ca6f29b9a557a1fd54b79b9a4601e0ef668734b8a1deffd1207e4642&scene=58&subscene=0": "超5万台 Tinyproxy 服务器易受严重RCE漏洞影响", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519427&idx=2&sn=952e60354283e3d7df02f25ba52d112d&chksm=ea94bda9dde334bfdb20afde43208f87f3735f6e17a2969217271e4641c5537ab0fd6b0689be&scene=58&subscene=0": "CISA的KEV清单加快漏洞修复速度了吗？", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664212629&idx=3&sn=241cd3d5ab30432e0d5d0cac9d887350&chksm=8b59aa6cbc2e237ae319acd99af69a4a40ae2309839d0ae9716dc6f491f4dc5fa6be5fea9c02&scene=58&subscene=0": "CNNVD | 关于Apache ActiveMQ安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247543592&idx=2&sn=36a0c4efffe2c6e20d2b1b7a5b2b15b1&chksm=c1e9a779f69e2e6f3aadb5f0ab593fb5828ec25c048956d6aa81ef7751a99c1383490e8cd643&scene=58&subscene=0": "Tinyproxy曝出严重漏洞，影响全球52000台主机", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247575073&idx=1&sn=99130659e83a8e7a352f1ab41fa9d9e2&chksm=e914761bde63ff0d646b126541260a1f9342b157ac148542e582b398ff796b6871eaf4c1cbbd&scene=58&subscene=0": "SoumniBot 恶意软件利用 Android 漏洞来逃避检测", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522724&idx=1&sn=c227ddd1744e3813b7c1604c6b8b5566&chksm=ce4612b4f9319ba2252a6f2be255873103af6b78836b3bce6387f32a0db537b076d5aeace664&scene=58&subscene=0": "【漏洞通告】Apache ActiveMQ API 未授权访问漏洞CVE-2024-32114", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522724&idx=3&sn=325273d2a839fbd1989632bcdefa65ee&chksm=ce4612b4f9319ba22e6de7010f65de934afb9ee7e8d4fdd7aaeb9b7009d82e4197eb6fb8a38f&scene=58&subscene=0": "【漏洞通告】Util-linux wall 权限提升漏洞CVE-2024-28085", "https://mp.weixin.qq.com/s?__biz=MzU5OTMxNjkxMA==&mid=2247485324&idx=1&sn=7f3bd0f204d239814dd6e00a70aac425": "从历史漏洞学习漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247492936&idx=1&sn=86a3393664adaa6ee8347f59f46b5c1a": "1day Symfony 敏感信息泄露", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247513758&idx=1&sn=92bdaf63916fcc102b3f0429638aaf93": "XSS跨站脚本攻击漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3MTk4Mjc3NA==&mid=2247485513&idx=3&sn=f086b5c2f569c58651d591083da26085": "【漏洞通告】Google Chrome 零日漏洞在野外被利用（CVE-2024-4671）", "https://mp.weixin.qq.com/s?__biz=MzI1NTM4ODIxMw==&mid=2247500721&idx=1&sn=348ba0d44c244322b444ee0794ad081e": "CVE-2024-2389命令执行漏洞 (附EXP)", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489118&idx=2&sn=f667ad2c09238c82aea8a96035c8ff12": "【原创0day】瑞友天翼应用虚拟化系统SQL注入致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489118&idx=1&sn=c3b78ff737cf38a66ad8c66f3e0fa00b": "【已复现】瑞友天翼应用虚拟化系统SQL注入致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247515142&idx=1&sn=90252716ad6cb665cf5d4ada7e47ec4d": "记某积分商城任意金额支付漏洞分析利用及思考", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494588&idx=1&sn=43b54088a0ce0112655f46d16171c9ac": "从 SQL 注入到远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485706&idx=1&sn=b6bb60b6a5409232512e2de38dde73f3": "Tomcat综合漏洞利用工具 - AttackTomcat", "https://mp.weixin.qq.com/s?__biz=MzkzOTY1MzcyOQ==&mid=2247487633&idx=1&sn=01e46300373a1789d7d874a7b011cefa": "一款Spring图形化综合漏洞的利用工具", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247621361&idx=2&sn=03d57b92df3ba49e6102419878585220": "超值999！ZoomEye终身会员开售！使用ZoomEye快速追踪热点漏洞！", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652059573&idx=3&sn=56e787c3d6fc67263cf244b5f5bca640": "【安全圈】TunnelVision 漏洞曝光，几乎可监听所有VPN", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651129537&idx=2&sn=6a376cd91b7e8ef56786b850f959275a&chksm=bd15b6128a623f040da004a68693b333f39d6010b04580cd39975fa14fdbb7bc5707ba687b10&scene=58&subscene=0": "16项网络安全国家标准获批发布；CISA启动新的漏洞管理增强计划 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501009&idx=1&sn=d4ce01ea254aeccbb07cfcce19a1bcd3&chksm=fe79e049c90e695f10ffd55009e5d3021f075e5e8f3b29711b247ba2f9db1c76465db24145b7&scene=58&subscene=0": "【在野利用】Google Chrome Visuals 释放后重用漏洞(CVE-2024-4671)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519453&idx=1&sn=b108366a369534bc2bc55f5a5089d587&chksm=ea94bdb7dde334a1ed46fce3773a11cab5d7d420a9b40d13263be90a5ffc622be738b323c0ec&scene=58&subscene=0": "Citrix 提醒管理员手动缓解 PuTTY SSH 客户端漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247543629&idx=4&sn=d7b030e328d1e574324cfdfbe79a8694&chksm=c1e9a71cf69e2e0a8b2a2ee37d5dd3bf4f51a4674499946b21cec261a0a652bf07c3add397ad&scene=58&subscene=0": "TunnelVision漏洞曝光，几乎可监听所有VPN", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544511&idx=4&sn=e534c9301c354ce82b2432df461e824e&chksm=fa93987ecde411680c23b31d24a508894409f38608846abdcfb79d0a9b9d4b934b4f6df451c0&scene=58&subscene=0": "多个三星移动设备漏洞可让攻击者执行任意代码", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522769&idx=1&sn=a3fca586ab64a8cfbdbae6affd5b813b&chksm=ce4612c1f9319bd71bde9c021e9b7f509491f1a7e560d3a8cfbd811d4d96a994642a591c55a5&scene=58&subscene=0": "【漏洞通告】瑞友天翼应用虚拟化系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494588&idx=1&sn=43b54088a0ce0112655f46d16171c9ac&chksm=e8a5e1dfdfd268c93a3c02e40e96995b11c3a8ffec197f2fea71e86907c4eac5be50f3911364&scene=58&subscene=0": "从 SQL 注入到远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247513769&idx=1&sn=271421f7ed767bbe16e6217db9b4062a": "Weblogic-CVE-2023-21839 漏洞解析", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485796&idx=5&sn=283e87d36face5b763dbf1d04b5bbf7b": "科荣AIO ReadFile 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485796&idx=6&sn=abbc2933c62759c267d513474c197018": "畅捷通T+ KeyInfoList.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485796&idx=3&sn=bc0069d693793af5ce9985219e0fa59f": "金蝶Apusic应用服务器 createDataSource JNDI注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485796&idx=4&sn=37b5c787d107bf19351efe9a9fd7a5d3": "金蝶Apusic应用服务器 未授权目录遍历漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485796&idx=1&sn=e99efe813386e524c1cb81acf1138610": "浙大恩特客户资源管理系统 i0004_openFileByStream.jsp 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485796&idx=2&sn=4fef35879a755a07fb22dde96f67be2c": "浙大恩特客户资源管理系统 RegulatePriceAction SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247497988&idx=1&sn=a8798125f655ace74199ad628bb2edd8": "G.O.S.S.I.P 阅读推荐 2024-05-11 可能是今年最令人拍案叫绝的exploit——俄罗斯方块黑客帝国！", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488135&idx=2&sn=7aa9b69b13b656f1a970d3dd1455cee7": "【漏洞情报】金和-c6 FileDownLoad存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488135&idx=1&sn=b027427e95c2c340ca64c741e197ba0a": "【漏洞预警】Next.js < 14.1.1 Server Actions SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1NzgyMzA0OA==&mid=2247490236&idx=1&sn=4f8050afc569c7baaba5b0e299bf1418": "蓝凌OA漏洞-POC合集", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489319&idx=1&sn=63bdc3f9dff15cf69d00ef439e1fe547": "【已复现】瑞友天翼应用虚拟化系统存在session反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519462&idx=1&sn=1f7824cfd17d3489bc4ba1b37c5d974c": "谷歌修复今年第五个 Chrome 0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MDg2NDI4OA==&mid=2247489879&idx=1&sn=f1261a183c0355b9fd530d31aa2bd391": "某通用设备的二进制文件RCE逆向分析", "https://mp.weixin.qq.com/s?__biz=Mzg4OTkwMDc1Mg==&mid=2247484751&idx=1&sn=2e45fb3943d7f52f54cf1b9b0175cdfd": "泛微OA E-Cology ln.FileDownload 文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247515166&idx=1&sn=a502600d479bc31cf54fcdd88b1b5d98": "CVE-2024-22262(CVE-2024-22259绕过)浅析", "https://mp.weixin.qq.com/s?__biz=Mzk0NjE0NDc5OQ==&mid=2247524148&idx=1&sn=568967d88db3a2d7f8e898b97fd71f13": "记一次梦游渗透从jmx到rce", "https://mp.weixin.qq.com/s?__biz=Mzk0NjE0NDc5OQ==&mid=2247524148&idx=2&sn=392d923652e1e298725e6d0328d4e1f4": "实战｜对一个随身WIFI设备的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzOTE1ODczMg==&mid=2247499063&idx=3&sn=7917fee83895985056f762dcfb71b3a3": "超值999！ZoomEye终身会员开售！使用ZoomEye快速追踪热点漏洞！", "https://mp.weixin.qq.com/s?__biz=MzIzOTE1ODczMg==&mid=2247499063&idx=1&sn=2ab6cc91c1d912af75bf0cc10e49ba07": "xray社区平台功能再升级 单个PoC最高奖励提升40%", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247505762&idx=1&sn=42f58b5109a63fd7a453c861fa31434c": "【更新】H3C-CAS虚拟化管理系统文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247575139&idx=1&sn=1258e61c9be3e488950d83d1c04e53bb": "50000多个小型代理服务器容易受到关键的RCE缺陷的影响", "https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657165474&idx=1&sn=076b28cf8913b7e1034e1de3f7b0c25a&chksm=f1d4d247c6a35b513c4e2adf94aad5b75dd2a68728a3cbc56c1164be0895d8dbbaa3d4a222d5&scene=58&subscene=0": "记一次梦游渗透从jmx到rce", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519462&idx=1&sn=1f7824cfd17d3489bc4ba1b37c5d974c&chksm=ea94bd8cdde3349a09b38fe57ced58ecc0d6aa9cd8270a10e3ef522071c83b0a7ae0fc2e14a6&scene=58&subscene=0": "谷歌修复今年第五个 Chrome 0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTE1ODczMg==&mid=2247499063&idx=1&sn=2ab6cc91c1d912af75bf0cc10e49ba07&chksm=e92ce994de5b6082f88af797d97cc6d337a7431d0783d107c8e7d4793041329bc73a1bc05898&scene=58&subscene=0": "xray社区平台功能再升级 单个PoC最高奖励提升40%", "https://mp.weixin.qq.com/s?__biz=MzIzOTE1ODczMg==&mid=2247499063&idx=3&sn=7917fee83895985056f762dcfb71b3a3&chksm=e92ce994de5b608262b00b61f6e1443ea752999ca1d90b3870309bd3dd725c3973a0c76866d0&scene=58&subscene=0": "超值999！ZoomEye终身会员开售！使用ZoomEye快速追踪热点漏洞！", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247497988&idx=1&sn=a8798125f655ace74199ad628bb2edd8&chksm=c063d7ddf7145ecb5d15a3ac5c98471ab146da8109123e9639b55bc53bbc3ff601a5f0addab6&scene=58&subscene=0": "G.O.S.S.I.P 阅读推荐 2024-05-11 可能是今年最令人拍案叫绝的exploit——俄罗斯方块黑客帝国！", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247505762&idx=1&sn=42f58b5109a63fd7a453c861fa31434c&chksm=cfcab476f8bd3d6044348c18134db67022bf0366b36d1d4233ba4527640accbbb41c7c911e6f&scene=58&subscene=0": "【更新】H3C-CAS虚拟化管理系统文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247575139&idx=1&sn=1258e61c9be3e488950d83d1c04e53bb&chksm=e9147659de63ff4fac3dcaa431185e92e4aa756e6644bf3743610fcee01efc7b8c7ecb9f0aa9&scene=58&subscene=0": "50000多个小型代理服务器容易受到关键的RCE缺陷的影响", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501058&idx=1&sn=284130df847441aac4703f9086a92925&chksm=fe79e19ac90e688cf700b05d49d0b60cde072c2ca7a925428107e7a223203465adc5a2c1a6a3&scene=58&subscene=0": "微软2024年5月补丁日多个产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519497&idx=2&sn=1e1dfda946c84c3456230b9252dc53b1&chksm=ea94bc63dde335758128401d8248286936aecf6b12e9914935af867fdbb2ff0e4494f3b4d849&scene=58&subscene=0": "微软五月补丁星期二值得关注的3个0day及其它", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458554906&idx=3&sn=073f55f0fa8ed213e61474f7aa8d4af7&chksm=b18da29086fa2b866f2e5110b5925c724a76e9a03084c6e247513e92f54bdecde82c781786c5&scene=58&subscene=0": "全新课表6.18开班！系统0day安全-二进制漏洞攻防（第3期）", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247543723&idx=2&sn=5043ee6a15382491ce491b2b77bbd771&chksm=c1e9a7faf69e2eec63a27f7bde86de9197a15b953fe940b0160c254d3e0f41ba076300818edc&scene=58&subscene=0": "微软Outlook通杀0Day漏洞：黑客开价1,700,000美元", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247543723&idx=4&sn=9fd005fa06ab5964879de8e9fb76894e&chksm=c1e9a7faf69e2eecb8829ce4421a269b479ab846b0401231d0bee983699efb944dd06c7b51ea&scene=58&subscene=0": "新漏洞太多让美国NVD面临崩溃，还可能引发供应链风", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247518499&idx=1&sn=0e5a8e2a7353f28847308546ddc6f92e&chksm=eb70571cdc07de0a6e9ca3264120754d93e98ee5c8ecb20e1a40ad20d8455d5c71577cb90a0b&scene=58&subscene=0": "2024-05微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494619&idx=1&sn=fc96fa0e3667e78735394f8b01a1e3bf&chksm=e8a5e1b8dfd268aefe538dee8805b57648a8b1f59dc3e98d7b1eab324d102f1b13d94be6117d&scene=58&subscene=0": "漏洞挖掘|一次在线商城漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247571343&idx=1&sn=9458873eacc7ea5ef4633b1e5facf44b&chksm=9f8d4787a8face91d38f6978318eb62ba3ef251b9385afc2090130528a00864aaa3ad51835a1&scene=58&subscene=0": "360安全大模型实战笔记：核弹级漏洞，拿捏！", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786531&idx=1&sn=17cd4398213abe5f7559a5558455a15d&chksm=8893b8ccbfe431dab7682f7ae3a934776d8fe01b08014abe2693ba7712110de6f58ed36c9e93&scene=58&subscene=0": "攻击者正在利用Foxit PDF Reader漏洞传播恶意软件", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519506&idx=1&sn=6a998af125698c3afd195f3d1eb96981&chksm=ea94bc78dde3356e58d441d5787adcdb360f70675c569aa3b7e5d7d549868bea76393657c2bd&scene=58&subscene=0": "谷歌紧急修复周内第3个已遭利用的0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519506&idx=2&sn=15447e0bd14688896d0aac2ef6d85333&chksm=ea94bc78dde3356e2862d49586a76b04a8277c3e27ee0cbad93ba1906c685c4e45d848bd682a&scene=58&subscene=0": "VMware 修复Workstation 和 Fusion 产品中的多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501088&idx=1&sn=bd5d274af61c330863468cbc87a5d01c&chksm=fe79e1b8c90e68aec8783ee34e0b9b2cdcf03daf75962bbc9bb98fb4073519182c0f9472cb9b&scene=58&subscene=0": "【谷歌一周内修复第三个在野利用】Google Chrome V8类型混淆漏洞(CVE-2024-4947)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664213290&idx=4&sn=3a4861967fdbecc25b0446058b99e015&chksm=8b59a9d3bc2e20c56946b01350f1b166ce06e37b42c856588430d1ddea92238a11f16fddd5e1&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522825&idx=1&sn=a821c15b75bc485ff843a08e76279ed9&chksm=ce461119f931980f43f45f600643fb5a42896d5a42f38aab91085f749777e7cd04c25ef44bfb&scene=58&subscene=0": "【漏洞通告】Cacti 远程代码执行漏洞CVE-2024-25641", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494630&idx=1&sn=799ed673248d52ad892b0ed82583849e&chksm=e8a5e185dfd26893a73ba9a0bbaf26c0be86911bd6b498c722d211ac11c851ee56e7d4f4adfd&scene=58&subscene=0": "由LFI所导致的RCE", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485311&idx=1&sn=b1a169294dbb58cd7913d36bbf9f3f0c": "CVE-2024-27130｜QNAP 存在未经身份验证的RCE漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485311&idx=2&sn=d2580a8757c0244766bffb2343073fdd": "CVE-2024-25641｜Cacti 存在多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485311&idx=3&sn=9d17a645ca0614b8ff340d218594f7df": "CVE-2024-4367｜Mozilla PDF.js代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5Nzc4Njg1NA==&mid=2247489093&idx=1&sn=e58cfb2145a9148efeee31357c00074d": "关于调用安卓FileProvider组件的移动应用程序存在高危漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247485714&idx=1&sn=1eade64ad4cecfb688072efdfc682538": "详细的漏洞报告是怎样的", "https://mp.weixin.qq.com/s?__biz=Mzg5MDk3MTgxOQ==&mid=2247487652&idx=1&sn=4bd4a475be8d8c48ddd856ac6e6fb2c3": "Weblogic T3协议反序列化漏洞分析（上）", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492543&idx=1&sn=bc5f9c5ac74d2b5948c63be9b2529959": "漏洞复现 || Palo Alto Networks PAN-OS GlobalProtect 命令注入", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652060059&idx=4&sn=3a1f98131b57d56bfc927626be63cff2": "【安全圈】新的 Wi-Fi 漏洞通过降级攻击进行网络窃听", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458555047&idx=3&sn=c876d8c856a673d4454d41dccd839959": "内容更新：沙箱及绕过-人气讲师带你揭秘Chrome V8漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzU2ODY0ODk2Nw==&mid=2247488627&idx=1&sn=d10d14a786e8e9b13d2772dc143b31c2": "【漏洞复现】瑞友天翼应用虚拟化系统appsave SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247537889&idx=2&sn=c4d8540fd890d3b3d3270e36e581048a": "小米汽车安全漏洞奖励计划正式启动！", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519516&idx=2&sn=6d57caff04aeb615ccc68ff28c0abe53": "WiFi 标准中存在漏洞 可导致 SSID 混淆攻击", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511649&idx=1&sn=f42994e31909f6f64eda52c9fd7cd4f0": "神漏洞！GE医疗超声设备感染勒索软件，设备停摆、数据遭篡改", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511649&idx=2&sn=4bed154b2b1a7dff303ab027ea8e3508": "多模态大语言模型的致命漏洞：语音攻击", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488196&idx=1&sn=7077c19b9859878e7494aae39eaebd6c": "【漏洞预警】FE业务协作平台存在文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488196&idx=2&sn=b39e9c8c1dab4b5e686d919ec7111f53": "【漏洞预警】SiAdmin多个SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488196&idx=3&sn=fb71c16f0b888e2f750c786531c4f045": "【漏洞预警】mlflow信息泄露漏洞(CVE-2024-3848)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488196&idx=4&sn=70ea68575cc0a708fd9b90879c0e35a9": "【漏洞预警】wandb信息泄露漏洞(CVE-2024-4642)", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651129719&idx=2&sn=7c30a82986188efb2e5ebbf7494c99f8&chksm=bd15b7a48a623eb2f3b74f382bab96536f7c1d28d72a57f7f17c2411b4649f289e80431eb0d4&scene=58&subscene=0": "价值60亿元的艺术品拍卖活动因网络攻击延期；CNNVD通报微软多个安全漏洞 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786537&idx=1&sn=63dcb4fb901d9668b26229d60339ffe7&chksm=8893b8c6bfe431d0567cb9cfc74dd4c1fb43fad0c7a82bbc7a195d659da71dc1c2270b03f5f5&scene=58&subscene=0": "严重的 Git 漏洞！CVE-2024-32002允许在“克隆”操作期间远程执行代码", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519516&idx=2&sn=6d57caff04aeb615ccc68ff28c0abe53&chksm=ea94bc76dde335604dc38d645f26ef3ab524b4bb70d5ef51c4a24063d38c1328c63da2f712ca&scene=58&subscene=0": "WiFi 标准中存在漏洞 可导致 SSID 混淆攻击", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511649&idx=1&sn=f42994e31909f6f64eda52c9fd7cd4f0&chksm=ebfae941dc8d605733df8bd7be83ad9faa60cfc08420f55c382cb315dd0c742d07dc537affdc&scene=58&subscene=0": "神漏洞！GE医疗超声设备感染勒索软件，设备停摆、数据遭篡改", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511649&idx=2&sn=4bed154b2b1a7dff303ab027ea8e3508&chksm=ebfae941dc8d60574155f9a5c4763bb62803bc035f1328bcf9329ca4b24e0f74b6343ddd8d48&scene=58&subscene=0": "多模态大语言模型的致命漏洞：语音攻击", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247490752&idx=1&sn=0e2c2a4945e6facba3d7321e20eb4c12&chksm=fe2ee34bc9596a5deaa8727826485143e8d5ba6b48148d2a7b18e33201e19902afb28605dfe1&scene=58&subscene=0": "浙江大学 | V-SZZ:自动识别受CVE漏洞影响的版本范围", "https://mp.weixin.qq.com/s?__biz=MzI2NzI2OTExNA==&mid=2247516740&idx=1&sn=e37fcf4f30d47e6705dea50865ddd401&chksm=ea83a4d1ddf42dc7e96975fb22c501e469952d28c81b6b478501fdc66a8a004822818065cf1b&scene=58&subscene=0": "小米汽车安全漏洞奖励计划正式启动！", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247506029&idx=1&sn=16f520e893fd0c69a6985f56789aa123&chksm=fa520dd3cd2584c574e7dcef09cc3f3d6ee37fcecf553ba4391018ca7990c8c09a0ed821818d&scene=58&subscene=0": "微软2024年5月补丁日重点漏洞安全预警", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247512952&idx=1&sn=463151cc889dd04ca746431c6089302e": "Thinkphp框架的图形化漏洞扫描工具 -- Tp_Attack_GUI（5月16日更新）", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247622853&idx=4&sn=eefc4a2753d59ea00e90419a404c98b0": "多模态大语言模型的致命漏洞：语音攻击", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247622853&idx=5&sn=92bc47346d9c1691cebf65aa8a58cbc9": "神漏洞！GE医疗超声设备感染勒索软件，设备停摆、数据遭篡改", "https://mp.weixin.qq.com/s?__biz=MjM5MTg0Nzk5Nw==&mid=2247484681&idx=1&sn=94d380dea727d9f9dba7ef7b652e03e5": "JDBC反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247490297&idx=1&sn=5d1c8c21766ac289f22b5a24f43399e9": "漏洞复现 | 英飞达医学影像存档与通信系统WebJobUpload任意文件上传漏洞【附poc】", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247508006&idx=1&sn=5584261aaf8e1605593178a0cddbf9a1": "从未经身份验证的存储型 XSS 到 RCE", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247508006&idx=2&sn=a42afa7000ffa7bb5960b487d4af7dfa": "XSS 到 RCE", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247508006&idx=3&sn=2d4e35674646702d66c61547270f81fa": "CVE-2024-4040 SSTI 和 LFI PoC - 漏洞利用", "https://mp.weixin.qq.com/s?__biz=Mzk0NTI2ODE1Nw==&mid=2247486099&idx=1&sn=6218afc12f10458ed243b9e9a8823ae6": "某一次PDF-XSS漏洞挖掘(安服系列)", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485613&idx=1&sn=86e0f78b5d99b3f0dcd6ab3b044369f0": "【高危漏洞】网锐捷网络技术有限公司EG3210存在命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485613&idx=2&sn=40bfc9b15c2c43e172a21b5f81531e65": "【热点播报】利用以太坊安全漏洞，麻省理工两学生12秒窃取1.8亿元", "https://mp.weixin.qq.com/s?__biz=Mzg4NTczMTMyMQ==&mid=2247485939&idx=1&sn=ee0408334d317780ab5dbd2544ca453a": "游戏漏洞挖掘端游页游手游逆向课程免费领取", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247490762&idx=1&sn=2bd4529131b49953489229fbc501bba2": "用来扫描和验证MS17-010、MS09-050、MS08-067漏洞的工具", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650593067&idx=2&sn=8edb88907ae019eaa993c7ba23bbce78": "福昕PDF阅读器漏洞被用于传播恶意软件", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650593067&idx=3&sn=aa890484e3add5b37af89e9b0eb52964": "记一次某双一流大学漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650950854&idx=1&sn=454347767b4f7ae08b1db0249efc6a91": "自动化漏洞挖掘工具，集合Nuclei + Subfinder + Gau + Paramspider + httpx", "https://mp.weixin.qq.com/s?__biz=MzkwOTQ4NDMzOQ==&mid=2247484369&idx=1&sn=318373b9e25bd03baa09482bb05f4a58": "CVE-2024-34220", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488857&idx=1&sn=e3a07dc5a5bb85a22f3c86b17a3b9f95": "漏洞预警 | User Meta敏感信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488857&idx=2&sn=7c1145a49e4c39c877a77a2337c280ef": "漏洞预警 | Ruvar OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488857&idx=3&sn=3c5413787c62d739a5dda35f0e5a8d2c": "漏洞预警 | 联软安全数据交换系统任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTgxNTc5Mg==&mid=2247485768&idx=1&sn=1fe6d3c9f18c1d915fa9f615d0cc8f91": "【万字总结】 NMAP 从 原理 到 全参数实践在 到 开发漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247491526&idx=1&sn=0dee52f07a71b248c4d256400b6478ab": "D-Link NAS 未授权RCE", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY3OTc5Mw==&mid=2247484166&idx=1&sn=9ba9f53791b7d18fc195a096859dcacc": "【漏洞复现】cockpit系统assetsmanager∕upload接口存在文件上传漏洞 | 附poc", "https://mp.weixin.qq.com/s?__biz=MzU3ODc2NTg1OA==&mid=2247489845&idx=1&sn=e6293defce4d9ca341ed77fbffdae178": "CVE-2023-35001 - nf_tables - LPE - Pwn2Own Vancouver 2023", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652060079&idx=1&sn=c866158eb9b623045fa98d41c3c4fee9": "【安全圈】利用以太坊安全漏洞，麻省理工两学生12秒窃取1.8亿元", "https://mp.weixin.qq.com/s?__biz=Mzg4MDA2NjExMA==&mid=2247489706&idx=1&sn=2a672e11f228997aaeee1330c06a2d8e": "思科企业级路由器0day漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458555133&idx=1&sn=c8e9b1dd3cf1f1a0f12cfac184dca0e1": "CVE-2024-0517分析心得", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458555133&idx=2&sn=9866c17c47c3cc3d3d22ebca693d7a98": "今晚7点直播 | 漏洞挖掘实战", "https://mp.weixin.qq.com/s?__biz=MzkyMjYxMDM4MA==&mid=2247484021&idx=1&sn=81684080386042b9f3b0b1764d8e71c8": "【0day漏洞复现】北京慧飒科技有限责任公司WEB VIDEO PLATFORM存在未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODkzNjU4NA==&mid=2247485354&idx=1&sn=9a7f4a0e3c7069f212b3afa3cbfc141f": "我看刑，运营商高危在野业务漏洞被利用到网络诈骗", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247508034&idx=1&sn=096e87696fa35d4e06734e396ba2e1b1": "使用 NAM 在思科安全客户端中执行代码 - CVE-2024-20391", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485616&idx=1&sn=0f7f040d6cf77ecd6aef4b470f2c1710": "【高危漏洞】亿赛通数据泄露防护(DLP)系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247540081&idx=1&sn=592e1351143f9e75e05171c1e6e08264": "漏洞挖掘 | 记一次绕过宝塔的的文件上传", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486474&idx=1&sn=9f0b09ec20e8bcf7ae338e474deb1544": "Gradio component_server存在任意文件读取漏洞复现(CVE-2024-1561)CVE-2024-1561", "https://mp.weixin.qq.com/s?__biz=Mzg4MzkwNzI1OQ==&mid=2247484562&idx=1&sn=073228de808545d08198d01ee41cca23": "JAVA安全-Shiro-550反序列化漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247511540&idx=1&sn=04f703a49de44a535247915bfce9edc8": "记某src通过越权拿下高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501103&idx=1&sn=77d7d1baeb92d88001aa13413a6399c0": "【已复现】Git 远程代码执行漏洞(CVE-2024-32002)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501103&idx=2&sn=6f464020cf0c9164f6c949b9195856ae": "安全热点周报：谷歌、微软等厂商发布紧急补丁，防范本周新增的七个在野利用漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489354&idx=1&sn=a60c31365e1598fffd221539de126193": "【已复现】Git存在远程代码执行漏洞（CVE-2024-32002）", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484332&idx=1&sn=1ec0efe6206597ee81da5b4f55a60a78": "英飞达医学影像存档与通信系统 WebJobUpload 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291075&idx=1&sn=dcf985acfaca02b50e96cc850196b424": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522888&idx=1&sn=b3b2db09fddfe74676a41938cdeeaad9": "【漏洞通告】Zabbix服务器sql注入漏洞CVE-2024-22120", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522888&idx=2&sn=4803f975b796fc5f44e8fcde69f81708": "【漏洞通告】Sonatype Nexus Repository3 任意文件下载漏洞CVE-2024-4956", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247505849&idx=1&sn=07cd46ceeb91cc3424e86b76d68b8fc8&chksm=cfcab4adf8bd3dbb738fbc88132b03504d494daddcd595e529a092c48f72160139c4c7fa162d&scene=58&subscene=0": "漏洞通告 | Git 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519528&idx=1&sn=9ed9dbdab8ecbf2108523342f0297d50&chksm=ea94bc42dde33554871d71670361198896ce01f979786a3843579e0bc30cf8ca128d3449e155&scene=58&subscene=0": "英特尔披露 AI 模型压缩软件中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519528&idx=2&sn=39c67314f7459aa04cbef3604ef663a9&chksm=ea94bc42dde3355434c8a075d0b4feaf246269872775783789967ae81284e468716a6872fdaf&scene=58&subscene=0": "CISA提醒修复严重的Chrome 和 D-Link漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247575276&idx=2&sn=ac8ce9e389bb4bb5577616b531678977&chksm=e91476d6de63ffc06e379e6887c737a76613cd78cc18b8af70b58a324e5424fd4de4b6424184&scene=58&subscene=0": "安全动态回顾 | 16项网络安全国家标准获批发布 D-Link EXO AX4800路由器中的RCE零日漏洞PoC漏洞发布", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522888&idx=1&sn=b3b2db09fddfe74676a41938cdeeaad9&chksm=ce461158f931984e5238ba17a676c9298b604b5340597d66855eae2b982b101422862be5e16b&scene=58&subscene=0": "【漏洞通告】Zabbix服务器sql注入漏洞CVE-2024-22120", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522888&idx=2&sn=4803f975b796fc5f44e8fcde69f81708&chksm=ce461158f931984e5fb14aa015bd0b55e2eef4b55972da9ee5c2d1478ee37815b927595953bd&scene=58&subscene=0": "【漏洞通告】Sonatype Nexus Repository3 任意文件下载漏洞CVE-2024-4956", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544675&idx=2&sn=66fffdd309b21fa4612f8cf540a1ac76&chksm=fa9399a2cde410b4ceadf13f49667f5e6621d22f7d7307b0bb0c60dc3d57673e8940f1a322b4&scene=58&subscene=0": "福昕PDF阅读器漏洞被用于传播恶意软件", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544675&idx=3&sn=74cba19a7ce682cf0281a120af83357b&chksm=fa9399a2cde410b4da5c45617c519ff2f339afbb30ee6a8a79767281e9168cfbf53d8a139d1e&scene=58&subscene=0": "脆弱的Tesla汽车！第三方软件的漏洞可致汽车被黑客操控", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494779&idx=1&sn=2e2ce5f5fd03312e6616c914c60cdfe0&chksm=fd74dcb2ca0355a4dd09d00fe78a15b2184fd485500f6d4fd485534120e273549a0198a2f45a&scene=58&subscene=0": "CNVD漏洞周报2024年第20期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494779&idx=2&sn=42f3570f814e7482cc91ae4ca66372a0&chksm=fd74dcb2ca0355a48b11a697176946c633dee8667b8324e6f9ba748c6611c0a9cebedbc0cc74&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240513-20240519)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519537&idx=2&sn=0c7319379db8bf6e0addcbc46f4c0464&chksm=ea94bc5bdde3354d4d5855a7d7501ff99d30e1b597fa0d4fa901144babfdc7514f07566727d3&scene=58&subscene=0": "Fluent Bit 严重漏洞影响所有主流云提供商", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511673&idx=2&sn=55a60c687661c5440d845f8b927ec1c7&chksm=ebfae959dc8d604f26d1d65bb006f22e14dbdaada588fbda38fb1e47e5dac4ecc31e92128053&scene=58&subscene=0": "Fluent Bit高危漏洞威胁全球云计算大厂", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247543913&idx=6&sn=be3e19241f277dd61581cb69f2416aa0&chksm=c1e9a038f69e292ed1d8ee27ddd5e54fdaaf2b5c0ab107aff79334b3416dda2c1f7cd8b3c979&scene=58&subscene=0": "2024 年第一季度漏洞和漏洞利用趋势分析", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247575307&idx=1&sn=8e75156ec07e8dad4cbe46b92f9ef2e0&chksm=e9147731de63fe27744f4625c784aa4e8e5a8a319e3785e3d133545954d2b5d0d593d12ec43f&scene=58&subscene=0": "2024 年第一季度漏洞和漏洞利用趋势分析", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489152&idx=1&sn=45ca521cab7ad87451274d3800c9c900&chksm=fb029bd8cc7512ce8fc079cbe62c92ea3b6dc9c09ba70a3b2b8b968d39471f04cd1af432a810&scene=58&subscene=0": "github好项目推荐-综合OA漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522907&idx=1&sn=824fd9f13249d1a3a60346f6e3217101&chksm=ce46114bf931985d6ff21e926f261208e84b2aa6e775a1affa5351c8c8752f08d2e21dba5322&scene=58&subscene=0": "【漏洞通告】Git clone 远程代码执行漏洞CVE-2024-32002", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522907&idx=2&sn=d4415c6cc8d46253d3c8db1ebe5be0b6&chksm=ce46114bf931985de822b4afbe8c167c9c54a820a0d843b5e75748b4be6d095cd8d904fdf668&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240513-20240519)", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499145&idx=1&sn=12d673468cd743c84791c03a74b928c0&chksm=973aceeba04d47fd75bc7d470c06afa0008b720a6959d5d38a2fe78b58b4cffc6655095fc1c2&scene=58&subscene=0": "CNVD漏洞周报2024年第20期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499145&idx=2&sn=793b07b12e4324467c0998e48d6b54fe&chksm=973aceeba04d47fdbb8b83cb25074a8812eb29a3185b6e1db5618013a4fc2ae3fb76ae8b2de8&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240513-20240519)", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484352&idx=1&sn=1add312614f437b839c518ed66e347d9": "某网址导航页 搜索页面存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDY0NjY3MQ==&mid=2247484742&idx=1&sn=12a26ea18ab7f62e36c50d04e45afe8b": "代码审计-某人工智能语音系统多处文件上传+命令执行", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484339&idx=1&sn=43a896a68891cb43aeb9f2efdc938c14": "开源数据大屏AJ-Report远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664711579&idx=1&sn=07bbf84370e04a2ce770782b7b3b2276": "Zabbix zbx_auditlog_global_script SQL注入漏洞（CVE-2024-22120）", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494674&idx=1&sn=1c095e995b649a632804fd8fa3d26edc": "如何快速挖掘漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247622979&idx=6&sn=437485b668f014c3a479eb7fb9184e88": "产品频曝严重漏洞，罗克韦尔向全球客户发出紧急断网通知", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651278368&idx=2&sn=aca6f8d454d4498f040b8bc4d4bb09bf": "可绕过身份验证，GitHub企业服务器曝满分漏洞，附PoC", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092845&idx=1&sn=643307ad35cacd22eb8acf1f36dce8b1": "英特尔AI模型压缩器现满分漏洞，可导致任意代码执行", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092845&idx=2&sn=27c98ed7b81c43c052f956b591f7419c": "信息安全漏洞周报（2024年第21期）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652060362&idx=3&sn=505f4f8076fc9bc85e9fc7214f64c120": "【安全圈】可绕过身份验证，GitHub 企业服务器曝满分漏洞，附 PoC", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247484469&idx=1&sn=da3bc20d14c03da8bb61d0f6108ec535": "CVE-2024-4367 PDF.js RCE 分析（译）", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489361&idx=1&sn=9dfe4a510af3938cf728ff9116797db0": "Atlassian Confluence Data Center and Server存在远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458555304&idx=2&sn=df944a905e518992cb6313d8133ab99d": "GitHub警告其企业服务器存在满分认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519550&idx=1&sn=c9df29fac4cc88482637824b11ada5e4": "GitHub 企业服务器中存在严重漏洞，可导致认证绕过", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519550&idx=2&sn=6b4de50a6ef98b37be097aae6daafa64": "Veeam：Backup Enterprise Manager 中存在严重的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502921&idx=1&sn=9ca2c5a6e20e4330d154cec232946aa4&chksm=f258583ac52fd12c3facf50f2419afd7c824e8c7de041fa70f57aa6c657babf91c6cb4796def&scene=58&subscene=0": "雷神众测漏洞周报2024.05.13-2024.05.19", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511682&idx=2&sn=4b3976cacd5e715e779455e46164319a&chksm=ebfae9a2dc8d60b4cabcac3aa5374ff2b781cd58784b1f89bcd74acbad6be79f21d03563f929&scene=58&subscene=0": "产品频曝严重漏洞，罗克韦尔向全球客户发出紧急断网通知", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501160&idx=1&sn=bbca83e44eca687fce84ed143277fe00&chksm=fe79e1f0c90e68e6dadfba1a2e10010c1a635b1cbea29185a3f3a57b2fe95492fe182838c445&scene=58&subscene=0": "Atlassian Confluence 远程代码执行漏洞(CVE-2024-21683)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519550&idx=1&sn=c9df29fac4cc88482637824b11ada5e4&chksm=ea94bc54dde335421f9f83bbe6ae67441821408144a318140245acf73e69aa18472aa1fc98fc&scene=58&subscene=0": "GitHub 企业服务器中存在严重漏洞，可导致认证绕过", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519550&idx=2&sn=6b4de50a6ef98b37be097aae6daafa64&chksm=ea94bc54dde33542e89c9b2f5b6a2105c6c926040276e43b5afbb6b233fffe948a2df38e1334&scene=58&subscene=0": "Veeam：Backup Enterprise Manager 中存在严重的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247505887&idx=1&sn=48261a9d8f7fdfd08589065fea717d87&chksm=cfcab4cbf8bd3dddd0e5d0a447e99881c00ad4cc3146c2bd82c8b206751102bbbd8c47cff6fd&scene=58&subscene=0": "漏洞通告 | 猎鹰安全终端安全系统 V9 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247543940&idx=3&sn=090b47c6861db2193bfdee900ff46af1&chksm=c1e9a0d5f69e29c37a376ae2d497a7a560fdc8f934012a7d4fbfe230f794b675f6d93efb37d9&scene=58&subscene=0": "超火爆的Fluent Bit曝关键漏洞，影响几乎所有云服务商", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247543940&idx=4&sn=261deececdc2e69909a6db29ae134682&chksm=c1e9a0d5f69e29c3beb3a74324ca227542cc4eeb13ba52ed31a57308b793205db91af36e268b&scene=58&subscene=0": "Fluent Bit高危漏洞威胁全球云计算大厂", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544855&idx=3&sn=e13924444b221977cc6975206f6983cb&chksm=fa9386d6cde40fc03f209304da63d5387c54599739cc92f85504ad91770ee625dfe24f96b8eb&scene=58&subscene=0": "英特尔AI模型压缩器现满分漏洞，可导致任意代码执行", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522958&idx=1&sn=6fa605df18a31d9d3cbc6657d37f8599&chksm=ce46119ef9319888ecb7a00f532f46cd20b58151ea86d9a16001596e3c37a3f6f951aaad6f48&scene=58&subscene=0": "实战攻防季：主动猎捕，让0day漏洞无处遁形！", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522958&idx=2&sn=adde25c4c3875a0d7b1aae6db04d0965&chksm=ce46119ef9319888e6ee4158cf8174d10d2247608a642a4f11096eba8a211364105b93bea592&scene=58&subscene=0": "Confluence Data Center and Server登录后远程代码执行漏洞(CVE-2024-21683)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494674&idx=1&sn=1c095e995b649a632804fd8fa3d26edc&chksm=e8a5e671dfd26f67804ddb6855e71a40a1d7d4b6b326c1169e5822429fd0c614f3df768322a2&scene=58&subscene=0": "如何快速挖掘漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484604&idx=1&sn=46cf3513acd9420e3b59d150885b6ed5&chksm=c12af93df65d702b01fa7358ebfce7b88c574be20a74701dcc78c065bc1f75c082f43e8a8694&scene=58&subscene=0": "【复现】Nexus Repository3 任意文件下载漏洞的风险通告", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247505698&idx=1&sn=0bd0e0d4014a6c57ba354459a6fbef99": "PDF.js中任意JavaScript代码执行(小核弹)", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247484497&idx=2&sn=a38d49230978fb4d6b866c1b0c86abe3": "Google Chrome 的漏洞链分析(译)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494690&idx=1&sn=a4963e02faa16fbf1a20f2eeb9f22a1b": "通过路径遍历所实现的RCE", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511689&idx=1&sn=036b328783d84f45701f2910aadcfea9": "内部VPN遭漏洞攻击未向监管报告，这家金融巨头被罚超7000万元", "https://mp.weixin.qq.com/s?__biz=MzkwNTQxNDc1MQ==&mid=2247486673&idx=1&sn=e72e7d2bcf7ecd5d561716edece72ae8": "Confluence Data Center and Server认证后RCE(CVE-2024-21683)漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247491559&idx=1&sn=90a0d674b76152b8a3a66643bc10c085": "听说PDF.js插件漏洞很火？", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484361&idx=1&sn=17cacf138b85f6eca0b1483b5eae8ce3": "用友NC warningDetailInfo接口存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MDk3MTgxOQ==&mid=2247487792&idx=1&sn=9934c4cd4964ff439b2b12d8686459d3": "漏洞预警 | Git 远程代码执行(CVE-2024-32002)漏洞复现与分析", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489266&idx=1&sn=617d314d2b0d6bb380f5402885fbdba1": "VPN遭漏洞攻击未向监管报告，被罚七千万巨款", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484345&idx=1&sn=3f8d51ff4f36aacfd40b03c2692ca92b": "魔方网表mailupdate接口文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652060477&idx=4&sn=9bce7bfcfe76a7430ab4f38562be2fbe": "【安全圈】英特尔 AI 模型压缩器现满分漏洞，可导致任意代码执行", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489369&idx=1&sn=256cd3f4ad5dc918996b1040d9cf42bc": "【已复现】Sonatype Nexus Repository 3 存在路径遍历漏洞（CVE-2024-4956）", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664213899&idx=4&sn=69cc141f56506dc5d4516255849a7131": "CNNVD | 关于Atlassian Confluence安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651129868&idx=2&sn=a52e95a2770955f90dfa8bc1ce475b2e&chksm=bd15b8df8a6231c90919ff6d8e503640bf35d6d8d61212e6795cd8a4b250d92a018a3b496d97&scene=58&subscene=0": "四部门联合印发《互联网政务应用安全管理规定》发布，7月1日起施行；超过60%网络安全设备自身缺陷可被利用为零日漏洞 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511689&idx=1&sn=036b328783d84f45701f2910aadcfea9&chksm=ebfae9a9dc8d60bf8459b27f3e5025ff531e7bf51f405f7d71f91a5ba074962797da559ccd74&scene=58&subscene=0": "内部VPN遭漏洞攻击未向监管报告，这家金融巨头被罚超7000万元", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501174&idx=1&sn=ca7c460d094e96aaefc7cf3f05bcb31f&chksm=fe79e1eec90e68f81460b4c8227f7eb9b7b4d714e8723c837061e6209b52d1b152744597867d&scene=58&subscene=0": "【已复现】Sonatype Nexus Repository 3 路径遍历漏洞(CVE-2024-4956)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664213899&idx=4&sn=69cc141f56506dc5d4516255849a7131&chksm=8b59af72bc2e2664e49905e194517a92e9867b730519745231df4734cd47c3ab2a16e9ef0c2e&scene=58&subscene=0": "CNNVD | 关于Atlassian Confluence安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247543982&idx=4&sn=61a190cf3ee70778798ec5543328514f&chksm=c1e9a0fff69e29e9a2bf226260eaf181262f2571c828edff1d0b6ee5cc088f21823b82f953ab&scene=58&subscene=0": "可绕过身份验证，GitHub企业服务器曝满分漏洞，附PoC", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519566&idx=2&sn=ed407d4fe01434881f2b2243f80ea1a7&chksm=ea94bc24dde33532df90bbcb4626b222cc57354fa7d3706da1c59a20b6238ffeeba1bda202c6&scene=58&subscene=0": "【已复现】Sonatype Nexus Repository 3 路径遍历漏洞(CVE-2024-4956)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247506151&idx=1&sn=1dd24365ccb385a1847e61b321e00af2&chksm=fa520d59cd25844f773413a75edffa9f4f53bc5ceab5929cc98e0a1fe869bb454e2e1b458363&scene=58&subscene=0": "手把手玩转路由器漏洞挖掘系列 - COAP协议分析", "https://mp.weixin.qq.com/s?__biz=MzkwMTUzNDgxOA==&mid=2247484443&idx=1&sn=5e439fba9c07fc876a5252b7679794e5": "狗屎运~Atlassian Confluence CVE-2024-21683 RCE漏洞复现（附EXP）", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494695&idx=1&sn=b3efd346f945746a08c26d597065852a": "任意JavaScript代码执行(小核弹)", "https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247527357&idx=2&sn=b84c3d11f1487a3a9b4a0818dcef3807": "荐读丨Fluent Bit高危漏洞威胁全球云计算大厂", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247512979&idx=1&sn=3f988301cbca087c1b6753063030b8c7": "Struts2全版本漏洞检测工具 -- Struts2VulsScanTools（5月23日更新）", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247623097&idx=5&sn=0fa1f42cdfc740064f33176fd36bd1c0": "超火爆的Fluent Bit曝关键漏洞，影响几乎所有云服务商", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489272&idx=1&sn=afb4b05d5909232be658f6e2e84d9bd2": "请尽快更新！第 4 个 Chrome 零日漏洞已出现", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247494518&idx=1&sn=82fb56009b950303e3a57ad1c4f22f6a": "RuoYi 4.7.8 执行任意SQL语句导致RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTEwNTE1Mw==&mid=2247485002&idx=1&sn=02235ce6d479e11af8339d3005b043d5": "CORS跨域资源共享漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247622044&idx=1&sn=c11507f85c7269edaaba23579160ea06": "什么是0day市场？为什么无法被取缔？", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488233&idx=1&sn=10738bde5ec4118cb205f1f57d34d903": "【漏洞预警】Google Chrome 类型混淆漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652060533&idx=2&sn=16e465b1a0d59be29d1298544b645733": "【安全圈】黑客利用 VMware ESXi 漏洞进行勒索软件攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652060533&idx=3&sn=c45035b3b90f8a7e30f79306f425c591": "【安全圈】GitLab 爆出安全漏洞，允许黑客接管账户", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786576&idx=1&sn=db752fa8fc840060c5be222a5da8ec62": "发现WinRAR严重漏洞！利用ANSI 转义序列欺骗用户触发", "https://mp.weixin.qq.com/s?__biz=MzI3NjUzOTQ0NQ==&mid=2247510744&idx=1&sn=7d4ee314a2c4d8097417b25dad175c74": "兄弟们，我发现了一个有好多漏洞讯息的宝库...", "https://mp.weixin.qq.com/s?__biz=MzI0MTY5NDQyMw==&mid=2247514651&idx=1&sn=718dfc249e5f8a35b1fd4a3b37dc0864": "奖金大放送！华为云漏洞奖励翻倍活动，只等最“粽”要的您~", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458555478&idx=2&sn=106ec226917c2ceb37626b2eac723d49": "允许执行任意代码，英特尔披露其AI模型压缩软件中的满分漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522972&idx=1&sn=c6c31629fdc283bf4b66558e21632bc5": "【漏洞通告】Google Chrome 浏览器越界写入漏洞CVE-2024-4761", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247484509&idx=1&sn=45146cc9ac50724ce0581e3a15cdb767": "CVE-2024-21683 Confluence RCE 分析（译）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485351&idx=1&sn=43476287a5e8d12e56ff5f82b16417ed": "CVE-2024-4985｜GitHub Enterprise Server身份验证绕过漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485351&idx=2&sn=0adc42b4d60e706882552cdd8c61db21": "CVE-2024-21683｜Atlassian Confluence远程代码执行漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485351&idx=3&sn=e67485085ffcc76b19b04bcefe5d768d": "CVE-2024-4367｜Mozilla PDF.js代码执行漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448662708&idx=5&sn=1bc7eed8fdf16715987729ee70eeb976": "CNNVD关于Atlassian Confluence安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519584&idx=1&sn=8ca7ba7442a6234b2f5910147094c5bb": "GitLab 高危漏洞可导致账号遭接管", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519584&idx=2&sn=dab52360076996946ff35b2afa4a9f72": "【在野利用】Google Chrome V8 类型混淆漏洞(CVE-2024-5274)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519584&idx=3&sn=2aa72d7f1d783c31f298fa9a0f01f07f": "Ivanti 修复Endpoint Manager 中的严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650616425&idx=1&sn=f7171cd1c43e56a32e314b4050108c2a": "红队视角！2024国家级攻防演练100+必修高危漏洞合集", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519584&idx=1&sn=8ca7ba7442a6234b2f5910147094c5bb&chksm=ea94bc0adde3351ccee634db2e180e9bc4d66ff43d4aa7e08ca703c79df1444bcf27d1b960de&scene=58&subscene=0": "GitLab 高危漏洞可导致账号遭接管", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519584&idx=2&sn=dab52360076996946ff35b2afa4a9f72&chksm=ea94bc0adde3351c54d9a36afe23afb6c59f5e81234f6ccbe3b6b07cfc0f71661bf80acac1e4&scene=58&subscene=0": "【在野利用】Google Chrome V8 类型混淆漏洞(CVE-2024-5274)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519584&idx=3&sn=2aa72d7f1d783c31f298fa9a0f01f07f&chksm=ea94bc0adde3351c1cf417917d51eb468cc181088b1cf49ea4d38cc9f05da775e3aa19c6dd05&scene=58&subscene=0": "Ivanti 修复Endpoint Manager 中的严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501184&idx=1&sn=6ef011b0a502294c7cc9a5e94c18f9b5&chksm=fe79e118c90e680e9c8dad5834623ed6b42d668cb79e0afbea68b1b4fdd6ce0e537afa15fa36&scene=58&subscene=0": "【在野利用】Google Chrome V8 类型混淆漏洞(CVE-2024-5274)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544934&idx=3&sn=157baf0b09d936f2914fb20a92883bab&chksm=fa9386a7cde40fb1b884fc1b49f8dd6c791506fa42a236cdde66777d95e340fe52ab4a9c580a&scene=58&subscene=0": "内部VPN遭漏洞攻击未向监管报告，这家金融巨头被罚超7000万元", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522972&idx=1&sn=c6c31629fdc283bf4b66558e21632bc5&chksm=ce46118cf931989ab400f6759f5110d16b5d64c63167f428de393c4ae194227ad3da871d526b&scene=58&subscene=0": "【漏洞通告】Google Chrome 浏览器越界写入漏洞CVE-2024-4761", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484380&idx=1&sn=7c542581eae589a5538df3a8c293eb39": "Sonatype Nexus Repository 3 路径遍历漏洞(CVE-2024-4956)", "https://mp.weixin.qq.com/s?__biz=MzI2NTc1ODY0Mw==&mid=2247485972&idx=1&sn=f2dc5cb97f8b94f44ad044ff87211554": "存储桶遍历漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247501851&idx=1&sn=98774218dd229b9f64b80379bed144a4": "2024HW 攻防演练100+必修高危漏洞合集(附 PDF 下载)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247512451&idx=1&sn=b7c96c3c14e4359d1f6552e1c984a267": "记一次有趣的逻辑漏洞挖洞经历", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651279565&idx=1&sn=2aaace50bafb4c1d6f10f60047809116": "GitLab爆出安全漏洞，允许黑客接管账户", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652060547&idx=4&sn=b7a4eb251751fbdf14936fe290910b87": "【安全圈】今年第 8 个零日漏洞，谷歌发布 Chrome 浏览器 125 紧急更新", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458555501&idx=1&sn=99d873c7182ecf50f6f4ad61c5f952d6": "CVE-2017-11882分析和白象样本分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458555501&idx=2&sn=13deb6ab25d31f49afcf2a1c4106554a": "从零开始，掌握CVE漏洞复现技能", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247557467&idx=1&sn=d045c3e1ea1e95138ea642889ebfb4c7": "HW前网安人必读的高危漏洞合集（2024）", "https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651725788&idx=2&sn=d6418d4c9eed6489426ea2c81b02977a": "Atlassian Confluence远程代码执行漏洞来袭，启明星辰提供解决方案", "https://mp.weixin.qq.com/s?__biz=MzIxOTQ1OTY4OQ==&mid=2247484907&idx=1&sn=8bdf245dd9e06cd3b175a9d0bea8f2de": "geoserver漏洞解析以及测试方法", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247508285&idx=1&sn=8d51109ec4420270fd8afe069893581a": "CVE-2024-4367 & CVE-2024-34342：PDF.js 中的任意 JavaScript 执行", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247508285&idx=2&sn=c38f1b57c4440816371a19d05a3db8e7": "Git RCE - CVE 2024-32002 | 技术分析和本地复现", "https://mp.weixin.qq.com/s?__biz=Mzg5NjU3NzE3OQ==&mid=2247488934&idx=1&sn=2ac68a757f64f3eadf5ef51d8d59315e": "【转载】geoserver漏洞解析以及测试方法", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485633&idx=1&sn=08b21e99de8874a3eeb083a4a3cadb76": "【高危漏洞】金同方科技有限公司月子会所ERP管理云平台存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486732&idx=2&sn=4a6b92b3fae4f1f0e59431f1691f4cc7": "CVE-2024-32640漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650593499&idx=4&sn=63b5392ae5bb4eb2eb8a7be7bbcb9c63": "一款 Struts2、Fastjson、Weblogic 等漏洞集合工具", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655240330&idx=1&sn=8c7c5ccf1a669bd6a1caae34a6ca1e74": "2024攻防演练利器之必修高危漏洞合集", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488990&idx=1&sn=c68bf295e6b3bb743bb02e0c31e9711d": "漏洞预警 | Zabbix SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458555501&idx=1&sn=99d873c7182ecf50f6f4ad61c5f952d6&chksm=b18da4e786fa2df12fc2fe09361c04bf702deacb01323b49385ac6a4fc742944cef028f67a69&scene=58&subscene=0": "CVE-2017-11882分析和白象样本分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458555501&idx=2&sn=13deb6ab25d31f49afcf2a1c4106554a&chksm=b18da4e786fa2df11efcda5c9548d28276929a02d036f90eb298d81757a2ad258f6e6807a393&scene=58&subscene=0": "从零开始，掌握CVE漏洞复现技能", "https://mp.weixin.qq.com/s?__biz=MjM5MTg0Nzk5Nw==&mid=2247484694&idx=1&sn=41fb3a356a0bcf99887549a8b9345d93": "RuoYi 4.7.8 RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247485511&idx=1&sn=c272f84fd8e7c6d2b159562bfce81b23": "漏洞挖掘 | 一次上传点解压缩的渗透测试", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484390&idx=1&sn=594e1069c5707fd19d0e8c2a3d5060d4": "『漏洞复现』智慧校园(安校易)管理系统 FileUpProductupdate.aspx 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652060568&idx=3&sn=443baf691158d8592a60269c80799312": "【安全圈】苹果定位服务被曝漏洞，可用于追踪部队行踪", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652060568&idx=4&sn=c31b7000ca1726455c9fbac5c8545662": "【安全圈】安全漏洞再现，逾 20 万个 Confluence 数据中心实例面临暴露风险", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247623165&idx=4&sn=85e1131c369cdb8314c7c581f7b46960": "英特尔AI模型压缩器现满分漏洞，可导致任意代码执行", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247501700&idx=1&sn=3481e567a5490fdbc8a55232de4c7dbc": "【成功复现】SeaCMS海洋影视管理系统SQL注入漏洞(CVE-2024-29275)", "https://mp.weixin.qq.com/s?__biz=Mzg4NTczMTMyMQ==&mid=2247486084&idx=1&sn=3cb42ea9b85e568b082bdd85648d1dda": "本周最新7个CVE漏洞POC", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247513008&idx=1&sn=cb25e4707d7805bec175e9603c0dcdb6": "漏洞扫描神器 -- AWVS 24.4.24（win+Linux你懂的版）", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494788&idx=1&sn=41cd0629c255e0eca224f27fe8068bb8": "SRC实战：指纹识别->代码执行", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488240&idx=1&sn=92c722812e265ad96c586585d0d6f199": "【漏洞预警】Wireshark拒绝服务漏洞（CVE-2024-2955）", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247485431&idx=1&sn=088d6ef67eb97bb8876f159c3a74d992": "一文了解往年热门的漏洞-shiro", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247498099&idx=1&sn=13a9735532676995662d40ccd6b1d862": "G.O.S.S.I.P 阅读推荐 2024-05-27 智能合约漏洞检测到底行不行？", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484399&idx=1&sn=eea441368636fe22d94c6c6d1b83a011": "『漏洞复现』用友GRP-U8 sqcxIndex.jsp SQL注入漏洞(XVE-2024-12560)", "https://mp.weixin.qq.com/s?__biz=Mzg3NDc3NDQ3NA==&mid=2247484378&idx=1&sn=e3e35e671302f137527c8eaea10b8e31": "CVE-2024-32002 Git远程代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247490326&idx=1&sn=5022c6e0e8365d7822e417c7ffa1de5a": "漏洞复现 | Atlassian Confluence远程代码执行漏洞【附poc】", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247571584&idx=3&sn=dad74d698529317d823489926f592c2d": "千万奖金虚位以待，“矩阵杯”漏洞挖掘赛三大赛道火热招募中！", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511705&idx=2&sn=47c2abe7c23def186cd1bcd51eebd038&chksm=ebfae9b9dc8d60afdfbd2c736697a70a085455fdf1bfd63a6337c3ba4ddb52a2789c73d254d8&scene=58&subscene=0": "苹果WiFi定位系统漏洞可监控全球数亿设备", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519595&idx=2&sn=421be600ca95aa95412393d825b2c7be&chksm=ea94bc01dde335174233180b777c8fcff8f4763f4762c05ae682537b40255e42ef6898bc08d5&scene=58&subscene=0": "Replicate AI 平台存在严重漏洞，可被用于暴露专有数据", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544039&idx=3&sn=276bb55d3ddfe272b7d4d230359ef41a&chksm=c1e9a0b6f69e29a0e1636f58db6aac2306165300fa020dfc0d10d36539c0c5bc0739f97d2767&scene=58&subscene=0": "黑客利用 VMware ESXi 漏洞进行勒索软件攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247498099&idx=1&sn=13a9735532676995662d40ccd6b1d862&chksm=c063d7aaf7145ebcb305b50534bc0e154a22ac65811da63219c681bdb6cb0f46b49f745911bf&scene=58&subscene=0": "G.O.S.S.I.P 阅读推荐 2024-05-27 智能合约漏洞检测到底行不行？", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501189&idx=1&sn=d46d6ba5474f04d8e1646c94911f5205&chksm=fe79e11dc90e680bd41ae2262f4005343033302d6f50a7034e93b8affe8b42a9ac357aa4a1f2&scene=58&subscene=0": "安全热点周报：本周新增三个活跃利用漏洞，影响Chrome用户、Flink用户和医疗机构", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247575410&idx=2&sn=511f316a58c5a255ae3d9a2cdaad8cbe&chksm=e9147748de63fe5ee5e877865b4519f33c403a5d510a94c55e17cb04f4b98fb79ea1a82b9396&scene=58&subscene=0": "安全动态回顾 | 《互联网政务应用安全管理规定》印发 黑客正利用Chrome、EoL D-Link漏洞进行网络攻击", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544959&idx=3&sn=9002550b4c54e11c879e639f9b58c92e&chksm=fa9386becde40fa88762d1808654d4c2d0ff359cf5efe20f981f3b7dae8da4422f3d5d99f22e&scene=58&subscene=0": "苹果WiFi定位系统漏洞可监控全球数亿设备", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494788&idx=1&sn=41cd0629c255e0eca224f27fe8068bb8&chksm=e8a5e6e7dfd26ff1203cb426e2d2b4e642b1e8fd149ec36667bb41dd44bc9974c0a1af8c06be&scene=58&subscene=0": "SRC实战：指纹识别->代码执行", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247571584&idx=3&sn=dad74d698529317d823489926f592c2d&chksm=9f8d4888a8fac19ee68bab37acce20d0c2c797502228c3abd5dc90b7873f16f87cc7462f81fb&scene=58&subscene=0": "千万奖金虚位以待，“矩阵杯”漏洞挖掘赛三大赛道火热招募中！", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494812&idx=1&sn=e7febd5c1c8143b1a097e833dec5848b&chksm=fd74dc55ca035543079b8cb0bda9ab2c182b937888a2299f11c40bea7499d56ca4866b1f2a54&scene=58&subscene=0": "CNVD漏洞周报2024年第21期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494812&idx=2&sn=2927c7da0fdc0ced9452cc0ca53c0341&chksm=fd74dc55ca035543734201243bcf06c042cb4d5684ed4ae534bc14ae8b48973f165944401c4a&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240520-20240526)", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247497638&idx=1&sn=f45986dd476d5f00ebd54eae36a8a7ff": "spring部分漏洞，nacos部分漏洞，禅道认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484409&idx=1&sn=a59e20cabb04a4fd6f3ec0792840e71c": "「漏洞复现」用友NC linkVoucher SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247513021&idx=1&sn=871254fd8a37006c82a9298ccaaf7f63": "Shiro漏洞利用工具 -- ShiroEXP（5月27日更新）", "https://mp.weixin.qq.com/s?__biz=MzU5OTg4MTIxMw==&mid=2247503023&idx=1&sn=57682c7b42518e8e1a8ff31dd851e938": "零知识证明的先进形式化验证：两个ZK漏洞的深度剖析", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247485442&idx=1&sn=fa6ac2ca7c8dbec292d1f3e402d8357b": "CVE-2024-3552 WordPress-Web Directory Free SQL注入漏洞复现", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651281185&idx=1&sn=193f4029f5da007bfc47bb9ad7a3b32c": "近八成CSO认为，人为「错误」是最致命的「漏洞」", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489377&idx=1&sn=3e5c0919e5b6ea55ab6083620e9ac8c9": "【风险通告】ShowDoc存在远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484359&idx=1&sn=a775727bf3119f67352d6cb6ebecc0ac": "大华智慧园区综合管理平台 ∕ipms∕barpay∕pay RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247484409&idx=1&sn=acf147186ed109ef38fe6b9b8424285c": "某Android网址封装系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247491695&idx=1&sn=a74c27a5a4953895453a5b246bb1bfa8": "OA-EXPTOOL漏洞综合利用框架", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458555625&idx=1&sn=ee276983d41d05786ff66e4f41c37ffa": "VCTF apple 复现(apple的通用模板)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458555625&idx=2&sn=9c12b0439fbe3788e0439e9a6b4b0905": "研究员披露WinRAR中的ANSI转义序列注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNTYwOTU1Mw==&mid=2650089857&idx=1&sn=6c8d1589bb6c19b7c2f18969e52c60ff": "苹果WiFi定位系统漏洞可监控全球数亿设备", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519603&idx=1&sn=70cfaf8c8f867ef05e90b02ea49b69ae": "Rapid7：0day攻击和供应链攻陷剧增，MFA利用率仍较低", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519603&idx=2&sn=5b673992d99e5a955d95db1c6dd17669": "TP-Link 修复热门C5400X 游戏路由器中的严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488256&idx=1&sn=610b39f74b6e0a091a93ea1c35d8c05c": "【漏洞预警】Showdoc 未授权 SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488256&idx=2&sn=3c8ab86b9a5dea142f95cb5dba5b9468": "【漏洞预警】Ampache命令注入漏洞（CVE-2024-1540）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488256&idx=3&sn=c11b57dc5e4f961765de5360d10d1955": "【漏洞预警】Splunk Enterprise信息泄露漏洞（CVE-2024-29945）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488256&idx=4&sn=a71dc6718183abc291d09a985aa72e5c": "【漏洞预警】Elasticsearch授权错误漏洞（CVE-2024-23451）", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786585&idx=1&sn=a17cb026c528eda4a6d556fcdd7b3dee": "用户面临远程代码攻击！TP-Link 游戏路由发现高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247489933&idx=1&sn=deb1742f3c4b58f6e8fe86043684e3fa": "快速定位漏洞 BBScan 3.0 是一个高并发的、轻量级的Web漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786585&idx=1&sn=a17cb026c528eda4a6d556fcdd7b3dee&chksm=8893b8b6bfe431a01fdf3dbf5837d2c343b7b6487faaf172446b8f417e0a691f443b56036846&scene=58&subscene=0": "用户面临远程代码攻击！TP-Link 游戏路由发现高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502928&idx=1&sn=4f5bf073de4e2ee116ad25a91d1c947a&chksm=f2585823c52fd1355f668c064b2fe26d0dbd89d69384d05fb6991617477ba5df2590faf7852d&scene=58&subscene=0": "雷神众测漏洞周报2024.05.20-2024.05.26", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519603&idx=1&sn=70cfaf8c8f867ef05e90b02ea49b69ae&chksm=ea94bc19dde3350fd636b698281e577e34e7510ecf18833876de77f3ad1d5564e797c26a5fe2&scene=58&subscene=0": "Rapid7：0day攻击和供应链攻陷剧增，MFA利用率仍较低", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519603&idx=2&sn=5b673992d99e5a955d95db1c6dd17669&chksm=ea94bc19dde3350f0067ca869cda594f20e6fbea02ca4e39d0691381c9093a4aabc376465d0f&scene=58&subscene=0": "TP-Link 修复热门C5400X 游戏路由器中的严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247505947&idx=1&sn=79392958a37a3cd43eed3a3e3d43636d&chksm=cfcabb0ff8bd32196c2b57cdc4fa8ee5b5892f037b70c77dc12522884f4fe19319cc9f5da670&scene=58&subscene=0": "漏洞通告 | Showdoc 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544994&idx=2&sn=3787c2d790a78b7b31e08b51cbbf27a7&chksm=fa938663cde40f75a1cedbe5964885bc2842139b9902185869e417559272b73c81a6de827569&scene=58&subscene=0": "商用间谍软件pcTattletale惊现漏洞和后门！17TB敏感数据遭泄露！", "https://mp.weixin.qq.com/s?__biz=MzkyNjM0MjQ2Mw==&mid=2247483733&idx=1&sn=a56abbd2cd2429d256fda283d4cffb41&chksm=c2398d05f54e0413140b612d9b0607e2f1146129fbc30ff223fdcc5945f45ba259d60d9a9146&scene=58&subscene=0": "BBScan3.0，一个高并发的Web漏洞扫描工具，辅助API安全测试", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499156&idx=1&sn=60e3fa6c1738373597c2fd773d3e3fa1&chksm=973acef6a04d47e0140084a67c6678dfdd6cc42b55fd904120ff4aec16b87eb26833509d180f&scene=58&subscene=0": "CNVD漏洞周报2024年第21期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499156&idx=2&sn=eb7657cc54e113f48c136c3afdb96fdb&chksm=973acef6a04d47e0ec0136b7ed541fb5987ff285b8e87ce027e8cd8a3487b3f0d4da7a80c513&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240520-20240526)", "https://mp.weixin.qq.com/s?__biz=MzkwNTQxNDc1MQ==&mid=2247486763&idx=1&sn=e563f048ee58375fcd732c407073231e": "【新洞随记】CVE-2024-24919：CheckPoint Remote Access VPN任意文件读取", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484428&idx=1&sn=0f9a787e7dc85adf27033429b5a1b02b": "「漏洞复现」RuvarOA协同办公平台 file_memo.aspx 存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247513048&idx=1&sn=b489df827b02c53c9ee19d54b5643d7b": "Hikvision综合漏洞利用工具（5月29日更行）", "https://mp.weixin.qq.com/s?__biz=MzIxNzY1MTc1OA==&mid=2247483791&idx=1&sn=e7758bac9faeca3b33e45dcdc66d172f": "OWASP TOP10之逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247490085&idx=1&sn=042e6fd0a0e79cbcc1b5702a75bcb018": "各大SRC漏洞挖掘中 Swagger是拿奖金最佳入口点", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247516922&idx=1&sn=ccbfdcd47296715bdf653aae8e51edae": "干货 | 安全威胁情报的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652060815&idx=4&sn=9f6d685c3070d208a9b936f19d163163": "【安全圈】Fortinet 曝一严重漏洞 POC，可获得 SIEM 根访问权限", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651281833&idx=4&sn=d1d39f231f6196329bc3a3fc4b9c21af": "jsmug：一个针对JSON Smuggling技术的测试PoC环境", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485375&idx=1&sn=65e8515e23d1c84030d976d50f2e9615": "CVE-2024-24919｜CheckPoint Gateway任意文件读取漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485375&idx=2&sn=a8c6e95b745161da8ef84565921938c4": "N∕A｜Showdoc 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247538750&idx=1&sn=7bca8313fc121bdd9da05afece669506": "AI 平台 Replicate 曝“跨租户攻击”漏洞，用户模型可被黑客入侵", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501217&idx=1&sn=e2658556a8a02400a8b52b03e1b82ba1&chksm=fe79e139c90e682f59cbffa44e6a7d2973c6d6f5895e411492625ad66781a4706ab68e25d616&scene=58&subscene=0": "【已复现】Check Point 安全网关任意文件读取漏洞(CVE-2024-24919)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519622&idx=1&sn=8d3ab9117deabed2f2a5be11649e1236&chksm=ea94bcecdde335fa30a3ee14f088a9a4bb16b50355dbc3619f88dfc987a30ac8fc2c69606baa&scene=58&subscene=0": "Eclipse ThreadX 中存在多个漏洞，可导致代码执行", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458556628&idx=2&sn=a2555648aa475ab184a2c6a29a0bc9af&chksm=b18da85e86fa2148b7407d6e2ffc61247804eb905ffea3d7db1034d5234c9d02252e8ad23b66&scene=58&subscene=0": "影响所有版本，TP-Link路由器存在满分RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458556628&idx=3&sn=8132fc494c3b8785a67560ab1a434280&chksm=b18da85e86fa2148f8636363939b05ac0784594a7f39758c3f74a2138b561533edd434777846&scene=58&subscene=0": "全新课表6.18开班！系统0day安全-二进制漏洞攻防（第3期）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488289&idx=1&sn=6150e535ea9b66a46df741dc0e01acc1": "【漏洞预警】Tongtianxing CMSV6 SQL注入漏洞（CVE-2024-29667）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488289&idx=2&sn=843334c3fb70df2a1e68541b53921303": "【漏洞预警】Spring Boot Online Exam目录遍历漏洞（CVE-2024-29466）", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489409&idx=1&sn=d0c8a348cd19430a0cbb00b1edf5e7fa": "2024攻防演练前需要关注的高危漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489409&idx=2&sn=0f10d4b871a55e3445eba75aea04d1f9": "【已复现】Check Point Security Gateways存在文件读取漏洞（CVE-2024-24919）", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247501747&idx=1&sn=5f96451d734222a0c3f4d0ae10342faa": "【成功复现】Check Point Security Gateways 任意文件读取漏洞(CVE-2024-24919)", "https://mp.weixin.qq.com/s?__biz=MjM5MTAzNjYyMA==&mid=2650587912&idx=1&sn=4d8f9a1ef033e474c07fc5251190cfb0": "AI安全警报！英伟达喊你修复漏洞了", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247491731&idx=1&sn=4422d6a65398ace67392bdc6415fd122": "【护网必备】Spring综合漏洞的利用工具", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519633&idx=1&sn=a16b68e9987a385bda6e79bbb1252d42&chksm=ea94bcfbdde335ede8ed9a118bde1fe4d0343d94336c6c0f64efeb97a9066f40885f8ebf54e1&scene=58&subscene=0": "NIST披露NVD的漏洞分析恢复计划", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247493497&idx=1&sn=22a0cad8aa0351e5e38cad6d0a59bf7f&chksm=fa78e635cd0f6f2354a00697f98defd9cb41289e62592de206812f516b01847c268a9295f1fa&scene=58&subscene=0": "【众测挑战赛2402】喜迎六一！AI 大模型全新上线，单个漏洞奖励最高可达8w！", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247506172&idx=1&sn=9e74be4f65423c20ed6703cd3b97ff53&chksm=fa520d42cd258454d897d9a6bd6a8f006009508ec34123fdf2a96d30d8a7e8c3fddba48f54c9&scene=58&subscene=0": "HEAP HEAP HOORAY - 揭示 GLIBC 堆溢出漏洞 (CVE-2023–6246)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458557570&idx=2&sn=f48e504bc91da149eebefaf7a20b795d&chksm=b18dac0886fa251e64815ff7df074def528e9841b5b9660a1004b35052b11d09a6609a7e71ce&scene=58&subscene=0": "0day 2期-最近更新：Windows服务漏洞原理讲解", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494847&idx=1&sn=eea65f1956f62693b9cde248a88ead2e&chksm=e8a5e6dcdfd26fcafdfcb3375205c9e051340318ba28ced053d9c5cf2e79e73a8b79950ee526&scene=58&subscene=0": "如何快速找到 RCE", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494854&idx=1&sn=71671354c002d3431999b72e4501603a": "渗透实战：记一次JP web服务RCE到内网", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247512477&idx=1&sn=a232dcd557f2ee5d5c86c1b57d0cf7cc": "SRC实战中遇到的一些莫名其妙的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484453&idx=1&sn=59b2fa6962eaecd56bb429a9d856d39d": "「漏洞复现」SpringBlade tenant∕list SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247517016&idx=1&sn=0a2a8f8fad4192e7576c8a35be05616d": "Shiro漏洞利用工具 | ShiroEXP（5月27日更新）", "https://mp.weixin.qq.com/s?__biz=MzA3MzU1MDQwOA==&mid=2247484988&idx=1&sn=0aeb2158b68b18db537c9694446cf052": "XML 相关漏洞风险研究", "https://mp.weixin.qq.com/s?__biz=MzIwNjYwMTMyNQ==&mid=2247490188&idx=1&sn=679dd6cd3c5709c5be34d4732822265e": "报告：56%企业攻击归咎于VPN漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247508746&idx=1&sn=ae3400529c5039dfa699ccadf7a2b51e": "mXSS：隐藏在代码中的漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247508746&idx=3&sn=ab512c689c27e286ced3bea0f130fcc6": "Reaper 是一种概念验证，旨在利用 BYOVD（自带易受攻击的驱动程序）驱动程序漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5Mjg0NzA5Mw==&mid=2247492417&idx=2&sn=e1f19b6b70ace30438ef78f77d3867a1": "高危漏洞预警｜英飞达医学影像存档与通信系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247485358&idx=1&sn=03ada3fac6bcc39ff4fae6f8e23dd449": "水一篇众测的漏洞报告---两分钟看完", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247486317&idx=1&sn=f7dc3ec9d5ecd748f5b005fc55c805a4": "价值3900$的越权帮别人添加商品的支付漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247491753&idx=1&sn=72bae47532bad5be24c78858586a75a5": "【护网必备】海康威视RCE批量检测利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247487514&idx=1&sn=9cb7871a9979c9ecf2b0a7f118806f43": "2024攻防演练需关注的高危漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzIwNjYwMTMyNQ==&mid=2247490188&idx=1&sn=679dd6cd3c5709c5be34d4732822265e&chksm=971e778ea069fe983a286f643062ca03d66c6ed85d0b9c94469ee9d959ea6481476b32cae31f&scene=58&subscene=0": "报告：56%企业攻击归咎于VPN漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3MzU1MDQwOA==&mid=2247484988&idx=1&sn=0aeb2158b68b18db537c9694446cf052&chksm=9f0c191ba87b900dc17943cbe32151b713d4a7ae6295657deb9614b1a2f01641652dc9234782&scene=58&subscene=0": "XML 相关漏洞风险研究", "https://mp.weixin.qq.com/s?__biz=MzkwNTQxNDc1MQ==&mid=2247486772&idx=1&sn=be5758ab1554e773e2042f2c6fb64f4d": "【悬赏问答】复现疑问求解答：Microsoft Sharepoint XXE（CVE-2024-30043）", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247491432&idx=1&sn=449beb0b46c405eb67bdd2ccd462e544": "【很深情的奇技淫巧】不一样的越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247485960&idx=1&sn=0a44bc0f970ea22246e98a439a200141": "大华DSS 安防新平台struts2远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247485575&idx=1&sn=0e3eb9ecb4477a67da022ff78b130ba9": "通过IDEA远程调试vulhub当中的Nexus镜像分析CVE-2024-4956", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494861&idx=1&sn=79e37026c4eca3723b99344d177d0b54": "XML 相关漏洞风险研究", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247492631&idx=1&sn=b1757942745d4fc3f2bdf3bdb950878a": "从API接口信息泄露到挖掘出一个RCE", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501231&idx=1&sn=149d1942b6b9dc0a4a08fa5c0017d674": "攻防演练收敛已知漏洞攻击面，请更新这些软件到最新版本！", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523052&idx=1&sn=f2e81718a583a73c07f445345bfd757b": "【漏洞通告】Linux Kernel本地权限提升漏洞CVE-2024-1086", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523052&idx=2&sn=061da9e1d572420582e8cfb67d81b551": "【漏洞通告】Check Point Security Gateways任意文件读取漏洞CVE-2024-24919", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247611804&idx=1&sn=7cd8e7192f518a61fed5b7b0c5e1b5ea": "100个攻防演练常见高危漏洞，你查了吗？", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484464&idx=1&sn=255d46c31fa507cf4fe0e9bcc7352cfd": "「漏洞复现」万户ezEIP企业管理系统 ∕member∕success.aspx 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488294&idx=1&sn=a758fc94434dd846ec5510e1dc94c52b": "【漏洞预警】Apache OFBiz 路径遍历漏洞 可导致远程代码执行CVE-2024-36104", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652061096&idx=3&sn=157b0ddf2ea750aeeaff6fe88cc84f0d": "【安全圈】59% 公共部门的应用程序长期存在安全漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651283007&idx=2&sn=3ddbb47335db3f62f91c20da655dfc65": "Springblade框架(又名Bladex)渗透测试漏洞利用总结", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291170&idx=1&sn=c1e86a3c676d32866c04bb9af1dd3fa2": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247494799&idx=1&sn=078bc73aad5fae5b55fc489a5d9282fd": "2024攻防演练必修高危漏洞集合", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247545134&idx=3&sn=230d40faf3f7a8f0e80adfe81f3d4462&chksm=fa9387efcde40ef96c95ca557860062ae7bcda13d668729515d69a8d9c1da0f998ab8cdcbef5&scene=58&subscene=0": "WinRAR漏洞造利用，俄罗斯黑客向乌克兰发送恶意软件", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247575594&idx=2&sn=dbfa135a7451b9c89715344b31790a96&chksm=e9147810de63f10695596c666eb732bc62ec05f63fe2dd01dd350c26ef8c693823d3406a5427&scene=58&subscene=0": "安全动态回顾 | 佳士得遭RansomHub勒索软件团伙入侵 TP-Link修复C5400X游戏路由器中关键RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494828&idx=1&sn=0db4832ef6794957da5094b10839f104&chksm=fd74dc65ca0355734ae553e4098094e7ed70126389bb9190a83ba454bf895407bf99cb68b71c&scene=58&subscene=0": "CNVD漏洞周报2024年第22期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494828&idx=2&sn=7b872ea6143c5b22e4f4ac32e9c19ef0&chksm=fd74dc65ca0355736cfc71600bc0d7d4a711795bf19aa0aeea0db610884eb1eb3393d437b7cd&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240520-20240526)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494861&idx=1&sn=79e37026c4eca3723b99344d177d0b54&chksm=e8a5e6aedfd26fb8d9ff8ff50bf02a5b72c36083247dc26ce6afe20662af989e0e8205860add&scene=58&subscene=0": "XML 相关漏洞风险研究", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488303&idx=1&sn=430a42b3a8a1128be7da4340bb73c36f": "【漏洞预警】ShowDoc < 3.2.6 存在 SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488303&idx=2&sn=aca0a155a0a6c4983a5c8ad99aa1ad56": "【漏洞预警】泛微E-Office detail.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247497657&idx=1&sn=f686183c5f11e7cd0ca62c694d6d2be4": "校园网管理系统未授权访问一键断网漏洞（付脚本，6月3日更新）", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247485970&idx=1&sn=29600e5aa88b7fa1260423afaa1232a9": "海康威视综合安防管理平台 AutoLoginTicket 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492565&idx=1&sn=d4b36fdc9d9629d1e0c946d330ade92f": "漏洞复现 || Check Point Security Gateways 任意文件读取", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651283155&idx=4&sn=58d16ba5f0c27f84616fe06e7bba2bae": "SploitScan：一款多功能实用型安全漏洞管理平台", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652061166&idx=3&sn=dde0b68b30b18b6ff606f91c40450140": "【安全圈】Cox 存在API 身份验证绕过漏洞，影响数百万台调制解调器", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc4ODc1NQ==&mid=2247489306&idx=1&sn=ee94eb4a897de21028916f8e6046a249": "奖金大放送！华为云漏洞奖励翻倍活动，只等最“粽”要的您~", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499174&idx=2&sn=9e8e0c276823530508e7a23f69a183cb": "上周关注度较高的产品安全漏洞(20240520-20240526)", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650181396&idx=1&sn=b75000a8f75a2581a91bd05998941305": "光伏行业首次证实被攻击！基础设施遭漏洞利用劫持", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519654&idx=1&sn=22b4f342e957ddb68acf5d7dabc14f7b&chksm=ea94bcccdde335da0a488c11021c8d947834829e062cbd4a5917bc946b3037f54a151014c361&scene=58&subscene=0": "速修复！Progress Telerik 中存在严重的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519654&idx=2&sn=85017568a959a5ea6d3069e2a3d7da89&chksm=ea94bcccdde335da53a480dfc3fe032de755f8e5c485f6529964c2b1c65cfb7e11811be88e46&scene=58&subscene=0": "Cox修复 API 认证绕过漏洞，数百万调制解调器受影响", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523067&idx=1&sn=6a32a7d2b7aae80ebef369787146be48&chksm=ce4611ebf93198fdfdda3eff3c6bb8bdff91183b28f4a201911796c4a535abd09a4f55360566&scene=58&subscene=0": "【漏洞通告】Apache OFBiz路径遍历漏洞CVE-2024-36104", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650181396&idx=1&sn=b75000a8f75a2581a91bd05998941305&chksm=f44874a8c33ffdbeff0d4931f3cf255caaaea8023dae3db60146553e8ed418892dc3d7980a58&scene=58&subscene=0": "光伏行业首次证实被攻击！基础设施遭漏洞利用劫持", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489188&idx=1&sn=773b6d30489d0cb1da63efc0ecd4e4d4&chksm=fb029bfccc7512eaaaf33b13e2e8a16592a1597274e1cbf48d000ac46e1fff3f7d6af743e24a&scene=58&subscene=0": "【已复现】ShowDoc item_id SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247513092&idx=1&sn=a11ab37a3ca8f02a7ed9219d272c8ce5": "帆软bi反序列化漏洞利用工具 -- FrchannelPlus（6月4日更新）", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484391&idx=1&sn=fc3d86edac93001113c282cb93b76b53": "用友NC pagesServlet SQL注入致RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMTA0MjQ4NA==&mid=2247550132&idx=1&sn=3ba2f43b30f343395d166f2c0a71ca3a": "红队快速打点漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247485516&idx=1&sn=8c8ee1a2b3cbedee8d01b156d55a0dc7": "CVE-2024-36104 Apache OFBiz路径遍历RCE漏洞复现(附POC)", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247492637&idx=1&sn=4343b9ef13d9292cc1b97b1c2bf66fb1": "命令执行绕过技巧", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651283365&idx=1&sn=e73def5bb71540a61259f129c308b5f9": "TikTok零日漏洞被利用，可一键劫持高级账户", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488314&idx=1&sn=9ccd70cc28ee1f9a35fd87b2dd514e4d": "【漏洞预警】Apache Wicket XSLT 代码执行漏洞（CVE-2024-36522）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488314&idx=2&sn=41e4af5a4caf150ecdc04c38892dd881": "【漏洞预警】Zyxel NAS 未授权文件上传限制不当可致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488314&idx=3&sn=a1dbefdc9453c2b3c31b7fc64d9319c2": "【漏洞预警】Progress Telerik Report Server身份验证绕过漏洞（CVE-2024-4358）", "https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651725955&idx=2&sn=2d178b2903a8bbddac5d9a47c02b4434": "Spring Cloud Data Flow任意文件上传漏洞来袭，启明星辰提供解决方案", "https://mp.weixin.qq.com/s?__biz=MzkxNjQyMjcwMw==&mid=2247486275&idx=1&sn=24c050031ee9297eee171d4151497676": "记一次某HR管理系统漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458557784&idx=1&sn=fb7dfad2083284553b5456d07e6a7cce&chksm=b18dadd286fa24c41eea7f619fb8b395e4fa076186d2300483c3ed3dac1786f2df59d8b05831&scene=58&subscene=0": "IOT漏洞复现——PSV-2020-0437", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458557784&idx=3&sn=1deff2f562543b11788b70e6737ae8d4&chksm=b18dadd286fa24c4722596a53777030d62be7ca3cafbb633c1cb00296b3207faa89556bac3aa&scene=58&subscene=0": "0day windows 直播回放更新：SimpleNtfuzzer分析", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247506008&idx=1&sn=8809880121383761d9afdbfa4580fd00&chksm=cfcabb4cf8bd325afbd4a3b5d7ce42d3e58a2c8acc7a9dcf11e70cad84ffc0ce0e58cc10f981&scene=58&subscene=0": "漏洞通告 | 派网Panalog远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519665&idx=1&sn=16f68838d4899ea09b8df2f5f96357ab&chksm=ea94bcdbdde335cdc94e76fa3278e8af36adadc6af065778ed4f389d32ac7d826a4ad944c89f&scene=58&subscene=0": "合勤紧急修复NAS设备中的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519665&idx=2&sn=86259d3f96b173403f1a65b601fc1989&chksm=ea94bcdbdde335cd0f308951f098245eea81c0364b1a3726dc92bad88f1ce58de6b53eef24ec&scene=58&subscene=0": "Atlassian Confluence 高危漏洞可导致代码执行", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544240&idx=1&sn=f1c2668abccac70ff9fbbfdb9b0b8d04&chksm=c1e9a1e1f69e28f7e72e5999e2c5288a611e466e596e6aacab3b253f21c0acf304ff2bca6f5d&scene=58&subscene=0": "AMD前瞻执行之内存访问预测器逆向分析与漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247494879&idx=1&sn=82e8e69ddb7f507d6c5bf3db46303ff7&chksm=96d8e705a1af6e1300ca9fb53b883539af084997597087ca620596840fca988c41e07aefa870&scene=58&subscene=0": "2024攻防演练必修高危漏洞集合（2.0版）", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247545195&idx=1&sn=10c35a640481aaf7e46a14c7d4894ea2&chksm=fa9387aacde40ebc7d0c0bd73629ef159e72977e6b5b46f67742bd85feee173707104a23f0ba&scene=58&subscene=0": "AMD前瞻执行之内存访问预测器逆向分析与漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzA4ODc0MTIwMw==&mid=2652540845&idx=1&sn=cdfb2f01d7d244fa9a83cae509136b00&chksm=8bcbab91bcbc22876618729238dbd2a2d9465d67435ef55e2f85f1afffb90e563bb125d1cbd1&scene=58&subscene=0": "漏洞价值提升！BSRC奖励细节V7.0来了！", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247493507&idx=2&sn=42b386bdb1266313d68a2c6d51191eee&chksm=fa78e6cfcd0f6fd99220083f7edcc88c7781ce1a8554bcb4035bc6409c089b5b5fb56e90c9b6&scene=58&subscene=0": "【众测挑战赛火热进行中】AI 大模型全新上线，单个漏洞奖励最高可达8w！", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247512479&idx=1&sn=266c3d048fc07f419f0d699770693618": "SRC逻辑漏洞合集", "https://mp.weixin.qq.com/s?__biz=Mzg4NDk4MTk5OA==&mid=2247485296&idx=1&sn=f6f2a4b34a1fcc2ba993a09ff0e3d844": "【新洞洞！】海康威视综合安防管理平台 AutoLoginTicket 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488326&idx=1&sn=66d8ab8eecb5951e250928bd4647816b": "【漏洞预警】springboot-manager任意文件上传漏洞（CVE-2024-24059）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488326&idx=2&sn=80a62232db18b1cb133dcfcef2a349d4": "【漏洞预警】ClickHouse信息暴露漏洞（CVE-2024-23689）", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247623968&idx=4&sn=92a803497aa1c597f949c28a4f1d6343": "TikTok零日漏洞被利用，可一键劫持高级账户", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247484448&idx=1&sn=937898e9c83ea344993813813b7fb6e2": "29网课交单平台存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485722&idx=1&sn=7344f6c53dac9f1816b7fa5e5b7f3621": "Hikvision综合漏洞利用工具 - Hikvision-", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651283704&idx=1&sn=cd01fd82ca3b48baca9b9f89fb8c26c9": "挖洞别只卷国内漏洞了，一起赚美金好吗 | FreeBuf培训", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519685&idx=3&sn=5ff2515ea003efe342365bfb3e9d8af7&chksm=ea94bcafdde335b9fed2634f43fe71bf14953a3fbc06a298ce9ac436a576ce39e6b2dfa25269&scene=58&subscene=0": "德国政府会议信息遭泄露，思科修复 Webex 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519685&idx=5&sn=cd7840386d236e97bc419b0a943f9d25&chksm=ea94bcafdde335b99fff79a2689e78cb78922997a12f87792bff03a1861af54f7ec49cf32f44&scene=58&subscene=0": "【已复现】Apache OFBiz 路径遍历漏洞(CVE-2024-36104)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501249&idx=1&sn=b8105f3bf1ef2554314d204e9f57ed2c&chksm=fe79e159c90e684ff68547160b11ec15b0cb71bc2b36b108454acf6d1eafe6c72227a10cf280&scene=58&subscene=0": "【已复现】Apache OFBiz 路径遍历漏洞(CVE-2024-36104)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247493180&idx=1&sn=467e7354822a9ce134753d4134223e79&chksm=fa9d1d6acdea947ca55b37bd1d48e78895b8b4c51ff17d483c09a9555d3e5246241725b16211&scene=58&subscene=0": "单个漏洞10万元！飞书、火山引擎双倍积分专测进行中！", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523077&idx=1&sn=b299d7c76b6af9ab4bb527ffdeaf8e21&chksm=ce461015f931990328b2db8575ddfeb30675495c05079524f3b88437b18d2a2cc0734e6ccd7f&scene=58&subscene=0": "【漏洞通告】Zyxel NAS未授权远程代码执行漏洞CVE-2024-29974", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544264&idx=3&sn=a8c5efc32d5b1701c449da6b4d39e074&chksm=c1e9a199f69e288f57a5ec34dcd60a0e521aefb62bb89334e24135f292913c30cebb517d6369&scene=58&subscene=0": "TikTok零日漏洞被利用，可一键劫持高级账户", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650616778&idx=2&sn=d033e29609c4b1520c1f4ecc77ca60a1": "5月威胁态势 | 2024攻防演练在即 高危漏洞增速明显 银狐团伙仍高度活跃", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485723&idx=1&sn=7d3e33f939881ce9b221bd6d84b29e8b": "禅道最新身份认证绕过漏洞利用工具 - ZentaoExploitGUI", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzc3MTk3Mg==&mid=2247488613&idx=1&sn=398d222564f226ed9ea6603112180e76": "关于PHP CGI Windows平台远程代码执行漏洞（CVE-2024-4577）简要说明", "https://mp.weixin.qq.com/s?__biz=Mzk0NDU5NTc4OA==&mid=2247484011&idx=1&sn=d1094714a3ed119ead6ac68cbebd00df": "一次文件下载漏洞获取源代码审计", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489420&idx=1&sn=238d156a56288b84efa46abfadc6e9af": "【已复现】PHP-CGI存在远程代码执行漏洞（CVE-2024-4577）", "https://mp.weixin.qq.com/s?__biz=MzkyMzYwNTEyNg==&mid=2247486494&idx=1&sn=fd121823c6aa5a683e04fb2fe27dcc02": "【复现踩坑】浅谈Microsoft Sharepoint鸡肋XXE新洞：CVE-2024-30043", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651284541&idx=3&sn=40ccc08bcc926aa7822b1019d9cdadc6": "技术沙龙｜关于征集第五期移动互联网APP产品安全漏洞技术沙龙议题的通知", "https://mp.weixin.qq.com/s?__biz=Mzg4MjY5MDE4NA==&mid=2247483873&idx=1&sn=f5c797113a08782430ed7017b7d94ab7": "php最新远程命令执行漏洞CVE-2024-4577", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247484487&idx=1&sn=231497d1cc8d864d29b572805fa5ab7c": "某客圈子社区小程序审计(0day)", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247538808&idx=1&sn=187e1483000517375db15fbcdbd80a17": "TikTok零日漏洞被黑客利用，CNN等知名账号被入侵", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485411&idx=1&sn=e3c47dc7c7dd3cded51cefa46511183b": "CVE-2024-4577｜PHP CGI Windows平台远程代码执行漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485411&idx=2&sn=bb531e1d648c27ca9c8c6c59744043bc": "CVE-2024-22263｜Spring Cloud Data Flow任意文件写入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxOTQ1OTY4OQ==&mid=2247485054&idx=1&sn=525123fd4a3d5351560748eecd3a90af": "【高危0day】PHP+XAMPP超高危漏洞，影响国区数万主机", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484610&idx=1&sn=6600bf5f9e75da56e1c85e3e7865e86a": "【复现】PHP CGI Windows 平台远程代码执行漏洞(CVE-2024-4577)的风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501265&idx=1&sn=113d8f380673723f53d9c0b06f9f2fc4&chksm=fe79e149c90e685f02814a0c15dd3a94527f01b5c592f312e9be04e2eb6c288401a64574b358&scene=58&subscene=0": "PHP CGI Windows平台远程代码执行漏洞(CVE-2024-4577)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247506035&idx=1&sn=06dc8b5a1f9a6cb91284cdb888cdc127&chksm=cfcabb67f8bd3271a35e1da5b75b502f719db6c9891f8e133d8019718e0e858252922d4017ea&scene=58&subscene=0": "漏洞通告 | PHP CGI Windows平台远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486335&idx=1&sn=5ea73962f1c1fc775b0c2b029a1d588d&chksm=ec6fec7fdb18656977d37afd170713e98320dd1f6105a82bffc313002f32214b68bc81ad9a44&scene=58&subscene=0": "PHP CGI Windows平台远程代码执行漏洞（CVE-2024-4577）", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247506566&idx=1&sn=c92546b115bf6eff1037a48e2773a409&chksm=fa520f38cd25862e4d698ffaa778aa907ac23f3400d542edd9d8fdcf17ce41134e5aefee5709&scene=58&subscene=0": "由浅入深理解Nodejs原型链污染漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247494893&idx=1&sn=6b65ab2572b8fd9f159cfaeb09b3955e&chksm=96d8e737a1af6e21c8924ee3a55a4e3b34ab83cc94f3fb9499391cd3161b1ecb06f19ab1e33b&scene=58&subscene=0": "2024攻防演练必修高危漏洞集合（3.0版）", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523089&idx=1&sn=f1ff9f27782698349113c91b765c8a3d&chksm=ce461001f9319917f45232a8455c78e5300cb412c5125192233ea584c80669e8b485315518b2&scene=58&subscene=0": "【漏洞通告】PHP CGI Windows平台远程代码执行漏洞CVE-2024-4577", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484610&idx=1&sn=6600bf5f9e75da56e1c85e3e7865e86a&chksm=c12af943f65d705542ce5436b48fb4d52c84c10f47a10283ae5eade9f0a8e73a845b8fc0ebbd&scene=58&subscene=0": "【复现】PHP CGI Windows 平台远程代码执行漏洞(CVE-2024-4577)的风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzc3MTk3Mg==&mid=2247488613&idx=1&sn=398d222564f226ed9ea6603112180e76&chksm=cf84124ef8f39b583fa38d2a37560c613063bb689654924ab1f45063649332086b6920b2bc9d&scene=58&subscene=0": "关于PHP CGI Windows平台远程代码执行漏洞（CVE-2024-4577）简要说明", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494891&idx=1&sn=01ca33bed8cf52f3da612d5c572e8b73&chksm=e8a5e688dfd26f9e4f91f03eec51390a8c3edf79c3222919602d9291fe189048ab2d5183f475&scene=58&subscene=0": "通过劫持存储桶来实现RCE", "https://mp.weixin.qq.com/s?__biz=Mzk0NDE3MTkzNQ==&mid=2247485400&idx=1&sn=e9a9e2b567cb20e96aad0e64fccd160a": "爆出 CSS 注入漏洞之后，GitHub 被玩成 QQ 空间了", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488339&idx=1&sn=0549925000b94d17d6d20bf3896186cb": "【漏洞复现】PHP CGI Windows平台远程代码执行漏洞(CVE-2024-4577)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652061357&idx=2&sn=f47b137a7644573cda57047d5adbcb58": "【安全圈】TikTok零日漏洞被利用，可一键劫持高级账户", "https://mp.weixin.qq.com/s?__biz=Mzg4Njc0Mjc3NQ==&mid=2247486094&idx=1&sn=68c9f8b460e9116b0c75f20672b3afe4": "周末补漏洞：PHP CGI Windows平台远程代码执行漏洞 CVE-2024-4577", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458558525&idx=1&sn=2ea8bd4a5bbd5ac1da70d5d508b76129": "CVE-2018-17066复现（D-Link命令注入漏洞）", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247509068&idx=1&sn=6a6160eec54afd457d1565a84b2d8e71": "CVE-2024-4577 - PHP CGI 参数注入漏洞批量（复现）Nuclei 模板", "https://mp.weixin.qq.com/s?__biz=Mzg3NDc3NDQ3NA==&mid=2247484462&idx=1&sn=6623a45dd82f0d23a470e02604fb2604": "PHP CGI Windows平台远程代码执行漏洞（CVE-2024-4577）附poc和批量扫描脚本", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650978895&idx=1&sn=9a46e408102150a096c3bb4e47368636": "【知道创宇404实验室】警惕PHP CVE-2024-4577 对XAMPP Windows 版本影响", "https://mp.weixin.qq.com/s?__biz=MzkyODcwOTA4NA==&mid=2247484300&idx=1&sn=7498ece5b4c3c2c5a33e80d4a177033e": "PHP 最新RCE POC (nuclei文件) (内含抽奖)", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247484508&idx=1&sn=a2d30230ce8857d639fd54e91757fd4d": "CVE-2024-4577 PHP CGI平台远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484404&idx=1&sn=8fd68672cb988c3d790735bbc8deb5ef": "PHP CGI Windows平台远程代码执行漏洞(CVE-2024-4577)", "https://mp.weixin.qq.com/s?__biz=MzU2NjgzMDM3Mg==&mid=2247491596&idx=1&sn=6d73e290074687371c17e2838cafb741": "实战-最新PHP-RCE+详细分析(CVE-2024-4577)", "https://mp.weixin.qq.com/s?__biz=Mzg4NTUwMzM1Ng==&mid=2247510687&idx=1&sn=014841930cb50c6fc3f3a08aa909d948": "CVE-2024-4577 PHP RCE 再次来袭！", "https://mp.weixin.qq.com/s?__biz=Mzg5MzE4MjAxMw==&mid=2247484209&idx=1&sn=7f3d74d1fdcf19428c00170d9b8a1fa4": "PHP-CGI-Argument-Injection 默认配置打法[CVE-2024-4577]", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247490421&idx=1&sn=25278f4f397f871682288c59035b88ff": "代码审计-某产品高清智能录播系统漏洞分析附未公开POC", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484511&idx=1&sn=eef02168a01649a31887df719b4fae9e": "「漏洞复现」锐捷校园网自助服务系统 login_judge.jsf 任意文件读取漏洞(XVE-2024-2116)", "https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651726007&idx=1&sn=c78107eda1ffa3704b55b4b8f873ddac": "PHP-CGI Windows平台远程代码执行漏洞，启明星辰提供解决方案", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458558525&idx=1&sn=2ea8bd4a5bbd5ac1da70d5d508b76129&chksm=b18d90b786fa19a175714b61912e756639ae375db3a8f96292e774585c049f3204f1f0fcde2d&scene=58&subscene=0": "CVE-2018-17066复现（D-Link命令注入漏洞）", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650978895&idx=1&sn=9a46e408102150a096c3bb4e47368636&chksm=8079f87db70e716bbe82d72b7ab9516ef348beccc4bc094e1a111c647bff8fad9f81963fd6ca&scene=58&subscene=0": "【知道创宇404实验室】警惕PHP CVE-2024-4577 对XAMPP Windows 版本影响", "https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247490351&idx=1&sn=c5ceca1f755c9c21421eee69828ea250": "领导没事就会拿这些基础PUA你 挖掘SRC表示也得掌握java基础漏洞原理", "https://mp.weixin.qq.com/s?__biz=MzkxNjQyMjcwMw==&mid=2247486306&idx=1&sn=b08a1e9e9c7cc7ec8c6f2a7e5f3a05b5": "华天动力OA登录绕过漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzU3NDY1NTYyOQ==&mid=2247485945&idx=1&sn=b2ac1525b61300b215074426d8aabf41": "演示复杂之眼抓CVE-2024-4577漏洞利用活动", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652061378&idx=4&sn=05e10a3fb0e9ee84074b0fadcd55f4e2": "【安全圈】PHP 紧急更新修复漏洞：自 5.x 以来所有版本均受影响", "https://mp.weixin.qq.com/s?__biz=Mzg2NzY0MzM3Ng==&mid=2247484001&idx=1&sn=793f3aef8dea039e92acf9d161c63e79": "GPT4-o是否仍然存在奶奶漏洞？", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247509115&idx=1&sn=f76eb72f49268dde370680b87452c476": "利用 Windows 10 反馈中心 安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247484578&idx=1&sn=14d1fbc9a20af09a7b469a6966d4c2ee": "CNVD漏洞代码审计 | 危险代码与漏洞成因分析", "https://mp.weixin.qq.com/s?__biz=MzU5MTc1NTE0Ng==&mid=2247485381&idx=1&sn=38e0fbe548073a19b093911895e96d30": "【漏洞复现】PHP CGI参数注入RCE漏洞(CVE-2024-4577)", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247490423&idx=1&sn=f4347badbcfb08ce8aff7a1d232decb2": "【审计0day】Dedecms最新版本RCE", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247486356&idx=1&sn=00ea2fec805b4c246008a55918fc1845": "新的 PHP 漏洞将 Windows 服务器暴露在远程代码执行中", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247484601&idx=1&sn=56ad03d14ad3195bd9fe902b62b00d8e": "金和OA JC6 FreeMarker模板注入漏洞简析", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247484559&idx=1&sn=9f0eaceed66575acd45752d16821eafa": "通过代码审计用友获取CNVD高危证书", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484529&idx=1&sn=c59235b9f796821bd823e49b80f70cff": "「漏洞复现」29网课交单平台 epay.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247517156&idx=2&sn=b9b47fb2fc42d188d4ece58c091e4a19": "实战 | 最新PHP-RCE+详细分析(CVE-2024-4577)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652061400&idx=2&sn=ea3fcc933611cdb5a7db0d2c4f8ed05f": "【安全圈】TikTok 零日漏洞被利用，可一键劫持高级账户", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484416&idx=1&sn=8df0c95f84321950de1aaf111ac34de2": "天智云智造管理平台-Usermanager.ashx-SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NjI0MDM5MA==&mid=2247485116&idx=1&sn=ded82356b740ca1234a6000f7691da41": "【漏洞复现 | 含批量POC】天智云智造管理平台 Usermanager.ashx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247485581&idx=1&sn=310a69454f42d6d7798c696aeccf723b": "华天动力OA登录绕过漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247491845&idx=1&sn=d3f04184bb6746d4057205c77d64aba3": "使用Markdown RCE服务器", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247509176&idx=1&sn=8c402a3f38d2f3d916183ab4ff4447b9": "CVE-2024-23692：Rejetto HTTP 文件服务器中未经身份验证的 RCE 漏洞，PoC 已发布", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247509176&idx=4&sn=f5136d97348a8f3807034696e13a0de2": "CVE-2024-5171：libaom_中的整数溢出 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488351&idx=1&sn=075e7deb481f1ef09502a0cf184a2863": "【漏洞预警】海洋CMS任意代码执行漏洞（CVE-2024-30565）", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489340&idx=1&sn=0d0d5730a96772815aa3b8c4706a858c": "新的PHP漏洞出现！Windows服务器暴露", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247490706&idx=1&sn=a47d285f8bbd248fe3b834c45d333e89": "一个高价值漏洞预警监控工具，果断收藏！", "https://mp.weixin.qq.com/s?__biz=Mzg4MzA4NTM0OA==&mid=2247490527&idx=1&sn=6c0ab4db459d6da45ce8dcbdb573ef00": "据称 RCE 漏洞威胁意大利国防部子域名", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651284700&idx=3&sn=15a2ddc9f65250cd490a97b6bd3e3067": "Forescout报告显示：物联网漏洞激增，成为黑客攻击的关键切入点", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484422&idx=1&sn=b469734bab2d5bd55a63b4341311f824": "多客圈子论坛系统httpGet任意文件读取漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkyOTQ0MjE1NQ==&mid=2247487810&idx=1&sn=2850a328b103b13a587e2650e43a3cb1": "【紧急警示】Locked勒索病毒利用最新PHP远程代码执行漏洞大规模批量勒索！文末附详细加固方案", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484538&idx=1&sn=bcd1851b6501037401a40c4ec81e92b7": "「漏洞复现」PHP-CGI Windows平台远程代码执行漏洞(CVE-2024-4577)", "https://mp.weixin.qq.com/s?__biz=MzI0NDYxMzk1Mg==&mid=2247501673&idx=1&sn=e87631031ffd9fc060490f6042d30950": "[含POC]紧急测试!PHP CGI Windows平台远程代码执行漏洞爆发!", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501282&idx=1&sn=04048b008f0579b2dc98f180b8b7c19d": "【已发现在野攻击】PHP CGI Windows平台远程代码执行漏洞(CVE-2024-4577)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501282&idx=2&sn=fc6e352e1eaa20ace9b188a348b294b0": "安全热点周报：TellYouThePass勒索软件利用PHP漏洞全球扩散，多个在野漏洞遭遇实际攻击", "https://mp.weixin.qq.com/s?__biz=MzA5MjA0OTAwOQ==&mid=2247485436&idx=1&sn=d89baa68707ff58d35f8b94f11dce889": "活动｜log4j组件命令执行漏洞专项测试开启～～～", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247492544&idx=2&sn=b04c51face94ddff57a133efca0eef93": "Cox 存在API 身份验证绕过漏洞，影响数百万台调制解调器", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501282&idx=1&sn=04048b008f0579b2dc98f180b8b7c19d&chksm=fe79e17ac90e686c1c256c1ea400ec9f5ef0276f57b81f365fb2c2633bfc559eb725b37a02c6&scene=58&subscene=0": "【已发现在野攻击】PHP CGI Windows平台远程代码执行漏洞(CVE-2024-4577)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501282&idx=2&sn=fc6e352e1eaa20ace9b188a348b294b0&chksm=fe79e17ac90e686cbfe0b6a26513345dc9bde46fe6196dac1d9a61f0463485e180ef93f99e33&scene=58&subscene=0": "安全热点周报：TellYouThePass勒索软件利用PHP漏洞全球扩散，多个在野漏洞遭遇实际攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519716&idx=2&sn=df8e16d464e733a183fadfc8e360cc10&chksm=ea94bc8edde335986daf0ff0d4e2bdf8751fd9df7c47d7cf2d9e614452e475a020ef01df0b6c&scene=58&subscene=0": "PyTorch 严重漏洞可导致AI敏感数据被盗", "https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247491306&idx=1&sn=3a71b2d0df8aa7c7e5fffa5af67c36a5&chksm=ea4bb4addd3c3dbb006919e981d0007c3cc7de83004d33f88d91be839aef84132d764ff34da6&scene=58&subscene=0": "如何判断API接口类型及漏洞分类管理方法？| 总第249周", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489198&idx=2&sn=a00689e9633a24c6dec3d604920bc0af&chksm=fb029bf6cc7512e071eee32f1bd2f86435f505cdc20dcf25c591e998af544aea10b16efea335&scene=58&subscene=0": "CVE-2024-4956 Nexus Repository 3 任意文件读取调试分析", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494864&idx=1&sn=9db8628275286f63cefe68bd42b2ed1b&chksm=fd74dc19ca03550fab7cd0c0bf146d88cbf1a81c5cc8b845d0db27f9fc05b9cab3864757d6a4&scene=58&subscene=0": "CNVD漏洞周报2024年第23期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494864&idx=2&sn=af372a4ce33566b6d28ae6a2853a6853&chksm=fd74dc19ca03550f0ff06a249625c7fae7f0e186874e379e014f35331b39997b5905a7a62265&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240603-20240609)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488358&idx=1&sn=bbeb21e8a4ba4f1b98c3960f1b9e98cc": "【漏洞预警】Microsoft Message Queuing UAF漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484429&idx=1&sn=5c97d95f791343fd89e38cc9c283bab4": "电信网关 del_file.php 命令执行漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494948&idx=1&sn=7105607c658f8821456492745233d9a2": "实战:逻辑漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzMjIxNjExNg==&mid=2247485287&idx=1&sn=5ac6bbeccad3ca8d62ae755f7d55bd29": "[翻译]安全警报：CVE-2024-4577 - PHP CGI 参数注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjIxNjExNg==&mid=2247485287&idx=2&sn=8f1916e6bc1ac59c8d6d7009a5a39ae2": "[翻译]No Way, PHP Strikes Again! (CVE-2024-4577)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458558816&idx=3&sn=7a86403d7d6d98be2e3dc608d5b2ab73": "PHP曝出严重RCE漏洞，影响数百万服务器", "https://mp.weixin.qq.com/s?__biz=MzA5OTk2OTY5MA==&mid=2247485629&idx=1&sn=50f12de8927006e4aa4de64b34b6fa45": "Microsoft 6 月 CVE 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247493249&idx=1&sn=c2db28da34b33996a91c3624782ec82e": "攻防演练场景下的漏洞挖掘与治理 | 安全范儿沙龙开启", "https://mp.weixin.qq.com/s?__biz=MzIyNDg2MDQ4Ng==&mid=2247484947&idx=1&sn=b5229e7b48172f07e651e913d33a5e8c": "CTF-Web_RCE的出题思路", "https://mp.weixin.qq.com/s?__biz=Mzk0MDY2NTY5Mw==&mid=2247484559&idx=1&sn=33cec2f981d2eedf40f9e44aac246a96": "用友NC6.5版本oacoSchedulerEvents接口存在sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519726&idx=1&sn=0763c56c20d23383e9286aff08fcb684": "Arm：Mali GPU 驱动中的0day已遭利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519726&idx=2&sn=d94ad8ee115123318833dea4701e52e3": "微软六月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MTI2NDQzNg==&mid=2654551547&idx=1&sn=30b1e99360b03d3381312bb9ed18f62b": "2024-06 微软补丁日 | 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247495653&idx=1&sn=cfdaf4565efc1652db16eb0c5b0fb864": "2024年6月微软补丁日多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247495653&idx=2&sn=bb57ef1536c4008ed538622298046fa2": "【漏洞通告】Arm Mali GPU Kernel Driver释放后使用漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247495653&idx=3&sn=1cc6ba8a971dd3bb25cc63b9befe6d63": "【漏洞通告】Veeam Backup Enterprise Manager身份验证绕过漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502948&idx=1&sn=14418cbec5109a7481093e79db7673f2": "雷神众测漏洞周报2024.06.03-2024.06.10", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486911&idx=1&sn=d7e8d8bea8e2eb3a2dd0860a2d16faae": "CVE-2024-4577 漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkyMzQ5NjYwMw==&mid=2247484606&idx=1&sn=ec2c65fa2b4719faa7737dbc9dc9ee93": "通过weblogic历史漏洞cve-2015-4852学习java反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTA0MTY2Mw==&mid=2247485281&idx=1&sn=c4194fdcbed65d258b851aa1fce1c271": "物联网漏洞激增，成为攻击者的关键切入点", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544360&idx=1&sn=43e24e352d568f740891054b2bacb487": "Forescout报告显示：物联网漏洞激增，成为黑客攻击的关键切入点", "https://mp.weixin.qq.com/s?__biz=Mzg4NDk4MTk5OA==&mid=2247485315&idx=1&sn=bfc6d4a13447f1f463d863f81440c020": "【新洞！】畅捷通TPlus keyEdit.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501287&idx=1&sn=022a78e23e4ee17c8d48c6f7be7511d6&chksm=fe79e17fc90e6869e4c92a585a1dbfbc44d9a2dcc53ef03d576ac6b49348f33efce88cb24552&scene=58&subscene=0": "微软6月补丁日多个产品安全漏洞风险通告：1个紧急漏洞、10个重要漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502948&idx=1&sn=14418cbec5109a7481093e79db7673f2&chksm=f2585817c52fd101b99a6504ab5128be075406e4dbd3f77728243b3b4da61d11443cf89d1b25&scene=58&subscene=0": "雷神众测漏洞周报2024.06.03-2024.06.10", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247506047&idx=1&sn=5dd15bfead5ec12c095022c0b8ed9df3&chksm=cfcabb6bf8bd327d0691eb8c03d1fa2b25a7f32dd9f23e589a69c9b7ab069de135a8889662ac&scene=58&subscene=0": "【更新】PHP CGI Windows平台远程代码执行漏洞发现在野利用", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544360&idx=1&sn=43e24e352d568f740891054b2bacb487&chksm=c1e9a279f69e2b6f3b39972e2e9eb6af1d95a59b8ce006a50c54804764fb3594e0588137aa7b&scene=58&subscene=0": "Forescout报告显示：物联网漏洞激增，成为黑客攻击的关键切入点", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247510724&idx=1&sn=452ee38da734f36eaa7d67ebbe1f52b0&chksm=ea665db3dd11d4a5cee6e19d14ef3bab1c5da7b604742980f1fb8f75624966acc9e59e1842e9&scene=58&subscene=0": "PHP CGI Windows平台远程代码执行漏洞(CVE-2024-4577)已发现在野攻击！", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519726&idx=1&sn=0763c56c20d23383e9286aff08fcb684&chksm=ea94bc84dde33592dea1d47bb7a112dce8d7526355e0eb9087b97befe21f000b804c9146426c&scene=58&subscene=0": "Arm：Mali GPU 驱动中的0day已遭利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519726&idx=2&sn=d94ad8ee115123318833dea4701e52e3&chksm=ea94bc84dde3359285fcce690b888a8def820c78d7da98ec18b16b66c8a1678db87e67d89382&scene=58&subscene=0": "微软六月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494948&idx=1&sn=7105607c658f8821456492745233d9a2&chksm=e8a5e747dfd26e51548565a98ec5c8b540b86b90a98c4d44fe87a21e135d6449f75572c3334f&scene=58&subscene=0": "实战:逻辑漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkxNDU2ODc0Nw==&mid=2247484068&idx=1&sn=520104bb581194866957ec194c033790": "SLMS智能照明控制系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247624235&idx=3&sn=e359aea615ab8b7f93f282731e2e35ba": "美国削减国家漏洞库预算，或造成全球网络防御基础数据缺失", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484435&idx=1&sn=aa95c3ea1d670a64521f4dee9da8a607": "【新】用友NC-oacoSchedulerEvents-SQL注入漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488365&idx=1&sn=2f8676f49acf784fb92ca2a50904b336": "【漏洞预警】Whoogle Search文件写入漏洞（CVE-2024-22204）", "https://mp.weixin.qq.com/s?__biz=MzIyMDAwMjkzNg==&mid=2247513279&idx=1&sn=8c0cd8aa921dd2d3b9a3640a0d301125": "一个漏洞库", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486551&idx=1&sn=1c2c8960ddcdd696338beedc9da53ad0": "Rejetto HTTP File Server 存在远程命令执行漏洞CVE-2024-23692 附POC", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247490458&idx=1&sn=efd58b683fd26478419ae55b826f4a3b": "漏洞复现 | Rejetto HTTP 文件服务器未经身份验证的 RCE【附poc】", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652061545&idx=3&sn=5ef59f2343edec1154373cd283a1ccf8": "【安全圈】白帽报告苹果 Vision Pro 特有漏洞，或可导致空间计算黑客攻击", "https://mp.weixin.qq.com/s?__biz=Mzg3NDc3NDQ3NA==&mid=2247484471&idx=1&sn=c59126faa29529fa727f002cedb19069": "HTTP File Server RCE一键利用工具，大量资产未修复！", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247518930&idx=1&sn=6be6e3a2194a95b5199f1414a2f8107d": "2024-06微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489353&idx=1&sn=781f0ca9c994925f31a829c45b12ce4b": "不止一家全球知名半导体公司出现新漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664215962&idx=3&sn=89b385a7b6135a0f56873e2bcc07068e": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664215962&idx=4&sn=666a0faedd648f610e44feeb856cc525": "CNNVD | 关于PHP操作系统命令注入漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458558911&idx=2&sn=020187014e4c0ceb0710b20fb338e22a&chksm=b18d913586fa1823f7af2f61ca2882d6aea4b3c085be9b01a48c2725aa10b4b68288a5663ea5&scene=58&subscene=0": "ARM Mali GPU驱动程序中的零日漏洞正被利用", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458558911&idx=3&sn=6dcbd9ebd0e7a4b265aa00818a070728&chksm=b18d913586fa18231d2586cefa305256cb6033666efdde4fa309145511b6c2f3b39b93402ae2&scene=58&subscene=0": "二进制系列之Pwn篇-逐步掌握二进制漏洞挖掘的技巧和操作系统底层知识", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519734&idx=1&sn=fcc36eded6f81b0c6a5496090527e207&chksm=ea94bc9cdde3358abfe399d7142f16536018699b0dedc6a6d9566915c0a7341a60b1d647e397&scene=58&subscene=0": "谷歌：Pixel 固件0day漏洞已遭活跃利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519734&idx=2&sn=e2956d27d020b75520e84dc6e02b483a&chksm=ea94bc9cdde3358a09b0520a5e8b66690030282303eda23770be759f6755bff0fd841526d768&scene=58&subscene=0": "Fortinet 修复 FortiOS 中的代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511934&idx=2&sn=f76185da488d539a915e14f3e935238a&chksm=ebfae85edc8d6148e9db41e8f81ebb7deabd78afe775fae00a980342a8ad98815175fbdb6330&scene=58&subscene=0": "美国削减国家漏洞库预算，或造成全球网络防御基础数据缺失", "https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657165502&idx=1&sn=b1f7b81f2d70c1710c362dfce554f245&chksm=f1d4d25bc6a35b4dc264bba481dd84c9ad3f7ecc87ee54ad1551b0317d661c2ae846efae73dd&scene=58&subscene=0": "【成功复现】用友NC系统JNDI 远程代码执行漏洞(JNDI)", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544382&idx=1&sn=898c7d727044b27820014878692a7611&chksm=c1e9a26ff69e2b79500d4ff09344fafb75e603232df9e977edd5b19f4aceac798306043d874e&scene=58&subscene=0": "人民网转载报道本公众号原创文章“首个国内自主挖掘的RISC-V处理器设计中危漏洞研究”", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544382&idx=3&sn=7ad094ef6c5c7f55fe81906e66cd9f87&chksm=c1e9a26ff69e2b799079ea21c6c741609595f60234a239420ff4dabc923f8c4d3ec2d5b707a5&scene=58&subscene=0": "全球知名半导体公司Arm和Nvidia新漏洞揭露", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544382&idx=4&sn=2d5100f8229908daa67b6419998e4f34&chksm=c1e9a26ff69e2b792518663d45006e01a791219829583bb6d9f9619fc9dfd6381f172131b2a6&scene=58&subscene=0": "白帽报告苹果Vision Pro特有漏洞，或可导致空间计算黑客攻击", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650979026&idx=1&sn=7aa8dce637a665cd7f929f18a665dd69&chksm=8079f8e0b70e71f6fcaed5ab7cbe556fe427b66f9c40a19bea137686b9d56fc7387b15dd3685&scene=58&subscene=0": "原创 Paper | CVE-2024-2961 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664215962&idx=3&sn=89b385a7b6135a0f56873e2bcc07068e&chksm=8b59b763bc2e3e757f2b4cec512e2ba20b77a38e3fa2871a990125362f2419105cf5ee556fa6&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664215962&idx=4&sn=666a0faedd648f610e44feeb856cc525&chksm=8b59b763bc2e3e750408576785a12f90a33415639934f3bcdfa1bf3077177d2965cb39781b16&scene=58&subscene=0": "CNNVD | 关于PHP操作系统命令注入漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247545325&idx=1&sn=844beab2371107f9cc99af4e5f806b4a&chksm=fa93872ccde40e3af0ee0c418dc145df7417aff5d33523ba2ed8598e384e564dbbbd78c24b77&scene=58&subscene=0": "人民网转载报道本公众号原创文章“首个国内自主挖掘的RISC-V处理器设计中危漏洞研究”", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523172&idx=1&sn=4a52568dcd1a2cb9f52585470f26c721&chksm=ce461074f93199620078293b7c21f8235e9f6c27bc99cf104243531d6b28cfa464f3608bb19f&scene=58&subscene=0": "【二次通告】PHP CGI Windows平台远程代码执行漏洞(CVE-2024-4577)", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499190&idx=2&sn=9f4c967e182c1106fd19d5df303fc87f&chksm=973aced4a04d47c29c17a7b12ad2f455fed57c041cc51ef91a017a6baa6054d9db6f237161b8&scene=58&subscene=0": "CNVD漏洞周报2024年第23期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499190&idx=3&sn=b720bc5674a7555f2fa97448ec7d14b7&chksm=973aced4a04d47c2a13bf2e6ab1f5f83c0f1b0ecd5315ddde312583ae875e2d46d70f30e7044&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240603-20240609)", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247518930&idx=1&sn=6be6e3a2194a95b5199f1414a2f8107d&chksm=eb7054eddc07ddfbf1c73883c3c897dc77d2e2bfa5cc25f37256d7ec0777e3e80e6badae7fc2&scene=58&subscene=0": "2024-06微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494955&idx=1&sn=1f0c718da0e35d6cbf9e144fbda499d2&chksm=e8a5e748dfd26e5eba43c00aa8ebcedc0ee28326d136db4de396571b117dbeb36cabadd453ce&scene=58&subscene=0": "五千块-某金融赏金SRC漏洞案例", "https://mp.weixin.qq.com/s?__biz=MzkyNTU3MjA3OQ==&mid=2247484963&idx=1&sn=7907f50ae9f81d0405709d6263af37c4": "【代码审计】RBAC权限管理系统-SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484446&idx=1&sn=72c5dec36e505a211a50e97281f4329f": "29网课交单平台 epay.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247624279&idx=4&sn=68719e8165d9ffd771f56421c1e13513": "无法修复立即删除！谷歌 EmailGPT 曝零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzYxMDQ2MQ==&mid=2247484713&idx=2&sn=2a4c56295ed0d3975bb0ccafd3a57f9f": "华天动力OA登录绕过漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652061675&idx=1&sn=23b2d19c63d917c220518dec1eac717c": "【安全圈】卡巴斯基在中国生物识别访问系统中发现 24 个漏洞，凸显身份验证系统风险", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247558407&idx=1&sn=b619eb391027ca4ea795daf92f83070a": "临兵漏洞扫描自动化渗透系统", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247491606&idx=1&sn=40a388ab639e5c8433fd78d09c24cc2d": "XXL-JOB executor 未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247610152&idx=1&sn=84118eeb186f092973307c56223743f8": "车联网-站在研发视角挖漏洞 - 小米", "https://mp.weixin.qq.com/s?__biz=MzkyNDYwNTcyNA==&mid=2247485451&idx=1&sn=2c6eef0b61d7e001b9a072e974dbd663": "【漏洞复现】PHP-CGI Windows平台远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTcyNjU4Nw==&mid=2247485250&idx=1&sn=42fadf4a40bab94ab8937b6ee9897a10": "漏洞分析|PHP-CGI Windows平台远程代码执行漏洞（CVE-2024-4577）", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484590&idx=1&sn=c852bde1e425d508ee6aa5ca95d82798": "「漏洞复现」英飞达医学影像存档与通信系统 Upload.asmx 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247520073&idx=2&sn=4c7594159b1f0faaf2836aaea1b364f2": "美国削减国家漏洞库预算，或造成全球网络防御基础数据缺失", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247488648&idx=1&sn=26c917f1ac891f9a3bf00fb09f2b0dbd": "Mitel IP 电话未授权RCE漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650594891&idx=3&sn=98ba61e5d0731044d4fdc6fe347dc700": "存储桶OSS遍历漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg4NjI0MDM5MA==&mid=2247485228&idx=1&sn=6c086634e9c3523cc1f4e1230908bf16": "【漏洞复现 | 含批量POC】泛微e-office-mobile_upload_save 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486577&idx=1&sn=500f84ae463ef70e2b0c5bb53d30af5e": "fastAdmin开发框架lang接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247500776&idx=1&sn=fcf677fb33ff9b9585edf36340eb8a0d": "记录某次攻防演练中几个有趣的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247485407&idx=1&sn=e486fa7f62758ae2f27115e20dcf306e": "企业SRC实战案例-时间校验漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247486197&idx=1&sn=9fee96052b1f16e782a6d1ceed9a9346": "0day预警 | Windows WIFI驱动远程代码执行（CVE-2024-30078）", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247513166&idx=1&sn=f31c1636b18dab80795263e81033acf5": "一键漏洞扫描神器 -- NetsparkerV24.6（6月13日更新）", "https://mp.weixin.qq.com/s?__biz=Mzg4MjY5MDE4NA==&mid=2247483881&idx=1&sn=1a07a6cf5a211ce2a551f59769cfbfe3": "FastAdmin任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjIwMzM5Nw==&mid=2247488572&idx=1&sn=0717a3816ccff8bdb32f670a594ec91a": "Windows | TellYourThePass近期利用PHP漏洞实施勒索攻击", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247509420&idx=1&sn=95e27cc359bb901743a6455e14d6e331": "ICONV，将字符集设置为 RCE：利用 GLIBC 攻击 PHP 引擎（第 2 部分）", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247488667&idx=1&sn=8b1673a4e8da4fea21f0069fe2c5c709": "Iconv 实现PHP引擎RCE part2", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652061730&idx=4&sn=947d04cf52ea4a73891745fddb3414e8": "【安全圈】微软修补可能很快被利用的零点击 Outlook 漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651285810&idx=2&sn=4bb67121da193509e7fc9b2c4aae8151": "华硕曝出高危漏洞，影响 7 款路由器", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247497440&idx=1&sn=bd797f6a2fc78bab38df0eb935711750&chksm=e84c503fdf3bd929845aed7c0ad26487f8f1bbfaf96f3d3b4a9cddfe30733f8fc2c826dce027&scene=58&subscene=0": "【公益译文】设计安全警报：消灭软件中的SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501318&idx=1&sn=df41421f8b47f09554de975ada1d3ca9&chksm=fe79e29ec90e6b887547a4e3809143e1fadba6ceab773886f5a7526de10956315bccffad96c3&scene=58&subscene=0": "安全热点周报：Black Basta 团伙利用 Windows 零日漏洞全球勒索，多个在野漏洞引发广泛关注", "https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657165506&idx=1&sn=bef814dd011825098a8a413911c7ed03&chksm=f1d4d227c6a35b31ee83e172332ede054f61fc3cefdf8fbca8221b874ecc9d8b69fff1bf7091&scene=58&subscene=0": "护网来临再爆核弹，Wi-Fi 接管攻击-CVE-2024-30078", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519766&idx=1&sn=e5617e80059a29c20c16b011271e8511&chksm=ea94bf7cdde3366a40c735785d2003fbc49acc442aa93976fea8022789285571f11532bd03a9&scene=58&subscene=0": "华硕：严重的远程绕过漏洞影响7款路由器", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247545372&idx=3&sn=2b32d079be8099c164ecdc40211e3ec8&chksm=fa9384ddcde40dcb540403eb3a5715785a079ff7aeffbf16cd55e5feabb7e853f302d213d16a&scene=58&subscene=0": "500万美元！天价安卓0day漏洞暗网开卖", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247575750&idx=2&sn=45c5645081961c30b314d2ba160548e6&chksm=e91478fcde63f1eafbd261a0be431bf8485296171ac694cf9edace23a986a025f2506e9efe7d&scene=58&subscene=0": "安全动态回顾 | 网安标委“数据安全标准与能力建设研讨会”在南昌召开 谷歌宣称Pixel固件零日漏洞可能被利用", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544429&idx=3&sn=419dd67c6001dfbf39b4346472a842ec&chksm=c1e9a23cf69e2b2ad8fdf1214cd85f0ae8df67c28da51f3eef40433f3efff420cbc3fbddb145&scene=58&subscene=0": "无法修复立即删除！谷歌 EmailGPT 曝零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494900&idx=1&sn=021d050b9be09e49bf2c55691bb34c73&chksm=fd74dc3dca03552be846659e9f0f45de7c38ffe7c31564e836a516628c2046dc8d6427317291&scene=58&subscene=0": "CNVD漏洞周报2024年第24期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494900&idx=2&sn=036b1a0b2626fa919cf689d1ee1a3098&chksm=fd74dc3dca03552bfc8c1328a56cd3bbe5517777cb8447c7a2344e9b7d3d5c1134e509534a80&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240610-20240616)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486589&idx=1&sn=28a33953f3c2b8607bf5ea5dcab765bf": "Hikvision海康综合安防管理平台存在远程命令执行漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247484649&idx=1&sn=57745f0af7b68905c05deeec652272b3": "Apache OFBiz 目录遍历致代码执行漏洞（CVE-2024-36104）", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247485440&idx=1&sn=2f5fb1003012aa39b5090fbde5c8dc57": "SRC简单中危漏洞--618大促！！师傅们来看看吧！！", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247485440&idx=2&sn=2ac45be14b71980266050889d8b0f0b0": "企业SRC实战案例-时间校验漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247486892&idx=1&sn=9fdaaf95ec97f48a853a0868eb6c9647": "漏洞挖掘|从实战中学习漏洞挖掘与渗透测试流程", "https://mp.weixin.qq.com/s?__biz=MzI1NzQ0NTMxMQ==&mid=2247489669&idx=1&sn=0c04c98a07002689ac802ace2beae6e0": "国家信息安全漏洞库（CNNVD）2023年度工作总结暨优秀表彰大会成功举办", "https://mp.weixin.qq.com/s?__biz=MzkyNDQ5NDM3OA==&mid=2247483903&idx=1&sn=a9135a04fb0226a937bc2b46420d4f6b": "记录一下自己第一个贡献值破百的漏洞（小米src)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652061782&idx=1&sn=e8894306d0de41042737e971d78c8b8a": "【安全圈】华硕曝出高危漏洞，影响 7 款路由器", "https://mp.weixin.qq.com/s?__biz=MzU3MDEwMjk2MQ==&mid=2247485076&idx=1&sn=1c9481e2c232d39f4414ebf44d15ce8e": "Nginx日志分析实战：揭露4种CVE-2023-1389攻击手法，加固网站安全屏障", "https://mp.weixin.qq.com/s?__biz=Mzg3MTcxNDUwOQ==&mid=2247484008&idx=1&sn=5741c10bcc621a60355eb20f2ada798d": "Fastadmin 前台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486601&idx=1&sn=79ce1b6dfd0752f45c55a956f9965c1c": "CRMEB电商系统api∕products存在SQL注入漏洞CVE-2024-36837 附POC", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511975&idx=2&sn=51c504be3959e1bf389ceda027ef2111": "大语言模型利用零日漏洞取得重大突破", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247494112&idx=1&sn=384886689f5da7c430dd0c39144cfca8": "【论文速读】|对BusyBox进行模糊测试：利用大语言模型和崩溃重用挖掘嵌入式系统中的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652061822&idx=1&sn=818ab7c696f0abf2c84aedd40ddaa98b": "【安全圈】VMware 关键漏洞修复程序已发布，请立即更新", "https://mp.weixin.qq.com/s?__biz=MzUzNjg1OTY3Mg==&mid=2247491411&idx=1&sn=88133ad85f76b61b2747524f5e9047eb": "华顺信安获评CNNVD“年度漏洞消控优秀贡献奖”、“年度优秀技术支撑单位”", "https://mp.weixin.qq.com/s?__biz=Mzg2MDU5NjI0Mw==&mid=2247489841&idx=1&sn=ad440ab088a35137486da56ad04613da": "LLSRC 新增漏洞收录范围啦，还有翻倍奖励等你来！", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519800&idx=2&sn=9ec908fe16262acbc252fd098d15c022": "Mailcow Mail Server 在多个漏洞，可导致RCE攻击", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651449640&idx=1&sn=099195ee328e5529a623c60dd0697859": "信息安全漏洞周报（2024年第25期）", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247484250&idx=1&sn=7641a915ae129785a130536136ec6504": "讨论：这算不算逻辑漏洞？", "https://mp.weixin.qq.com/s?__biz=MzUzNTkyODI0OA==&mid=2247527152&idx=1&sn=ccf580121d3afec5e2ae3972768ac07c": "i春秋助力 | 字节跳动安全范儿沙龙「漏洞挖掘」专场", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511975&idx=2&sn=51c504be3959e1bf389ceda027ef2111&chksm=ebfae887dc8d61914e1e857ef1e3658bde3c982533b4162ef246707d30c9fab3d656a79123bb&scene=58&subscene=0": "大语言模型利用零日漏洞取得重大突破", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519800&idx=2&sn=9ec908fe16262acbc252fd098d15c022&chksm=ea94bf52dde33644457b4d870edd134788bdcb6d02584e80e2a64368745b08528e163911c2fe&scene=58&subscene=0": "Mailcow Mail Server 在多个漏洞，可导致RCE攻击", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247572358&idx=1&sn=625eee7c77e8008d771dcb1f0ece5c93&chksm=9f8d4b8ea8fac298755b5ed5d56cf9c1fffdea52c9ef7c748ada036477016d3af64a917c4a2b&scene=58&subscene=0": "连续上榜！360荣获中国国家信息安全漏洞库（CNNVD）多项荣誉", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzc3MTk3Mg==&mid=2247488664&idx=1&sn=c8c57643a924ebd60b71ff011e5aa1e0&chksm=cf8412b3f8f39ba5b3dc6a583047688bfa21e2ad6b8aebb6da5f0fb4ac77c1c23b299af6b466&scene=58&subscene=0": "攻防演练场景下的漏洞挖掘与治理 | 安全范儿沙龙开启", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486614&idx=1&sn=59b11180ff49c681b6eaa049e27549aa": "Hikvision海康综合安防管理平台applyAutoLoginTicket接口存在远程命令执行漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247513223&idx=1&sn=ab9bd1daeb3b3e41c6b389be17f4d917": "漏洞管工具 -- miscan（6月17日更新）", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247513223&idx=2&sn=deec9d24456e35ee9dec41f7f4a9e8d0": "红队实战教学 -- 如何通过自动化POC检测来识别软件中的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495011&idx=1&sn=9cef8ce1aba44f3c87899de5413be4c7": "重定向跳转 -> XSS漏洞 -> 升级高危", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247485564&idx=1&sn=01ab46c46d2f4688b09971959cb5d265": "揭秘PHP反序列化漏洞-入门：黑客是如何入侵你的网站的？", "https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247492662&idx=1&sn=d4396450c3e49ec4a93a6b1f46abe5bc&chksm=979a1f93a0ed96859300c5592236d69b8a92992125370ba5ef58a1c990d60f6f7cbbf6bfb364&scene=58&subscene=0": "【喜报】锦行科技荣获国家信息安全漏洞库“年度漏洞消控优秀贡献奖”", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458559406&idx=2&sn=632576348965a5b970f63750e623de27&chksm=b18d932486fa1a32f79c2c3ed2499f3287efa961c86065b0101526eee067da0aee0ea5a0b7eb&scene=58&subscene=0": "白帽黑客还是敲诈勒索？某安全团队疑似在披露漏洞的同时盗走300万美元加密资产", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247545449&idx=3&sn=b75c1e95ef4d6034c5716763b61244b3&chksm=fa9384a8cde40dbe6b8e1baf006ed07d8057ab12db6bdf7b7d12c5086667b6b45736572dd38b&scene=58&subscene=0": "CISA 称 Windows 漏洞可能被利用于勒索软件攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NzI2OTExNA==&mid=2247516770&idx=1&sn=b76958f8d8d03c4ba401ea1d1cec39f3&chksm=ea83a4f7ddf42de199c6200445895de96ff029c95934129d5444360cacd5f7c1911c3a2f9a77&scene=58&subscene=0": "【MiSRC助力】攻防演练场景下的漏洞挖掘与治理 | 安全范儿沙龙开启", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523217&idx=1&sn=99457fc50e091dbf5fd016828db202c0&chksm=ce461081f9319997e28ca55e40d370ec83285adf0e865be13cefbb37bbdd2df9280b4604f6c4&scene=58&subscene=0": "【漏洞通告】Rancher Kubernetes Engine敏感信息泄露漏洞（CVE-2023-32191）", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495011&idx=1&sn=9cef8ce1aba44f3c87899de5413be4c7&chksm=e8a5e700dfd26e167e030e318840386c2f4d2719e894307a76b1e71080552fae4e9cbb071eff&scene=58&subscene=0": "重定向跳转 -> XSS漏洞 -> 升级高危", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247517362&idx=1&sn=bf370ee0118a504e97617f2856bf84c4": "干货 | 挖逻辑漏洞整理合集", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495016&idx=1&sn=3e28c5141d52ee5228fb7933981b2d56": "漏洞挖掘之二维码功能点", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247498282&idx=1&sn=355f7616565e52048ba94ec4627bb2e9": "G.O.S.S.I.P 阅读推荐 2024-06-21 漏洞猖狂，硬件帮忙", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247572465&idx=1&sn=4700b25b79ff92902644872cf1c687ab": "157个红队目标打点漏洞，95%严重高危，有POC、有修复方案的送分题千万别丢！", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488423&idx=1&sn=a97da2d8e92479332e4b481ba47e9ffc": "【漏洞预警】NVIDIA Triton Inference Server 远程代码执行漏洞 CVE-2024-0087", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488423&idx=2&sn=df414fe31d803e2f12a2c26010744a99": "【漏洞预警】MingSoft MCMS任意文件上传漏洞（CVE-2024-22567）", "https://mp.weixin.qq.com/s?__biz=MzkxMTUyMjUxMw==&mid=2247522598&idx=1&sn=090870c38862993db7c339fb4daa0d80": "【漏洞情报】核弹漏洞 CVE-2024-30078 WIFI POC已经公开", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499517&idx=2&sn=62c17a5c04483cd1480d11d360265369": "【漏洞通告】NVIDIA Triton Inference Server 远程代码执行漏洞（CVE-2024-0087）", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzc3MTk3Mg==&mid=2247488707&idx=1&sn=b84579427ed989c61f0055c8a4c11f15": "Apache OFBiz 命令执行漏洞分析（CVE-2024-32113、CVE-2024-36104）", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247485883&idx=1&sn=57ff717773d84772bb8f3d2bb10db631": "CVE-2023-5002 pgAdmin <= 7.6 后台命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NDgxMzgxNA==&mid=2247495934&idx=1&sn=281270fe42f5c0e08c142c7fe5cd1eb0": "每周安全速递²⁹⁸|CISA警告Windows严重漏洞被勒索软件组织利用", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247558618&idx=1&sn=422dbb6071b59721e40b472a798cd0f9": "0day预警 | Windows WIFI驱动远程代码执行（CVE-2024-30078）", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247498282&idx=1&sn=355f7616565e52048ba94ec4627bb2e9&chksm=c063d4f3f7145de5d8e4bb7aa2c0415482c5a5eae06acd791ffe1e0c9d4e8bd1dde9c8c0f474&scene=58&subscene=0": "G.O.S.S.I.P 阅读推荐 2024-06-21 漏洞猖狂，硬件帮忙", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247493517&idx=1&sn=b27a79376a45c9017cb6e59466ce4c79&chksm=fa78e6c1cd0f6fd7242a09eb113da53a1c4ecb05243db94b659757f768fc1b59e44bece553c4&scene=58&subscene=0": "【最后五天】众测挑战AI 大模型，单个漏洞奖励最高可达8w！", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247572465&idx=1&sn=4700b25b79ff92902644872cf1c687ab&chksm=9f8d4bf9a8fac2ef8b33453eae5abcc5cf300d951051a303b7c00b90e5f41b5487d0bb4a59b4&scene=58&subscene=0": "157个红队目标打点漏洞，95%严重高危，有POC、有修复方案的送分题千万别丢！", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495016&idx=1&sn=3e28c5141d52ee5228fb7933981b2d56&chksm=e8a5e70bdfd26e1da89eef0374d4b2d26f611feb693548d5e1763f2431b9b9462e91349048c0&scene=58&subscene=0": "漏洞挖掘之二维码功能点", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzc3MTk3Mg==&mid=2247488707&idx=1&sn=b84579427ed989c61f0055c8a4c11f15&chksm=cf8412e8f8f39bfe2183baa2d8662cc3c6fad8dfffc6819e68675dc81c3250a82268c9b373b7&scene=58&subscene=0": "Apache OFBiz 命令执行漏洞分析（CVE-2024-32113、CVE-2024-36104）", "https://mp.weixin.qq.com/s?__biz=MzkwMzY5NzgzNg==&mid=2247483724&idx=1&sn=361129bfe56f1f32ecea108b728cd430": "春秋云镜 CVE-2023-2130", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484647&idx=1&sn=205dd6ef02b4a10b4e5f3fd41a9dc8d8": "「漏洞复现」学分制系统 GetCalendarContentById SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NjI0MDM5MA==&mid=2247485320&idx=1&sn=cc0a0318f846b4cedd3d58d26af3243b": "【漏洞复现 | 含批量POC】锐捷上网行为管理系统 static_convert.php 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247488778&idx=1&sn=e7c96e6ad1c3ee713da25b1359427dcf": "智能合约漏洞入门（7）- 调用注入", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247509629&idx=2&sn=f24528ddfa6a574c85434c9a9a619bdc": "CVE-2024-28397：js2py（JS 解释器）沙盒逃逸，绕过限制执行命令", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247509629&idx=3&sn=98c5b52e70563cc3442221bacdc900f0": "Apache Kafka UI 中的远程代码执行 （RCE） - CVE-2023-52251、CVE-2024-32030", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247610888&idx=1&sn=66896355992d0c82df934af5f228a87c": "磕磕绊绊的sql注入漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkyMDUzMzY1MA==&mid=2247498818&idx=1&sn=04151b66e5f2d3d50d94eecb651b65df": "web 0day 大全（一）", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650595368&idx=3&sn=2aef28ca018a89d69d5ac891d1135a70": "记一次磕磕绊绊的sql注入漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247489346&idx=1&sn=4db491eafc77beaad485e5784cc44893": "漏洞预警 | JetBrains IntelliJ IDE信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247489346&idx=2&sn=48d9b1140e8a9101f326ac208575c623": "漏洞预警 | Magento Open Source XXE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247489346&idx=3&sn=6f4bb6a6dfd668ed05c2366d54ef2196": "漏洞预警 | Windows Wi-Fi驱动程序远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486626&idx=1&sn=ffb1cfde2680e1ba65b9a128fbf09378": "Zyxel NAS系统setCookie接口存在远程命令执行漏洞CVE-2024-29973 附POC", "https://mp.weixin.qq.com/s?__biz=Mzk0NDU5NTc4OA==&mid=2247484081&idx=1&sn=bbfe4c1bf255c0e88ccdd2088305ba72": "src | 奇怪的任意用户重置密码组合拳漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247486221&idx=1&sn=d1f40781ecfb8e7620174e3937b063ad": "漏洞预警 | Triton Inference Server for Linux远程代码执行漏洞（CVE-2024-0087）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062045&idx=2&sn=04156204e5a5e50f4b58d3075efc7e3c": "【安全圈】微软发布紧急更新，修复Windows系统重大Wi-Fi漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1NTM4ODIxMw==&mid=2247500780&idx=1&sn=1b7346d7e7262f5b785a570f045b5b2c": "干货 | 代码执行高级方式--APC注入 回调函数 映射注入 函数踩踏", "https://mp.weixin.qq.com/s?__biz=Mzk0MTY5NzYyOA==&mid=2247485064&idx=2&sn=631851bab420dddb4ef6b1a326d98d48": "【漏洞复现】天喻软件数据安全平台 deviceid 存在SQL注入", "https://mp.weixin.qq.com/s?__biz=MzA5NzEwOTUzMw==&mid=2447979963&idx=1&sn=d265161d565ea712228a8c9d318031ca": "借助大模型提升甲方安全漏洞发现和修复效率", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247484558&idx=1&sn=c80e31af68613955a6d8d41a69463a69": "CVE-2024-29973 Zyxel-NAS设备存在远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NjI0MDM5MA==&mid=2247485332&idx=1&sn=8c8a92ce2276c4cda4aa186240b99c58": "【漏洞复现 | 含批量POC】Zyxel-NAS设备 setCookie 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0NDI5NTY4OQ==&mid=2247485743&idx=1&sn=2e24257247537afe562abc045f172f2c": "Frida Hook（四）- 通用漏洞挖掘实战思路", "https://mp.weixin.qq.com/s?__biz=Mzg5ODE3NTU1OQ==&mid=2247484406&idx=1&sn=4ebabbc7065f50f5a101437e02b5f55d&chksm=c067c4def7104dc8206967f2a8225623f32d44c22eaad3bb8594190747919d4f2b16c4d59d9c&scene=58&subscene=0": "SinkFinder - 闭源系统半自动漏洞挖掘的尝试", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486639&idx=1&sn=d36f6c246946f1914a7a0cd162746367": "XWiki DatabaseSearch 存在远程命令执行漏洞CVE-2024-31982 附POC", "https://mp.weixin.qq.com/s?__biz=MzU3MTU3NTY2NA==&mid=2247488569&idx=1&sn=ea7e9271ed5d82a5d98a8d120af585c2": "New | CVE-2024-26229 Windows 提权漏洞（附EXP）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488429&idx=1&sn=a984bda188c125e5f81a48b7088eae2f": "【漏洞预警】Apache Kafka UI 需授权 反序列化漏洞CVE-2024-32030", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247517407&idx=2&sn=c39acbe4e6a175424400e50b228e3303": "开机，关机。chatGPT RCE", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651287383&idx=3&sn=5985623adb460b6ebb941b21b6906f13": "支撑单位遴选|关于开展2024年工业和信息化部移动互联网APP产品安全漏洞专业库支撑单位遴选工作的通知", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501436&idx=1&sn=be2a778d2d89d8e4eba601f99f49e1be&chksm=fe79e2e4c90e6bf211362c381750088da928663286ac4f4b77f5a31b8450f5821ebf58803716&scene=58&subscene=0": "Apache Kafka UI 远程代码执行漏洞(CVE-2024-32030)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494944&idx=1&sn=e6548de8c7b74db8fab5b02dd811c08b&chksm=fd74dde9ca0354ff3e45086961c2c6eac16e410eec18485c1bb1e9992e8216666b49069aa5e2&scene=58&subscene=0": "CNVD漏洞周报2024年第25期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494944&idx=2&sn=ecd213a9dc0a7eef9d66124e1c0497bb&chksm=fd74dde9ca0354ffbe32e8495d64e46e78e8a12bfe7837f9b5026caedd0966197fd7c968ee35&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240617-20240623)", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247506730&idx=1&sn=9485ea111b50fc3097e820849a2b4205&chksm=fa520e94cd258782911c90cb418b3b1dadaab27074c2d9183a7a4148d67e20b22f07f7269fcc&scene=58&subscene=0": "Vivotek CC8160 固件栈溢出漏洞复现分析", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247575872&idx=2&sn=ad0fd3b6e74c6720e4889ad89173f58e&chksm=e914797ade63f06cb8504c5a7d8a92e30e71c0fd48caccdf6234ee4be844cfff3d7feb6a7ff4&scene=58&subscene=0": "安全动态回顾 | 工信部通报22款侵害用户权益行为的App(SDK) Phoenix UEFI漏洞影响数百款英特尔PC型号", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247486378&idx=1&sn=46e8b5185f9aa58aaa0eff98dac0a93e&chksm=c2229353f5551a4575bc5a135b8cd678100dff6d37ff170516a27add2bae886290e69dd15a9f&scene=58&subscene=0": "showdoc sqli to rce漏洞利用思考", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247506078&idx=1&sn=796cc9d6a8a14eb0bc2a06aea13a1716&chksm=cfcabb8af8bd329cb5055db5715804d9cd0bbcb0a39bcfcf86154709b4026d4228f5e18fcc31&scene=58&subscene=0": "漏洞通告 | 蓝凌 EKP 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495045&idx=1&sn=8e00061164537579320f9c558a697996": "漏洞挖掘|从实战中学习漏洞挖掘与渗透测试流程", "https://mp.weixin.qq.com/s?__biz=MzIxNzY1MTc1OA==&mid=2247484011&idx=1&sn=a903a6a4c02f20931a2dc6253a81f9e6": "ctfshow之无字母数字的命令执行", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488437&idx=1&sn=1d3a0b0ea9076b6c9bacd0e179c158c1": "【漏洞预警】MailDev 2远程代码执行漏洞（CVE-2024-27448）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488437&idx=2&sn=c4b69497439006211028c2bfe2b8dce2": "【漏洞情报】MetaCRM6存在文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247492722&idx=2&sn=4b076ed9215ee1c2ab87b19e7db8b31f": "15款热门企业级漏洞管理系统可用性分析", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486679&idx=1&sn=2c1832570498df9be3f8886502dedf6d": "真内控国产化开发平台preview接口存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486679&idx=2&sn=097e556ae9eb83e35f40ad30225495f2": "通天星CMSV6车载定位监控平台merge接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523349&idx=1&sn=e3e53416bea5fb0b0aba19610415f9de": "【漏洞通告】Apache Kafka UI 远程代码执行漏洞CVE-2024-32030", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523349&idx=2&sn=9a07cddfe92cd4ebb055941e106e424b": "CNVD漏洞周报2024年第25期", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247490995&idx=1&sn=4433f27de6d18fe15fbbc668059eaa71": "一款简单好用的漏洞管理工具", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY3OTc5Mw==&mid=2247484283&idx=1&sn=8abd5a49d6cbb1de225affe1d05f31d8": "【漏洞复现】WIFISKY 7层流控路由器index存在命令执行漏洞 | 附poc", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651130754&idx=1&sn=745215e991ceb85458f387e47875bd1e&chksm=bd15bb518a623247e5fbfb384008e67fc7de7ad4de066d8aee3ec9378497d3ec345f649e9008&scene=58&subscene=0": "15款热门企业级漏洞管理系统可用性分析", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501449&idx=1&sn=f1dbb2d68cb71bfb98d0ff9d87fbdcb8&chksm=fe79e211c90e6b0767de1e428fa983f3bdf843fb24c6cc50dfd4eba6f3ca35101d2dd33b9680&scene=58&subscene=0": "Ollama 远程代码执行漏洞(CVE-2024-37032)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502962&idx=1&sn=8040a64c6a755cc0a5f40150cc2a6c57&chksm=f2585801c52fd1177c7603d27e752667d529bbb37cc7184d6d1f734d28a73f3a2354a3a367de&scene=58&subscene=0": "雷神众测漏洞周报2024.06.17-2024.06.23", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519855&idx=1&sn=7088d05b2e6a3cdf56986e480ea5119e&chksm=ea94bf05dde3361305094408f06ff54a8d271116378e3c9f710153b2dcb7f133fb984b7373ff&scene=58&subscene=0": "Ollama AI 基础设施工具中存在严重的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499202&idx=1&sn=910fdfa8893c0f40379b745fa5e21ea1&chksm=973acea0a04d47b63e9a1e9aa90ca9a67cbfb15dd7686417f81791684be3d7f9d749991cb35b&scene=58&subscene=0": "CNVD漏洞周报2024年第25期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499202&idx=2&sn=a432df29e50b2da02e699d4e1d3212aa&chksm=973acea0a04d47b654dd9a1092a8a86ec8580c1a4a6064349a0404214e86251e31e6b44d7a4e&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240617-20240623)", "https://mp.weixin.qq.com/s?__biz=Mzg4Njg3MDk5Ng==&mid=2247486640&idx=1&sn=ea628abeb1424e172b7694a73798f0d2": "FastJson-RCE (CVE-2017-18349) 漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489425&idx=1&sn=27ec685f8cf5605c6379cd0ad4e676e6": "Apple 修补了可能允许窃听的 AirPods 蓝牙漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495055&idx=1&sn=f25709c65a4f829bc4bc891d1259c22c": "一次报错所引发的五千漏洞赏金记录", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523359&idx=1&sn=bffc166bc1eab423df5345120d709e28": "【漏洞通告】Progress MOVEit Transfer身份验证漏洞(CVE-2024-5806)", "https://mp.weixin.qq.com/s?__biz=MzkzMDE5OTQyNQ==&mid=2247485689&idx=1&sn=e06cf3dcc460c9aa23ea1323b25d3942": "学习干货|保姆式实战等保测评Linux镜像(邀请码+综合全流程+未公开漏洞)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501462&idx=1&sn=77865454524301f0f45e10383f0a5e02&chksm=fe79e20ec90e6b186b96468a2f782f0efd926a4f2680e6e613e2a2da5416ce188ef5d19dc72e&scene=58&subscene=0": "Progress MOVEit Transfer身份认证绕过漏洞(CVE-2024-5806)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519884&idx=1&sn=6407cbe53c48d873acacc653dceafd9b&chksm=ea94bfe6dde336f08a96c5768226e9e70afb02e7a0fdafe7042e062a6cd911476df4b34ebdfb&scene=58&subscene=0": "MOVEit Transfer 软件中存在高危的认证不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247491025&idx=1&sn=70cb9fad31ecd9042c55d4d1a20fcb22&chksm=fe2ee25ac9596b4cf5aa157bdbbe6da61559ee80939d2ac500ccd77f40d711c0cf57413f4167&scene=58&subscene=0": "马里兰大学 | 漏洞可利用性预测", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495055&idx=1&sn=f25709c65a4f829bc4bc891d1259c22c&chksm=e8a5e7ecdfd26efa8ea1acd62aabd9c76445fe9af2b8db565afb52fd06f0ba32e8154974bde4&scene=58&subscene=0": "一次报错所引发的五千漏洞赏金记录", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489431&idx=1&sn=3c37fa42812f448199f9bb9d68e4904d": "尽快修补！新的 MOVEit 传输漏洞记录的漏洞正在被利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062245&idx=1&sn=9807219a5c81c6a070f48fc1140ac17f": "【安全圈】现已修复！AirPods 最新固件曝出蓝牙漏洞，可能导致设备被窃听", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062245&idx=2&sn=1ccb234b27c280f54b9e84eb70565004": "【安全圈】售价 15 万美元，影响 Linux 内核的 UAF 零日漏洞在暗网出售", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484697&idx=1&sn=3e088bf1c86c81b7d06d5d2b41f84d13": "「漏洞复现」易天智能eHR管理平台 CreateUser 任意用户添加漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501474&idx=1&sn=ab0e32fa5ac1ec16b77b0fa38e76d18f&chksm=fe79e23ac90e6b2c6f110936d0dfb4f694ea475c06d54e21bc9d7f4187a82ed6ef45ce946acc&scene=58&subscene=0": "【已复现】Ollama 远程代码执行漏洞(CVE-2024-37032)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519901&idx=2&sn=3262641607db182c3d651a403a7e8a1f&chksm=ea94bff7dde336e1616ab487b523e96ef95fcc21705f4fa168d534c13bb1ee1a7bc0de09a134&scene=58&subscene=0": "苹果修复可导致窃听的 AirPods 蓝牙漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512052&idx=2&sn=973a40b91068882b5694e3e098e992fe&chksm=ebfae8d4dc8d61c297e37da9b170cf981716348d18b2d4630270d780891fa8f3b2d0aa7c81b0&scene=58&subscene=0": "美国拟投资3.6亿元，研发医疗设备漏洞管理方案", "https://mp.weixin.qq.com/s?__biz=MzkyNDQ5NDM3OA==&mid=2247483911&idx=1&sn=fd99a39267f9ffe2d201db3e18b8c721": "记录一下自己第一个贡献值破二百的漏洞（某企业src)", "https://mp.weixin.qq.com/s?__biz=MzI1NTM4ODIxMw==&mid=2247500824&idx=1&sn=82971c64e8f636a2553656700068a363": "福利 | CVE-2024-29943 Firefox RCE （附EXP）内网书籍赠送", "https://mp.weixin.qq.com/s?__biz=Mzg4NjI0MDM5MA==&mid=2247485532&idx=1&sn=64158c86bc868a0bcc15c9423cedc710": "【漏洞复测 | 含批量POC】碧海威L7产品 confirm 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjIxNjExNg==&mid=2247485358&idx=1&sn=dad2acdcf7e58ae905d806589cb9c083": "[翻译]Progress MOVEit Transfer身份认证绕过漏洞 (CVE-2024-5806)", "https://mp.weixin.qq.com/s?__biz=MzkzMjIxNjExNg==&mid=2247485358&idx=3&sn=16ab8f7b68a8d3eea838d128ddcd4e0a": "[翻译]Apache Kafka UI 中的远程代码执行 ( CVE-2023-52251、CVE-2024-32030)", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247486129&idx=1&sn=25ee123661b779a49ad7204627915434": "监听蓝牙对话的BlueSpy技术复现", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489441&idx=1&sn=ecaef287c1273408b821c6ee351267d8": "影响 Linux 内核的 UAF 零日漏洞正在暗网被出售", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062300&idx=3&sn=5f32791db93bd0f2f45b960437353863": "【安全圈】售价 15 万美元，影响 Linux 内核的 UAF 零日漏洞在暗网出售", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062300&idx=4&sn=eef50c8162b1fe1147e683a139687387": "【安全圈】MOVEit 又曝出高危漏洞，又要来一次供应链大事件？", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651288307&idx=1&sn=3b09176b73a73bc340220be4e99aae90": "Black Hat 2024：5G技术存在漏洞，易被绕过和DoS攻击", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488456&idx=1&sn=7d697a70807f96e087cb807a37fea48f": "【漏洞预警】GitLab 身份验证缺陷漏洞CVE-2024-5655", "https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650275765&idx=1&sn=3e04ccc169c969b5da6c9cb3b99aacaf": "盛邦安全中标能源行业某单位百万级漏洞扫描便携式一体设备采购项目", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519913&idx=1&sn=f485e4897bd8f134b2685e61ec98b8ae": "GitLab 严重漏洞导致攻击者以任意用户身份运行管道", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247520620&idx=1&sn=d6f837af14b69c5c6d31d6c26949369d": "使用 SyntaxFlow 审计你的第一个“漏洞”", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501489&idx=1&sn=46fdad1e31db9b8afd7fbdffd013e99b&chksm=fe79e229c90e6b3fdc41aede2ee6f73de9a07fbe418172d18b19199e5501d5d87a2cc139c3ef&scene=58&subscene=0": "GitLab身份认证绕过漏洞(CVE-2024-5655)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519913&idx=1&sn=f485e4897bd8f134b2685e61ec98b8ae&chksm=ea94bfc3dde336d543b1cf68c7773d682b657af8bfc3a495d9433d47d2b67144447e9a9c5422&scene=58&subscene=0": "GitLab 严重漏洞导致攻击者以任意用户身份运行管道", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247494909&idx=1&sn=5df718768b5921431f4fbe6e26165425&chksm=96d8e727a1af6e31d6e9a8402563036516d402398ac0df5a96feb0079c5f779662816fb01165&scene=58&subscene=0": "2024攻防演练必修高危漏洞集合（4.0版）", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651288308&idx=1&sn=df1754e4886299cc872dfdb8c39ef9e4": "MOVEit再曝9.1分高危漏洞，又要引发供应链大事件？", "https://mp.weixin.qq.com/s?__biz=Mzg2MjAyMTczMw==&mid=2247485632&idx=1&sn=fac479a71bd9e5f8f24a239e27c3f4fd": "2024HVV最新POC∕EXP，目前有10000+个POC∕EXP", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247513186&idx=1&sn=619d4fa90bc30472abdf9d7f8664eee2": "设备漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484717&idx=1&sn=817845af4def667053fe02f5b6f7ca11": "「漏洞复现」契约锁电子签章平台 add 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062353&idx=1&sn=fb48af9932b77d47fa4768f95e5b7111": "【安全圈】5G 连接存在漏洞，移动设备易被绕过或受到 DoS 攻击", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247486221&idx=2&sn=fd1fc7016a344bab5e2e3e6181c40914": "CVE-2024-36072 (CVSS 10)：CoSoSysEndpointProtector中未经身份验证的 RCE 缺陷", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247488877&idx=1&sn=7d68d7faa708408a8c558f7dbf23d963": "Xerox WorkCentre 打印机RCE漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650954395&idx=1&sn=1c2dd4f89ff927a081c20ce24a0ddcd0": "利用已知cms漏洞getshell", "https://mp.weixin.qq.com/s?__biz=Mzg4NjI0MDM5MA==&mid=2247485545&idx=1&sn=e6f10462dd619289d0ef3fa021362b52": "【漏洞复现 | 含POC】通天星CMSV6车载定位监控平台 point_manage SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652093085&idx=2&sn=427da8530cccf7c40d6cc5f557a5aacd": "现已修复！AirPods 最新固件曝出蓝牙漏洞，可能导致设备被窃听", "https://mp.weixin.qq.com/s?__biz=MzA4NjQxMDcxNA==&mid=2709355176&idx=1&sn=1d59abbf862aa8b97b999d62aa2311eb": "利用openrestry动态修复部分漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247491309&idx=1&sn=c283844066ff9c9e7d318ca89330437c": "Geoserver后台漏洞检测一键化工具", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247625422&idx=5&sn=e6a850c81ea0ca3351258b9326e09aa9": "售价15万美元， Linux内核UAF零日漏洞在暗网出售", "https://mp.weixin.qq.com/s?__biz=Mzg2NTcyNjU4Nw==&mid=2247485264&idx=1&sn=f7ec6832f343c05ef90dbef834c62b94": "漏洞速报|POC分析|CVE-2024-6387", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247491769&idx=1&sn=33e6d36f4ba4c4d74c422c4bc61d0093": "SSH也能存在RCE?", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247488703&idx=1&sn=54152b79016a5077ef44a58f37f5ae32": "CVE-2024-6387 OpenSSH RCE漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzU5MTc1NTE0Ng==&mid=2247485400&idx=1&sn=233269bb311bccdaf20dcf9cc2d3a90c": "【漏洞告警】(CVE-2024-6387)OpenSSH 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247484688&idx=1&sn=928f50f70991a1979dcefb8d02cb02d6": "源码分析致远A8任意文件读取漏洞，附数据库密码解密脚本", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247513339&idx=1&sn=df9ed11a7cfed784d5ec94510db63f0f": "geoserver后台漏洞检测一键化工具（6月30日）", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492585&idx=1&sn=c7f5d7a0c85be99a99d23a0c69574f8d": "【风险提示】OpenSSH 远程代码执行漏洞（CVE-2024-6387）", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489477&idx=1&sn=01ddd420b709a634208ec9c36d363aba": "【已复现】OpenSSH存在远程代码执行漏洞（CVE-2024-6387）", "https://mp.weixin.qq.com/s?__biz=Mzk0MTQ4NTU5OA==&mid=2247485515&idx=1&sn=86b2eef9d1d7afda866b48f732514564": "近 20 年来 OpenSSH 的第一个高危 RCE！", "https://mp.weixin.qq.com/s?__biz=MzkxNDY5NzMxNw==&mid=2247483979&idx=1&sn=c7dad3304cb4f3328dd6e7e905ddf907": "SSH-RCE（CVE-2024-6387）", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247490460&idx=1&sn=7276be856c9a1e000c8a4d69123c7d5e": "漏洞复现 | 迈普多业务融合网关send_order.cgi远程命令执行漏洞【附poc】", "https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649868718&idx=1&sn=c7133745486c32cef152a05a7b966300": "【知道创宇404实验室】建议关注Glibc-based Linux OpenSSH 最新RCE漏洞(CVE-2024-6387)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485458&idx=1&sn=2329965e5f5d25506e85163e15834f1c": "CVE-2024-6387｜OpenSSH远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ2NzQ0Ng==&mid=2247484852&idx=1&sn=61b418d89a37fabfe014c84436d2aed7": "CNVD—由前端Js引发的SQL注入通用高危", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484736&idx=1&sn=466abab53f6ccca7a55f663032da83e7": "「冷漠安全」六月份0day∕1day∕nday漏洞汇总", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488465&idx=1&sn=f11c080f95cc283e7ac7f50f509faeac": "【漏洞预警】OpenSSH 条件竞争漏洞CVE-2024-6387", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488465&idx=2&sn=d0ceeeb0175f882423a10b82124133ca": "【漏洞预警】Saltstack需授权路径遍历漏洞 (CVE-2024-22232)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485458&idx=2&sn=c25113b4a0ead82773652cae79323bf6": "CVE-2024-36837｜CRMEB电商管理系统存在SQL 注入漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501517&idx=1&sn=2c24ec57c7a0b725973a2b588dd07fbc&chksm=fe79e255c90e6b438d046237314e4ad411dfbd947a699e92762dd186271fcf204c1834a98237&scene=58&subscene=0": "OpenSSH 远程代码执行漏洞(CVE-2024-6387)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502969&idx=1&sn=b1c6510f73b076788e0d93dc8b589ca8&chksm=f258580ac52fd11c5d477a00b46118ce36d969614b0a3a96b044e9591d5ed8aacfb4fbc7fb99&scene=58&subscene=0": "雷神众测漏洞周报2024.06.24-2024.06.30", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519930&idx=1&sn=fb9fb97863d38cac47e2e8c94fdfc267&chksm=ea94bfd0dde336c6cc905b39fdfcd6192b649ef99de88faa7d5c707a3eedf44f88820ce1fbee&scene=58&subscene=0": "Juniper 紧急修复严重的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519930&idx=2&sn=acd4b1226ac3021b5aa91433e3f657f5&chksm=ea94bfd0dde336c6a6ba483f21d5d9572e139fb0e5cd5ac1a9ccde95f91e2330823dfbc71c20&scene=58&subscene=0": "存疑 CVE 漏洞带来无谓压力 热门开源项目开发者归档 GitHub 仓库", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247545625&idx=3&sn=c8fb7ac2663ccd0375b830fbfbe40a2e&chksm=fa9385d8cde40ccee5c177614fe3af26d655e9ab43b52cf0a33d65ad359e03d18dd426152516&scene=58&subscene=0": "售价15万美元， Linux内核UAF零日漏洞在暗网出售", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494959&idx=1&sn=ae79f30b8aafe49e53ea4afca0da8c31&chksm=fd74dde6ca0354f08071274e2e610f385c6b4fcfd3edd87c5107631e04baa35cb178960d3529&scene=58&subscene=0": "CNVD漏洞周报2024年第26期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494959&idx=2&sn=0320ca35f1b70fe13692b868354a82dc&chksm=fd74dde6ca0354f03f801a9e2cbaab8db21727546aec6437b14a2aeed70bdf0869017b56a25f&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240624-20240630)", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247572647&idx=3&sn=74126bea92b9fa3e7b8f2f51a69381d2&chksm=9f8d4cafa8fac5b99234f106b255def667048e0573abd1b2869d8523b102d687720c2f0d5cd1&scene=58&subscene=0": "3000名黑客巅峰较量，100+漏洞震撼突破！矩阵杯决赛落幕", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247499960&idx=1&sn=c8d8d06562588da449f6e84aa1e98dbf": "原来是个“废物”漏洞，我以为是多牛逼的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495095&idx=1&sn=3b2fcf7fb8dc6ec2b4c7b55eb61a2d44": "实战登录框漏洞测试", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247517478&idx=2&sn=625cb9f9115aff27508956aa87530da7": "OpenSSH RCE (CVE-2024-6387) | 附poc", "https://mp.weixin.qq.com/s?__biz=Mzg4MzEwMDAyNw==&mid=2247485103&idx=1&sn=f4d14912f9151d55123e7fbf45311793": "为啥取证厂商扎堆突破安卓12∕13提权？来看看CVE-2024-0044高严重性漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247487943&idx=1&sn=04d0d45ae9c85cb8739d15e47c05c779": "护网在即，助力安服仔漏洞扫描~", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488474&idx=1&sn=efcba7c4f757ebdb583f9aeeb668be71": "【漏洞预警】GeoServer property 表达式注入代码执行漏洞（CVE-2024-36401）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488474&idx=2&sn=7767e45978a0b9d59238e70cab89ff67": "【漏洞预警】Apache HTTP Server 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492594&idx=1&sn=c56a9f265ee403ab4c30a4843bf186d6": "【已复现】Geoserver表达式注入致远程代码执行漏洞（CVE-2024-36401）", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652093105&idx=1&sn=c819fafeb3e37805f86058ce11862d70": "Windows 修复漏洞遭利用，推送恶意脚本", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652093105&idx=2&sn=fb5b6c98e59185a017957f200436a6ea": "PoC已出！高危漏洞CVE-2024-6387强势来袭", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651289248&idx=1&sn=1038bcf8639305760ff8f997072f5914": "OpenSSH漏洞预警：无需用户交互，可提权至 root", "https://mp.weixin.qq.com/s?__biz=Mzg4NjI0MDM5MA==&mid=2247485596&idx=1&sn=aef6013b3b1d585ad0e15e98e4bcd5aa": "【漏洞复现】GeoServer开源地理服务 wfs 远程命令执行(CVE-2024-36401)", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650617407&idx=2&sn=28b223bf2f81dd3a768d0e5b36b7c9ba": "高危！OpenSSH远程代码执行漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247504105&idx=1&sn=8be3ac5a93373daad53d3c7736185cc7": "现金奖励 | GROW计划漏洞挖掘实战第二期", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501533&idx=1&sn=41f10403f24687361e445dd7db724d59&chksm=fe79e245c90e6b5330516a512b8d6693c2cad0c3f307306d69bf52efc2b7ccf1774f24bc1102&scene=58&subscene=0": "【POC公开】OpenSSH 远程代码执行漏洞(CVE-2024-6387)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519949&idx=2&sn=4951a0b220cf599191f950ae82909410&chksm=ea94bfa7dde336b19e411b9455b63b9d21ae84069ef0a118254f7f6b31c0ea710d0d2d333d1e&scene=58&subscene=0": "CocoaPods 严重漏洞导致 iOS 和 macOS 应用易受供应链攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519949&idx=3&sn=9ad23a7958936b34139856b555d79794&chksm=ea94bfa7dde336b18b8f1704248e65771ec3abfe05106214615b0be0a21e73c95fdf2eb0d85f&scene=58&subscene=0": "谷歌推出新的KVM漏洞奖励计划，最高赏金25万美元", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247506182&idx=1&sn=e32c43c9bbdfb49cae905689f467cc73&chksm=cfcaba12f8bd33045dc3ac65b6563b4c624c0065e445853be316ea1971c138819987b75b669d&scene=58&subscene=0": "关于OpenSSH RCE（CVE-2024-6387）高频关注的FAQ", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492594&idx=1&sn=c56a9f265ee403ab4c30a4843bf186d6&chksm=96f7fc9fa180758991f3a23525efe7484d37c682b806ef8f6b9ff5b5e5b45e0eb2401f2eaafc&scene=58&subscene=0": "【已复现】Geoserver表达式注入致远程代码执行漏洞（CVE-2024-36401）", "https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247485842&idx=1&sn=6a462334aa94328aa7689f1ddf80be6a&chksm=fb04cafacc7343ec8a7d7b6f7a1e22e59e7773a2e66dcb46fb8d7e678f64be58e3ae3921bf3f&scene=58&subscene=0": "防御任意SSH远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650979086&idx=1&sn=d18d0320395ab76700da91330bb4c9da&chksm=8079f93cb70e702a8cb5710255140bfa65cc54600d4c38a662639e9898f2ad54463d1f70de40&scene=58&subscene=0": "【知道创宇404实验室】建议关注 Apache 2.4.60 更新修复多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486344&idx=1&sn=2493307778c8d3fa9b0b7d61a3656021&chksm=ec6fec88db18659e9a3c304f15ccc18809df5cb87cb7d99204c95058a64c7a8693928aecb990&scene=58&subscene=0": "OpenSSH Server 远程代码执行漏洞（CVE-2024-6387）", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544704&idx=3&sn=a6156d6b4aefa04de16dcdaed046d91b&chksm=c1e9a3d1f69e2ac75a6c20168062423c9fb229c9130cc03d103ee9da4752ca51c54d63eb7f1d&scene=58&subscene=0": "Windows 修复漏洞遭利用，推送恶意脚本", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062466&idx=3&sn=4dfe5314c316497a5472075715addb64&chksm=f36e6f42c419e6545ff5723e21946f0585f854c86b309bc58c4b329798deb87d9c2d854f8a9c&scene=58&subscene=0": "【安全圈】数百万 OpenSSH 服务器可能遭受远程 regreSSHion 攻击（CVE-2024-6387）", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247500244&idx=1&sn=26804b21e972905c02ca73a1ac8293d3&chksm=cfc5668bf8b2ef9db3b2a43b2973545d53619c4ac03295fa9dc76bdef433f3598b6c2ebedf8e&scene=58&subscene=0": "360BugCloud助阵矩阵杯，合力共建漏洞安全新生态", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247545642&idx=2&sn=62b6c38796efc55051d7e1d1f5414fbf&chksm=fa9385ebcde40cfd2d589384b08f6e0f122d56287ca00ab4364b0725848cddb500cfda36d690&scene=58&subscene=0": "Juniper Networks曝最严重的「身份验证」漏洞，影响大量路由器", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247545642&idx=3&sn=03bae878bdc7eb64e62f2a406ece64d0&chksm=fa9385ebcde40cfd1d206f91fe2d6619b52fab3d85a3bd68b19a24295bb86a216fe7ed3cb25b&scene=58&subscene=0": "PoC已出！高危漏洞CVE-2024-6387强势来袭", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499211&idx=1&sn=135556963d9a14a1b8a7eb3905db6c9a&chksm=973acea9a04d47bf6f3f4b191dd72b08c23626f10e17bcc0502276b67bb530619439d1de0a23&scene=58&subscene=0": "CNVD漏洞周报2024年第26期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499211&idx=2&sn=a875fb3c01a3352444c7fab81aab55d5&chksm=973acea9a04d47bff64226a21c2edb3965be9dd5f4e2aeef19a54da2ceb48a57d28826038423&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240624-20240630)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495095&idx=1&sn=3b2fcf7fb8dc6ec2b4c7b55eb61a2d44&chksm=e8a5e7d4dfd26ec2b1cc04aeff1dd3785edebca1d00ab8721c60d0f7a9528032a0cebb028525&scene=58&subscene=0": "实战登录框漏洞测试", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523409&idx=1&sn=985894b777bee43f3f5ed6860b5d2614&chksm=ce461741f9319e5795d997d3c1d3a5e1850f890ca25d7b71527ac978d9b2529bfb1ad6ff6c43&scene=58&subscene=0": "【漏洞通告】OpenSSH 远程代码执行漏洞(CVE-2024-6387)", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247486390&idx=1&sn=77c7cea2378d96abb260adb6361df587&chksm=c222934ff5551a59aa0fa02931b9253e82d11ec3db6dc835400be0db4006de6875cfb2b9ef75&scene=58&subscene=0": "漏洞预警丨OpenSSH 远程代码执行漏洞（CVE-2024-6387）", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247496648&idx=1&sn=34cf6111dc8ff2fca5fb1e2c2b2acd74&chksm=ce96bef6f9e137e07c35a98ee741d562d347d1f6014d6017a40a619440194df4d5b0bc662978&scene=58&subscene=0": "【风险提示】天融信关于OpenSSH远程代码执行漏洞(CVE-2024-6387)的风险提示", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247504105&idx=1&sn=8be3ac5a93373daad53d3c7736185cc7&chksm=eaf998a5dd8e11b35c14466b9af87e10e35f04879bd094bd23bb0309cab106afd2b30befaeef&scene=58&subscene=0": "现金奖励 | GROW计划漏洞挖掘实战第二期", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488479&idx=1&sn=1214fe3b5fccc667d0cf9132d6040200": "【漏洞预警】FFmpeg n7.0 缓冲区溢出漏洞CVE-2024-32230", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247485992&idx=1&sn=51ae396e92767c40d2e901ce5f598811": "GeoServer 远程代码执行漏洞（CVE-2024-36401）", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247485520&idx=1&sn=e05a191f6ee098a1c2d4307fa5281fb0": "企业src实战-突破限制的绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489465&idx=1&sn=5807c6e928b67cf11fe9e1343428b021": "恶意推送脚本，Windows 紧急修复漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247498353&idx=1&sn=d62d0967413b693930e5b7e34c976967": "G.O.S.S.I.P 阅读推荐 2024-07-03 Racing on the Negative Force", "https://mp.weixin.qq.com/s?__biz=MzkwNDM4MjgzMA==&mid=2247495006&idx=1&sn=077c7fbe6bca293076931ff3debfb88b": "【已复现】安全通告｜GeoServer远程代码执行漏洞（CVE-2024-36401）", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484758&idx=1&sn=ef9a30a3c1e94bcceb2e7c0618d4bcd7": "「漏洞复现」热网无线监测系统 SystemManager.asmx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652093115&idx=1&sn=5c2bde3a46d4e73ab91391ed1b17ad5e": "覆盖1400个服务器！OpenSSH 严重漏洞可导致整个系统遭入侵", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489495&idx=2&sn=a97728c4a1895937c969b5ccd486e141": "【风险通告】OpenStack存在敏感信息泄露漏洞（CVE-2024-32498）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062520&idx=1&sn=fe43c7a39bc5a06b1c4e2934de8517d3": "【安全圈】可获 root 权限，思科 NX-OS 零日漏洞修复已发布", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062520&idx=2&sn=764d34aa1130ed7f83bd837c6a514c0e": "【安全圈】Windows 修复漏洞遭利用，推送恶意脚本", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062520&idx=4&sn=33ecb849545820707a62bfcb0b8c9a95": "【安全圈】Juniper 警告存在严重身份验证绕过漏洞（CVE-2024-2973，CVSS 评分为 10）", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651289403&idx=3&sn=cdaedbae3d2e0cbe299486cdc86722f9": "最高可达25万美元！谷歌为 KVM 零日漏洞计划支付巨额奖金", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484522&idx=1&sn=c2d24d445055d8569c707a1f36bd4bae": "GeoServer远程代码执行漏洞-CVE-2024-36401", "https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448664925&idx=4&sn=c910800861608c3cee28b041656a905d": "CNNVD关于OpenSSH安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501547&idx=1&sn=89c87b00a18c6040e3d5bd80324a259c&chksm=fe79e273c90e6b655b053671c1956539ccfedd0a3088054f12faef833c9972f33cb956f0f12b&scene=58&subscene=0": "【已复现】GeoServer远程代码执行漏洞(CVE-2024-36401)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247506192&idx=1&sn=d63be631e744eb42d6ea499f35b25240&chksm=cfcaba04f8bd33129b0be0a8fb521897d4b041ab403d691d313f7c35fedc1b215c5907f11da5&scene=58&subscene=0": "漏洞通告 | GeoServer JXPath远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247485846&idx=1&sn=81c0d5ae32735444d61b8ea24f839dea&chksm=fb04cafecc7343e85076ace5178b5efa651156f3e48cc682c3b01997e4bee934a0b953ca87da&scene=58&subscene=0": "检测OpenSSH远程代码执行漏洞CVE-2024-6387（行为和流量）", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247498353&idx=1&sn=d62d0967413b693930e5b7e34c976967&chksm=c063d4a8f7145dbe4aadbf6ddd2c545f9366e1891762957b5c885be0a766f5dee0bb99bf883f&scene=58&subscene=0": "G.O.S.S.I.P 阅读推荐 2024-07-03 Racing on the Negative Force", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664218035&idx=4&sn=4038cd11a28e9ab52dd6aa740ce6d365&chksm=8b59bf4abc2e365c46b35463b89d852e165bb9d6fedd4a1659ceffedb75219923be85ecd4a74&scene=58&subscene=0": "CNNVD | 关于OpenSSH安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664218035&idx=6&sn=1448c0207fbc83b6e30fbf9420bcb75d&chksm=8b59bf4abc2e365ccf1ce094bcee24a8dcf4b8bc759813a6684f3c23a3191e6190dc6f6dcf44&scene=58&subscene=0": "评论 | 防网络沉迷机制有漏洞 谨防“青少年模式”被架空", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247545671&idx=3&sn=86fc4f651ec46819ac9eb7c6c31d8e48&chksm=fa938586cde40c90916dad84cf4eef1b825910fcabc3861354084854d7c472fda2e8e905044b&scene=58&subscene=0": "覆盖1400个服务器！OpenSSH 严重漏洞可导致整个系统遭入侵", "https://mp.weixin.qq.com/s?__biz=MzIxNDAyNjQwNg==&mid=2456099109&idx=1&sn=116f9d13c503b19979510eb0ae5b3f9a&chksm=803c68ecb74be1faf07a888c5caa89656bfd0588cbc2e63339f9b1fa2572929e78579be8ca25&scene=58&subscene=0": "议题1- 投票| KCon大会议题评选 High-value Web Application Post-Exploitation", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523428&idx=1&sn=533f9c89b2ec8b6b42d63614393c2801&chksm=ce461774f9319e6237ccbce4a643d1ad2c37afe17585e0d257b59eba1c7ec797829bab719a75&scene=58&subscene=0": "【漏洞通告】Geoserver远程代码执行漏洞(CVE-2024-36401)", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484628&idx=1&sn=02f3159b9b0a138729fbe7b3cc66643c&chksm=c12af955f65d704304978b1561d8035d4b9aecea3ae10637d1fa25796c4983c71ce3fa140be7&scene=58&subscene=0": "【复现】Geoserver远程代码执行漏洞（CVE-2024-36401）的风险通告", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247513376&idx=1&sn=b8232acc2fd818e44be21beb4d5f2309": "漏洞扫描工具 -- GoT（7月5日更新）", "https://mp.weixin.qq.com/s?__biz=Mzg2MTc1NDAxMA==&mid=2247484076&idx=1&sn=4064cb6a006f5cc454b7fb982e8ab9c6": "GeoServer property RCE注入内存马", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488491&idx=1&sn=a22c9a282f7a043b1c249fa2c44c24de": "【成功复现】GeoServer 远程代码执行漏洞（CVE-2024-36401）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488491&idx=2&sn=44444de25a87b0d01d0e9887709eb48d": "【漏洞预警】XWiki Platform 未授权 代码注入漏洞 (CVE-2024-21650)", "https://mp.weixin.qq.com/s?__biz=Mzk0MDY2NTY5Mw==&mid=2247484747&idx=1&sn=7614d7e1f69cd591f2bead4359b34e75": "[含POC]宏景eHR LoadOtherTreeServlet SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDY5NzMxNw==&mid=2247483999&idx=1&sn=45822239bbbf3c1a28116c5080a58c1a": "【0day】金斗云HKMP智慧商业软件", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651289696&idx=4&sn=129426b92208e7d4a8e699e46c3fb43c": "SiCat：一款多功能漏洞利用管理与搜索工具", "https://mp.weixin.qq.com/s?__biz=Mzk0NzM4OTQ5NQ==&mid=2247484445&idx=1&sn=82edd36842fbb8a2a449479095c9eb89": "CVE-2024-0044，致使 Android 12∕13 提权那些事", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062569&idx=2&sn=767bae933bd5b26e83854ba266b06a3c": "【安全圈】最高可达 25 万美元！谷歌为 KVM 零日漏洞计划支付巨额奖金", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062569&idx=3&sn=0a96ee46ba5e08d8166d3b3681c3906e": "【安全圈】Microsoft MSHTML 漏洞被利用来传播 MerkSpy 间谍软件工具", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062569&idx=4&sn=3c331fa10c28683cf1af086ef876f0d3": "【安全圈】黑客利用 D-Link DIR-859 路由器严重漏洞窃取密码，必须更换设备避免受害", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484768&idx=1&sn=82638260e1aafd174cf2bf5c6066735b": "「漏洞复现」Geoserver JXPath表达式注入致远程代码执行漏洞(CVE-2024-36401)", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247494207&idx=1&sn=5133ee256094c3290702adef567f02a7": "【论文速读】| 用于安全漏洞防范的人工智能技术", "https://mp.weixin.qq.com/s?__biz=MzI5NzUyNzMzMQ==&mid=2247485218&idx=1&sn=86aedee1914662648646d9e616f7dc0a": "afrog-漏洞扫描(挖洞)工具【了解安装使用详细】", "https://mp.weixin.qq.com/s?__biz=MzI0MTY5NDQyMw==&mid=2247517441&idx=1&sn=fb6c946ee1c4871982d6097a577687ce": "CVE-2024-24788 Golang DNS解析过程中的DOS漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458562108&idx=1&sn=690de0bb7bffe7752c4e3f3b48a0b5aa": "Boofuzz在二进制IOT漏洞挖掘中的简单运用", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247539839&idx=3&sn=49483e36097fa9d8a7e035d11eba547e": "特斯拉上价值 10000 美元的 XSS 漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489499&idx=1&sn=5017e0ee989a8f4c13accd8bac85b041": "【已复现】GeoServer 存在远程代码执行漏洞（CVE-2024-36401）", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489499&idx=2&sn=64e5b0784d13a285b7174fe399e73173": "【风险通告】OpenStack存在敏感信息泄露漏洞（CVE-2024-32498）", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247489138&idx=1&sn=d2426a494bb172047d86051eab44dcac": "创宇安全智脑 | OpenSSH 远程代码执行（CVE-2024-6387）等80个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzU1NDU1NTI5Nw==&mid=2247487883&idx=1&sn=e6d84b040d04c1a903cb7140fc5339f3": "从0至1，关于我在Day1安全团队中的SRC漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=Mzg3ODk1MjI5NQ==&mid=2247484565&idx=1&sn=94318687615030b573b716626e88453d": "红蓝队已经开始布陷阱了，开源工具类别随意 git clone，一不小心就会直接触发 RCE", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499585&idx=1&sn=6ff5cb00a581611b3f02e17f8bad68af": "【漏洞复现】Artifex Ghostscript任意代码执行漏洞（CVE-2024-29510）", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247486021&idx=1&sn=6f915991275be71952d1f076ac9e1b34": "CVE初探之CVE-2019-6250反弹Shell", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458562108&idx=1&sn=690de0bb7bffe7752c4e3f3b48a0b5aa&chksm=b18d9eb686fa17a022250b626842ea7937dc14dcb6e226700ec5befcada72ef7d0509427c388&scene=58&subscene=0": "Boofuzz在二进制IOT漏洞挖掘中的简单运用", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651130970&idx=2&sn=fbce5a8193aba744bdff50c3be2e899d&chksm=bd15bc898a62359fb9b9ff7e749aaba4843671818fd3332d91ccaeeb67212a43b1419e7268c7&scene=58&subscene=0": "CNNVD通报OpenSSH安全漏洞情况", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247545687&idx=2&sn=cf53690789dc4b121b48b550818c1e4b&chksm=fa938596cde40c808831048f48023d784a5853344092094313a591ec7c49fddb04d9f2941cfd&scene=58&subscene=0": "最高可达25万美元！谷歌为 KVM 零日漏洞计划支付巨额奖金", "https://mp.weixin.qq.com/s?__biz=Mzg2MTc1NDAxMA==&mid=2247484076&idx=1&sn=4064cb6a006f5cc454b7fb982e8ab9c6&chksm=ce130559f9648c4fd7a60bc35aa5e3d5402b9ac5fbd154c8ed90695c40055dbe83ff9ee5ea38&scene=58&subscene=0": "GeoServer property RCE注入内存马", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247486274&idx=1&sn=e5ad8820ae0fc43bd8ae8dcd2095088f": "ARL联动AWVS实现自动化漏洞扫描", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062621&idx=4&sn=a0d960abf9bef0212c3233e0d087d087": "【安全圈】已发布补丁！微软披露 Rockwell PanelView Plus 两大漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502062&idx=1&sn=fd9a312a7d696cc570b19b891ac59d5b": "【成功复现】D-Link GO-RT-AC750 安全漏洞(CVE-2024-22853)", "https://mp.weixin.qq.com/s?__biz=MzkyNDQ5NDM3OA==&mid=2247483932&idx=1&sn=4f66bfdf38825bae4145ca9490599eb6": "命令执行无回显利用总结 附工具", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247494721&idx=1&sn=a01a6a4ceecdef125f7cd1b842d2ea71": "XXL-JOB默认accessToken身份认证绕过RCE", "https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651132799&idx=1&sn=5d93b8f19dc6fbb89fc3804fc1e107bc": "荣耀加冕 │ 梆梆安全荣膺NVDB「2023年度漏洞报送最具贡献单位」", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501571&idx=1&sn=574d5dec651b6103d4d6e0e82d891092&chksm=fe79e39bc90e6a8dacf59710b83f675ab7664964c63de9aa806e385bde1a9b195dd4a826e6d5&scene=58&subscene=0": "Apache Tomcat 拒绝服务漏洞(CVE-2024-34750)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg3NzYzODU5NQ==&mid=2247484665&idx=1&sn=1fe0fa4c6289330a1a76585393eafaab": "T00ls全新“0day漏洞分析”板块重磅上线，开启网络安全新时代", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502086&idx=1&sn=3464b759c61c6c9ea961edbf4bda7007": "【成功复现】Splunk Enterprise任意文件读取漏洞(CVE-2024-36991)", "https://mp.weixin.qq.com/s?__biz=MzkzODY2ODA0OA==&mid=2247485322&idx=1&sn=2b5f00c0a13825af3f843f9d3cf49561": "【未公开】无铭科技存在lang前台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODY2ODA0OA==&mid=2247485322&idx=2&sn=2bf6ff1f69ee0b5c3253e2830857b7f6": "【未公开】无铭科技存在index前台敏感信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODY2ODA0OA==&mid=2247485322&idx=3&sn=a7706a3da691791843fcb070fab9fd2a": "【未公开】无铭科技存在juhecurl前台任意文件读取和SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODY2ODA0OA==&mid=2247485322&idx=4&sn=62187d7cd6e4672cd0a97fec452f4866": "【未公开】无铭科技存在money前台水平越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062645&idx=4&sn=b35c2b28f3749760b6925f7494df5bd0": "【安全圈】新的 OpenSSH 漏洞可能导致 Linux 系统以 Root 身份进行 RCE", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651450896&idx=1&sn=7e0ce91b855f1e92b182955de4fc8b91": "信息安全漏洞月报（2024年6月）", "https://mp.weixin.qq.com/s?__biz=MzA4NDA3ODc3OQ==&mid=3045897661&idx=2&sn=bb1ec8cfd2d00b8c5ea70972bd57567b": "需要紧急修补！三菱电机软件存重大漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247484331&idx=1&sn=57e0a0a722a53fd3eb13983f2b27833d": "【漏洞实例】某咖啡站点通过IDOR接管6k美元的账户", "https://mp.weixin.qq.com/s?__biz=MzkyMDUzMzY1MA==&mid=2247498862&idx=1&sn=4b5d3df9616b7d3dc094f4815bbf42e7": "TOP10 漏洞详解", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY3OTc5Mw==&mid=2247484364&idx=1&sn=eeab0f6e306b7b445c9a1c6d9c6322a5": "【漏洞复现】CVE-2024-30088 Windows内核提权漏洞 | 附poc", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247486000&idx=1&sn=3d4e367841161aa62f6248862e1d8824": "GeoServer 远程代码执行漏洞（CVE-2022-24816）", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247484591&idx=1&sn=e6d4b8e4149b72285d33596281175aa2": "某付费短剧影视小程序后端审计(0day)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247510389&idx=2&sn=5290f267582fa0f34aadf00a2a968515": "CVE-2022-24785 MomentJS 路径遍历的工作原理：详细的漏洞利用指南", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247514902&idx=1&sn=269dfceff6ca51b0a080be058479d8ac": "关于 CVE-2024-2961 glibc iconv exploitation (part 2) 注解", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484786&idx=1&sn=ae8de0a918f33c841687ea3573da491a": "「漏洞复现」宏景eHR sduty∕getSdutyTree SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247487094&idx=1&sn=d4a769464f3810b904fbf60ef9d887eb": "CVE-2024-36991 漏洞复现 POC", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247486526&idx=1&sn=6a19364165564038671893971fbbc136": "CVE-2024-6376 (CVSS 9.8)MongoDB Compass 存在代码注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247486526&idx=5&sn=4c1234eb1db05ea4adeada1f48244b5a": "ChatGPT for Mac 曝光聊天记录：OpenAI 修补漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247488937&idx=1&sn=0e5ef9e13eba4f8357a88f5b372096b2": "FOSCAM R4M WIFI 摄像头 RCE漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247491373&idx=1&sn=905598bc5f1b5347b885dd4295cfe5ae": "GoT指纹识别、漏洞POC管理扫描工具", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651290219&idx=2&sn=7cede22ef1d6f8145dea2327408aaec1": "FreeBuf 周报 | Juniper Networks曝身份验证漏洞；Xbox全球瘫痪", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651290219&idx=3&sn=d37c58876a3be96ba583a6807f910c6b": "工控威胁预警，罗克韦尔(Rockwell)设备存在两个重大漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NjI0MDM5MA==&mid=2247485643&idx=1&sn=6e63d26b93fd7a3bdb45072f65a106cb": "【 1day | 漏洞复现】锐明技术Crocus系统 Service.do 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247497814&idx=1&sn=a2d74b82fc5b69275c080e78ee6488ea": "网络安全学习资料 -- 文件包含+命令执行", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247513407&idx=1&sn=2fb44ef74d40e4db0079da01e5d2ab34": "2024HW必修漏洞集合（PDF下载）", "https://mp.weixin.qq.com/s?__biz=MzUyMTA0MjQ4NA==&mid=2247550333&idx=1&sn=4810139bf7b0df2581c68ec244122761": "红队快速打点漏洞检测工具 | POC-bomber", "https://mp.weixin.qq.com/s?__biz=Mzg3MzUxNDQwNg==&mid=2247483770&idx=1&sn=d7a17b53977b2928d804cd2455868a4f": "Remote Code Execution RCE漏洞详解", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652093147&idx=2&sn=d85f43bd86138d72636fb232958b4d88": "新的 OpenSSH 漏洞可能导致 Linux 系统以 Root 身份进行 RCE", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247484634&idx=1&sn=f686460168fa48fb5978cd71a9788d27": "某UI众人帮悬赏任务系统审计(0day)", "https://mp.weixin.qq.com/s?__biz=MzI5NTA0MTY2Mw==&mid=2247485415&idx=1&sn=52a693006c8ff941f0e24d88657f3746": "最新的Ghostscript漏洞困扰着专家，成为下一个重大漏洞的推动者", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247510451&idx=1&sn=a8c582e83e35747d6fae99869fb987ec": "CVE-2024-36401 远程代码执行 (RCE) 漏洞 绕过 waf poc", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247486562&idx=2&sn=395a69ba9a967dc8e7db89b1097f37f0": "CVE-2024-36041：KDE Plasma 漏洞导致未经授权的系统访问", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247497821&idx=1&sn=3d56831fa3556de42bad381c72bda260": "网络安全学习资料 -- 文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484530&idx=1&sn=49810cbf565cbd74c822a1f2e66c9ece": "Docassemble任意文件读取漏洞(CVE-2024-27292)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247513307&idx=1&sn=04104cbdc4a470795f75ca1c3d724aad": "Java之SpringBoot漏洞利用姿势合集总结详细版", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488507&idx=1&sn=934d432e7cc597ef8b00c9ae240ca8cd": "【漏洞预警】Apache CloudStack 未授权命令注入漏洞CVE-2024-38346", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062668&idx=2&sn=68fcfda6f4ef6330c00ccfd590442cd1": "【安全圈】CocoaPods 曝关键漏洞，数百万 macOS 和 iOS 应用程序面临供应链攻击风险", "https://mp.weixin.qq.com/s?__biz=MzAwNDI0MDYwMw==&mid=2247485733&idx=1&sn=e8429d66e58892487df4185071f12d98": "CVE-2023-38831", "https://mp.weixin.qq.com/s?__biz=MzkyMDY4MTc2Ng==&mid=2247483866&idx=1&sn=a434a371190034769cf7ee550d5d0c9c": "探索安全之道 | 企业漏洞管理：从理念到行动", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291351&idx=1&sn=0df8d5f1d492d4bbf84a2814c7edf98d": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501601&idx=1&sn=3f1ad85dbaeb33a00bf608803bb1c2b4&chksm=fe79e3b9c90e6aaf90103e15b62a48422f1a0c40ed2a252e545233731d94036864022c2602b2&scene=58&subscene=0": "【已复现】Splunk Enterprise 任意文件读取漏洞(CVE-2024-36991)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501601&idx=2&sn=5e1d5d2643e634cb1522d0b410ec0261&chksm=fe79e3b9c90e6aaf87c90702c2073820bd30007eecde93dd05410515341b0117c3550795346f&scene=58&subscene=0": "【已发现在野攻击】Rejetto HTTP File Server 模板注入漏洞(CVE-2024-23692)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501601&idx=3&sn=5a721709a3e5979ffcd7cec5b864469e&chksm=fe79e3b9c90e6aafcb24bdd898611c1af81431e26390014f34f2f32906b5737047b819609e87&scene=58&subscene=0": "安全热点周报：本周新增两个在野利用漏洞，Rejetto HFS 和 Cisco NX-OS 成攻击新宠", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520009&idx=1&sn=b958a0460ffa3e890f8c189660f04487&chksm=ea94be63dde337752a7dace28761adae32e92abbff78ddbb4dba723691c1d4eb489dd3e5deb2&scene=58&subscene=0": "Apache 修复 Apache HTTP Server 中的源代码泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247545731&idx=2&sn=e2bc79fca8c76db4162bae1b4ffd26c4&chksm=fa938542cde40c54f53688c64def68778dfe9ec56dae030498f6f9fb8d9d15197283675a4ff0&scene=58&subscene=0": "影响 300 万款苹果 iOS ∕ macOS 应用，CocoaPods 平台漏洞披露", "https://mp.weixin.qq.com/s?__biz=MzUzMDk0MjY2NQ==&mid=2247484096&idx=1&sn=9694f5515fd5417cb2a039c3fd4aed65&chksm=fa4b5d66cd3cd470bc20ef660ce40124d90eddfff9f473f1e71505e0fc5eb12ba10d645db713&scene=58&subscene=0": "漏洞管理新论：从KEV到CTEM", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494996&idx=1&sn=0299e41acc5ae93d05fda77e049a86d2&chksm=fd74dd9dca03548b99cbdf6c9267daa238c4c95cde444c2118edebcb7c5458e254eeb8fc79ec&scene=58&subscene=0": "CNVD漏洞周报2024年第27期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494996&idx=2&sn=e6541508d9788147314469aac16621b2&chksm=fd74dd9dca03548b0813c0222f38f5fed7d845b195c4ee1d724dd16358635cb17bee591b0421&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240701-20240707)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486704&idx=1&sn=d6b2eca06fc71f7d2706f4ec6d7ef6a6": "GeoServer ∕geoserver∕wfs接口存在远程命令执行漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488512&idx=1&sn=fb7d6ee44cd7857c7d199145867a314c": "【漏洞预警】Apache CloudStack初始化不当漏洞 (CVE-2024-39864)", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247497828&idx=1&sn=3cdd9e177f5502093fd6a1438e12bbba": "网络安全学习资料 -- XXE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489496&idx=1&sn=9ba54321a5267936b19f88c482d66ed0": "RADIUS 协议漏洞使网络暴露于 MitM 攻击", "https://mp.weixin.qq.com/s?__biz=MzI4NTYwMzc5OQ==&mid=2247493743&idx=1&sn=3f5fe3b6e83d484107da879b18a6bc6d": "SSRF 之 Azure Digital Twins Explorer", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651290493&idx=3&sn=444b7ed600b9589fd3c7858e5457df52": "新型APT组织CloudSorcerer瞄准俄罗斯政府", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247613610&idx=2&sn=2b6bc8547705c6fdd1a88d33e91a6d61": "奇安信获评“2023年度漏洞报送最具贡献单位”", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247572840&idx=2&sn=0fd4cfb7f7f22aa386fb144f7ab8354c": "360斩获NVDB两大年度奖项 漏洞治理能力再获国家级认定！", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650617623&idx=2&sn=147e12700f8e90cf9549980eda741101": "攻击者可随意获取敏感信息！Splunk Enterprise路径遍历漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247494746&idx=1&sn=588b2eafcd3443c908a6d181e50d33b8": "CVE-2024-21683：Confluence远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3OTMxNTcxNA==&mid=2650928820&idx=1&sn=7c3d4f043f11d3586eb16707aaa64e66": "“漏洞治理+漏洞报送”两项荣誉，天融信获工信部NVDB认可！", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664219335&idx=1&sn=6876d708d8e348e6ed7836b031b24db1": "专题·漏洞治理 | 坚持总体国家安全观 加快推进国家网络安全漏洞治理 赋能新质生产力发展", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247506252&idx=1&sn=f5849bfe706eb5b54b6813a1eb248021&chksm=cfcaba58f8bd334eab9878982c9ed49c2e133b8e9752c2f81e9e9163eaf07f54433995842471&scene=58&subscene=0": "漏洞通告 | 通天星CMSV6车载定位监控平台远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502976&idx=1&sn=9fa296838f4f3240e4523ff393547f8f&chksm=f2585873c52fd16510f215a5083f3590fc3823d1e9321680d835cacb801c31d9314c72dfe81a&scene=58&subscene=0": "雷神众测漏洞周报2024.07.01-2024.07.07", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664219335&idx=1&sn=6876d708d8e348e6ed7836b031b24db1&chksm=8b59c03ebc2e492875d4ac54fbc4fc532a5a49038e9b382d64a7aabf37c6d5d2450303897b91&scene=58&subscene=0": "专题·漏洞治理 | 坚持总体国家安全观 加快推进国家网络安全漏洞治理 赋能新质生产力发展", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247494921&idx=1&sn=4177296ba0ac285efefce557d0df8cb1&chksm=96d8e6d3a1af6fc5b978d5828bda53cd24fb19c49432b08237a3bfb5c265a556cd982dff90be&scene=58&subscene=0": "老旧系统漏洞修复难？能源集团选择斗象「漏洞无效化」方案，原因大公开", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523449&idx=1&sn=4d7627a87e923b868639d7149ec14f1f&chksm=ce461769f9319e7feb144fa3e1c5363f43209ff79a0324ea1a37aac2079222a16809198381cf&scene=58&subscene=0": "【漏洞通告】Apache CloudStack未授权远程代码执行漏洞(CVE-2024-38346)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523449&idx=2&sn=cda5fa3fa588f724623aed9fbfaffb7c&chksm=ce461769f9319e7f273d7b8b5c457163bcfca374d77ff52a71ae8b6de09ca58bc7fb33cd4672&scene=58&subscene=0": "【漏洞通告】Splunk Enterprise for Windows任意文件读取漏洞(CVE-2024-36991)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523449&idx=3&sn=8866030f307324e169f20091496ee431&chksm=ce461769f9319e7f68ab31930a04c711237a4663af24c612a67077cdc92435901ae63e6ddf1d&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240701-20240707)", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247572840&idx=2&sn=0fd4cfb7f7f22aa386fb144f7ab8354c&chksm=9f8d4d60a8fac4762e48ad31d9f102ed58ad0b72ba59c516c7067867ac8c99e5010426048300&scene=58&subscene=0": "360斩获NVDB两大年度奖项 漏洞治理能力再获国家级认定！", "https://mp.weixin.qq.com/s?__biz=Mzg5MTM5ODU2Mg==&mid=2247500545&idx=1&sn=c368de62b1799d9850c42c3a7bca72e9": "[漏洞挖掘与防护] 01.漏洞利用之CVE-2019-0708复现及防御详解（含学习路线）", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486727&idx=2&sn=40fc6717de121d8c0e5954d008bc2ee9": "Docassemble存在任意文件读取任意文件读取漏洞CVE-2024-27292 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg3MTcxNDUwOQ==&mid=2247484052&idx=1&sn=6feb7bcf088b9d1025ac92ac3c761fa5": "红盟云发卡系统存在反序列化RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247497834&idx=1&sn=f27c0bbb3c6b132da4b12d900904269b": "网络安全学习资料 -- 逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5OTk2OTY5MA==&mid=2247485631&idx=1&sn=4d2ffd558e416f9eeb9c6e96fd0125ab": "Microsoft 7 月 CVE 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664219477&idx=1&sn=757dea7f0dc373434c1b2e2b96994304": "专题·漏洞治理 | 网络攻防对抗下的漏洞治理探索与实践", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520029&idx=1&sn=1e2797120026ca6fbcf0a0d550923f4f": "微软7月补丁星期二修复142个漏洞，含4个0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520029&idx=2&sn=b58737a69aeafc6a694ae82500739603": "OpenSSH 易受RCE新漏洞影响", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499617&idx=2&sn=8f7641867b259ec120cc5b1949631a70": "【漏洞通告】微软7月多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499617&idx=3&sn=0d626d751317c9a0e5b4008eaeaee368": "【漏洞通告】RADIUS协议欺骗漏洞（CVE-2024-3596）", "https://mp.weixin.qq.com/s?__biz=MjM5MTI2NDQzNg==&mid=2654551624&idx=1&sn=d77ae913b211690ae58565a351a17877": "2024-07 微软补丁日 | 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651131046&idx=2&sn=79b6cbdc88599ac2cf334c6fa4371dec&chksm=bd15bc758a623563eb117c6ded7816adc9d295322aefdd62d12fe409ddbe0207f142d3b96f4a&scene=58&subscene=0": "多家网络安全上市公司上半年业绩预亏，市场整体形势仍较严峻；一款流行的文档转换工具被曝存在远程代码执行漏洞 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501618&idx=1&sn=9593ae978490bf55a9dbc632d4d83c6f&chksm=fe79e3aac90e6abce546a96abd8076691994f6ba44c7ae02a1177dfd09e9407f27e37d6403d7&scene=58&subscene=0": "微软7月补丁日多个产品安全漏洞风险通告：2个在野利用、5个紧急漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544810&idx=1&sn=4e5763c8c8dab2f7da58ceca6421a330&chksm=c1e9a3bbf69e2aadc6264466fc25e365eea9900d2975f7bbe69da110cb0a32fdffb5d90555a0&scene=58&subscene=0": "坚持总体国家安全观 加快推进国家网络安全漏洞治理 赋能新质生产力发展", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544810&idx=3&sn=d97510e8e11881fff644917260d0f722&chksm=c1e9a3bbf69e2aadcca603f0f2bb57580d1738a5c67bf1a4dfc15c7819b2a2860552bb6ae2ed&scene=58&subscene=0": "新型APT组织CloudSorcerer瞄准俄罗斯政府", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664219477&idx=1&sn=757dea7f0dc373434c1b2e2b96994304&chksm=8b59c1acbc2e48baa350d3f21691728c1ae67033420bb964bbb7a6b8cebcfda1d72b834ee63a&scene=58&subscene=0": "专题·漏洞治理 | 网络攻防对抗下的漏洞治理探索与实践", "https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247490471&idx=1&sn=38e35f75e2df8edc5a0121c237c6f5d0&chksm=fdeb9fd9ca9c16cfcc1b23b909b88f9ffbddc46a130ea27a5d5df4feb56be9c6114e0e9b1a74&scene=58&subscene=0": "再创佳绩 | 复旦白泽漏洞治理团队研究成果获软件工程顶会 FSE 杰出论文奖", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247506914&idx=1&sn=f5b78174719cf547a9504e2f2c07f7cd&chksm=fa520e5ccd25874af7607ff5e8fb21a157b8d295d363b990b1425c65f34be09f18dc345cb816&scene=58&subscene=0": "Self Destruction To Use After Free In Kernel：CVE-2024-38059分析记录", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247519374&idx=1&sn=ff707af5c3d29a6cf9344893cc88456a&chksm=eb7052b1dc07dba733448ed04a498436284e8176b61a605d7ba7f04c230dd355a2d137678b11&scene=58&subscene=0": "2024-07微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247504311&idx=1&sn=e757f23b345e817c9d6cbeb0ce132912&chksm=eaf999fbdd8e10edb410f6496ab32a480103af0ae52100808f74d607370e1b29d785fbdbb86d&scene=58&subscene=0": "单篇最高1500元 | 奇安信攻防社区「漏洞分析与复现」投稿活动", "https://mp.weixin.qq.com/s?__biz=Mzg2ODkyNjU4NQ==&mid=2247483956&idx=1&sn=dfa6a02d788c559004f21001da9c2ecb": "若依4.7.8版本计划任务rce复现", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489510&idx=1&sn=cc8306cc8225b9953ead1bedcb2dcdc6": "微软警告称 Windows Hyper-V 零日漏洞正受到利用", "https://mp.weixin.qq.com/s?__biz=Mzk0OTM5MTk0OA==&mid=2247496265&idx=1&sn=f6678b65b379bd64114d157cc84658a7": "API-Explorer - API接口管理工具2.0版本发布！", "https://mp.weixin.qq.com/s?__biz=Mzg3Mzg3OTU4OQ==&mid=2247491261&idx=1&sn=8a4f44d0651b3899ad3533383031e5b5": "强力亲推：专属于大学生的SRC漏洞挖掘课程来啦！！", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247500984&idx=1&sn=3a5f714017cf013e212aee1e7f4fac7c": "FastJson全版本Docker漏洞环境", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247486801&idx=1&sn=72a8c7921aa79da5d7bf4e41738ba9d3": "第98篇：Struts2全版本漏洞检测工具19.32版本更新", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247625867&idx=3&sn=b1a81e19cbe32f0f4d9fa5a2fc2ac8e4": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247625867&idx=5&sn=689898ecd768cde7a86b6eaff14692d0": "RADIUS身份验证协议惊现三十年的漏洞，CERT呼吁紧急关注", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062731&idx=2&sn=03802f599fd83f635075cf5aed1356e7": "【安全圈】微软警告称 Windows Hyper-V 零日漏洞正受到利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062731&idx=4&sn=c490c4def6e7894ae1f812dd7175ee46": "【安全圈】官方强烈建议升级，GitLab又曝严重的账户接管漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651291170&idx=1&sn=491166d10256b42f2cfe9c3223860b31": "官方强烈建议升级，GitLab又曝严重的账户接管漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650617670&idx=2&sn=8f2ee33f127228bcbd4865df11054ff2": "共建漏洞协同防御体系，亚信安全成为麒麟软件漏洞协同优秀合作伙伴", "https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247497131&idx=2&sn=0fa30e888919abc50254dda8b4decfe8": "微软2024年7月补丁星期二修复了2个被积极利用的漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501645&idx=1&sn=033df8702e13f8707d03274b085c7391&chksm=fe79e3d5c90e6ac3126b23338bc75eb076c1c17b83c0a2e96c117458a4af4d98444ce7343ee7&scene=58&subscene=0": "GitLab身份认证绕过漏洞(CVE-2024-6385)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520038&idx=1&sn=c47470c41eba485c6761c101be23ab04&chksm=ea94be4cdde3375a05493cfa38283ce2ea210148cf20f12ae01666d4ae7d06828b0073a00526&scene=58&subscene=0": "VMware 修复Aria Automation 中严重的SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520038&idx=2&sn=921e2fe11a431d8a458188b65d0a3b9d&chksm=ea94be4cdde3375abbf6e79690d31fd0c1e2f7bdc02b738a8fc06afa426d4a95adedea7492d3&scene=58&subscene=0": "NSA 的开源员工培训平台 SkillTree 中存在CSRF漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247500251&idx=1&sn=2289b0646f7e49f6135807061fc2fbd8&chksm=cfc56684f8b2ef92517d779a1e35f0bf22abc42ea99dba6a254957ce420de7797c87a7a5bc51&scene=58&subscene=0": "360斩获NVDB两大年度奖项 漏洞治理能力再获国家级认定！", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650181683&idx=1&sn=674c9d3ffc253f63d6ceef2e1c3d9b0b&chksm=f4486b8fc33fe2998364107fbb66554aba0eebcbadd6cc5ae833722c640793c1ef123b59aa04&scene=58&subscene=0": "漏洞报送最具贡献+1，这次来自NVDB", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247545807&idx=3&sn=7f6db24ad10a606511a85329be57f3f9&chksm=fa93850ecde40c18b691df71506bee2aadd9fac8fddba238c8564b80869a3005d642b3301149&scene=58&subscene=0": "RADIUS身份验证协议惊现三十年的漏洞，CERT呼吁紧急关注", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544845&idx=3&sn=0528c7fac6dcd50b5f1fe70d3936c7d7&chksm=c1e9bc5cf69e354a56af5c6c60f19a0ca720c56ea4d96587d85600821a56ec26e01a758f1f21&scene=58&subscene=0": "网络攻防对抗下的漏洞治理探索与实践", "https://mp.weixin.qq.com/s?__biz=MzI2NzI2OTExNA==&mid=2247516897&idx=1&sn=f1e158dc91284eb64c5daebc25ee1b5a&chksm=ea83a474ddf42d629457383967254ddb4435771c295a39e05bb6e17fce92bd075658d2e8a500&scene=58&subscene=0": "小米获 NVDB “2023年度漏洞管理实践先进企业” 荣誉", "https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247497131&idx=2&sn=0fa30e888919abc50254dda8b4decfe8&chksm=feb674b8c9c1fdae55e418f763be0f8a34a7dae6f3517bbbd0e43c987cd035a0e8fbb1d2961a&scene=58&subscene=0": "微软2024年7月补丁星期二修复了2个被积极利用的漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247506915&idx=1&sn=40b10ca14c76a8004c4792e3dac86271&chksm=fa520e5dcd25874bfc6b07882ebdf3a476767cd18b82924130b7d1ed0975095138f7aafe98fd&scene=58&subscene=0": "CVE-2024-34331：Parallels Desktop权限提升漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664219618&idx=3&sn=f6a6dc3c205405509b4a52e702ff5af0&chksm=8b59c11bbc2e480d7c57c697b02221b9bc1152391972b6db1663ca03e5ab678c841bd04e4904&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499233&idx=2&sn=acdfa4e4131e82f0f77fdeb1f4cc81fd&chksm=973ace83a04d47956f679067d871d86b706fd913b8fc2b3d30dfe49fc066ce34866840107b28&scene=58&subscene=0": "CNVD漏洞周报2024年第27期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499233&idx=3&sn=72a54c94a48e79cd965fc36e5dcf88ad&chksm=973ace83a04d47950d8dfce9fbc49edb53fd7f88d3a3c3039ea0ec78e87c15b2a8335f6f6b05&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240701-20240707)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523478&idx=1&sn=e608ed8dae2aa81c25029bbd9542cb8b&chksm=ce461786f9319e90da26ddf051b8623ce64302fada4f9683b51082ecb52aab486fada14b3619&scene=58&subscene=0": "【漏洞通告】GitLab身份认证绕过漏洞(CVE-2024-6385)", "https://mp.weixin.qq.com/s?__biz=MzU0MDcyMTMxOQ==&mid=2247487332&idx=1&sn=71b33d61aa38bffd24ebc8ac825b419f&chksm=fb35a6accc422fba335f182f00cbee272bda30d7f6ffffb543c22fa3ac8eea0852d5e73bc6d0&scene=58&subscene=0": "Evernote 应用中PDF.js字体注入导致跨平台远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247486801&idx=1&sn=72a8c7921aa79da5d7bf4e41738ba9d3&chksm=c25fc22af5284b3c29e420c5c719d0b6ba4c2839dc0182985a203cb3dd1867a1d8babd0496b4&scene=58&subscene=0": "第98篇：Struts2全版本漏洞检测工具19.32版本更新", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247485706&idx=1&sn=168333fe02c563852960a57ca0a50110": "JeecgBoot指纹与漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485754&idx=1&sn=44ab1dd7f55e2618b861fb3d5a5f5744": "漏洞poc指纹整合管理，漏洞扫描工具 - GoT", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651291429&idx=3&sn=d40dae3e9504841f0054bf4f14f47846": "谷歌发力争夺漏洞资源，漏洞赏金再提高5倍", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484553&idx=1&sn=7db37627e333aef468335d1f2f86bf31": "新中新中小学智慧校园信息管理系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062747&idx=3&sn=ae5e5926e091aae0dab0734b1cf7101d": "【安全圈】谷歌发力争夺漏洞资源，漏洞赏金再提高5倍", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486393&idx=1&sn=20df1e2fab426b42800ed7a20f0a4490": "【已复现】ServiceNow 存在代码注入漏洞（CVE-2024-4879、CVE-2024-5217）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488534&idx=1&sn=8714a0374652be9d76842db702331ba2": "【漏洞预警】ServiceNow Glide表达式注入漏洞CVE-2024-5217", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488534&idx=2&sn=d1c89ee6b0cc5ff21049f1c01c290e4d": "【漏洞预警】RADIUS响应篡改漏洞CVE-2024-3596", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664219805&idx=1&sn=e4c41c8af01e89a57c91e1aa2d94164a": "专题·漏洞治理 | 当前美国漏洞治理体系面临的挑战与应对举措", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzc3MTk3Mg==&mid=2247488746&idx=1&sn=3634dd7face9fa8b51e68605157ade44": "GeoServer 远程代码执行漏洞分析 (CVE-2024-36401)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520048&idx=1&sn=b45bc25ca26f3d26e25a19aee6ea8983": "谷歌系统和应用的最高漏洞奖励提升至5倍，达151k美元", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492602&idx=1&sn=c2dd6499124a6082ea12265c8fb45fae": "【已复现】泛微e-cology WorkflowServiceXml SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MTY5NDQyMw==&mid=2247517865&idx=1&sn=774cdced317edbd7eed3213d8da96ffa": "CVE-2024-32030 Apache Kafka UI 远程代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458563554&idx=1&sn=cf5419ad49285034ace2d1512bd65162": "V8 torque函数PromiseAllResolveElementClosure 相关的issue和POC的探索", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458563554&idx=3&sn=23a45f558e95ae27ddaf79590c903e1d": "GitLab漏洞允许攻击者以其他用户身份运行流水线作业", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247520725&idx=1&sn=3e1b985d66f030c3fae08a3fc6fe3272": "Yak与nuclei的深度融合：打造高效漏扫生态，解锁PoC管理新姿势", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458563554&idx=1&sn=cf5419ad49285034ace2d1512bd65162&chksm=b18d836886fa0a7e63e222f572dc596580d1d91e05735516b5a02370c78ea295f2ffb56db249&scene=58&subscene=0": "V8 torque函数PromiseAllResolveElementClosure 相关的issue和POC的探索", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458563554&idx=3&sn=23a45f558e95ae27ddaf79590c903e1d&chksm=b18d836886fa0a7e19f77bbf304b9cdfe787c2624abbfb6fe18b55609adec23afd5ed4800741&scene=58&subscene=0": "GitLab漏洞允许攻击者以其他用户身份运行流水线作业", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492602&idx=1&sn=c2dd6499124a6082ea12265c8fb45fae&chksm=96f7fc97a18075816e2fafeda31629399c123a8cbd3ce0ee0954d47f9b72598a40a4bab04cbc&scene=58&subscene=0": "【已复现】泛微e-cology WorkflowServiceXml SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664219805&idx=1&sn=e4c41c8af01e89a57c91e1aa2d94164a&chksm=8b59c664bc2e4f72d1bd53fce87c4291eae97a44b60515ae5b957ca932e58cfb9d275296c26d&scene=58&subscene=0": "专题·漏洞治理 | 当前美国漏洞治理体系面临的挑战与应对举措", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544862&idx=3&sn=2865af7f677dd8dc692c0020a64a5200&chksm=c1e9bc4ff69e3559141d9a95b6f8f108bd5bd6aba15bd29a603f7066f6f658509853579d5830&scene=58&subscene=0": "官方强烈建议升级，GitLab又曝严重的账户接管漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247545830&idx=3&sn=7afd7f19afbfb2fe3fec0538fafc4127&chksm=fa938527cde40c318a0e9cfabe671a96083f396ab3cc529b0bad0368159bb2d2737e6e36f22e&scene=58&subscene=0": "严重漏洞披露，影响Microsoft Outlook 应用程序", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247507001&idx=1&sn=013a5f321e6cfdabdf218b2a8feb5a81&chksm=fa520987cd258091c6a11b765021ebdd2d7d5cdd83d16c1b041579d7680cd221c9f096bc00b7&scene=58&subscene=0": "微软2024年7月补丁日重点漏洞安全预警", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzc3MTk3Mg==&mid=2247488746&idx=1&sn=3634dd7face9fa8b51e68605157ade44&chksm=cf8412c1f8f39bd791e7cb870435be16ecab73c7b15db96d8826bb6c88a9bae6a0e5ecea83f4&scene=58&subscene=0": "GeoServer 远程代码执行漏洞分析 (CVE-2024-36401)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495187&idx=1&sn=865545f98b505cc9bc3ebc55f590cb5c": "实战 | 记一次X站逻辑漏洞到到管理员后台", "https://mp.weixin.qq.com/s?__biz=MzI5NzUyNzMzMQ==&mid=2247485227&idx=1&sn=9356daa3304f7f740d2b446652ac7255": "Vulmap【一款web漏洞扫描和验证工具】", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486397&idx=1&sn=004a244c16799de6ec5b4b0a32a6acbd": "【漏洞预警】Wallet for WooCommerce SQL注入漏洞（CVE-2024-6353）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062795&idx=2&sn=06bef90352b8f62e7fdfe8a46e442706": "【安全圈】微软已修复，Outlook 被曝严重远程执行漏洞：影响 5 亿用户", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062795&idx=4&sn=7c20206815b5d743b0d3b2fe37cda2d9": "【安全圈】中文 ∕ 日文 PHP CGI 安装包漏洞披露 24 小时内遭黑客滥用", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247484843&idx=1&sn=c8b0379316ea919644675abfed7caf7e": "泛微OA E-Cology存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247486755&idx=1&sn=d7a5e727ccfd242bd46964679ebb0b05": "Exim 存在严重漏洞，可绕过 150 万个邮件服务器的安全过滤器", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247541807&idx=2&sn=856052a79ce43772e7237d467871c1ca": "漏洞复现 | Showdoc反序列化", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247489225&idx=1&sn=6e39235fb690e8a96d27a2626491b961": "Pwn2Own：WAN 到 LAN 的漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247510758&idx=3&sn=e73da5b40c8970459f6889f41e417680": "利用 Chrome CVE-2023-2033 进行 Electron 中的 RCE", "https://mp.weixin.qq.com/s?__biz=MzkxMjYxODcyNA==&mid=2247484308&idx=1&sn=7302c5f3f6a7fe9b648022c9c65d4fe3": "某微信小程序未授权漏洞挖掘（置空查询思路）", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484852&idx=1&sn=ce8c8441057765afd79d529d23997829": "「漏洞复现」用友U8 Cloud MeasQueryConditionFrameAction SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247487176&idx=2&sn=32dc23804e4518e4b68dddfbd88627d7": "CVE-2024-6188 漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650596548&idx=1&sn=032aecab7039664de2d7bb5bb9c88d6b": "掌握“宇宙高维智慧”？网红“苗圣”被捕；|Outlook 被曝严重远程执行漏洞：影响 5 亿用户，可窃取信息、执行恶意代码；", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247489645&idx=1&sn=109fce74415df29a9b8ce388f881d842": "漏洞预警 | 号卡极团分销管理系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247489645&idx=2&sn=812e6af6c35104ab19b9e03bc3b77743": "漏洞预警 | 宏景HCM SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247500997&idx=2&sn=bbc12826b38f64f9f1c76719a347eefb": "经验分享 | 记一次通过子域模糊测试识别漏洞并获取高额赏金的经历", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495199&idx=1&sn=9f92812648bf61f9b7bf52671c8f6a9a": "通过命令注入来实现的RCE", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652093179&idx=2&sn=dea47dea1d68f2afc9185d9aa7aa77fa": "微软已修复，Outlook 被曝严重远程执行漏洞：影响 5 亿用户", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486399&idx=1&sn=596b68342eeb353755a15bded1d87a10": "【漏洞预警】MStore API 身份验证绕过漏洞（CVE-2024-6328）", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247492923&idx=1&sn=94ad1c246dabcc298fc72ec8eb248183": "专题·漏洞治理 | 当前美国漏洞治理体系面临的挑战与应对举措", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495199&idx=1&sn=9f92812648bf61f9b7bf52671c8f6a9a&chksm=e8a5e47cdfd26d6a1a2c2872ba9f5dadf47759dcb32fc5f4874241ecfa10e1a2a5c6c308a604&scene=58&subscene=0": "通过命令注入来实现的RCE", "https://mp.weixin.qq.com/s?__biz=Mzg5MTM5ODU2Mg==&mid=2247500579&idx=1&sn=ed3c9232e67f1e244ff09da7db10d0b8&chksm=cfcf73eef8b8faf886676005ab6a5702e6e37443049fcec999ae10c3ca3db386b039b73e9a42&scene=58&subscene=0": "[漏洞挖掘与防护] 02.漏洞利用之MS08-067远程代码执行漏洞复现及深度防御", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247497895&idx=1&sn=7ba6cd7d6f74d444df1d134df08fcc63": "红队武器库漏洞利用工具合集整理（7月11日更新）", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247513478&idx=1&sn=220014678051574b8be34bc947e8b63d": "fastjson漏洞批量检测工具（7月12日更新）", "https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247489662&idx=1&sn=2508c666e4d64e5f01b182de33a7ed74": "关于最新 Nacos RCE 限制条件", "https://mp.weixin.qq.com/s?__biz=MzkyODcwOTA4NA==&mid=2247484438&idx=1&sn=c17337745e3da043122defc50041a39f": "关于网传的nacos最新0day", "https://mp.weixin.qq.com/s?__biz=Mzk0MTQ5MjIwNg==&mid=2247484036&idx=1&sn=d5889264587656c771656d05a6cd933e": "最新Nacos 漏洞复现与修复建议", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247486720&idx=1&sn=1d76d97ff44e992c63c63627eb40a837": "0day预警 | 已复现Github公开nacos rce的exp（小白友好）", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247492762&idx=1&sn=9d7af9ba25435e6affec93bf4f1d76f7": "NACOS RCE 0day POC分析及复现", "https://mp.weixin.qq.com/s?__biz=Mzg5MzMzNTUzMA==&mid=2247485180&idx=1&sn=2d124243f7aa4ed56579bcf80ba1338e": "紧急修复！Nacos 0day POC 及修复方式", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486405&idx=1&sn=dfa7ce2bc783c81365d21815a76f39c7": "【漏洞预警-已复现】FOGPROJECT 文件名命令注入漏洞（CVE-2024-39914）", "https://mp.weixin.qq.com/s?__biz=MzkwODUxMDUwMg==&mid=2247483798&idx=1&sn=9650f8ddbea3fd4311cd369765e990e9": "0day？传疯了", "https://mp.weixin.qq.com/s?__biz=Mzg5OTY2NjUxMw==&mid=2247512297&idx=1&sn=fecaac796e36bdf2f0c7b7017cef594f": "干货|安全方面的笔记∕工具∕漏洞合集 建议收藏", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247486807&idx=1&sn=535d1e07bd4d997e2690a98a39fbdf31": "速报：Nacos最新0day漏洞的临时修补方案", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484561&idx=2&sn=fe58c2cb005ad70a8878a0f850c67c3d": "【新】nacos RCE 0day", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062855&idx=3&sn=4c3de4434af430e0c1bf88432232e34e": "【安全圈】仅需22分钟，刚公开的漏洞PoC就被黑客利用", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651291518&idx=1&sn=03be9ad43eb32796ba2d65e6babd9dd8": "仅22分钟，漏洞PoC刚公开就被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291361&idx=1&sn=2c0be5e8d9a3d0946499feabcf9f8102": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247510735&idx=1&sn=eaf90a9f79f315001df513effc7f0d6d": "漏洞通告｜Nacos Server 远程命令执行 0day", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489526&idx=1&sn=d9ef23aa77626a9738060d0bb38a74e1": "【已复现】泛微 E-COLOGY存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501684&idx=1&sn=44cc19da424c8d5a4210ab1e390cabb8&chksm=fe79e3ecc90e6afab2dde978b8af8c436087de3554f33458a7969f346f01c69e5e5ceb22b23d&scene=58&subscene=0": "【已复现】泛微e-cology9 WorkflowServiceXml SQL注入漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501684&idx=2&sn=c2f25c8f5524b2bc8d881d1c7d54b6e7&chksm=fe79e3ecc90e6afae418944501c2fc4b3ac7f7fbab4966185c2a7e805ef1041635cd508b3bae&scene=58&subscene=0": "安全热点周报：本周新增两个微软在野利用漏洞，请及时更新修复！", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502999&idx=1&sn=4cb6a9c0b0cbe82859178ecf7ac47fd5&chksm=f2585864c52fd17226eba6b340b4c0e491f482397059f08e570ba6929d8563e02e0ee0e343ab&scene=58&subscene=0": "雷神众测漏洞周报2024.07.08-2024.07.14", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458563662&idx=3&sn=7735f76a13e592d4101f77b0195e0ea6&chksm=b18d84c486fa0dd21444b51e877007e8d1688a8ff9746cbffc78b9018c3edbfb89f257d2e1fd&scene=58&subscene=0": "最新！0day windows 课程更新3节", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247506446&idx=1&sn=9bb29eca5759a9d768fdf5591b188226&chksm=cfcab91af8bd300cf1bc4ea3d1f4f78488f425fd3e4ec6bedc818ad6944006f89a5d28ca2f94&scene=58&subscene=0": "已捕获在野利用，泛微e-cology9 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544884&idx=3&sn=0c0fe11708cabfb29a30a374a258cca8&chksm=c1e9bc65f69e35730b09714b0fd450d8ea6a11b0ff641309e9219d8a443505ed8c1d0164de1a&scene=58&subscene=0": "当前美国漏洞治理体系面临的挑战与应对举措", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495014&idx=1&sn=9c9a8f0c586a649abf33499dc1c295c8&chksm=fd74ddafca0354b9e3f58d24725b40addff019431a247f3f1a00f854618e6c37f7aefbe1c95a&scene=58&subscene=0": "CNVD漏洞周报2024年第28期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495014&idx=2&sn=9f9f39d41a5069bfadd30e9a47f10ca9&chksm=fd74ddafca0354b9cb6c72c97c2cd39d5348ff3deb0109577eecf32b5d55d3a3bc805e8f1610&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240708-20240714)", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247486807&idx=1&sn=535d1e07bd4d997e2690a98a39fbdf31&chksm=c25fc22cf5284b3ab2ccb50b745ffd189dc0f75f336eb1b247068abf350c63a1dc35445d62af&scene=58&subscene=0": "速报：Nacos最新0day漏洞的临时修补方案", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489530&idx=1&sn=99c0f7b4b6813514438eeeca5b8c43b6": "Veeam备份软件漏洞引发全球勒索软件攻击浪潮", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247513490&idx=1&sn=58e55679203b47c695e504ffaf29f757": "通达OA漏洞检测工具v1.6（7月12日更新）", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247491857&idx=1&sn=fd5598c9d0f2c82936d41dd09260e6d7": "nacos的1day保姆级漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484881&idx=1&sn=71991cf3b6dfca2c2a387dc6232bba18": "「漏洞复现」ServiceNow UI Jelly模板注入漏洞复现(CVE-2024-4879)", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484570&idx=1&sn=4b428b75abc5f6aedf9bba09a69fbf3e": "喰星云-数字化餐饮服务系统信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062873&idx=2&sn=79b2c32bc74a08b3c9cbd15f8a68a03c": "【安全圈】Veeam备份软件漏洞引发全球勒索软件攻击浪潮", "https://mp.weixin.qq.com/s?__biz=Mzg4MzA4NTM0OA==&mid=2247490832&idx=1&sn=042d272469e672778d013e81d171bce8": "近期暗网0day售卖情报", "https://mp.weixin.qq.com/s?__biz=MzA5MjA0OTAwOQ==&mid=2247485451&idx=1&sn=f6e54229e1ec64b2b8848b2c0d637456": "活动｜BKSRC组件命令执行漏洞专项测试活动三期开始啦～～～最后机会，欢迎上车～～～", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458563721&idx=1&sn=e2cc8158623ee93a36640990531d4b1a&chksm=b18d840386fa0d15cf8cb0fbf51100ab9e1c54ed453f329470eb54243f1db836d56a8fae7809&scene=58&subscene=0": "新手飞跃！零基础Android漏洞挖掘全攻略（实战+技巧）", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499235&idx=1&sn=375cb047a38747b8a77b3966d5a4f676&chksm=973ace81a04d4797e1459d00fa7c969809a4d1b600e3027fbbccf86c49c0eac300150ef8ab9d&scene=58&subscene=0": "CNVD漏洞周报2024年第28期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499235&idx=2&sn=4b3d5df99ac77847294c448db7478507&chksm=973ace81a04d479796d58c4afde6dd5c9092b8d475c24630d922afc58f3676178c4221ead77e&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240708-20240714)", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247545871&idx=2&sn=7ece6f8e0f769cba28f2fee090a063fb&chksm=fa9382cecde40bd8bd50cc7543bb1c666ef2b78d52b426c561398501215c315ed060695b4c96&scene=58&subscene=0": "网络攻击提速惊人：PoC发布22分钟内被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488558&idx=1&sn=df8eec545fc9c75d06dedaa08424d36d": "【漏洞预警】Atlassian Bamboo 需授权文件包含漏洞CVE-2024-21687", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488558&idx=2&sn=31b08847c7171aab3d37f4685424bd4e": "【漏洞预警】Apache Airflow 远程代码执行漏洞CVE-2024-39877", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247497899&idx=1&sn=1a503c20af61b9dde4f176dc8c116c01": "JeecgBoot综合漏洞利用工具V3.0（7月11日更新）", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247513511&idx=1&sn=11d9a8e92093ceb1a1498807aade6163": "网传nacos_rce漏洞poc（7月15日更新）", "https://mp.weixin.qq.com/s?__biz=MzkxNjY0NDM3OA==&mid=2247484012&idx=1&sn=1284843fcc9d2a829347c55919f6cb41": "第四课-系统学习代码审计：命令执行漏洞讲解", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247486045&idx=1&sn=cd67e626e0e7d703379bdd0503efa703": "Nacos Derby Sql注入RCE（常规出网）", "https://mp.weixin.qq.com/s?__biz=Mzk0MTI4NTIzNQ==&mid=2247491568&idx=1&sn=a7b7d61cd6bcc4aeb69bb8f64c58c015": "Oracle exp 导出表时表名长度限制", "https://mp.weixin.qq.com/s?__biz=Mzg3NDk1MDczOQ==&mid=2247484861&idx=1&sn=2e453ec7f4d807f11643e8f9fa875051": "Nacos 1Day RCE不出网利用方式", "https://mp.weixin.qq.com/s?__biz=Mzg5MjY0MzU0Nw==&mid=2247484687&idx=1&sn=4beea94d216333844c334f6687295106": "【IoT安全】BMC 固件中的漏洞影响 IoT 设备安全-第 1 部分", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651292178&idx=2&sn=52f7dbd8102cb94165669c4576c9f622": "FreeBuf「漏洞分析」主题征稿活动即日上线", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484578&idx=1&sn=ce51b5ffb96ed8665dc55376b99cb6cd": "Next.js框架存在SSRF漏洞CVE-2024-34351", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520084&idx=1&sn=011fff146cf764aa7cd74c6ce7c7fee4": "攻击者最快在PoC发布22分钟后实施漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzIzOTAwNzc1OQ==&mid=2651137465&idx=1&sn=2e8d5ead476b9a858ce74ad314634b1b": "演讲议题巡展 | 芯片安全终局之战—故障注入漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247540497&idx=2&sn=79bf7017883e275e4d0b00fa1e9846a2": "大咖来了|江苏智能网联汽车创新中心：车载操作系统网络安全漏洞验证实践分享", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664220182&idx=1&sn=8d8cb460c64828274bbb360ee11d9924": "专题·漏洞治理 | 对漏洞治理体系革新发展的思考与建议", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486428&idx=1&sn=1e0d4335e705333b85106dd88bb6056c": "【漏洞预警】Atlassian Bamboo Data Center And Server 文件包含漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486428&idx=2&sn=3519c62607de1fb749b279ef0bc9b914": "【漏洞预警】Oracle WebLogic Server未授权访问漏洞（CVE-2024-21175）", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486428&idx=3&sn=0966b848bf1bf6b1b1b617eed633636a": "【漏洞预警】Products Filter Professional for WooCommerce存在sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNTYwOTU1Mw==&mid=2650090872&idx=1&sn=a2940a5815a52a7cad2ecf4a909462e4": "最严重的39个硬件安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501710&idx=1&sn=65b45fbd7fa2c3d992923a30134ff42d&chksm=fe79e316c90e6a009de30885aa1d3a9b162f3f495e9dcc0c5ac3b9af501bae2c1bad98e32c77&scene=58&subscene=0": "Oracle 2024年7月补丁日多产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520084&idx=1&sn=011fff146cf764aa7cd74c6ce7c7fee4&chksm=ea94be3edde337289cc63b9bda937c13e46e7db1daa495e49f84c43a4d1d73f78bca1024bfe3&scene=58&subscene=0": "攻击者最快在PoC发布22分钟后实施漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664220182&idx=1&sn=8d8cb460c64828274bbb360ee11d9924&chksm=8b59c4efbc2e4df98ae932bf6dc3eb8c9470127fc82aeb4b424619d8801c32b935af6b9d8318&scene=58&subscene=0": "专题·漏洞治理 | 对漏洞治理体系革新发展的思考与建议", "https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650471437&idx=1&sn=65a6a59740e485ce51fcc230e559e3cf": "秦安：安防“三大漏洞”告诉枪击真相，特朗普将更加危险，利东方", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247517694&idx=1&sn=f81db683fc6662aeddbb716635f9630b": "工具 | Jeecg-Boot综合漏洞利用GUI", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520092&idx=1&sn=2c708cd0c74c042942553df613872635": "思科 SSM 本地漏洞可用于修改任意用户的密码", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520092&idx=2&sn=cc02ff9f6ef98e6d539f13b4c6c892c2": "Atlassian 修复Confluence等产品中的多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651451508&idx=1&sn=e9a112af7632262bc373ce727fbf8065": "专题·漏洞治理 | 建设全流程漏洞闭环管理机制，筑牢关基安全屏障", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651451508&idx=2&sn=1d69e6e878da20533eab05b03a2e4278": "专题·漏洞治理 | 对漏洞治理体系革新发展的思考与建议", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651451508&idx=3&sn=651bcb396bd774176d9a4049326b9679": "CNNVD关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489543&idx=1&sn=b20c7e33b1d622c9a2dec24d5b89815d": "思科紧急通告：本地智能软件管理器曝出高危漏洞，安全升级刻不容缓！", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652093213&idx=2&sn=c1b4080f849e6c81f1220cd8c5741b63": "2024-07 Oracle补丁日｜漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499669&idx=1&sn=e92a9a2998cda5eb97c6459180c9a3e5": "【漏洞复现】JumpServer文件写入代码执行漏洞（CVE-2024-40629）", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499669&idx=2&sn=75ae3cf070581a529e71905a8490cfa9": "【漏洞通告】Cisco Smart Software Manager On-Prem密码更改漏洞（CVE-2024-20419）", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484641&idx=1&sn=9ed7e32692520ce98eb9b9ad5d0ccc77": "【复现】JumpServer 后台文件写入漏洞(CVE-2024-40629)的风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062916&idx=1&sn=2f7a7da6edfcb8aa7c22e2e6f2afc7c9": "【安全圈】Cisco 再曝超严重漏洞，黑客可修改管理员密码", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651292305&idx=1&sn=2b8d74dc40441707334eb2994cd3cfca": "Cisco曝超严重漏洞，黑客可修改管理员密码", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544964&idx=1&sn=0f92f33ca6de46957220610b4d1a5db5&chksm=c1e9bcd5f69e35c3ba94759722f90126a41f443cc9d2fe76bbcebbc14da99d4337f9452ec4c0&scene=58&subscene=0": "对漏洞治理体系革新发展的思考与建议", "https://mp.weixin.qq.com/s?__biz=MzIzOTAwNzc1OQ==&mid=2651137524&idx=1&sn=dc487ab0c9b5371c9d3713ba3444cf25&chksm=f2c12494c5b6ad82f89e994c5a8693b7a4569d5ca32a165f9fd38674af9c7e530335d5b7cb66&scene=58&subscene=0": "演讲议题巡展 | A Post Exploitation Toolkit for High Value Systems", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247493626&idx=1&sn=c5fa1063ba130c5ceae3940a8701d3b6&chksm=fa9d1caccdea95ba537ddf60dc4ef4636b9d5d5df5a1bde2c7bc513dc308708b4460f6571684&scene=58&subscene=0": "抖音漏洞奖金提升至20万元∕个！", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664220248&idx=1&sn=7f26861b88e955fed09c8f25b46f48c2&chksm=8b59c4a1bc2e4db73b81466fdeaf2951d62361caf64dca9094a77ebb4fa649e7556e3caff055&scene=58&subscene=0": "专题·漏洞治理 | 建设全流程漏洞闭环管理机制，筑牢关基安全屏障", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247494927&idx=1&sn=9c15dc1380c9f14c49f4a4f45b691281&chksm=96d8e6d5a1af6fc38abd993d427d62522a3a09314cab533205fda3539dfe574e832b9cbc60ed&scene=58&subscene=0": "「人机结合」理念，科学推高SRC漏洞收敛水位线", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247491097&idx=2&sn=4f2b5b6f6640165d9fb477ae56953c25": "GeoServer 综合漏洞扫描工具V1.2 发布！", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492622&idx=2&sn=421756753855b4778e62e57395995703": "【已复现】Nacos 后台 removal 接口 SQL 执行致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652093221&idx=2&sn=c5835431828cd5f3af78d071c2ce2d87": "思科 SSM 本地漏洞可用于修改任意用户的密码", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247486840&idx=1&sn=be8331018c1a11e0bf21444b2365e557": "速报：Weblogic反序列化0day∕1day漏洞的临时修补方案", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486142&idx=1&sn=d234b6f0bc1689c780142eea2ef8a8a5": "【漏洞通告】SpringBlade存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486142&idx=2&sn=33882966256509cc273af17c9338eeb8": "【漏洞通告】Alibaba Nacos derby 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486142&idx=3&sn=f26f338e7099dbd0381634c4bc6750c7": "【漏洞通告】TorrentPier 存在安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520104&idx=1&sn=b5831c292df944c1998d2c0e89a80188": "SolarWinds 修复访问权限审计软件中的8个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520104&idx=2&sn=7a044b182ec50064eba8b67fb588a968": "思科严重漏洞可导致黑客在SEG设备上添加 root 用户", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk3NjczNQ==&mid=2247484949&idx=1&sn=3ba5af1c2414d2ab0d85fe8c0dc8a725": "98%企业存NDay漏洞超5年，风险高端局得怎样打？", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485509&idx=1&sn=4737cbe885067447a2783aa611d6b374": "CVE-2024-38050｜Windows Workstation 服务权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485509&idx=2&sn=80f304722ffe4cb1b5ca0fc357a74939": "CVE-2024-39929｜Exim安全绕过漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485509&idx=3&sn=9ba2f58a14f4d67f9f5da2fa675e32a6": "CVE-2024-21181｜Oracle WebLogic Server远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247540591&idx=1&sn=17e0bb45458ead9b732fdf3477841ec8": "汽车网络安全 -- 漏洞该如何管理", "https://mp.weixin.qq.com/s?__biz=Mzk0MTMzMDUyOA==&mid=2247497852&idx=2&sn=95b955bc2ffe39686f926dbf7197a2ea": "安全验证与传统评估方法的比较：红队、渗透性测试和漏洞评估", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247506507&idx=1&sn=843cdb4e55d16425fc965f93f16e0c28&chksm=cfcab95ff8bd30493077a4f3294ca470692f064eaa62fbc37008dda2e6870ac49aaac1c5fe91&scene=58&subscene=0": "漏洞通告 | 已修复！Nacos RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520104&idx=1&sn=b5831c292df944c1998d2c0e89a80188&chksm=ea94be02dde3371465b0ad96095c0a03d607581b57af9afb87fd5ef76bdc9b79312b0f3468c7&scene=58&subscene=0": "SolarWinds 修复访问权限审计软件中的8个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520104&idx=2&sn=7a044b182ec50064eba8b67fb588a968&chksm=ea94be02dde33714a87ec047348cf4004a40a24f05ca079479dd287aec723a3790919198933e&scene=58&subscene=0": "思科严重漏洞可导致黑客在SEG设备上添加 root 用户", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501756&idx=1&sn=d2a6bccad06819cf70176bc02a7ee944&chksm=fe79e324c90e6a32139fd6113ec70cea92a332ab1c089e0b8e3b4676c71774730911e98195de&scene=58&subscene=0": "【已复现】Nacos Derby 远程命令执行漏洞(QVD-2024-26473)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501756&idx=2&sn=df4016bd9cdbf9046656891f477b8bbe&chksm=fe79e324c90e6a32eb519c03daf43b2a21637c818171618482583076f652528551b0d4fbb9fc&scene=58&subscene=0": "【已复现】JumpServer 多个高危后台漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492622&idx=2&sn=421756753855b4778e62e57395995703&chksm=96f7fb63a18072756d5f876827020349de991368037543ef024569b6576bcdb4a1c94c7edc80&scene=58&subscene=0": "【已复现】Nacos 后台 removal 接口 SQL 执行致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544985&idx=1&sn=17dd354b8d00e3b573af17749e217761&chksm=c1e9bcc8f69e35de35e402885532f8732d404ea96cce5dc8a753d6a972f50a658691f17e2d21&scene=58&subscene=0": "建设全流程漏洞闭环管理机制，筑牢关基安全屏障", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544985&idx=3&sn=04a154860e6a3a0044645583796a7c5c&chksm=c1e9bcc8f69e35de3d606ff5179d3d5265397f54bbc9231163b8c9fdd9c4d406ffe10e575673&scene=58&subscene=0": "Cisco曝超严重漏洞，黑客可修改管理员密码", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664220358&idx=2&sn=5f3accbc203322dc2fbae600386507cf&chksm=8b59c43fbc2e4d29012e171adc3228bb5511402eec4cf08bf4afc84306d403daeb3607747a6e&scene=58&subscene=0": "专题·漏洞治理 | 防微杜渐，加强漏洞治理的应急响应环节", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664220358&idx=4&sn=649dce789eb58a23639314e1fa9bc65d&chksm=8b59c43fbc2e4d292edf11dd8ba02343cfaf86652bfae7dbf41f46364f7070a9e5cd0f53152a&scene=58&subscene=0": "CNNVD | 关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzU0MDcyMTMxOQ==&mid=2247487546&idx=1&sn=d1287857ffd6a62fcd91721f5e93c44d&chksm=fb35b9f2cc4230e4d9b766d19a5a63fd5a716de89c8f0102ed44d5b08628030e54c69e399a62&scene=58&subscene=0": "「推安早报」0719 | nculei反制、yt-dlp反制、jump漏洞等", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247486840&idx=1&sn=be8331018c1a11e0bf21444b2365e557&chksm=c25fc203f5284b157bd91c21145a2fe23c3c456d1e42ecacd468e4839c1c0dbad1c202412f8d&scene=58&subscene=0": "速报：Weblogic反序列化0day∕1day漏洞的临时修补方案", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247626166&idx=2&sn=d8701df8f4748af6882cee2f1f7cd880": "CNNVD | 关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486439&idx=1&sn=aca5b6f607e6396e0b9dbc97ce3a279d": "【漏洞预警】Apache CXF SSRF漏洞（CVE-2024-29736）", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247490609&idx=1&sn=7f1b96a451be7c93d387187ff761bb94": "首发0day-1Panel面板最新前台RCE漏洞(内附Poc)", "https://mp.weixin.qq.com/s?__biz=Mzg4NjI0MDM5MA==&mid=2247486001&idx=1&sn=87030960d183e19ea7cb3571d6e39cde": "【 CVE | 漏洞复现】Next.js框架存在SSRF漏洞(CVE-2024-34351)", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247611665&idx=1&sn=190696a4c0667127874c9379917d5ad0": "某通用系统0day审计过程", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484918&idx=1&sn=0a83f55fe8b1cc96dfcc6f470298b4b6": "「漏洞复现」数字通云平台 智慧政务OA PayslipUser SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyMDEzMTA2MQ==&mid=2651167307&idx=2&sn=2ec9e5c1e98e2d43681e2547a6f0a448": "Cisco曝超严重漏洞，黑客可修改管理员密码", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485012&idx=1&sn=a0fab6a6872d359dcb129127801e4d67": "某TP拼团零售商城系统RCE漏洞审计", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247486854&idx=1&sn=22f93339432647d0ad0776c139606e37": "速报：某EDR产品服务端RCE 0day漏洞临时加固方案", "https://mp.weixin.qq.com/s?__biz=MzkzNzM0OTcyOQ==&mid=2247484617&idx=1&sn=cb65350f5023a64558c5f639196a477d": "漏洞利用小工具V1.3更新", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247513932&idx=1&sn=93f322246016615a57010658c5ff5e4d": "记某智慧云平台越权信息泄露SessionKey篡改 任意用户登录漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486441&idx=1&sn=9f534c95bf817bcf2fef94fd8d0cbe44": "【漏洞预警】WooCommerce - Social Login数据篡改漏洞（CVE-2024-6636）", "https://mp.weixin.qq.com/s?__biz=MzkzOTI2NjUyNA==&mid=2247484240&idx=1&sn=4467be07eab1806b8b59c62abfe5e6f0": "用友U8 CRM 文件上传致RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MDcyMTMxOQ==&mid=2247487637&idx=1&sn=6229121098df1fb61d8329fd41691f72&chksm=fb35b95dcc42304b684e585cae8bda7bf94df3255303709e86078dc1c4146f940858080b2d1c&scene=58&subscene=0": "「推安早报」0721 | apache2个检测poc公开", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247485960&idx=1&sn=34831d345fd134ba1817c79a7d68dd95": "护网第一天！浪潮云财务系统RCE已首发披露！", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488585&idx=1&sn=ac37c16bd21ef2bf635aefdc71483e0f": "【漏洞预警】Nacos derby 接口SQL注入导致RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488585&idx=2&sn=f928b1dd5f4de5f6a9ea51b82c8d1c25": "【漏洞预警】泛微 E-Cology 任意文件写入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247626233&idx=4&sn=6a99c5a3177ffa512f3c60d993c62111": "神漏洞！远程篡改红绿灯时间，制造交通堵塞事故", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501769&idx=1&sn=2edeb62bd20fc5bd84da63caa890e03e&chksm=fe79e351c90e6a4753944bb594a30e2b7bf1dddd44e2f6071ae200c622e71290e1d1d89607eb&scene=58&subscene=0": "安全热点周报：本周新增四个在野利用漏洞，Magento、SolarWinds等企业级应用受波及", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512223&idx=1&sn=5cf0aa8b503295906af7fac1abdf57ae&chksm=ebfaf7bfdc8d7ea98017e06476a5b15e64759493f16994959a0e3ca41de6d2a4f1c0882572ea&scene=58&subscene=0": "神漏洞！远程篡改红绿灯时间，制造交通堵塞事故", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545006&idx=2&sn=1aaa1df68b4e9d5ac7f2a1ee6568d030&chksm=c1e9bcfff69e35e9ce5887ee7f4061e51957f6687944b6df014db40c5ae6108dd7134c38e8e1&scene=58&subscene=0": "防微杜渐，加强漏洞治理的应急响应环节", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247493586&idx=1&sn=b5b6e35be18616b3b804f0ed74cc21bb&chksm=fa78e69ecd0f6f884168806e7866c9fc07d6f56fa754c30c8765d49c3e1d8d7ae1fb683c7907&scene=58&subscene=0": "【手表众测招募啦！】单个漏洞最高奖励可达6w，还有机会免费赢得一加手表！", "https://mp.weixin.qq.com/s?__biz=Mzg2NTA4OTI5NA==&mid=2247516589&idx=1&sn=107da3b45e88255f240504d033ebde7f&chksm=ce5da3ccf92a2adab0511bd798570d967cd4b0b7d7528f2f17163f5ed77e4dd7a02ac17c39d7&scene=58&subscene=0": "无影(TscanPlus) v2.2发布：1300+内置Poc", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495053&idx=1&sn=12c77584f45d35f849c6617d4fb050ab&chksm=fd74dd44ca035452adcfaf4ce2cbe022ca6ab443db71a7591911a4c6ba49df8448c9a9750237&scene=58&subscene=0": "CNVD漏洞周报2024年第29期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495053&idx=2&sn=7250465475c2c84c39e33e88cc0cc7aa&chksm=fd74dd44ca035452bd0826714e86d5a85e2fd7266a0274c5b036a272160fe38c0a8c0583aece&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240715-20240721)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664220446&idx=3&sn=5ff6dd8ac6d7cde9af96f7b3abb6fa60&chksm=8b59c5e7bc2e4cf1b81359a4abc7b3525116e5303fa924b5eeab43e5df5a18d6a927484dd431&scene=58&subscene=0": "专题·漏洞治理 | 强化全闭环漏洞管理，让安全漏洞无处遁形", "https://mp.weixin.qq.com/s?__biz=MzU0MDcyMTMxOQ==&mid=2247487643&idx=1&sn=64eb3611770faf3c620745406fe40822&chksm=fb35b953cc4230456b344f2c8cfad661942c46b403667231dfb6e48c1cb894212b668a3dd93c&scene=58&subscene=0": "「推安早报」0722 | exchange、漏洞赏金等", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495346&idx=1&sn=6a13b341165b3e94dc2c0b536102afa2": "记一次任意文件读取漏洞的挖掘", "https://mp.weixin.qq.com/s?__biz=MzkyNDUzNjk4MQ==&mid=2247484651&idx=1&sn=081b57a0a2ea1485ab7cdab56a3d5809": "2024Hvv【在线更新Poc合集】", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247485734&idx=1&sn=de7f421d7d8a1360421bc6356e6ad381": "2024 HW漏洞威胁情报合集", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651451711&idx=1&sn=241c0e21c15e2dd7f922c6622eee78f3": "专题·漏洞治理 | 软件安全研发成熟度模型研究与实践", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651451711&idx=2&sn=432f1e152b0227a30ecf1ffacbc2a97e": "专题·漏洞治理 | 安全验证导向的漏洞管理方案分析", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489695&idx=1&sn=fdb9068a1b92e6ecc953bf45730bef4e": "【7∕24特辑，就2个！】恒脑协助在野漏洞分析显神威", "https://mp.weixin.qq.com/s?__biz=MzkwMjQyNjAxMA==&mid=2247484317&idx=1&sn=cb803241d8672d4ad805521da756b598": "惊！Android手机请尽快升级:电报0DAY正在影响你的手机安全", "https://mp.weixin.qq.com/s?__biz=MzU3MDg2NDI4OA==&mid=2247489970&idx=1&sn=0b1e0ee1773f584da98044236690a4ba": "今日hw情报-某小众CMS 0day 反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063065&idx=1&sn=efdee5eeb85ca8a24d1876f21e7e8e18": "【安全圈】Telegram曝零日漏洞，允许发送伪装成视频的恶意APK", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484956&idx=1&sn=f1c90002b490ec19bd8d57d2e13848ed": "「漏洞复现」AnalyticsCloud 分析云 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247511512&idx=4&sn=671e93f615bf73e85b12e8c75297a9e3": "CVE-2024-4040：CrushFTP VFS 沙箱逃逸", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650617951&idx=1&sn=16d5748c8c04c3ddfafda69476668620": "赶快排查！2024实网攻防演练最新高危漏洞合集", "https://mp.weixin.qq.com/s?__biz=MzkyMjM0ODAwNg==&mid=2247488012&idx=1&sn=48d23745fec7bd4b16dd0a7e15aa44bb": "【这两天一些神POC】不废话", "https://mp.weixin.qq.com/s?__biz=MzkzNjM5MDYwNw==&mid=2247483967&idx=1&sn=1205565b992ed2c0d2528c02084295e1": "靖云甲ADR捕获WebLogic远程代码执行0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652994983&idx=1&sn=d4d5f0a42debfbb7a0b2855ddf523aed": "关于阿里云先知暂停漏洞测试的通知", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247491497&idx=1&sn=f61f543e16e24b07d827839a02447cd1": "漏洞预警 电信 网关 ipping.php 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545063&idx=5&sn=174632fd15b0ca95c5d986caa6be8d69&chksm=c1e9bcb6f69e35a0004f5ce8482e45ff22f8590076ea898168b7a2eaa206098afb786f06dd09&scene=58&subscene=0": "Telegram零日漏洞被售卖数周：恶意APK文件可伪装成视频消息", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664220664&idx=2&sn=8b8f21875ea62dedfa21b52495bbce86&chksm=8b59c501bc2e4c17c0f03d1335dbe0168c91c1ecc8b73fdd5d5dd8f027a0e843d3ec18071652&scene=58&subscene=0": "专题·漏洞治理 | 安全验证导向的漏洞管理方案分析", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664220664&idx=3&sn=7d0d967cfcb149eb7288327e0c5ca39a&chksm=8b59c501bc2e4c17ffa1ac337e3b9c53d085d694a4c9832032e59688b2187eed09c9668b19fd&scene=58&subscene=0": "专题·漏洞治理 | 软件安全研发成熟度模型研究与实践", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495346&idx=1&sn=6a13b341165b3e94dc2c0b536102afa2&chksm=e8a5e4d1dfd26dc71464ad135e853d87e7f491832fb5be5df8cbac76e4094c044a8a7d961acf&scene=58&subscene=0": "记一次任意文件读取漏洞的挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247485932&idx=2&sn=e034592ca1acc9fd40ce672883d9d75d": "最近的一些高危rce漏洞附poc", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495364&idx=1&sn=2f2f32391be139c07331888749eb7045": "安全认证相关漏洞挖掘 | 高级攻防01", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520213&idx=2&sn=94fff5ae2231152f4d3c3f04cb6d19e3": "Docker紧急修复已存在6年且可导致系统接管的CVSS满分严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664220786&idx=3&sn=8104fa961284f508c01df5856f7d38f1": "专题·漏洞治理 | 基于漏洞情报构建高效漏洞运营体系实践", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664220786&idx=1&sn=da831ae9baf07e7d443a29c0412aafd2": "专题·漏洞治理 | 美国工控安全漏洞管理政策研究与思考", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2NDM4MQ==&mid=2650841434&idx=1&sn=1890a49b8879172c25061b9599b225de": "ForCloud赢战攻防 | 无惧突发0day漏洞 ForCloud虚实结合快速处置", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664711773&idx=1&sn=fd8eb9f9fc2f342de3b591f819d5c604": "2024年HW漏洞专项", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247493111&idx=1&sn=09d6f05aa220dc4491e6651b71e91610": "Telegram零日漏洞被售卖数周：恶意APK文件可伪装成视频消息", "https://mp.weixin.qq.com/s?__biz=MzkyMjM0ODAwNg==&mid=2247488018&idx=1&sn=190e378f3f95346162d6614682a3059c": "HVV漏洞PoC分享第二弹", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664220786&idx=5&sn=a474c68060e30cc0c190f355e6d018f0": "“微软蓝屏”事件最新回应！美国“众击”公司将宕机事件归咎于内容更新漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664220786&idx=1&sn=da831ae9baf07e7d443a29c0412aafd2&chksm=8b59ca8bbc2e439d6059fe9dc78487a82b4d8db5494dda70a44ab1297729c5a9bb8de46a8324&scene=58&subscene=0": "专题·漏洞治理 | 美国工控安全漏洞管理政策研究与思考", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664220786&idx=3&sn=8104fa961284f508c01df5856f7d38f1&chksm=8b59ca8bbc2e439d99647e772b5ffc0b6b131d81fb8ddf5f0349d30b4455a3115d0e80c63757&scene=58&subscene=0": "专题·漏洞治理 | 基于漏洞情报构建高效漏洞运营体系实践", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664220786&idx=5&sn=a474c68060e30cc0c190f355e6d018f0&chksm=8b59ca8bbc2e439dc41dec8336e3d7261822a024e58509595ade0bea2d98cbc446a213434e87&scene=58&subscene=0": "“微软蓝屏”事件最新回应！美国“众击”公司将宕机事件归咎于内容更新漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247493559&idx=1&sn=5d3dcee7a24e488f9467a2a626360726&chksm=fa59495acd2ec04c4b242bb62bd8e75c7538501ea8fc7f95789d4adf2df04612ef2eaddd41d6&scene=58&subscene=0": ".NET 一款利用打印服务漏洞提权的工具", "https://mp.weixin.qq.com/s?__biz=MzIzOTAwNzc1OQ==&mid=2651137640&idx=1&sn=8b8abb905b8924055448ce8ce28c9507&chksm=f2c12708c5b6ae1ed53cdd3c383c0c593eb1efc0aa4033aa6bb421027e725955ba31bbd28853&scene=58&subscene=0": "演讲议题巡展 | Windows远程文件协议漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=Mzg4MDcxNTc2NA==&mid=2247486232&idx=1&sn=5307e2418c9c5e8d33a08d63a91b77b7&chksm=cf71b983f80630956b887410a557b2cb56b386fb616ed0ebeebac54ea505cb4f6212fe68d659&scene=58&subscene=0": "CVE-2024-36401 JDK 11-22 通杀内存马", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495364&idx=1&sn=2f2f32391be139c07331888749eb7045&chksm=e8a5e4a7dfd26db18b87becce06bc302072ccc8c08572a8fad029eb56e9cf17f157ce662220a&scene=58&subscene=0": "安全认证相关漏洞挖掘 | 高级攻防01", "https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247485934&idx=3&sn=522e1194ba6559a2a59af648b7f1c66e": "代码审计｜NginxWebUI多处漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495366&idx=1&sn=296bd8f1f373777462c9179f8b0f8b47": "任意文件读取rce", "https://mp.weixin.qq.com/s?__biz=MzkxNjY0NDM3OA==&mid=2247484028&idx=1&sn=8dbdf402636ad1a7044450c645280e42": "第八课-系统学习代码审计：XXE和XSS(VUE中可能存在的漏洞)翻车讲解", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247484638&idx=1&sn=72aeb8505b660108d1447619bb3e029a": "帆软报表最新前台SQL漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664220895&idx=6&sn=2e182b324ca03720f8633fb69d9c4638": "专题·漏洞治理 | 实战导向的漏洞运营实践", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664220895&idx=5&sn=9b46129ef4ad8e72f276042122c1b9f1": "专题·漏洞治理 | 漏洞全链路治理与运营管理建设", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651294547&idx=2&sn=6aa0ec2a3d81bddd1e8f357ae699a46a": "初学漏洞挖掘，很多师傅都在走弯路", "https://mp.weixin.qq.com/s?__biz=MzIzOTAwNzc1OQ==&mid=2651137673&idx=2&sn=41370ac51edb67318e988eabd6d69a3b": "诚邀漏洞猎手！KCon白帽赏金大赛即将开启，OPPO企业专场率先来袭，现金大奖等你来战", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063111&idx=2&sn=788b41903202c10118e89009d4f07a51": "【安全圈】LangChain曝关键漏洞，数百万AI应用面临攻击风险", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063111&idx=4&sn=23f2ccd28f8d422d1feed77a32e3e912": "【安全圈】某些版本的 Docker Engine 存在一个关键漏洞，在特定情况下可被利用来绕过授权插件 (AuthZ)。", "https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651388033&idx=2&sn=959fa7ae76566c78a23129c981ad657b": "专题·漏洞治理 | 防微杜渐，加强漏洞治理的应急响应环节", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247483844&idx=1&sn=8685b0090897f36692db5ebd5c7aea8b": "【2024HW情报】0722-0726漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458565034&idx=1&sn=c3fb1f75fd43b7cabc845b7e6a541826": "IOT漏洞复现----RWCTF 6th - Let’s party in the house", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458565034&idx=1&sn=c3fb1f75fd43b7cabc845b7e6a541826&chksm=b18d892086fa0036c77cd9e11cf877b53fefef8c48a07c9da47115c2884c6219f56ed4a27626&scene=58&subscene=0": "IOT漏洞复现----RWCTF 6th - Let’s party in the house", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520228&idx=1&sn=d9e2734ebb4a13c747b20000c240d7bd&chksm=ea94be8edde33798e81c133dacfe538263083021026fe777545f067b211569e604c359b9c639&scene=58&subscene=0": "Progress 提醒注意Telerik Report Server中的严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520228&idx=2&sn=e2baa4f853063d34474bdd1973b4b156&chksm=ea94be8edde33798101d04ab50a6066bd659de102e44e7f9e8a8a8d63f9a91f86499e33bffbd&scene=58&subscene=0": "研究员披露谷歌云平台上的 ConfusedFunction 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247491342&idx=1&sn=e4bb64f117526b3289e7f63fa1cb8952&chksm=ea4bb549dd3c3c5f34fb2e64216c8ef15578c1ca1dfe79f2c776c52add9151c98d042a30670d&scene=58&subscene=0": "探讨非 http 供应链产品漏洞防范与不停业务之策| 总第255周", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545108&idx=1&sn=ca547d14914df9f640386caf37c01ae3&chksm=c1e9bd45f69e345320d269f3f4ce51cb9663f9c2b9216db42ae132530f829e959298725ccaa1&scene=58&subscene=0": "基于漏洞情报构建高效漏洞运营体系实践", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247493616&idx=2&sn=6ee74d0df3e60b8d50600f3d4ca40ac1&chksm=fa59491dcd2ec00b6129104799c97229ebc74477ee12e0db377fb245cb241c578884bc7d6916&scene=58&subscene=0": ".NET 一款利用打印服务漏洞提权的工具", "https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651388033&idx=2&sn=959fa7ae76566c78a23129c981ad657b&chksm=8d398909ba4e001f81afdc2d74c68e5b4e3d3a6dfcd6ce2dba01bd3c61a913751191aea35fae&scene=58&subscene=0": "专题·漏洞治理 | 防微杜渐，加强漏洞治理的应急响应环节", "https://mp.weixin.qq.com/s?__biz=MzU0MDcyMTMxOQ==&mid=2247487685&idx=1&sn=7eb34d26696d991deb33192ae556c622&chksm=fb35b90dcc42301be0287b6f42989e0e3b8aeb7c996006163f088deb8f511e421a729f7d2afd&scene=58&subscene=0": "「推安早报」0726 | Selenium Grid Rce、红队新技术、spring Skipper组件rce", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495366&idx=1&sn=296bd8f1f373777462c9179f8b0f8b47&chksm=e8a5e4a5dfd26db31627ad8ebafb9a9bac3217d54d6a35fb0d8015a0650f76cb64a1f1fa4b53&scene=58&subscene=0": "任意文件读取rce", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247577257&idx=1&sn=547f0afc47fa10d49243af17b5283616&chksm=e9147e93de63f7850c6bcba1a139e655c4fa06196ad723ee291f31c2033ead563e4190635311&scene=58&subscene=0": "Ghostscript 库中存在 RCE 漏洞，现已被积极利用", "https://mp.weixin.qq.com/s?__biz=MzI4NTYwMzc5OQ==&mid=2247494424&idx=1&sn=c29423df3626026c4d87ea402cfc7b5f": "子域名模糊测试实现RCE", "https://mp.weixin.qq.com/s?__biz=MzkyMzU5NTM5Nw==&mid=2247488292&idx=1&sn=eb777bc7695c5b116af5f921cf2882ff": "CVE-2023-32243踩坑", "https://mp.weixin.qq.com/s?__biz=Mzg2MTc1MjY5OQ==&mid=2247485842&idx=1&sn=91b4788dd554295ad4dc1219c70639af": "二进制安全之栈溢出漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTg0MjQ5OA==&mid=2247485810&idx=1&sn=b167a9302bc734568a4099ade2d818ee": "激战N天，0Day漏洞成攻防分水岭！", "https://mp.weixin.qq.com/s?__biz=MzI5MTUxOTMxMA==&mid=2247484937&idx=1&sn=976677ffc1edccd7382a56df410cdfd0": "Day5-HVV Windows LPE 0day漏洞在暗网出售，可直接打穿系统", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486462&idx=1&sn=cfc27eaa6d56976be9ad0b9d1bc9a7e7": "【漏洞预警】OpenAM FreeMarker 模板注入漏洞（CVE-2024-41667）", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247511621&idx=2&sn=6f2101afab604347a94c00433a1f6d97": "通过 MemoryUserDatabaseFactory 中的路径操作进行 JNDI 注入远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247511621&idx=3&sn=643a84281b291d6d166d64e84f94c048": "身份危机：Delinea 本地特权升级漏洞的奇怪案例", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651294548&idx=1&sn=969c31c8480912fac4e4fa0244f68184": "LangChain曝关键漏洞，数百万AI应用面临攻击风险", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484983&idx=1&sn=edac4bc4af1eec375cb81433fc9e0900": "「漏洞复现」用友U8 Cloud MeasureQueryFrameAction SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NDYwOTcxNg==&mid=2247483995&idx=1&sn=1c6e00785d5041b0329792ed42b10efd": "【泛微】漏洞利用PoC整理", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484617&idx=1&sn=69cdea92bd6fb92bc2d25c32bb02b5bb": "天问物业ERP系统VacantDiscountDownLoad存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484617&idx=2&sn=3f3bae94927c54d4a566f1acee1bda7a": "2024HVV漏洞整合", "https://mp.weixin.qq.com/s?__biz=MzkyNzQxMjQ4Ng==&mid=2247484121&idx=1&sn=35b28adb1ba73f6015bb64145ee0356c": "工具|OA漏洞利用工具，集成348+漏洞，包括nday、1day（未公开poc）", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485082&idx=1&sn=215bb67ff03c8f21a52b5332d08b420b": "(0day)超级猫签名APP分发平台RCE漏洞审计", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247487194&idx=3&sn=3da9260c849fb73395ab75b2b5569686": "CVE-2024-39676：Apache Pinot 存在敏感数据泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247489400&idx=1&sn=fe5af6843a6469b9622822aaf47a0dd0": "WhatsApp中的双重释放漏洞如何转变为RCE", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDExMg==&mid=2247484517&idx=1&sn=809506e30dea24a1a61c23d4ea77ff65": "【漏洞复现】润乾报表dataSphereServlet接口 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247487604&idx=2&sn=862e73cd28c2f14cebf90491779eed19": "红队终极指南：“A-poc∕RedTeam-Tools”", "https://mp.weixin.qq.com/s?__biz=Mzg3MTc0MDYwMg==&mid=2247483832&idx=1&sn=e2090f312429a67f99c09b47a236d4a9": "利用SSRF漏洞读取云服务元数据", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651294548&idx=4&sn=141235fab569ab62dc49eacc66a64f6f": "Ars0n-Framework：一款针对漏洞奖励项目的现代化框架", "https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649246077&idx=1&sn=05963301601ffe07d3797aaf87707a8e": "邀请函|第五期移动互联网APP产品安全漏洞技术沙龙", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247493616&idx=2&sn=6ee74d0df3e60b8d50600f3d4ca40ac1": ".NET 一款利用打印服务漏洞提权的工具", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484626&idx=2&sn=216285ccca848571d4ae5e385ce0f46a": "帆软报表ReportServer接口 SQL注入漏洞导致RCE", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486464&idx=1&sn=9ddccf5f819814e26be51cca4ebc847b": "【漏洞预警】Apache HTTP Server敏感信息泄露漏洞（CVE-2024-40725）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063149&idx=4&sn=e8f3fa1fcc121009dd82f54633a6d085": "【安全圈】Ghostscript 库中存在 RCE 漏洞，现已被积极利用", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484992&idx=1&sn=b69ca0fa47971b39d5852ca415619dc2": "「漏洞复现」汇智ERP filehandle.aspx 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NjI0MDM5MA==&mid=2247486065&idx=1&sn=90b6a690ce5003d30024ef89ef0e8190": "【1day | 漏洞复现】某厂商-多业务智能网关 远程任意命令执行", "https://mp.weixin.qq.com/s?__biz=MzU5MTExMjYwMA==&mid=2247485685&idx=1&sn=41fef7adb41d79dee22e702880262df9&chksm=fe32b802c9453114e50aca694082d9ad00ddf538fa9b77ab62a283f0bd841a67c545698c749a&scene=58&subscene=0": "nacos_后台rce分析", "https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247485949&idx=1&sn=b5bb45848b2cce26668a77530fda5f04": "某系统漏洞挖掘小记", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247514239&idx=1&sn=5e4782a9b3e18de0e62573f00b0b6b01": "2024hvv最新漏洞威胁情报7.29", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501777&idx=2&sn=59a3391319d7540116203966bdd3dd7b": "安全热点周报：黑客利用 Twilio Authy 漏洞窃取数百万用户信息", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651294766&idx=1&sn=ead81c0e4b3000600e88d4e77647d9d5": "专题·漏洞治理 | 漏洞全链路治理与运营管理建设", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651294766&idx=3&sn=55788e1a6e5d68d7d773023f5010f5b1": "邀请函|第五期移动互联网APP产品安全漏洞技术沙龙", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545130&idx=2&sn=6529cd7a31a894ac1c8e19045dc11835&chksm=c1e9bd7bf69e346df12084d426da102894bae3128a5642f422d8e693a5cdbbe6729d2026d436&scene=58&subscene=0": "Telegram新型0Day漏洞曝光，将BUG藏在视频传播", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546076&idx=2&sn=9dcfedb79381f24838259acd58c9beb5&chksm=fa93821dcde40b0b1e57ef7e5c1fc4d87c806f1b349e519715242e9ce20e0f717d9929d7f6f8&scene=58&subscene=0": "Ghostscript 库中存在 RCE 漏洞，现已被积极利用", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247577275&idx=2&sn=ce92824409c72d054e0c157fc9e75785&chksm=e9147e81de63f79753b74a7b725fec00ee88380f0fe9b6217bdd2f6b71922fafe5a1d3a6d783&scene=58&subscene=0": "安全动态回顾 | 关于下达5项网络安全推荐性国家标准计划的通知 Docker修复了存在5年之久的关键身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495092&idx=1&sn=d925db99dfb31c0b13ab6c7bcbcadaf2&chksm=fd74dd7dca03546b447331e486359c9190feac004b0e2ed0efda0c122225129c6a463b7e8d21&scene=58&subscene=0": "CNVD漏洞周报2024年第30期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495092&idx=2&sn=7b57bdcb52e9aee61bce09c2e5fcd0b5&chksm=fd74dd7dca03546b99bf1c23a5305dfe2019f135c7fb15ec7228264873873c4c6f769e15407d&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240722-20240728)", "https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247485951&idx=2&sn=9e0c28f0846a8818c34bd0767bff120b": "TOP10 漏洞详解", "https://mp.weixin.qq.com/s?__biz=MzkyNDYwNDE3NA==&mid=2247484759&idx=1&sn=c44961fc4e3bdd02879b7aca8600a173": "泛微ecology系统 WorkflowServiceXml 接口处存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1NzgyMzA0OA==&mid=2247490264&idx=1&sn=a06b00e597e35717b4a380c55f5b8ed2": "某木报表RCE_0day", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458565345&idx=2&sn=c74c7dd95c0c85c62ed058944ee36a0c&chksm=b18d8a6b86fa037da936a020c736441e5d4277a81b05d137bab438d7ddbb86320108f66c3b6e&scene=58&subscene=0": "WhatsApp Windows版本存在严重漏洞：点击文件会直接执行Python和PHP脚本", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458565345&idx=3&sn=b99b21263181acfc73e0aaab1655adb0&chksm=b18d8a6b86fa037df120c1a99e239cfbd8a088ea2ff6a690673f7de28c2acf75713c5e227d1f&scene=58&subscene=0": "新课已完结！零基础入门Android漏洞挖掘-入门篇", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503010&idx=1&sn=1e5c5126eafa4980abf3540552a5bb2d&chksm=f2585851c52fd147a50a6813465be5ba6ce79a6e338742454fe39d953a22f4c791057fcc4d70&scene=58&subscene=0": "雷神众测漏洞周报2024.07.22-2024.07.28", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520250&idx=1&sn=9de0d686df407512d09aa335542c6ef3&chksm=ea94be90dde33786a8a2ddd13dfb06aecf5ccfac3c0ec6aa88b69dd6affa1f42e9efd6b7a515&scene=58&subscene=0": "网络基础设施 Acronis 中的严重漏洞已遭在野利用", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545145&idx=1&sn=70d3c7cc10b7dcc19251b716dd83f63c&chksm=c1e9bd68f69e347ef3f3e2ef032805bfc6276f43b6e0cc4c387fa25052f63a7c0237209d0e8b&scene=58&subscene=0": "漏洞全链路治理与运营管理建设", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499257&idx=1&sn=b3e3cc7749d6c3694649fb57821ff541&chksm=973ace9ba04d478d459a49263ccd8c5cee49b944fd94985bb28f47e4cd0b15a7f26f91d16df5&scene=58&subscene=0": "CNVD漏洞周报2024年第30期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499257&idx=2&sn=37951c72e55ca239379d282a5c928542&chksm=973ace9ba04d478debed3a4a9d7a9c1bf8b69d51574c3e475ae854c2cfb8afe16cf6bb10060d&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240722-20240728)", "https://mp.weixin.qq.com/s?__biz=MzU0MDcyMTMxOQ==&mid=2247487691&idx=1&sn=383f62eea8e5e77b27c6b320d9af61c1&chksm=fb35b903cc423015b83726b63dc28c72861c94a6e47c925f76a5c55e5f26c1c11c1ef39b8f0f&scene=58&subscene=0": "「推安早报」0730 | outlook C2、ESXi漏洞、红蓝工具", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486473&idx=1&sn=3db53b01cf5289e0904e79b5987597d4": "【漏洞预警】Apache SeaTunnel Web 身份验证漏洞（CVE-2023-48396）", "https://mp.weixin.qq.com/s?__biz=MzI0OTIwMjE2NA==&mid=2247485778&idx=1&sn=de9b520d965b209d06934b52bdd19489": "爱奇艺SRC延长暂停漏洞测试时间公告", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545166&idx=2&sn=0d296f18234549aff828cf1a6d89e7a6&chksm=c1e9bd1ff69e3409a31cb034d2641cd10c071a6ef133fe9deb7d3c3e451adaacb51387df9c49&scene=58&subscene=0": "微软：VMware身份验证绕过漏洞正在被勒索团伙利用", "https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247485957&idx=3&sn=21aed8508698fad4ecf0663bd33ac0d3": "某木报表RCE_0day", "https://mp.weixin.qq.com/s?__biz=MzI5MTUxOTMxMA==&mid=2247484969&idx=1&sn=4afcab08a31c2bce3bbc1927fb709e18": "2024HVV-0801【0day】xxx狗输入法_逻辑绕过windows登录漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxODQxOTUxMg==&mid=2247483793&idx=1&sn=54fdbf31ca0480a73bba18e12c240bca": "浅谈搜狗输入法0day的原理", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484790&idx=1&sn=cf08f3bf47be3b075e1e0b762bea1261": "【0day】同享TXEHR V15人力管理管理平台UploadHandler存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484790&idx=2&sn=ed6b684bf7418e1f32667b35df95e15d": "HW2024汇总-8.1（漏洞数173）", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247486084&idx=1&sn=588d4574ba993580187a5fdaaaba8964": "「深蓝特训」2024 移动安全漏洞对抗专场，报名开启", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486475&idx=1&sn=f041c58e86ead5c3ed463ddc68c3bcbe": "【漏洞预警】ELECOM 路由器命令执行漏洞（CVE-2024-39607）", "https://mp.weixin.qq.com/s?__biz=MzkzNTYwMTk4Mw==&mid=2247486469&idx=1&sn=6f7f53793e09ad849b789bbb987fd628": "漏洞挖掘 | edusrc挖掘的骚技巧", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489791&idx=1&sn=f1e4fd6ee4b955bb5e6558f3fabaa483": "【8∕1特辑】今日热点漏洞速递", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxNTMzNw==&mid=2247483968&idx=1&sn=b1ed644f54a83e0ca3e063955c896b66": "Windows10∕Windows11使用搜狗输入法漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651295386&idx=2&sn=1c5a5e8bd06adcec07eeb29a10b915d5": "告别无效扫描站点漏洞，这两个工具嘎嘎好用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063243&idx=3&sn=3d3aadb0fb7259f6470cfe1f79c7ecd5": "【安全圈】苹果修复了iOS和macOS中的数十个漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495410&idx=1&sn=41f16c2639431fa942ba796ae22ed672&chksm=e8a5e491dfd26d8775a425654819ef718a12fba4577f1db9e9d2b9e7a5fbdff8256d9d8b08e5&scene=58&subscene=0": "一次十分详细的漏洞挖掘记录,新思路+多个高危", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485524&idx=1&sn=773266cbe2dc151da3831d9b0659cbc4": "CVE-2024-40725｜Apache HTTP Server 源代码泄露漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485524&idx=2&sn=107bfa4ace14218a76c777ada29d55c0": "Android版Telegram中的0day", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458565629&idx=1&sn=f07b4983ee9378e3146d939c02c51bd7": "内核漏洞学习记录（CVE-2021-22555）", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247487627&idx=1&sn=0e958ee8f029be1f08a6d1948ba3a80f": "使用开源AI探寻0day的艺术", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247590&idx=1&sn=768b212ad04e04b3f97d42e7487fec88": "CVE-2024-36401：GeoServer未授权RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzOTI2NjUyNA==&mid=2247484409&idx=1&sn=f72dcefb7d5608fb375bb480e60b4c05": "[企业安全运维] 海康威视现新0day 可未授权致RCE 速查！", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247487506&idx=7&sn=43bda1741b2ce43f7c7fee57e06cbe2e": "CVE-2024-6980 Bitdefender GravityZone 存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyODY3NjkyNQ==&mid=2247484141&idx=1&sn=4af853d12549f6e13405948ca931cc5e": "IP广播服务平台未授权文件上传getshell-0Day附批量POC", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485048&idx=1&sn=78e6d2231f1e075130aff92d0e70cacb": "「漏洞复现」百易云资产管理运营系统 comfileup.php 文件上传漏洞(XVE-2024-18154)", "https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247539571&idx=1&sn=1b5aa84b6f96db73405247703d1c5b5e": "一文读懂2024HW & 2024HW漏洞合集", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484804&idx=1&sn=21078dd6a8ecf1f455196e1b45c5f9d9": "HW2024汇总-8.2（漏洞数196）", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247484744&idx=1&sn=b00faa90eea9c7143bc98bda076739bc": "HopLa插件让漏洞挖掘更轻松", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458565629&idx=1&sn=f07b4983ee9378e3146d939c02c51bd7&chksm=b18d8b7786fa0261a9685c18bcc980819b8524e61e75ea1af315b5b383bde56947b61658691e&scene=58&subscene=0": "内核漏洞学习记录（CVE-2021-22555）", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247491559&idx=1&sn=dc307b921e03c9215e4951320bc30903": "漏洞预警 用友 NC querypsninfo SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247488182&idx=1&sn=0f14d3a4712e92ae290d5eece6b597f4": "[Win11]集成化综合漏洞扫描系统", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484832&idx=1&sn=6f24e6e4354db0ff88b3c7dfca22b6ed": "【新】IP网络广播服务平台任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486481&idx=1&sn=c7b9d64e85f7ed057857d967532331a4": "【漏洞预警】D-LINK DI-8100 远程命令执行漏洞（CVE-2024-7436）", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484448&idx=1&sn=a833946a771aafeb5e01053b677b715d": "润乾报表dataSphereServlet接口存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484448&idx=2&sn=98f25a5ac73f09e5a3b9f1edc804f2ae": "润乾报表dataSphereServlet接口存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484448&idx=3&sn=112d0c2fd701f1a7253cfa66bc76d01e": "润乾报表InputServlet接口存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484448&idx=4&sn=e90d885ffaf3c86d29f2e664bddbc9a0": "润乾报表InputServlet接口存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484448&idx=5&sn=5ca049009a3074a11b83683d68539d60": "喰星云-数字化餐饮服务系统not_finish.php存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484448&idx=6&sn=ebeac3920aab864e35cd454e8de21e2c": "喰星云-数字化餐饮服务系统not_out_depot.php存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484448&idx=7&sn=751e96790ac212053c2bbe3b3115e4be": "喰星云-数字化餐饮服务系统shelflife.php存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484448&idx=8&sn=19a267675678ec78e258a77ad8ae1ac7": "喰星云-数字化餐饮服务系统stock.php存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY1MDc2Mg==&mid=2247505464&idx=2&sn=e0d69b07bbcfee314e9d1553d5aaee0f": "XML 基础知识 && XXE 漏洞原理解析及实验", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501791&idx=1&sn=ee41f8931eefed9cc459de3f0673f3ee": "【已复现】Apache OFBiz 授权不当致代码执行漏洞(CVE-2024-38856)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501791&idx=2&sn=f2a4a01fe90a969544f6d6b4567ded0f": "安全热点周报：本周新增四个在野利用漏洞，企业安全面临新威胁", "https://mp.weixin.qq.com/s?__biz=MzI1NDQxMDE0NQ==&mid=2247485059&idx=1&sn=88ea8bf4dfa968f2d66ff833c81c4bbc": "【已复现】CVE-2024-38856 Apache OFbiz未授权RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484162&idx=1&sn=ee30ecae20f1a11a1d44fe85e2dad04a": "信呼OA系统index接口处nickname参数存在SQL注入漏洞【漏洞复现|附nuclei-POC】", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650259544&idx=1&sn=12d397398e227135f8865c54eb768372": "Pixel7∕8 Pro 安卓 14 内核漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzkzMDcxNzg4MA==&mid=2247484049&idx=1&sn=c3f120e7bbfccc3d6751ad547b259fb4": "[漏洞分析]LiveBos文件上传漏洞复现及绕过分析", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247517898&idx=1&sn=71a4e648fee7d992a9399be5c8a174aa": "工具 | JS接口提取并漏洞检测", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247487600&idx=3&sn=fe6592479e639e297f50ba06adb981aa": "威胁者声称在exploit以 1 万美元的价格出售“.url”漏洞源代码", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247487600&idx=4&sn=fe1a22b7b8ae625623224d76a9dcb9d8": "CVE-2024-38856：Apache OFBiz 存在未经授权的代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247487600&idx=6&sn=5d02d33f1fcb736902e6fe86a06f2b49": "CVE-2024-38100：Leaked Wallpaper漏洞使Windows用户面临权限提升攻击的风险", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247487600&idx=7&sn=edf130a7c62012baad4ac90b6c6595ac": "Calibre 电子书软件存在严重安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485067&idx=1&sn=e1cacfa89c75a522c97a834bfef66f1d": "「漏洞复现」方天云智慧平台系统 Upload.ashx 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247489486&idx=1&sn=2a0b3418c79b6130b68662f93851293f": "CVE-2024-38100 Fake potato LPE漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650597673&idx=4&sn=e3ca1ff02d8fad3456821abc9e890b21": "一款强大的burpsuite漏洞扫描插件", "https://mp.weixin.qq.com/s?__biz=Mzk0MzU5NTg1Ng==&mid=2247484752&idx=1&sn=66e1b93610568a4e152be1e5a3fc29ea": "hvv漏洞合集", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247485515&idx=1&sn=e322deb80e03f81553e55b9ba58f6730": "【漏洞复现】某天云智慧平台系统 Upload.ashx 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MjE2Mjk3Ng==&mid=2247487493&idx=1&sn=b0e2be0473ff20ea340495be184064b6": "CVE-2024-7339：DVR 漏洞使超过 400000 台设备面临黑客攻击", "https://mp.weixin.qq.com/s?__biz=Mzk0MTcyNDk4OA==&mid=2247483684&idx=1&sn=573e3f481bcdf83b45f64697c405a09e": "Panalog 日志审计系统 SQL 注入漏洞【XVE-2024-5232】", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247523258&idx=2&sn=468555d0ea7b19ea14f3ad6c2c4466b8": "干货 | vCenter 漏洞利用总结", "https://mp.weixin.qq.com/s?__biz=MzkwNzM5NDk4Mw==&mid=2247484272&idx=1&sn=83d7dd724948db7d2e8cec59c6fc4bbf": "Hvv姿势——0day拦截", "https://mp.weixin.qq.com/s?__biz=MzkzNjE5NjQ4Mw==&mid=2247539797&idx=2&sn=b5654e000666a5b242f693ac0ee0cfc9": "你真的不来吗？2024 V-Transform Expo 数字化转型先机！", "https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247484547&idx=1&sn=bbf30cce68075e9b4b1f6335776521ca": "info_scan 自动化漏洞扫描系统", "https://mp.weixin.qq.com/s?__biz=MzI3NzI4OTkyNw==&mid=2247489347&idx=1&sn=dea84fc81df6b06d42a22a8648d20162": "某系统漏洞挖掘小记", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247487206&idx=1&sn=d0cc310ad461ed8f1800f2c27e7f0b4b": "高效轻量的 Web 漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501791&idx=1&sn=ee41f8931eefed9cc459de3f0673f3ee&chksm=fe79e347c90e6a512645599bed769967ec00c14eaef4a6063c9f819085ac2297448cf5e594a8&scene=58&subscene=0": "【已复现】Apache OFBiz 授权不当致代码执行漏洞(CVE-2024-38856)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501791&idx=2&sn=f2a4a01fe90a969544f6d6b4567ded0f&chksm=fe79e347c90e6a517f4a6f22c694853efdc3fed898293adbe7c40f99f43539375dfafd00d68d&scene=58&subscene=0": "安全热点周报：本周新增四个在野利用漏洞，企业安全面临新威胁", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520334&idx=2&sn=db306ee3ac03c2a6708b7ae1cc72beaf&chksm=ea94a124dde32832c4479a4e205381dc87f02c98b62b21ceb6a18b70624d029f055e06ba57b2&scene=58&subscene=0": "【已复现】Apache OFBiz 授权不当致代码执行漏洞(CVE-2024-38856)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503017&idx=1&sn=913a9a9b91f4e22982b1c4ab50f19e31&chksm=f258585ac52fd14cfc9e21597ebac254db5b621a90325f316f23943957f6b6991697b0e3fd6c&scene=58&subscene=0": "雷神众测漏洞周报2024.07.29-2024.08.04", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495106&idx=1&sn=31f4659b7733a1c5712d0f6085e1faa0&chksm=fd74dd0bca03541db6d39e9e2e99f24bc42b817a1acd8004d769444e42b7dfcc203ad5361395&scene=58&subscene=0": "CNVD漏洞周报2024年第31期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495106&idx=2&sn=cdd2978970a9308518d332147a69da4f&chksm=fd74dd0bca03541d5951bda458e38c8728229b6904dfe5e5f5184b2a1603d2e6d87ce68135b6&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240729-20240804)", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247573253&idx=3&sn=616105bc7d29789ae0ad5103d688f43c&chksm=9f8d4f0da8fac61b443ba5af0ab8142a1f9cc625cdb7697e09741a474b374e9e6bfee24c2f69&scene=58&subscene=0": "弘扬数字时代青年力量，ISC.AI 2024漏洞生态与实战人才发展论坛召开", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484554&idx=3&sn=d1259f78998db698a6b79736086dd495": "满客宝智慧食堂管理系统selectUserByOrgId接口存在敏感信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484554&idx=4&sn=d37aef8d75bf1642148f5729df50cc54": "世邦通信SPON IP网络对讲广播系统my_parser.php 接口处存在文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484554&idx=5&sn=6e897d1ac3e8d7954874a8b8d6086924": "世邦通信SPON IP网络对讲广播系统busyscreenshotpush.php 接口处存在文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484554&idx=6&sn=1d5d09470d0dde87a17e1c4183c7210c": "满客宝后台管理系统 downloadWebFile 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484554&idx=7&sn=2bb3d6b326603fef7d44b6bbe994d372": "Bazaar v1.4.3 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247485971&idx=3&sn=326b7975ff9b74492c0d0a53b7309e92": "某系统漏洞挖掘小记", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488657&idx=2&sn=aedeb3fd5d2019e24df5bd17409ef14c": "【漏洞通告】Apache OFBiz 存在代码注入漏洞CVE-2024-38856", "https://mp.weixin.qq.com/s?__biz=MzI5NzUyNzMzMQ==&mid=2247485259&idx=1&sn=3dc3ac4fcd1d45de58ff4c80a25e28ae": "nuclei-快速漏洞扫描器【安装&使用详解】", "https://mp.weixin.qq.com/s?__biz=MzkzNTI5NTgyMw==&mid=2247508330&idx=1&sn=8235d2f8f93a21b9cf7e86a45458c6f9": "防护验证通告|Apache OFBiz 未授权访问致代码执行漏洞(CVE-2024-38856)", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489596&idx=1&sn=088712cc6820d9d1e6bb11918ac7afbe": "Apache OFBiz ERP 中的新零日漏洞允许远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486486&idx=1&sn=8b10cffc7b881c6740a5a7bd01c6da08": "【漏洞预警】Roundcube Webmail跨站脚本漏洞（CVE-2024-42009、CVE-2024-42008）", "https://mp.weixin.qq.com/s?__biz=MzkyODY3NjkyNQ==&mid=2247484165&idx=1&sn=d22ff2d4b36cab1bcf3f84836d02fbb3": "某系统回显SSRF+文件上传0Day审计过程", "https://mp.weixin.qq.com/s?__biz=MzI4NTYwMzc5OQ==&mid=2247495054&idx=1&sn=67e31952625254e84cff96332af68731": "探索AI聊天机器人工作流程实现RCE", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489840&idx=1&sn=10930775301b0c13147e40485fa04915": "【8∕6特辑】今日热点漏洞请查收", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501805&idx=1&sn=9bcc8e467e9b2b3ad370addf609efdf6&chksm=fe79e375c90e6a63762884c5e2c7beba403382963943a0863d187156c4387989205bcd4c533d&scene=58&subscene=0": "Roundcube Webmail 多个XSS高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520345&idx=2&sn=e480c7108b41c03d874e5bd6bc1c39bf&chksm=ea94a133dde3282563f26f94c29d3b95b05a082b1c377d83aa2ef24ce6e26794bc98899319d7&scene=58&subscene=0": "谷歌修复已遭利用的安卓内核0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499267&idx=1&sn=fbbbfd3d9b20b890c3bdc0fca4d1b859&chksm=973acd61a04d44772f5d8f4b4ccf7c7dc1e2394f7b807dcf9b04a5e0087145a28b54ccae0f15&scene=58&subscene=0": "CNVD漏洞周报2024年第31期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499267&idx=2&sn=6505dc8ab16e9ab4e35591b635fa3ca4&chksm=973acd61a04d4477c2b19a5a4baea3f568b7c3ce0f3d4bfc7f611b1abfa59438f0901ca0daa0&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240729-20240804)", "https://mp.weixin.qq.com/s?__biz=MzIzOTAwNzc1OQ==&mid=2651137790&idx=1&sn=4d10871553e37b644ea579f8a345d243&chksm=f2c1279ec5b6ae8899508bfdec6c50c34125f363e71063cefe56c903baad12cd1cae05c173e2&scene=58&subscene=0": "演讲议题巡展 | 新视角关注Windows漏洞挖掘-从USB设备到操作系统内核", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247573263&idx=2&sn=64ebb12cee090271b870f6d43ca9e417&chksm=9f8d4f07a8fac6119571640149a3e634dae01424e38a2fa621b38725f4e78314a9b12737a466&scene=58&subscene=0": "连续11年亮相BlackHat大会，360发布重磅漏洞研究成果", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486491&idx=1&sn=8e7ba1b1dd3f1677b99186e956026c28": "【漏洞预警】Apache CloudStack 权限提升漏洞（CVE-2024-42062）", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489862&idx=1&sn=823e02d728a99485f3746176125f3fb3": "【8∕7特辑】热点漏洞速递", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247484476&idx=1&sn=96bbd0c3c49ea89d94fb89e6c29502de": "【漏洞实例】微软云服务漏洞云安全漏洞 Azure CSV 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485085&idx=1&sn=abd4d2d23dab5dd3549fcafc32fdd95a": "「漏洞复现」BladeX企业级开发平台 usual∕list SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODY2ODA0OA==&mid=2247485607&idx=1&sn=7f76458feeafa84a2eb546c91f33c3ee": "【漏洞复现】Apache OFBiz系统存在ProgramExport命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMTA0MjQ4NA==&mid=2247550626&idx=1&sn=b0ccf8821ca7fe2efe4b6dcf8d9d721c": "【漏洞速递】未授权RCE漏洞（附PoC）", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651452119&idx=1&sn=3975229f46108a60f2d7fe1c1b5d86df": "信息安全漏洞周报（2024年第32期 ）", "https://mp.weixin.qq.com/s?__biz=Mzg5OTY2NjUxMw==&mid=2247512704&idx=2&sn=ddb68de8ec1314fcba5996cb5f62adb3": "实战| 一次host头中毒导致的逻辑漏洞（骚思路）", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247484826&idx=1&sn=b3b12db24559ef40edc87d8e20d4a47c": "解析YAML漏洞脚本，反向生成漏洞检索数据库", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247612171&idx=1&sn=a4a79689b008bc43644d4757eccc8c18": "通过Apple漏洞实现账户接管", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247512170&idx=1&sn=35fd9570933b69e317edcd7353b41a2b": "Apache OfBiz CVE-2024-32113和CVE-2024-36104 漏洞 POC", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247489502&idx=1&sn=1727cdeef2e6a21983f31f8a11240a1c": "Tenda Ac8v4 RCE漏洞挖掘与分析", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484853&idx=1&sn=d85600ba20a5e2d7f6a628cad46fc1c3": "HW2024汇总-8.6（漏洞数229）", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484853&idx=2&sn=7e9026e6620882a056d2ef5ce054f4f2": "漏洞复现| Apache OFBiz 授权不当致代码执行漏洞(CVE-2024-38856)", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650597826&idx=3&sn=a440d3351b3d955b7ff8d58670a438eb": "通过代码审计用友获取CNVD高危证书", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492114&idx=2&sn=8e07f39dc7fc380a8791274a94f1e453": "谷歌警告：Android内核漏洞正在被活跃攻击", "https://mp.weixin.qq.com/s?__biz=MzkyNDYwNTcyNA==&mid=2247486677&idx=1&sn=0f3b54ba1ad825b28c5cf0da243522a1": "【漏洞复现】鲸发卡系统 ∕pay∕xinhui∕request_post 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247494371&idx=1&sn=816b5ef5d549bb8a4f3345a7b508bf0d": "Hvv 日记 威胁情报 8.6 （漏洞、IP、样本）", "https://mp.weixin.qq.com/s?__biz=MzIzOTAwNzc1OQ==&mid=2651137817&idx=2&sn=fc86b6b219057f84c0450e71f9b51267&chksm=f2c12679c5b6af6ffa0e26717d1f5b36de1ea81c30dbf569569398511c95a28ce4e01ac19c27&scene=58&subscene=0": "招募漏洞猎手！OPPO、字节跳动企业专场激战正酣，大奖等你解锁！", "https://mp.weixin.qq.com/s?__biz=MzI1NDg4MTIxMw==&mid=2247486523&idx=1&sn=e8923691c0de788b457ee6bb036f01c3": "积木报表授权绕过漏洞缓解措施", "https://mp.weixin.qq.com/s?__biz=MzA4NzE5MzkzNA==&mid=2650359507&idx=1&sn=d83d114d3bc207852cc88f3b6e2a2e80": "【漏洞风险通告】Windows远程桌面授权服务远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMzYzMTE5OA==&mid=2247484342&idx=1&sn=f14a55798bc700034e448099ff179641": "微软window RCE（CVE-2024-38077）漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=MzkyMTMxNjQ5NA==&mid=2247484682&idx=1&sn=d9bc1b37636295c267138d0a5a40963d": "【0day】SpringBlade系统usual接口存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495485&idx=1&sn=4d82d1b9bfa545c0306e83e61b159e47": "【实战分享】某系统任意密码修改漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247615668&idx=2&sn=9d3df637bb4e094962327f60d416a4cf": "安全风险通告|微软RDL服务远程代码执行漏洞(CVE-2024-38077)", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485804&idx=1&sn=e9837fc66c3e5b1eabf40876064695d6": "JS接口提取,漏洞检测工具 - 0x7eTeamTools", "https://mp.weixin.qq.com/s?__biz=Mzg5Mzg2MTc0OQ==&mid=2247484830&idx=1&sn=8f4178ec524da80ada575fda377e00c0": "核弹级漏洞预警微软超高危漏洞“桌面许可”波及全球远程桌面RCE CVE-2024-38077", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485104&idx=1&sn=19bc71eca0565fb775eafef63ba7869a": "「漏洞复现」Mtab书签导航程序 LinkStore∕getIcon SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495128&idx=1&sn=e0b1de34f683ef8b0168db0b41777f5d": "关于Windows远程桌面许可服务存在远程代码执行漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzkzOTIyMzYyMg==&mid=2247494170&idx=2&sn=dc4af16128f998e18240b706129fafb5": "弘扬数字时代青年力量，ISC.AI 2024漏洞生态与实战人才发展论坛召开", "https://mp.weixin.qq.com/s?__biz=MzIxODIzNzgwMw==&mid=2654070081&idx=1&sn=efd208a532488f91ff335cd4a6f8628f": "【公告】漏洞盒子服务器升级通知", "https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650849299&idx=1&sn=efbce6ff0ed4006ea736d7fc49fde2fb": "十年罕见的高危漏洞“狂躁许可”来袭：青藤THP快速发现、监控受影响资产", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063453&idx=1&sn=d73fd28af3fb74826ab6995bcbf8feb0": "【安全圈】微软超高危漏洞“狂躁许可”波及全球", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063453&idx=2&sn=61cd680b64106fa2783cac5fef974d80": "【安全圈】0.0.0.0 Day漏洞曝光，谷歌、Safari、火狐等主流浏览器面临威胁", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247520420&idx=1&sn=3eefd25d189aef74df81a9a9d31fc1da": "ThinkPHP框架漏洞解析", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247592&idx=1&sn=5f966a9ca828472e07dfb026b1d4add1": "QVD-2024-26473：Nacos Derby未授权RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650618249&idx=2&sn=09530f1f6d7d8014afde2f382dc4ea39": "微软超高危漏洞“狂躁许可”安全通告，亚信安全ForCloud快速响应处置", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489891&idx=1&sn=b6203807e44579ccce6ff5d790fb5912": "【已有检测工具】Windows RDL存在远程代码执行漏洞（CVE-2024-38077）", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489891&idx=2&sn=a6533f75ecec6007996aa27e97bc5574": "【8∕9特辑】热点漏洞速递", "https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650276234&idx=1&sn=2f877192c0fb671f23d88958003d3a7c": "客观看，有序防，拒绝漏洞PUA", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247628855&idx=5&sn=f0e2a8d7144bd4bc967473fb4567abd2": "光伏电网曝出高危漏洞，可导致全球停电", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291467&idx=1&sn=57c6ad5c81f0ca6419ab2d1ec2c46f20": "高危漏洞通告|Windows 远程桌面授权服务存在远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5Mjg0NzA5Mw==&mid=2247492995&idx=1&sn=ed9829a0106455abf8fea39e1cc5a4e3": "高危漏洞预警｜Windows远程桌面授权服务远程代码执行漏洞（CVE-2024-38077）", "https://mp.weixin.qq.com/s?__biz=Mzg4MjQ4MjM4OA==&mid=2247517401&idx=1&sn=8bcd65da316b44373397ec4ba89817bb": "Windows超高危漏洞“狂躁许可”实际利用全过程曝光！（附POC）", "https://mp.weixin.qq.com/s?__biz=Mzg4MjQ4MjM4OA==&mid=2247517401&idx=2&sn=93296e42c51981bd4d422f2a229d206c": "网安周讯 | Windows超级漏洞曝光！（八月第2期 ）", "https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651388110&idx=1&sn=f85ab376dfe5e685ddd43813452f4af0": "首次揭秘！演练充电，长亭漏洞应急响应奉上「三大法宝」", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512361&idx=1&sn=bebd3a48b23e784bdbd3263b221d4f76": "微软2024财年发放了约1.2亿元漏洞赏金：平均每个漏洞8.6万元", "https://mp.weixin.qq.com/s?__biz=Mzg3MDkxMjEyNw==&mid=2247483955&idx=1&sn=53d371df8fdf0c1258051dd24dc2b99d": "高危警报：Windows 3389端口发现CVSS 9.8漏洞！", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247539383&idx=1&sn=1e316e036f94820d8211e625a202809e": "有漏洞？黑客可利用5G基带静默监视手机用户", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247486613&idx=1&sn=5ea69a057b00c07747b9394c95904e75": "开机就能打？没那么玄乎！客观分析 “狂躁许可”漏洞（CVE-2024-38077）及其影响范围", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458567380&idx=1&sn=18d81c63ed1044e4ad9f30e080f0ac7b": "Linux 内核重大安全漏洞曝光！indler 漏洞威胁数亿计算机系统", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458567380&idx=2&sn=8c1990606b262264742a8e0832a17687": "存在近30年的零点击RCE漏洞，所有Windows服务器都可能受害", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458567380&idx=4&sn=6c820f7b6e1e1ab3eb2134ebefd14d17": "新课已完结！零基础入门Android漏洞挖掘-入门篇", "https://mp.weixin.qq.com/s?__biz=Mzk0NzE4MDE2NA==&mid=2247487855&idx=1&sn=3e6217b04654fe9f86c4d47a56cc1e2e": "“狂躁许可”全球来袭，0-Click RCE", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520401&idx=1&sn=fcb5f892311d2858672c9908d0e08554&chksm=ea94a1fbdde328edf70f4fe9cfcbc9004bf69c75392d0814b2f4ff08e6699e5ec07b0e81730a&scene=58&subscene=0": "0.0.0.0 Day漏洞已存在18年，影响 MacOS和Linux设备", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520401&idx=2&sn=bad61fd4a7dd0064d773564100fa0d93&chksm=ea94a1fbdde328ed9792a7787f0942bd8375dfb3d8e89c5d0413c4d48ad449acff958b59a1b2&scene=58&subscene=0": "思科：注意这些已达生命周期IP电话中的RCE 0day", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458567380&idx=1&sn=18d81c63ed1044e4ad9f30e080f0ac7b&chksm=b18df25e86fa7b48050427a1e197dab73e9921ded984be316f4468ea9170b8d90a2b35e50276&scene=58&subscene=0": "Linux 内核重大安全漏洞曝光！indler 漏洞威胁数亿计算机系统", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458567380&idx=2&sn=8c1990606b262264742a8e0832a17687&chksm=b18df25e86fa7b482060da266eb4a37e17a000da5c410be329e842323e01f30d43beacc9e9ed&scene=58&subscene=0": "存在近30年的零点击RCE漏洞，所有Windows服务器都可能受害", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458567380&idx=4&sn=6c820f7b6e1e1ab3eb2134ebefd14d17&chksm=b18df25e86fa7b481e2ce360717056ae5c6f0c16f55c5794277c1e99a3e50ec445d213fdfaae&scene=58&subscene=0": "新课已完结！零基础入门Android漏洞挖掘-入门篇", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512361&idx=1&sn=bebd3a48b23e784bdbd3263b221d4f76&chksm=ebfaf609dc8d7f1f88a136a14f94caa8c203ffa49ebb1bff45094db6d236d146b8665a217ec4&scene=58&subscene=0": "微软2024财年发放了约1.2亿元漏洞赏金：平均每个漏洞8.6万元", "https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486348&idx=1&sn=4b875127b201db45d02a8f7fd30fb8aa&chksm=ec6fec8cdb18659aab20bf74432b9411dde10ccaa2d8d27a27499abbe2abfb232c125c38bc76&scene=58&subscene=0": "Windows 远程桌面授权服务远程代码执行漏洞（CVE-2024-38077）", "https://mp.weixin.qq.com/s?__biz=Mzk0NzE4MDE2NA==&mid=2247487855&idx=1&sn=3e6217b04654fe9f86c4d47a56cc1e2e&chksm=c37b9684f40c1f92781ab7b7e610a1d06c276b97ca68dc9819e752547d28b86a2500e07acffa&scene=58&subscene=0": "“狂躁许可”全球来袭，0-Click RCE", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492629&idx=1&sn=fb88510cbd04a8c42b260aaadda2e2c8&chksm=96f7fb78a180726eb89e28826edb49a89370e948239ba7bf962b81ee019a9380e53914eb894c&scene=58&subscene=0": "【风险提示】Windows 远程桌面授权服务远程代码执行漏洞（CVE-2024-38077）", "https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650849299&idx=1&sn=efbce6ff0ed4006ea736d7fc49fde2fb&chksm=80dba3b6b7ac2aa026dc8fa5f8367bca2930cdbb86de71d43fe9c715e0c813948ed96e324c69&scene=58&subscene=0": "十年罕见的高危漏洞“狂躁许可”来袭：青藤THP快速发现、监控受影响资产", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501832&idx=1&sn=3777c56170133c5fb3590a70ef2051e1&chksm=fe79ec90c90e658626b710f3ca4b9923ce7c57fe2fe813482b744a9ac5c8d430cb6ce8d19ed8&scene=58&subscene=0": "【POC已发现，立即打补丁】微软RDL服务极危远程代码执行漏洞（CVE-2024-38077）", "https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651388110&idx=1&sn=f85ab376dfe5e685ddd43813452f4af0&chksm=8d398946ba4e0050d6224d649d67d0f2a6fcfd955433e8c25e4fa61f8bef201cbb6a0f39f951&scene=58&subscene=0": "首次揭秘！演练充电，长亭漏洞应急响应奉上「三大法宝」", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247486613&idx=1&sn=5ea69a057b00c07747b9394c95904e75&chksm=c222946cf5551d7a5b22042b3e972eb8d878798d5bcd3b6e03f671c5f49e275e6b13fe46e56d&scene=58&subscene=0": "开机就能打？没那么玄乎！客观分析 “狂躁许可”漏洞（CVE-2024-38077）及其影响范围", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247496654&idx=1&sn=c5c34d08fc0854fbc917b591cdaf263c&chksm=ce96bef0f9e137e6e2b3de72b68f7320a54b2215b6a145cff73440eded94437f2573ba35edbd&scene=58&subscene=0": "【风险提示】天融信关于Windows 远程桌面许可服务远程代码执行漏洞(CVE-2024-38077)的风险提示", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495485&idx=1&sn=4d82d1b9bfa545c0306e83e61b159e47&chksm=e8a5e55edfd26c48d3367a3065e0eea35bbd4cdfdd19d70bf32e9f1f4b37b269d439c35bac05&scene=58&subscene=0": "【实战分享】某系统任意密码修改漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650956847&idx=1&sn=6ef3edbbb5162f4ee436f69b6eaf324b": "SpringBoot 漏洞扫描利用工具（8月7日更新）", "https://mp.weixin.qq.com/s?__biz=MzkyMTMxNjQ5NA==&mid=2247484688&idx=1&sn=1fa7d0094ff430248a7052ff7e06af5e": "【0day】用友U8 CRM import.php文件上传致RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492597&idx=1&sn=38060ceba7e34896970d343651ab366b": "漏洞复现 || Apache OFBiz代码执行(CVE-2024-38856)", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247494399&idx=1&sn=32e6fd1dc25922b9d78f25603d5b5582": "Hvv 日记 威胁情报 8.9 （0day Windows 远程桌面远程代码执行 CVE-2024-38077）", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495493&idx=1&sn=d7f020920c94600cbf7bf7eaa6979657": "由sqli所引起的RCE", "https://mp.weixin.qq.com/s?__biz=MzkwODY2MzMyMA==&mid=2247484049&idx=1&sn=84130ad3d326c9bda0b245dda5579435": "SSRF到本地文件包含，再到RCE - Include", "https://mp.weixin.qq.com/s?__biz=MzkzNTYwMTk4Mw==&mid=2247486481&idx=1&sn=bf1d2ead48ef7adb0c4cad509a0ecb61": "Spring Boot Actuator信息泄露漏洞三种利用方式总结", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492464&idx=1&sn=80a734dc724e1163618c1a1efd083b62": "某企业网络设备远程命令执行", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063469&idx=2&sn=761374073d1c4cc7b0aac0c05f7eba9f": "【安全圈】5G 基带安全堡垒被突破，黑客可利用漏洞静默监视手机用户", "https://mp.weixin.qq.com/s?__biz=MzkyMjYxMDM4MA==&mid=2247484037&idx=1&sn=96b0950d7b0b48e1784340e0fed39b8c": "漏洞响应（CVE-2024-38077）", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651297865&idx=1&sn=de1e594bd72559592983037e63285d14": "微软超高危漏洞「狂躁许可」波及全球？", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484098&idx=1&sn=3d39fda02a605542ba11c135d2e6e4ed": "微软RDL远程代码执行（RCE）漏洞（CVE-2024-38077）修复手册（SOP）", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489904&idx=1&sn=36d1f0275a2f8ce53f3c076b22a7ec11": "【已复现，尽快排查修复】Windows RDL存在远程代码执行漏洞（CVE-2024-38077）", "https://mp.weixin.qq.com/s?__biz=Mzg3MDkxMjEyNw==&mid=2247483966&idx=1&sn=d9a33cd4f39229b161d4fe9d79da6f06": "0day-亿赛通电子文档安全管理系统SQL注入漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247512276&idx=2&sn=454b2f64b6be47ee6a3bcda68dcc1f54": "受到攻击：发现可导致 RCE 和 LPE 的 OpenVPN 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501882&idx=1&sn=660d306b48b28c05d58892ce2a5252eb": "【已复现】微软RDL服务远程代码执行漏洞(CVE-2024-38077)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247487882&idx=1&sn=5f87e3309fe17625d9b20e1cec76cef3": "专家发现AWS存在 RCE、数据窃取和全服务接管的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247487882&idx=2&sn=006a5e352ef397fcbab4c36aed18ead3": "OpenVPN存在RCE 和 LPE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247487882&idx=3&sn=2dff1ac217869f6f136f5906c0caa9dc": "CVE-2024-38200 微软披露 Office 2016及更高版本 0day，仍在开发补丁中", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247561593&idx=1&sn=06e4981eb9eafc45d1b8fb6a10e3be09": "Windows高危零点击漏洞风暴来袭！附POC", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247542529&idx=1&sn=845b251ddd056d981bbf3057403490ee": "针对thinkphp站点的漏洞挖掘和经验分享", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247507418&idx=1&sn=da776c2f8240abafa5a269743b0deeec": "Windows高危漏洞来袭？已有补丁不需惊慌！", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651297865&idx=4&sn=515beed154dab3442c718328b4a41522": "VulnNodeApp：一款包含大量安全漏洞的Node.js安全练习平台", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485549&idx=1&sn=b9e3eafbbbfa1c660e98e35d2aabcb14": "CVE-2024-38077｜Windows 远程桌面授权服务（RDL）远程代码执行漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485549&idx=2&sn=bd0fed193fad260b6fb53993cc21a43c": "CVE-2024-42009｜Roundcube Webmail跨站脚本漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485549&idx=3&sn=1007dc8c5a197645420e8126a154ccc6": "CVE-2024-42005｜Django SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664711849&idx=1&sn=45fb52a23b9a523339e19196717fc91d": "来事了——微软RDL服务远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523548&idx=1&sn=c149459c0442ce7a37100add75a54a21": "【漏洞通告】Windows远程桌面授权服务远程代码执行漏洞（CVE-2024-38077）", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501882&idx=1&sn=660d306b48b28c05d58892ce2a5252eb&chksm=fe79eca2c90e65b4abe2902b0c59f36b45e1df15f162e231deb0a92c25c741a4d6515c38857c&scene=58&subscene=0": "【已复现】微软RDL服务远程代码执行漏洞(CVE-2024-38077)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247507418&idx=1&sn=da776c2f8240abafa5a269743b0deeec&chksm=fa520864cd25817216f28ff61b81ac5b9477849715e27a45a49f27279812b3afdf958ef45cc1&scene=58&subscene=0": "Windows高危漏洞来袭？已有补丁不需惊慌！", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523548&idx=1&sn=c149459c0442ce7a37100add75a54a21&chksm=ce4617ccf9319eda8e6b415f81656613fba1600bfb535cc434a11a709ae97d25a1f5975fd7d2&scene=58&subscene=0": "【漏洞通告】Windows远程桌面授权服务远程代码执行漏洞（CVE-2024-38077）", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495493&idx=1&sn=d7f020920c94600cbf7bf7eaa6979657&chksm=e8a5e526dfd26c300839ee00ce8a690e7b309662cbbf86148892802b1ff61f5009ba95d5840e&scene=58&subscene=0": "由sqli所引起的RCE", "https://mp.weixin.qq.com/s?__biz=Mzg3MTY3NzUwMQ==&mid=2247489502&idx=1&sn=f278870a53f6115fe21e4f932748156e": "微软Windows 远程桌面许可服务RCE漏洞(CVE-2024-38077)的相关说明", "https://mp.weixin.qq.com/s?__biz=MzUyMDM0OTY5NA==&mid=2247485017&idx=1&sn=8629da1a7c1cc5b6d48dd6e81e1f0329": "详解：L4LB四层负载均衡IP伪造漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486590&idx=1&sn=138cdb6c3c735d46a80e99523d5a5c27": "【漏洞预警】用友U8 Cloud SQL注入漏洞（CNVD-2024-33023）", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492469&idx=1&sn=dfabe7524dc1ee589621d02cddb50ecd": "某路由器远程命令执行", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063486&idx=2&sn=94b64db3663bb7d45fd9bf9fc70146ec": "【安全圈】研究人员发现新的Linux内核漏洞利用技术“SLUBStick”", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650956903&idx=1&sn=9ec151c44664cb430d8ffbf6ebc97bc7": "快捷搜索PoC、一键运行Nuclei工具", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458567422&idx=2&sn=87af595a7cbae8921af01dc2655bac9a": "系统0day安全-二进制漏洞攻防（第3期）", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247498664&idx=1&sn=9f47846b5fd9c9e4dcc3f3ba19f2df61": "如何为漏洞赏金猎人找到您的第一个漏洞（分步指南）", "https://mp.weixin.qq.com/s?__biz=Mzg3NTk4MzY0MA==&mid=2247486813&idx=1&sn=551a2548c9d75f426e63383634003b0e": "Rce！Apache OFBiz代码执行(CVE-2024-38856)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247485816&idx=1&sn=93b5ed31a27e922e9854ba21564f2bfc": "【漏洞复现】某赛通电子文档安全管理系统 SecretKeyService SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjQwOTc4MQ==&mid=2247489580&idx=1&sn=e5ce1687bb3c88fce4a87f0d26ab34ef": "攻防演练实战：如何快速应对0day漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247486057&idx=1&sn=0088a3eccf2728533c493853437acb71": "漏洞挖掘|某次SRC引起的连锁漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489614&idx=1&sn=c1316392616337c673ca9cd1c7b35736": "FreeBSD 针对高严重性 OpenSSH 漏洞发布紧急补丁", "https://mp.weixin.qq.com/s?__biz=MzkzOTY1MzcyOQ==&mid=2247488921&idx=1&sn=d0c215ae2162563e656d91439b206a50": "记某src通过越权拿下高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzOTI2NjUyNA==&mid=2247484658&idx=1&sn=47dc535885c64c8fd94cd36db5d55994": "[企业安全运维]大华-DDS数字监控系统-现新漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650956997&idx=1&sn=a90b0b61aa6791de0234bc5ad7b36c12": "漏洞扫描工具 -- vulcat", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247514481&idx=1&sn=5d7d2a279aa46abe4d3ba679819334cb": "【总结】设备漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247486093&idx=1&sn=c65bc00be82366648a8f3997c8b36487": "H3C IMC 最新三个远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492476&idx=1&sn=790e86c862a9a8aac7035f5536d3acf3": "某网络监控设备远程命令执行", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247490778&idx=1&sn=5a612744a9b910cc8ca9df0459f8409a": "CVE-2023-1713 Bitrix24远程命令执行漏洞分析(RCE)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651297941&idx=2&sn=eb72dfd6e649e1da6af96ad8bec264c7": "AWS多项服务存在漏洞，能让攻击者完全控制账户", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651297941&idx=3&sn=e50cc9b6ba31e2571dc88e53642823a7": "微软披露Office最新零日漏洞，可能导致数据泄露", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063504&idx=4&sn=ef34907a0f051967ee97afdd7658e099": "【安全圈】科沃斯扫地机器人被曝安全漏洞，可利用摄像头和麦克风监视主人", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247615783&idx=1&sn=0aba30eb0899dc3644e69c1363f81c76": "奇安信《软件供应链安全报告》：七成国产软件有超危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291477&idx=1&sn=c2e052e86c8c083316eb832b0a4e325f": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546308&idx=3&sn=fe6fa5beb3f182063903df58f3171ce3": "降级攻击可“复活”数以千计的Windows漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247520451&idx=1&sn=f6428f0783a5c98a89dd8f149ea4c9bf": "Nacos rce-0day漏洞复现（nacos 2.3.2）", "https://mp.weixin.qq.com/s?__biz=MzU0MDcyMTMxOQ==&mid=2247487708&idx=1&sn=cd5dd5acf5c37615c972d5742a0818f8": "「推安早报」0812 | bh议题节选、红蓝工具、漏洞情报", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499787&idx=2&sn=b6ec2def156bbc4b14217b94096162a8": "【漏洞通告】FreeBSD OpenSSH远程代码执行漏洞（CVE-2024-7589）", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495149&idx=1&sn=0fb019db73c6b117a502011e95b3099e": "CNVD漏洞周报2024年第32期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495149&idx=2&sn=84183e6a7dbba10ce11ec15106abac77": "上周关注度较高的产品安全漏洞(20240805-20240811)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501899&idx=1&sn=4f517ea335c158c922a944ca713d340b": "安全热点周报：本周新增两个在野利用漏洞，系统安全不容小觑", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651131511&idx=1&sn=6e786f73d7018451546c14ed82806bee&chksm=bd15bea48a6237b27b9f2a48e628bfe61c16ab6e4fc1f40f99b3403d02e27528ad0c3aa226c3&scene=58&subscene=0": "《联合国打击网络犯罪公约》将提交联大表决，我国发挥关键作用；韩国“伪猎者”APT组织利用国产化软件漏洞对我国进行网络攻击 |牛览", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501899&idx=1&sn=4f517ea335c158c922a944ca713d340b&chksm=fe79ecd3c90e65c5333baeb3d0bb9b8e897638768afda3f8ffa620faab785319d60aa2924872&scene=58&subscene=0": "安全热点周报：本周新增两个在野利用漏洞，系统安全不容小觑", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503026&idx=1&sn=6c3d99b8831cee16a63f2f6636703868&chksm=f2585841c52fd1577bee5bf73a2afd20663654296bb0ac2a499a8817ba226206a92e0ab219b3&scene=58&subscene=0": "雷神众测漏洞周报2024.08.05-2024.08.11", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520483&idx=1&sn=88f4a392cdd026b85ddfa12a4faa8746&chksm=ea94a189dde3289ffa6b70b463e67d3cc6da669d3540403f5551f944351a8b435d3b9e32a029&scene=58&subscene=0": "奇安信《软件供应链安全报告》：七成国产软件有超危漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMDEyNTkwNA==&mid=2247496709&idx=1&sn=0629689057d2e4c43b1adf59fb75f46a&chksm=f9ed98bace9a11ac90ea8546f8ea195805876b1f70075a6fa776e7e0a238d5d0db08f708a755&scene=58&subscene=0": "韩国“伪猎者”APT组织利用多款国产化软件漏洞对中国的攻击活动", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545319&idx=3&sn=2db209002ce8351f85f3f4498b2c3b94&chksm=c1e9bdb6f69e34a02ff1e6915bc76b81a03bc6a87ee10fb8a31647c9bdc31dc64cec1ae67a77&scene=58&subscene=0": "思科预警，旧版IP电话存在严重RCE零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247577477&idx=1&sn=935cc5568627cabe26b2c92049b17c38&chksm=e9147fbfde63f6a99cb1716fc7a3591966af701b71ca0e85709f05f937548d7ea8f88d42a7cb&scene=58&subscene=0": "自 2018 年以来，Windows 智能应用控制和 SmartScreen 绕过技术一直存在漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247577477&idx=3&sn=039be99df83f40baf931ebc8299400a1&chksm=e9147fbfde63f6a9536b278643a8066f62b35ef8ff25d2a3f1b47e6a88bc859e9b762302c346&scene=58&subscene=0": "安全动态回顾 | 谷歌修复了针对性攻击中利用的Android内核零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495149&idx=1&sn=0fb019db73c6b117a502011e95b3099e&chksm=fd74dd24ca035432883a1d99d95fa4b6c47435ad84be1d06c3cd697ce5cdaaee4d85764bd2c0&scene=58&subscene=0": "CNVD漏洞周报2024年第32期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495149&idx=2&sn=84183e6a7dbba10ce11ec15106abac77&chksm=fd74dd24ca0354326794184074504dd4ef21852d283a8f69d8ab41ae1bd0cf8ccc74786458bd&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240805-20240811)", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247574033&idx=1&sn=16774451704a9aa5bc2a23d178d5a43b": "微软超高危漏洞“狂躁许可”来袭！360终端安全轻松“拿捏”", "https://mp.weixin.qq.com/s?__biz=MzkxNjY0NDM3OA==&mid=2247484090&idx=1&sn=b616a5adf16aa3c5f9d1e1a02fb4e894": "第十三课-系统学习代码审计：业务逻辑漏洞--URL跳转", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485143&idx=1&sn=afaae5bb90579f735bf7283622fb5822": "「漏洞复现」用友U8 Cloud BusinessRefAction SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486595&idx=1&sn=1cef7a19a3ce6b3999e861298376dc54": "【漏洞预警】Microsoft Windows CLFS.sys拒绝服务漏洞（CVE-2024-6768）", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495508&idx=1&sn=edbeefeaedc92073a826f5fd5f5c84be": "SRC实战：指纹识别->代码执行", "https://mp.weixin.qq.com/s?__biz=Mzg3MTU1MTQ0MA==&mid=2247484735&idx=1&sn=dd6cd5cb820b61d8c4571ca21dca8308": "Apache Tomcat请求走私漏洞POC（CVE-2024-21733）", "https://mp.weixin.qq.com/s?__biz=MzkwOTUyODE5Mg==&mid=2247485086&idx=4&sn=f3bc9b75d76d6fc472d2e08281d49f08": "湾Snews | 微软发现了OpenVPN中存在可能引发远程代码执行(RCE)和本地权限提升(LPE)的安全问题", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651298172&idx=3&sn=88069f898bf2efd747761976177962db": "FreeBSD 针对OpenSSH 高危漏洞发布紧急补丁", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650980808&idx=1&sn=236c94b01cd05a39e5d4d3cdd3d09b40&chksm=807983fab70e0aec55349c9968ad70b9beeaf3307b81142c146f3058c9ae4619fbe0905dcf51&scene=58&subscene=0": "原创 Paper | Tenda-FH1201 多处命令注入漏洞分析和复现", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458567868&idx=3&sn=51ce082542dbdca604ce20649716b717&chksm=b18df43686fa7d2058d94efe033112bff67b0ad59fc9f336fadbada60dd176fdb2adde9e22f9&scene=58&subscene=0": "密码可被窃取，1Password 用户需立即更新以修复重大安全漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458567868&idx=4&sn=9e21aaac3d642bad0c74159ddd48a57b&chksm=b18df43686fa7d20ce6e5910b944a08e97b910ed415610bc44be1ecd4d02ef4ee99a7256715a&scene=58&subscene=0": "最新！0day windows 课程更新5节", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512388&idx=2&sn=01588a4f77a95262b958dac7437a63d4&chksm=ebfaf664dc8d7f720646b3beadea3825169689330e392ee3ba77cb47d333e5d2353f9fdaa1cb&scene=58&subscene=0": "美国拟立法推动联邦政府网络安全漏洞全面消减工程", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545333&idx=3&sn=aeb6d7bb499cb9e7875eed7b2ebe2e00&chksm=c1e9bda4f69e34b2f9e2acf8bf5c86c0928ad8ddc68ab52a3afdf27cd993722049424991b40e&scene=58&subscene=0": "微软披露Office最新零日漏洞，可能导致数据泄露", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499278&idx=1&sn=f36976890c5c22673be9a26f2527e990&chksm=973acd6ca04d447a22e751dafbd60dfd4b106311c14dbeb8adc594f42074d31be269a138289f&scene=58&subscene=0": "CNVD漏洞周报2024年第32期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499278&idx=2&sn=7e03628749308268cbc72b52078297c3&chksm=973acd6ca04d447a5454f6b7f6a4b0d59068dd7f2c3aaa7ffc6b0b05b0f870ea1d47b0da92a6&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240805-20240811)", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499278&idx=3&sn=6d0f73c13496b2ad82bb5ca604dcde80&chksm=973acd6ca04d447a4717fdd92efb2e12917a3fb533aff080704abf7c1a2441891a1e2c720596&scene=58&subscene=0": "关于Windows远程桌面许可服务存在远程代码执行漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546359&idx=2&sn=df3daa0069b98945b731490f87c06a82&chksm=fa938336cde40a20d0d0227fa9167dd34ce4b5204443400cbb5e84ba4d3c5a553d221fd62c13&scene=58&subscene=0": "扫地机器人变身间谍！扫地机和割草机爆出严重安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546359&idx=3&sn=eabda756bf27488246302c177126100a&chksm=fa938336cde40a20f1c467e5205fb76f11dfc8ad9c9e4412d7267a4aa04d0abf9e2e20a5f1e2&scene=58&subscene=0": "自 2018 年以来，Windows 智能应用控制和 SmartScreen 绕过技术一直存在漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495508&idx=1&sn=edbeefeaedc92073a826f5fd5f5c84be&chksm=e8a5e537dfd26c21c6659096c535a64e3b66cefa3b9dc46242a80c4edff395f517fabaa2d8f8&scene=58&subscene=0": "SRC实战：指纹识别->代码执行", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651298484&idx=3&sn=aa962ba4688993711bf27e6c9224b1bf": "Microsoft Azure Health曝出严重漏洞，可能导致横向移动", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489946&idx=1&sn=55520f929bc7d3412e62405f1e16aa6b": "【风险通告】Windows TCP∕IP 存在远程代码执行漏洞（CVE-2024-38063）", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489946&idx=2&sn=9bac40b11aac8b49d77518fb508fb37c": "【8∕15特辑】今日热点漏洞新鲜出炉", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650259634&idx=1&sn=0b1a9a07b5f2562992ab5d7498c09039": "Apache CVE-2023-25690 漏洞手动调试分析", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664222576&idx=1&sn=82dc2fc02da277149526454105643179": "聚焦 | 国家信息安全漏洞库漏洞技术研究联盟正式成立——强化漏洞治理生态，共筑网络安全防线", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247486921&idx=1&sn=ff0f7144ec40e567aae3df9fc455890d": "漏洞预警 | Windows TCP∕IP 远程代码执行CVE-2024-38063", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651453076&idx=3&sn=1c2267a9693b8a8138b2eba214692903": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458568320&idx=1&sn=434a0d45e0f50895b547dd72d30e0ec0": "Vigor3900 CVE-2021-43118 命令注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458568320&idx=3&sn=59b48dd6be50ab875dec6ef6f0247f21": "允许攻击者访问本地服务，影响所有主流浏览器的“0.0.0.0 Day”漏洞已存在18年之久", "https://mp.weixin.qq.com/s?__biz=MzU0MjEwNTM5Ng==&mid=2247519258&idx=1&sn=2cf24d89b3c255c2851c57f860fc2b28": "Windows TCP∕IP RCE漏洞曝光，影响所有启用IPv6的系统", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650618308&idx=2&sn=7a6eeac78f1c44617ae6d59b8ee07846": "【已复现】Zabbix远程执行代码漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650957250&idx=1&sn=05a3e71d4e6e1969a216175b76d34530": "一款多功能的信息收集工具|备案查询|敏感信息收集|HW漏洞威胁情报", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247489389&idx=1&sn=48f7acc8958b4a368c090764f2a1ec24": "创宇安全智脑 | Windows 远程桌面授权服务远程代码执行（CVE-2024-38077）等66个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484921&idx=2&sn=7513db3aa9bb0774165abd120f697713": "漏洞通告| Windows TCP∕IP 远程代码执行漏洞CVE-2024-38063", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499812&idx=2&sn=c8503b439e8a54a02b0a71686f055bfe": "【漏洞通告】Magento Open Source文件上传远程代码执行漏洞（CVE-2024-39397）", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247484885&idx=2&sn=cc7aac2d8ec03f52aefe98c413b7c863": "【漏洞预警】CVE-2024-38063：Windows TCP∕IP 远程执行代码漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTMxNjQ5NA==&mid=2247484706&idx=1&sn=98c3bd901b7160a6b2a79cd74a9946a2": "Bazaar v1.4.3 swaggerui 接口任意文件读取漏洞(CVE-2024-40348)", "https://mp.weixin.qq.com/s?__biz=Mzg3MDkxMjEyNw==&mid=2247483972&idx=1&sn=f81067d7b7a218c361f56c0a03dab449": "【漏洞预警】CVE-2024-38063 Windows TCP∕IP 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwNjQxOTk1Mg==&mid=2247485944&idx=1&sn=fb8efea54fb3a9d1b8f31f3181260288": "美国拟立法加强联邦网络安全措施并实施强制性漏洞披露政策", "https://mp.weixin.qq.com/s?__biz=MzA4NDQ5NTU0MA==&mid=2647689820&idx=1&sn=03315df159fecf631f1640c21efc3af0": "HTB靶场 Resource (Linux)[Medium]", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664222576&idx=1&sn=82dc2fc02da277149526454105643179&chksm=8b59cd89bc2e449f4d839fcf77f6a3793b1b7c2d7733913d2987f70a8097fac30df18bc4f6fb&scene=58&subscene=0": "聚焦 | 国家信息安全漏洞库漏洞技术研究联盟正式成立——强化漏洞治理生态，共筑网络安全防线", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458568320&idx=1&sn=434a0d45e0f50895b547dd72d30e0ec0&chksm=b18df60a86fa7f1cf06942df79ccdf355f11df0fbcd609b5a15bcf32411065130d366e4b4998&scene=58&subscene=0": "Vigor3900 CVE-2021-43118 命令注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458568320&idx=3&sn=59b48dd6be50ab875dec6ef6f0247f21&chksm=b18df60a86fa7f1c561186fc0722b664b0de61cef952352970f6a3e85bdfcf36f83e37b00057&scene=58&subscene=0": "允许攻击者访问本地服务，影响所有主流浏览器的“0.0.0.0 Day”漏洞已存在18年之久", "https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247489679&idx=1&sn=7afe9f1fd533070230fd9cf3a2bfaed1&chksm=fad4c598cda34c8ee9471ae8a052325752f4e15de96a19764229b57e366ed176ea55608881b0&scene=58&subscene=0": "谈谈 Windows Redis 高版本 RCE 及 重要提示", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546452&idx=1&sn=541681f933c582b66e8545b9c213e326&chksm=fa938095cde40983140ed87241e7d4c5589a689e7d7c3af7b7d7b7690c3e94acfe6cd8113c22&scene=58&subscene=0": "基于虚拟化的固件蓝牙协议漏洞挖掘框架设计", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546452&idx=2&sn=ad4dc560dfb13c43ce8759c177038dc7&chksm=fa938095cde409834902598ce6539132711347d62e5e4dec10c3ad4bfc8372945241d543999b&scene=58&subscene=0": "荷兰黑客挖出了太阳能系统中的关键漏洞，成功利用可危及欧洲电网", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546452&idx=3&sn=9bfff01554c90d3f5b8ffdc01dc133a2&chksm=fa938095cde409836c7514d175aaa78dfd397150b7ec1615b07bae900fb128468b9d9dd6742c&scene=58&subscene=0": "严重的SAP漏洞可让攻击者绕过身份验证破坏企业系统", "https://mp.weixin.qq.com/s?__biz=Mzg4OTI0MDk5MQ==&mid=2247492271&idx=1&sn=586b7f695754a785037e6b592ff16aea": "快排CMS1.2文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247488194&idx=7&sn=bcfaf331f2f9a7c7ddf20928fd623260": "Flatpak 中发现严重漏洞：CVE-2024-42472 (CVSS 10) 导致文件暴露在沙盒之外", "https://mp.weixin.qq.com/s?__biz=MzU0MjE2Mjk3Ng==&mid=2247487551&idx=2&sn=47014121a42ee4435ec1e9997af8ce4a": "据称 EduSports 存在漏洞，泄露了 70K 行数据", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247512438&idx=2&sn=5685bf5bf9692dc3a287ba7a21ef8bf8": "CVE-2024-38213：Copy2Pwn 漏洞可规避 Windows Web 保护", "https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141171&idx=1&sn=66f61359150558e0f64a6fce7ef9c39f": "2023腾讯游戏安全PC决赛复现", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247500235&idx=2&sn=826d0383e047e46d0d30c200889fe077": "自行车无线变速器曝出漏洞，黑客可操纵比赛结果", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247486076&idx=1&sn=5c5616fb7c16e18fd5caff5a00e17c75": "【漏洞复现】某时空社会化商业ERP系统 user∕online 身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650598441&idx=3&sn=a476f7d5a8051ace3eab75f6fc37c68d": "【总结】设备漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzkxMjMwNTEwMg==&mid=2247486232&idx=1&sn=2de4a2d0f4bdc0fbff11443f8c2555a6": "exploit_db漏洞复现&分析1_CVE-2024-40110", "https://mp.weixin.qq.com/s?__biz=MzIyMTg0MTE3MA==&mid=2247487244&idx=1&sn=9b79c5b4ce03bf91ed1dde37a832785c": "微软2024年8月发布补丁，解决88个CVE漏洞问题", "https://mp.weixin.qq.com/s?__biz=MzI4MjA1MzkyNA==&mid=2655347022&idx=1&sn=f68cc72cfe2cc76d9f1983dae65e8959": "微软AI医疗机器人发现严重漏洞，可能泄露隐私", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247494489&idx=1&sn=4a97973839172a2c0aa30f8b45d3fce4": "​Hvv 日记 威胁情报 8.15 Windows TCPIP 远程执行代码漏洞(CVE-2024-38063)", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247487280&idx=1&sn=5dc1b7f2e33984d523fc5a61daeb170d": "miscan！简单好用的漏洞管理工具", "https://mp.weixin.qq.com/s?__biz=MzkzOTI2NjUyNA==&mid=2247484713&idx=1&sn=234c3686e5e6cd33c5f3f8cb81de28eb": "Windows本地提权漏洞 CVE-2024-21338", "https://mp.weixin.qq.com/s?__biz=MzkyNDYwNTcyNA==&mid=2247486828&idx=1&sn=3a8f27ebf5bbc45d7df6e45187429885": "【漏洞复现】Web user login存在RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490142&idx=1&sn=3dcaa7deecdd338c188c048b3b4ab0aa": "漏洞预警 | Zabbix代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490142&idx=2&sn=5d2bc952fa0de6941790cce5c58e234a": "漏洞预警 | PostgreSQL竞争条件漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490142&idx=3&sn=1d32f6690b105b65a77bc2ceb91396bd": "漏洞预警 | 亿赛通电子文档安全管理系统反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247484967&idx=1&sn=1bae927d84677fbb4f7e2a9e6ba490bf": "【资源推荐】收集所有命令执行技巧的靶场（更新中） | 本文附一些网络安全学习资源", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247515697&idx=1&sn=37169f9951565dc9937a2a736c5efde3": "SonicWallSMA100将XSS存储到RCE", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247513893&idx=1&sn=1a01f1df6ecce283157f8f7096c8e950": "第二十四天 -- 反序列化漏洞与vulhub靶场搭建", "https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141171&idx=1&sn=66f61359150558e0f64a6fce7ef9c39f&chksm=bd50a4678a272d7172260a5fb31c2a3d6d9c91cf41af1c8ac841206025234832867cf73dd42b&scene=58&subscene=0": "2023腾讯游戏安全PC决赛复现", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501938&idx=1&sn=d0ffecf00a33d91609cea098c7d70a9f&chksm=fe79eceac90e65fc7a71b961d6d526d1e00a06cd9940fde42fde602b4626bc5209d64573394b&scene=58&subscene=0": "【利用场景更新】Windows TCP∕IP IPv6远程拒绝服务∕代码执行漏洞(CVE-2024-38063)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520507&idx=1&sn=e6e47b92dd8197ca7619e46204cd615d&chksm=ea94a191dde3288755f5a94855a167362c77297344a3a5d57101da16165db6ba956165bc24d8&scene=58&subscene=0": "【利用场景更新】Windows TCP∕IP IPv6远程拒绝服务∕代码执行漏洞(CVE-2024-38063)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664222633&idx=3&sn=a749180d86722bdba5b2316c3e52adb4&chksm=8b59cd50bc2e4446c80dc983beaada568e4288c898f75e3f22cf171b1793e65054cbf5945fbc&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546480&idx=2&sn=429d11d6b0114a07acaa351b2f01e153&chksm=fa9380b1cde409a7c4fe600f34d4baaf8ae0da3da85d7f1470ce43194ca2549eac0db818971e&scene=58&subscene=0": "微软AI医疗机器人发现严重漏洞，可能泄露隐私", "https://mp.weixin.qq.com/s?__biz=MzkxMTI4MDI3NQ==&mid=2247484236&idx=1&sn=c700e235c4f64b800265d21b1bc58500": "CVE-2024-41660: 一个OpenBMC高危漏洞利用", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492547&idx=1&sn=ab4aad38f36418ed4e4007c059dfb3b1": "某防火墙命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063663&idx=2&sn=d6a0838353577d942d09c5ac068979da": "【安全圈】针对 Ivanti vTM 关键漏洞的 PoC 攻击代码已发布", "https://mp.weixin.qq.com/s?__biz=MzkxMTQyNDM5MQ==&mid=2247483947&idx=1&sn=26ac8ded821b8463cb4581c8ee4b71de": "【工具推荐】Goby红队版工具分享，附2024年漏洞POC下载", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247562309&idx=2&sn=2a4881d9574f7db00b40c8204e281dfa": "功能最全的Nacos 命令执行、内存马注入等利用工具", "https://mp.weixin.qq.com/s?__biz=MzkxNDU0MTUyNw==&mid=2247489846&idx=1&sn=84be6201df65cc9c66a946f2cbb3bae8": "挖漏洞经验分享，挖漏洞赚取生活费，7天收益近2200，教你从零基础挖漏洞的正确姿势！", "https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649166172&idx=2&sn=6a84004789e9d4abe8db7b6ab6017e17": "微软警告六个Windows零日漏洞正在被积极利用", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247488251&idx=3&sn=9dfaf34b92f10dac3b869c1b69346012": "预装应用漏洞导致数百万Google Pixel 手机用户面临风险", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247488251&idx=4&sn=7374a0b8c4438ac9ae8746e2cf6f00f8": "0day Copy2Pwn CVE-2024-38213 可绕过 Windows 安全防护", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247488251&idx=5&sn=0f9631b13b842f7608bd09100ab77c3e": "Project Zero：我们需要所有人共同努力来终结0day时代", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247629084&idx=4&sn=fea4d000d8f1b6006795e81fc06c76aa": "Windows TCP∕IP RCE漏洞曝光，影响所有启用IPv6的系统", "https://mp.weixin.qq.com/s?__biz=Mzg4NjI0MDM5MA==&mid=2247486331&idx=1&sn=5c67337d837d79bf8107d0606dbc1515": "【1day | 漏洞复现】某在线团队协作工具存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NDU5NTc4OA==&mid=2247484157&idx=1&sn=dbe66de5a3565b5514ad9f7139880166": "【代码审计】某系统存在文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650849361&idx=1&sn=08dde19387bf183649e8ee32e52153fa": "青藤RASP再显神威：捕获电子公文系统0day", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247512474&idx=3&sn=6f48fc00a8d1a2828185c5d3139bcfbb": "通过浏览器扩展中的链接消息实现通用代码执行", "https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650612868&idx=1&sn=0a258c6a1ac1f79d182caac480504a91": "喜讯｜安恒信息成为国家信息安全漏洞库漏洞技术研究联盟创始成员单位", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490160&idx=1&sn=82a5a49afb418c5b2cbf7f111e325406": "漏洞预警 | 用友U8Cloud反序列化和SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490160&idx=2&sn=3c80f3c39b0405305131ab41ecb0710d": "漏洞预警 | 福建科立讯指挥调度管理平台任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490160&idx=3&sn=318a74a08b1a5017d1a49f2260360356": "漏洞预警 | 中成科信票务管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247515709&idx=1&sn=59db911ed2d846bcad68279346c33e7f": "Sonatype Nexus Repository3 任意文件下载漏洞(CVE-2024-4956)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247496710&idx=2&sn=8f3c24fc4cafc7a91cc5e49887bba8cf": "微软2024年8月份于周二补丁日针对90个漏洞发布安全补丁", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650259653&idx=1&sn=5fa681968c3fcef089a7b58d304a9069": "hackerone上TOP5的开放重定向漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247513907&idx=2&sn=ee1de87ba18d21189ea3b3c63e3c9bd2": "第二十四天 -- 越权与逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247498492&idx=5&sn=689d612c25afc31aa562275fab88e29f": "人工智能可以发现基础设施软件中的漏洞吗？", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247486630&idx=1&sn=1b5861f84be010f696e5220c14dfaabb": "Redis未授权访问利用RCE脚本", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247491992&idx=1&sn=834e5cd47b8c2e754f080b5e2635d122": "织梦全版本漏洞扫描", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492553&idx=1&sn=19f41fae628d3c1232f17bd3c16558d8": "某网关配置管理系统存在漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247498883&idx=1&sn=c80fde2b5bc009353ee2d6370255c051": "漏洞和攻击模拟 – 产品比较", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247490798&idx=1&sn=82482d8342e46c8e07a74cd67eb060ce": "某微商城系统RCE漏洞审计", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485190&idx=1&sn=72b273910c65d5453093d9f351fc1127": "「漏洞复现」智联云采 SRM2.0 runtimeLog∕download 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650598473&idx=2&sn=d1f7ae4c01353c07e56e2f6669da4f4f": "自行车无线变速器曝出漏洞，黑客可操纵比赛结果", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247487295&idx=1&sn=a648d6d464abe5584119d934d1a4e7df": "推荐个POC库", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650618366&idx=1&sn=9dcb63cd5988767a522c778d0734317e": "涉及办公环境安全！某微e-cology远程代码执行漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546519&idx=1&sn=4a12fb581996141b09e2dcc788a77f52": "新的 Webkit 漏洞可让攻击者利用 PS4 和 PS5 游戏机发起攻击", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512435&idx=1&sn=a313f2e1e863f7446edeb31e3789b915&chksm=ebfaf653dc8d7f45a3f94e1e50093e90e4dfe9b36a8d76187af3e10780c7ada79fdd76647510&scene=58&subscene=0": "印度国家支付系统部分中断：因供应商高风险漏洞迟迟不修后被黑", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520531&idx=1&sn=3711327c08007954c754b1a665f4b963&chksm=ea94a079dde3296fb3e16aed65fdb526227e260cd11c96212ca1fd8bbde8380e989c2c1c2f57&scene=58&subscene=0": "F5修复BIG-IP 和 NGINX Plus 中的多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247501046&idx=1&sn=7ecaa11fdcf5403a5db9a4e60500617f&chksm=cfc563a9f8b2eabf6d8af91033486020de2743e64b17315111c962195d01a79e6d2951b07b1b&scene=58&subscene=0": "“源”聚创新力量，“洞”见安全未来：360漏洞云亮相GOGC，共促开源漏洞安全发展", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545423&idx=2&sn=f444f16d478e86e7304a44ab986ff6ae&chksm=c1e9be1ef69e3708414dae4e58d69554f9f1e62d8a2e5f72726f9132daaeec1218eb529ed743&scene=58&subscene=0": "WPS Office两个严重漏洞曝光，已被武器化且在野利用", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546519&idx=1&sn=4a12fb581996141b09e2dcc788a77f52&chksm=fa938056cde4094059c40110a2640b8df63a3dcb93add78e737e7b50e65607fb0877be97b06e&scene=58&subscene=0": "新的 Webkit 漏洞可让攻击者利用 PS4 和 PS5 游戏机发起攻击", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499291&idx=1&sn=a44a1265fbf3ebc24901ba0bc0ad2475&chksm=973acd79a04d446f1d69086e4800a9fe4d371a3f8c7c5b419415704811b988504f00b96ec89d&scene=58&subscene=0": "CNVD漏洞周报2024年第33期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499291&idx=2&sn=c2ef55212f528784fe5a99e829f8f28e&chksm=973acd79a04d446ff1a2ff92572a5e90c083fb44763ec99623eec25cec3adae8520afa969272&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240812-20240818)", "https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247493233&idx=1&sn=fcbc3a07cee5cf64e3c6b24925e2bd46&chksm=ec1807a2db6f8eb4f9e072ab8c517a39542fe6943b282abfc2271cd3ac558ac504c019e15748&scene=58&subscene=0": "美团安全团队在第五期移动互联网APP产品安全漏洞技术沙龙中分享移动应用自动化安全实践历程", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489484&idx=1&sn=0170236eec27f6c4cbcbdfa22e76901a&chksm=fb029a94cc75138237d08c5ca44d60e9ec07ebe3edef94b783c6e4877f479b58f3f402313e1f&scene=58&subscene=0": "某报表玩坏的反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063733&idx=1&sn=04dd13bf3a0e027fb707f063fa89ffbf&chksm=f36e6bb5c419e2a399b928d676f3db243488855358d520c5a9617dc0e258679995acfe13a05d&scene=58&subscene=0": "【安全圈】紧急！WPS被曝出现两个严重漏洞：且已被利用", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247574228&idx=1&sn=dabdc19860af60436e332258debda6a6&chksm=9f8d32dca8fabbca035a79b0828b4a7ff3058e381913d65d8f2918fa5e6852b3381ba4cacb9a&scene=58&subscene=0": "攻防演练实录 | 360安全大模型再狙0day漏洞，助蓝队“上大分”！", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495554&idx=1&sn=07c147197a62ad4b5235c4342d2634c4&chksm=e8a5e5e1dfd26cf7e8dafb1547e1913e08f78702165868748224efa9ec4ef39279b4ad86c95e&scene=58&subscene=0": "全自动白帽漏洞扫描器", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247486934&idx=1&sn=9c3b5246bbf686127bba2c0019cbdd2f": "第101篇：一个绕过5层权限校验的0day漏洞的代码审计分析", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247629184&idx=3&sn=d0b58f45a461d55f656c7f86f8ff7d82": "印度国家支付系统部分中断：因供应商高风险漏洞迟迟不修后被黑", "https://mp.weixin.qq.com/s?__biz=MzkxNjY0NDM3OA==&mid=2247484108&idx=1&sn=d9de55345695e9b293f1247c489a7356": "第十五课-系统学习代码审计：SSRF漏洞利用和常见防御写法以及绕过方式", "https://mp.weixin.qq.com/s?__biz=MzkzOTI2NjUyNA==&mid=2247484772&idx=1&sn=9a08022aff8607607dc4cc3acb382217": "CVE-2024-7928 FastAdmin 任意文件读取 全网20w+潜在风险资产 含批量验证脚本", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484130&idx=1&sn=0b5905380c5de16c41a17e07379e286d": "安钥®「漏洞处置标准作业程序（SOP）」征文启示", "https://mp.weixin.qq.com/s?__biz=MzkyMTYyOTQ5NA==&mid=2247484833&idx=1&sn=8a7a576da107265ec7f46c7b957ce06d": "「 典型安全漏洞系列 」08.文件上传漏洞详解", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495561&idx=1&sn=833ec534a6c613773a4eb95593f3a122": "让XSS漏洞无处遁形！0x1", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063755&idx=3&sn=4f24cae6d48a6d6004885ec8aaa3d6a0": "【安全圈】适用于macOS的多个微软应用程序发现库注入漏洞，用户数据安全受威胁", "https://mp.weixin.qq.com/s?__biz=Mzk0MTMzMDUyOA==&mid=2247499942&idx=1&sn=77465571d8ef0d6d93445fe8d020d881": "漏洞分析 | Apache Tomcat 信息泄露漏洞 (CVE-2024-21733)", "https://mp.weixin.qq.com/s?__biz=MzkxOTYwMDI2OA==&mid=2247484175&idx=1&sn=b44ebf3540ad05aa32a0e370732fd1be": "[CTF复现计划]2024巅峰极客初赛 easy_java", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520541&idx=1&sn=f403f1139228e0543f485dc49192281e&chksm=ea94a077dde32961ced8bbf8b9f4d047894c070f5256758fbcda18bd2c501885e592e9ba6f05&scene=58&subscene=0": "Atlassian Bamboo Data Center and Server中存在RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520541&idx=2&sn=c8001046f4088bb94fd3ffcd7e6926b0&chksm=ea94a077dde32961061f5df3f34bcfb998ef7faf4faaf97b0d98fbf993523b5bcb3996850eb0&scene=58&subscene=0": "CISA：严重的 Jenkins 漏洞已被用于勒索攻击", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545438&idx=3&sn=6b30684225b55fb0f6996f240793d61d&chksm=c1e9be0ff69e3719d7419386368e3bc67f746c3f06b14dcd19b3a1c924c4abad611770e5de92&scene=58&subscene=0": "印度国家支付系统部分中断：因供应商高风险漏洞迟迟不修后被黑", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495561&idx=1&sn=833ec534a6c613773a4eb95593f3a122&chksm=e8a5e5eadfd26cfc8e77af1095f431d71dcee25e0012063b39412fc1a6388401316f0ffff45a&scene=58&subscene=0": "让XSS漏洞无处遁形！0x1", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247492248&idx=1&sn=32038256bfbfc149d7199c70ecb40861": "edu漏洞平台挖掘-7月总结", "https://mp.weixin.qq.com/s?__biz=MzkzOTY1MzcyOQ==&mid=2247489258&idx=1&sn=c0c59bcd09cc073dc9d0ef6f6c3a4662": "小米在 Pwn2Own Toronto 2023 大赛前修补了 RCE 漏洞，并在大赛结束后删除了补丁", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247513647&idx=1&sn=b48d7b6e6f5f94bb490056bdcc894e0d": "漏洞预警｜微信内置 chrome 浏览器 RCE", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247612470&idx=2&sn=ccd046999045da8444d84c24ce3d01d4": "再看云虚拟化安全.QEMU通用漏洞挖掘新思路", "https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247484761&idx=1&sn=a03240635bbf7b8349bc1185b17f13fb": "应用程序的安全漏洞会造成什么后果？", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247487219&idx=1&sn=a1ec97c07c4f775e1141b67a2d59c9d0": "在野漏洞的应急响应流程", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520566&idx=1&sn=74a7817b3955a25dccb8da1009e1b185": "思科修复由NSA报送的两个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520566&idx=2&sn=2201f2665ef471e47e5dc87762920af5": "SolarWinds 修复 Web Help Desk 中的硬编码凭据漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653930539&idx=2&sn=bf55583fe702803dc0523d70ecd9cfb2": "重庆银行漏洞扫描与基线核查系统项目招标", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499853&idx=2&sn=fc17d196787689d9c87b249b5e9b95d2": "【漏洞通告】WordPress LiteSpeed Cache权限提升漏洞（CVE-2024-28000）", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489984&idx=1&sn=064d9589871f024f32fb7c48c8402b8c": "【8∕23特辑】今日热点漏洞，你排查了没？", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247520761&idx=1&sn=b4fca986ee5f584bb66ed2138350998e": "DouPHP（CVE-2024-7917、代码分析xss）漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzI0NzY1MDgyMw==&mid=2247512183&idx=1&sn=d4b15738828c6830361323236cab85bf": "模糊测试平台SFUZZ V3.4惊喜升级 | 测试协议数突破200+，漏洞挖掘更全面", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247491711&idx=1&sn=cdcb62b7a6e56e03bd38503da055a999": "漏洞预警 点企来 客服系统 getwaitnum sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNTYwOTU1Mw==&mid=2650091536&idx=1&sn=a1b34022d3a94f9b45a670527c7246fb": "错误展示《黑神话悟空》客服电话，必应被曝AI信息抓取与处理存在缺陷；F5官方通告可导致会话固定与资源耗尽的高危安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MTU5ODQ2Mg==&mid=2247506921&idx=3&sn=f9d8f09848ca468315a8f8036f05563e": "关于Windows远程桌面许可服务存在远程代码执行漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546571&idx=1&sn=995ff830fdcb2120e3e322525d780f14": "Litespeed曝高速缓存漏洞，威胁数百万WordPress网站", "https://mp.weixin.qq.com/s?__biz=Mzg5MjgzOTM2Ng==&mid=2247484071&idx=1&sn=6991a1517f5cd6491d9e070dd74c21c5": "CVE-2024-38856：Apache OFBiz远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520566&idx=1&sn=74a7817b3955a25dccb8da1009e1b185&chksm=ea94a05cdde3294ad5842ade4355f86f5346f7c319e2260c6999b9fc84577eeff1b3f257c0f3&scene=58&subscene=0": "思科修复由NSA报送的两个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520566&idx=2&sn=2201f2665ef471e47e5dc87762920af5&chksm=ea94a05cdde3294a691fb126918df1c46abe77fac1ddc817f2deafa7344a6764133a7ef02167&scene=58&subscene=0": "SolarWinds 修复 Web Help Desk 中的硬编码凭据漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650182057&idx=1&sn=736ea3eb21f7f91e5e6952955cfb1279&chksm=f4486a15c33fe303d18ba90114cc1a48dc5ad3af5b9e99345295d6b82000994bb9974c3102dd&scene=58&subscene=0": "钓客服、打漏洞……钓鱼攻击或进入最后的疯狂", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546571&idx=1&sn=995ff830fdcb2120e3e322525d780f14&chksm=fa93800acde4091c521d46f7f1793ddc7234c48d18396f323ed7d30a93f0c094bf2dd84fefc7&scene=58&subscene=0": "Litespeed曝高速缓存漏洞，威胁数百万WordPress网站", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495571&idx=1&sn=71f193deb6f5f3bec2dfc58f6bbde6b4": "价值 3500 美元的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTMxNjQ5NA==&mid=2247484750&idx=1&sn=34bd14d75cdc21b0760da33454ed0630": "用友畅捷通CRM newleadset SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651299945&idx=1&sn=b7299413cea852ef6dc89cbbb704babc": "官方强烈建议更新，关键漏洞影响GitHub Enterprise Server所有版本", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063818&idx=4&sn=8cf1e8bb192224ef0c90f7a993439312": "【安全圈】GitHub 修补GitHub Enterprise Server 中的三个漏洞并建议企业用户紧急修补", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247486326&idx=1&sn=25b1ca6857bb8d411e117ea9c7da3aa3": "【漏洞复现】某管家 listUploadIntelligent.htm SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492632&idx=1&sn=13e2c8aba44b30a3092534c9238781fe": "某系统任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247627220&idx=1&sn=8973ab362b5e263df1c2f203f445f98d": "在看 | 周报：30万条业主信息被卖；WPS被曝出现两个严重漏洞：且已被利用；国内某上市公司疑遭勒索攻击泄漏2.3TB数据", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247512824&idx=1&sn=ef407c0a21f7b07bd52c7d7749d1ea11": "CVE-2024-22263：Spring Cloud Dataflow中路径遍历导致的任意文件写入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5OTY2NjUxMw==&mid=2247512911&idx=1&sn=2f5f69194b2eb5bbb46b0454d008dc45": "2024最常被利用的十大漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNjg3MjczOA==&mid=2247485808&idx=1&sn=a7804e92f804d2afad1fe979a057612d": "2024 年第 2 季度的漏洞利用和漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMjY1NDMxMg==&mid=2247484758&idx=1&sn=52b68be8f2744d1c49de19945875bab4": "某友U8+CRM的SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485005&idx=1&sn=fc9852d47746ec2d32294c98159e7b99": "【速看】谷歌浏览器 Chrome RCE | Google Chrome 沙箱穿越", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247612460&idx=1&sn=da92f5ea4529a34912a9acb4cd4b4b3a": "复制密码重置链接漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247488568&idx=2&sn=40ed3d89171ceeb91a85cd82de461adb": "ALBeast 漏洞导致数千个 AWS 应用程序面临关键 AuthN∕AuthZ 绕过风险", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247542864&idx=1&sn=4508652b0770f6666704146403ce3a88": "利用ce修改器进行漏洞挖掘（内存修改）", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5Mzk2OQ==&mid=2247486124&idx=1&sn=7596f7151df4cb76a38849bf9e4cf538": "工具|测试水平越权使用的虚拟身份X生成器+1576个Goby附加POC", "https://mp.weixin.qq.com/s?__biz=MzI2NTc1ODY0Mw==&mid=2247486016&idx=1&sn=9c7a5cc3c100823aad8813c159258723": "某招聘系统0day挖掘（获取4站点报告证书）", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490277&idx=1&sn=0eaa450eebcb095ae3dcbce6dbfc5bb3": "漏洞预警 | 北京中科聚网一体化运营平台文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490277&idx=2&sn=8863f67a0e69722910886b66684eed8d": "漏洞预警 | 用友NC任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490277&idx=3&sn=2d4392fa4866c84713ec3dca2858165a": "漏洞预警 | AJ-Report权限绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485246&idx=1&sn=f8bb690a2774f348717bbc6bea4d1f64": "「漏洞复现」金和OA C6 DBModules.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTUxMzk2NQ==&mid=2247484895&idx=1&sn=4974c1af8b36dd2986db08710b724fe5": "CTF分享 | 命令执行-1", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247486372&idx=1&sn=c99f323e3324fe1ff4bc158ecdc87fce": "【漏洞复现】某成科信票务管理系统 TicketManager.ashx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247518227&idx=1&sn=be4d9fd868f2dbad6640d183e4301937": "武器库 | Win11集成化综合漏洞扫描系统[更新]", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458569248&idx=1&sn=a4e99289593b2b238d1fa1685f2e9c60": ".NET Remoting反序列化升级版之TypeFilterLevel.Low模式无文件payload任意代码执行", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485565&idx=1&sn=0e2af3b7e65445094251998d525506be": "CVE-2024-38063｜Windows TCP∕IP远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485565&idx=2&sn=aee195924d2e29573e0e3e8223db9611": "CVE-2024-39397｜Magento Open Source文件上传远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4OTI0MDk5MQ==&mid=2247492360&idx=1&sn=5dbb85c63021dc40188e382e333423cd": "dedecms 两个常见漏洞的复现", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247512852&idx=1&sn=5542e0e2073fd72b187b19bd2b231217": "CVE-2024-20693：Windows 缓存代码签名操纵", "https://mp.weixin.qq.com/s?__biz=MzkzOTI2NjUyNA==&mid=2247484854&idx=1&sn=5ac416b2eaf4283d12d612c8d2b4459f": "[提权漏洞] CVE-2024-38054 特权提升漏洞 win11可用 含利用脚本", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247542899&idx=1&sn=997dfed2a5e32a0feb80b9616bb80181": "漏洞挖掘 | 记一次Spring横向渗透", "https://mp.weixin.qq.com/s?__biz=MzI5NzUyNzMzMQ==&mid=2247485292&idx=1&sn=fef85fbc9e3693b23fd2e4f1e020abfd": "Explain-MySQL分析和优化查询的核心工具", "https://mp.weixin.qq.com/s?__biz=Mzk0NjE0NDc5OQ==&mid=2247524822&idx=1&sn=9c083a33fc289816d637e02798c8062a": "实战 | 某外汇常用CMS通用未授权RCE", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247490293&idx=1&sn=38f904e828f23c168df38eb030dfc81a": "【流量分析】Java框架Shiro、工具利用、漏洞复现以及流量特征分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458569248&idx=1&sn=a4e99289593b2b238d1fa1685f2e9c60&chksm=b18dfaaa86fa73bca2ae15329c58a22ef0cbf55b758d642b5060f601e287c687fa4048e34f3a&scene=58&subscene=0": ".NET Remoting反序列化升级版之TypeFilterLevel.Low模式无文件payload任意代码执行", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247486389&idx=1&sn=fd96450f237dcadbf4a40028de9c2e31": "【漏洞复现】智慧校园(某校易)管理系统 FileUpAd.aspx 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651300128&idx=2&sn=7dcd364110d7b1200a88931626fb8556": "审计发现FBI的数据存储管理存在重大漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501958&idx=1&sn=699c44f8f8bd7c4117f7087e0679f1cc": "安全热点周报：本周新增两个在野利用漏洞，其中 Jenkins 被用于勒索软件活动", "https://mp.weixin.qq.com/s?__biz=MzkyMjM4MzY5Ng==&mid=2247485760&idx=1&sn=74de45434d1aa20510b240ba872096a4": "案例征集｜2024移动互联网APP产品安全漏洞治理优秀案例征集", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492268&idx=1&sn=e8385f226e42e5e2efaf72688a07383d": "Linux恶意软件sedexp使用udev规则来实现持久性和躲避", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520597&idx=1&sn=9b3ac1b3b69c7d221bc720fd7a3db778&chksm=ea94a03fdde3292902b6c3d7139405802f57a749310705af7fc05e5a069ef6f28ccd0544c717&scene=58&subscene=0": "LiteSpeed Cache 插件中的严重漏洞正遭利用", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247511799&idx=1&sn=dbee6e45aaba5f7c6308a2858553cf8a&chksm=ea665980dd11d096dd4fe1f22547cc7af8007a29731a898baee057bcd2430aa7f98fa07b3788&scene=58&subscene=0": "Operation DevilTiger：APT-Q-12 使用 0day 漏洞技战术披露", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495211&idx=1&sn=d4af6cc705f1da29e6c1acebaa8e3625&chksm=fd74dee2ca0357f41f116c585625b6e0c884be87174a6ae59e44346cc14504a0d5dfb048a6d2&scene=58&subscene=0": "CNVD漏洞周报2024年第34期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495211&idx=2&sn=5948b260aa941937650fdf718efb01a2&chksm=fd74dee2ca0357f4db1fe7b93847188214facd87ccdf368d039bc25ca0905a176a07b15fed7b&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240819-20240825)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTM5ODU2Mg==&mid=2247500748&idx=1&sn=4de2b05a37a8facd043380f16ed6ced3&chksm=cfcf7301f8b8fa175cbf53f57ba32424ba7b11dd70a4ae2a3c28c82cc6e4ee4fa4993c7ab89c&scene=58&subscene=0": "[漏洞挖掘与防护] 03.漏洞利用之WinRAR安全缺陷复现（CVE-2018-20250）及软件自启动分析", "https://mp.weixin.qq.com/s?__biz=MzkzOTY1MzcyOQ==&mid=2247489260&idx=1&sn=e5e289cab099187d0a5ea0deee288dd7": "定制化payload让漏洞挖掘更容易", "https://mp.weixin.qq.com/s?__biz=MzkwNzcyNTUwNQ==&mid=2247483914&idx=1&sn=afee775f423bc9a06224df219d3e061a": "一款强大的自动化漏洞发现与验证工具 | 抽奖送《黑神话悟空》", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489677&idx=1&sn=a7273e78279a8a1b0656d5525954e7ff": "Microsoft 修复了导致 Microsoft 365 Copilot 数据被盗的 ASCII 走私漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063884&idx=1&sn=2d5740ba2fdfb8a2e1aa220e2a5b1661": "【安全圈】谷歌紧急发布 Chrome 浏览器更新，修复 V8 引擎高危类型混乱漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063884&idx=3&sn=5d561409ba544adc4539db1e1dd59dab": "【安全圈】Mirai 僵尸网络发现新漏洞，能同时被攻守双方利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063884&idx=4&sn=ac82f3320a0cef85245dea5edb57eed0": "【安全圈】存在严重供应链安全风险，MLOps平台曝20多个漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651300179&idx=3&sn=973f845fc9c0bc68b9aa03e957ce7099": "存在严重供应链安全风险，MLOps平台曝20多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520605&idx=1&sn=943de838e9f963febbf06e2dc05dfbba": "谷歌修复今年第10个已遭利用0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520605&idx=2&sn=6bd044882cfd8e5f96140c71e26498f4": "MLOps 平台存在20多个供应链漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501973&idx=1&sn=642d4586d72419c24fb9052198320549&chksm=fe79ec0dc90e651b10a86079648e6917eb2dbf036e82b5833086f1ab978545cd46a0be548cbc&scene=58&subscene=0": "【可用POC已公开】Windows TCP∕IP IPv6远程拒绝服务∕代码执行漏洞(CVE-2024-38063)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503066&idx=1&sn=261146d853de3a392a7ac573a84610d3&chksm=f2585fa9c52fd6bfda8442c0c0a4f9b3728c5b7e4225e10c8fad33dfe2457be529e7e38445e0&scene=58&subscene=0": "雷神众测漏洞周报2024.08.19-2024.08.25", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545505&idx=4&sn=444b44d00f2b4c15a7a757ca7343eaec&chksm=c1e9bef0f69e37e6123ae9bbf983cbb47d9704ed94cf76f265624a28062953190081fdd10429&scene=58&subscene=0": "审计发现FBI的数据存储管理存在重大漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520605&idx=1&sn=943de838e9f963febbf06e2dc05dfbba&chksm=ea94a037dde32921bb888a382fcc01e0e960aa5da6886b69fdf2684bfcae4490cf02d45828e5&scene=58&subscene=0": "谷歌修复今年第10个已遭利用0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520605&idx=2&sn=6bd044882cfd8e5f96140c71e26498f4&chksm=ea94a037dde32921016d3ccc578f09450825636f654da7d674940fccba2dbb77ba63a80dd774&scene=58&subscene=0": "MLOps 平台存在20多个供应链漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247501061&idx=1&sn=02f6dbd52cef52ad1286e40be6822880&chksm=cfc5625af8b2eb4c0f9c7f64097e7aeaf128ef9f0daa73b35ca479eebba7d764da9e0218a097&scene=58&subscene=0": "XCon2024 x 360漏洞云精彩链动 | 焕新出发，共见未来", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247577691&idx=2&sn=8d5b89fd888317e60e720a84a091937d&chksm=e9146061de63e97744313abc7ee0b3d3c84ad30fc1f925a8ab1d2742cb0a38b49c693c0f24be&scene=58&subscene=0": "Litespeed Cache 漏洞导致数百万 WordPress 网站遭受接管攻击", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499302&idx=1&sn=cfa2928aefa4a4b253cd82651cb2c942&chksm=973acd44a04d445272a9e75cc988f6d2f41ef1e5d267eb5dcef1ca9d4f0feb0af49d1f607a8b&scene=58&subscene=0": "CNVD漏洞周报2024年第34期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499302&idx=2&sn=de9eef2b7aabc2200be1e12c88cfb24c&chksm=973acd44a04d4452b0ae386618ce4a5b7e65c478377657b21fba01e59c656f8132ad0bf63a69&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240819-20240825)", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247494952&idx=1&sn=38fc4ffdc41d3f9ebad7c4484ba2ee33&chksm=96d8e6f2a1af6fe46f66fa87646d4b0e0379d624e13dc9226d241663b45a879537a56672116d&scene=58&subscene=0": "与漏洞管理平台“人机对话”：斗象VMS DSL数据语法引擎", "https://mp.weixin.qq.com/s?__biz=MzIxNDAyNjQwNg==&mid=2456099362&idx=1&sn=d715fd63fd371cac92c6796893e28863&chksm=803c6bebb74be2fd81cbb57ce0e54638e1dc9ff84c13516390f2039afbafcf7375aa9c892a5e&scene=58&subscene=0": "High-value Web Application Post-RCE Penetration Research", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247574747&idx=1&sn=8d80826f0a4df2cfcf7580ec5f5143da&chksm=9f8d34d3a8fabdc597b32a9f298394d92885637755c89b8b48928e521d6ddfa7bc728ef3d6f1&scene=58&subscene=0": "360告警：全球知名大模型框架被曝漏洞！或致AI设备集体失控", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485297&idx=1&sn=0b54ca34c0e746164c429bf818e57f12": "「漏洞复现」方天云智慧平台系统 setImg.ashx 文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247629815&idx=5&sn=440972b460d87abd170607134cc5f8ef": "存在严重供应链安全风险，MLOps平台曝20多个漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NDAyNTg1NA==&mid=2247490425&idx=1&sn=6c38e15c1b3710a0b409bac95d49ab2f": "CVE-2024-38063(Windows TCP∕IP IPv6远程拒绝服务∕代码执行漏洞)复现（附POC）", "https://mp.weixin.qq.com/s?__biz=MzU5OTg4MTIxMw==&mid=2247503248&idx=1&sn=dad794a3bfc8624ec991128ea4808785": "技术详解 | CertiK揭示秘密修复的Solana核心漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512491&idx=2&sn=b7943378b9c01c831c15774810d0cc34": "俄乌战争导致俄罗斯漏洞赏金计划蓬勃发展", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458569936&idx=4&sn=17681a834dc092366a71eca0764ea6cf&chksm=b18dfc5a86fa754c6f6c1c27e466e085d367666cbe5502b805206ff13250ab81b6068efd5c26&scene=58&subscene=0": "零基础入门Android漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512491&idx=2&sn=b7943378b9c01c831c15774810d0cc34&chksm=ebfaf68bdc8d7f9da42e9e875d53832e5efdf9f6bc0f2bb08ffcd7e5d4edba23ae4cc70a9575&scene=58&subscene=0": "俄乌战争导致俄罗斯漏洞赏金计划蓬勃发展", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545525&idx=2&sn=2561e9c960843541f48a7c0485262341&chksm=c1e9bee4f69e37f2159a41ed177df75958f3736f9f965e767cd823cbca87a8c875b9ccb5150c&scene=58&subscene=0": "开源GPS系统曝出两个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520613&idx=1&sn=dc30b8ece16a42c6097ccba6e9284aa9&chksm=ea94a00fdde32919dccc17f899e4d9558219f654e103df2e221227381caaf4269a2ee6a1a5d5&scene=58&subscene=0": "SonicWall 提醒注意严重的SonicOS 访问控制漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546648&idx=1&sn=cb150b8f6ffe70f6026faf0867d2a5d4&chksm=fa9381d9cde408cf1c2866ce41eb8b47575dfdb10ec11865c14ab7d215fd37885b23f8ed099b&scene=58&subscene=0": "存在严重供应链安全风险，MLOps平台曝20多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546648&idx=2&sn=5bc78f332dbb7dacafb5d2d1801939e2&chksm=fa9381d9cde408cf4d7fc45f5ee0ab19a79fe6014579141019c412e0050c7d7dd4cf91ea37df&scene=58&subscene=0": "Litespeed Cache 漏洞导致数百万 WordPress 网站遭受接管攻击", "https://mp.weixin.qq.com/s?__biz=MzkwMzI1ODUwNA==&mid=2247487408&idx=1&sn=35c68c2e29a32528c0daad15ca4a5e8e": "新生代免费漏洞扫描器，NextScan，开盒即用", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247489585&idx=1&sn=b81b8bf776e2c9708eb2940abbaf6c19": "Chrome ipcz TOCTOU 漏洞分析与利用", "https://mp.weixin.qq.com/s?__biz=Mzk0OTUwNTU5Nw==&mid=2247486466&idx=1&sn=9ce1d4707e9e118acd678a9a4aa976ab": "【相关分享】绕过验证技巧-逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247518295&idx=1&sn=2b321dc0feed9ab950f7c05ea48234b0": "基于人工智能的网络漏洞扫描器 | SmartScanner 1.21", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489689&idx=1&sn=7fdc7cd004f58e30139bd46417693371": "APT-C-60 Group 利用 WPS Office 漏洞部署 SpyGlace 后门", "https://mp.weixin.qq.com/s?__biz=MzA4NzU1Mjk4Mw==&mid=2247491570&idx=1&sn=61c4fc101a987476e901906eae5189b1": "PostExpKit插件更新：进程注入模块", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651300329&idx=3&sn=c3694354781c05687543f4ababc05cff": "谷歌再提高 Chrome 漏洞赏金数额，最高可达25万美元", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485850&idx=1&sn=83cbaf5ac8b41ed8b58a208af2892ab7": "cms漏洞检测框架 - FrameScan", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063922&idx=3&sn=81a7b25c65525b6c22e056b4862fd75f": "【安全圈】韩国黑客利用 WPS Office 零日漏洞部署恶意软件", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063922&idx=4&sn=d84ea75a78fbb31a769c8664a64275c2": "【安全圈】Google 再提高 Chrome 漏洞赏金数额，最高可达25万美元", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247519778&idx=1&sn=bcbf30c86ef70444538124d910a8ee1f": "防护修复双重保障 | CVE-2024-38063远程代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520627&idx=1&sn=e98afd2bb604a7bc41cadce2c53f2ab3&chksm=ea94a019dde3290fe4adbad1106c57776b38ae4dd608564a94bb4be8c9881f87478eac1c79a0&scene=58&subscene=0": "谷歌单个Chrome漏洞的最高赏金超25万美元", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545541&idx=1&sn=3e287b0b3ad08f9b440684d7eb685583&chksm=c1e9be94f69e3782e116f581ad8837de986e0279a7964044235a913869e44d37588b5109b895&scene=58&subscene=0": "WPS用户警惕！APT-C-60利用WPS Office漏洞部署SpyGlace后门", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545541&idx=3&sn=2ffde667d54880ea7961dafc7249ce12&chksm=c1e9be94f69e378215095598a5295a9b92fb3857c31c5f1e5af9439a3f31195ca955cfac8e97&scene=58&subscene=0": "“伏特台风”黑客利用Versa零日漏洞攻击美国服务商", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247494858&idx=1&sn=b4c4f1702a3037deb41649ab20b1f787&chksm=fa594227cd2ecb31e6dce89bccda6be4ffab66b31d2df343d739294613a35a09b107c350a606&scene=58&subscene=0": ".NET 一款支持反序列化漏洞的白名单工具", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247519778&idx=1&sn=bcbf30c86ef70444538124d910a8ee1f&chksm=eb70501ddc07d90be1c82955c420c1a4ebe8516bc6169654e1952951da27f6b4334cb3fbaf50&scene=58&subscene=0": "防护修复双重保障 | CVE-2024-38063远程代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247521013&idx=1&sn=4cc8c8c5df1575b43920069d190fc62b": "Apache Solr 任意文件读取漏洞（poc编写 ）", "https://mp.weixin.qq.com/s?__biz=MzA4NjMwMzI3Mg==&mid=2247500055&idx=1&sn=e9d5a57d81bc5a277940aac0328be875": "【漏洞通告】某海云eHR系统pc.mob接口SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247486147&idx=1&sn=822651cb451034705849a80796bff580": "用友NC content SQL注入漏洞复现及POC", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489696&idx=1&sn=215e0559e13aad69ad2b671712b7b3be": "勒索软件正在利用VMware漏洞，通过VPN访问发动攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063941&idx=3&sn=d0b2a7a428e1e3ddc94e16b41928c099": "【安全圈】黑客利用未修补的 AVTECH IP 摄像机漏洞进行僵尸网络攻击", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499892&idx=1&sn=3483c5c84cfad6c4bc1bca6e479241dd": "【漏洞复现】Google Chrome V8类型混淆漏洞（CVE-2024-5274）", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499892&idx=2&sn=042f91d908b9b87bec4d0ed11dee25fc": "【漏洞通告】Ivanti Avalanche XXE漏洞（CVE-2024-38653）", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk3NjczNQ==&mid=2247485153&idx=1&sn=784f3f0a890681eb98611cac744f7ab4": "实战攻防|某物联网系统通用漏洞实战案例分享", "https://mp.weixin.qq.com/s?__biz=MzIxNzY1MTc1OA==&mid=2247484379&idx=1&sn=0374a5a1c7f9e1bd189a564c696db086": "TimeAxis Sec团队漏洞研究组纳新启动", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492679&idx=1&sn=175cf892e9035aaa422dc8e6e25bf4ff": "某系统多款产品存在命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546686&idx=2&sn=a34751fbd2e1c714f9ce9b19ce35fe2c&chksm=fa9381ffcde408e99309575941093b3419ce03b392d240232b9bd2f44ee9aee41602bd0777ec&scene=58&subscene=0": "针对蒙古政府！疑俄罗斯APT29利用与NSO和Intellexa“惊人相似”的漏洞实施水坑攻击", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546686&idx=3&sn=db8acc8f9a59c0d4fd98dd11633b5f2f&chksm=fa9381ffcde408e93963dc6a04d139c6d84d7e5dda3d386bacf14604ec386142fa9b58451beb&scene=58&subscene=0": "BlackByte勒索软件：利用VMware漏洞，通过VPN访问发动攻击", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545566&idx=1&sn=7b488e10e38c4af21db3afd7d9a6ec55&chksm=c1e9be8ff69e3799a409b3e9e6478aa7595ffaafc14dafe3f6e81cfa29c7775ecb3cb14e1e2a&scene=58&subscene=0": "谷歌再提高 Chrome 漏洞赏金数额，最高可达25万美元", "https://mp.weixin.qq.com/s?__biz=MzI1OTUyMTI2MQ==&mid=2247484617&idx=1&sn=fcfb1017057c31933e9a33d1704df00c": "HW2024 283个漏洞PoC合集", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247629927&idx=2&sn=4701e168bb3160b5e6971e25b9050e99": "韩国黑客利用WPS零日漏洞开展大规模间谍活动", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492687&idx=1&sn=06fc4c417a06fb42fe9d820431a77246": "某视频云平台存在未授权窃取用户凭据漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMTA0MjQ4NA==&mid=2247551067&idx=1&sn=77d376467232482d2821d0aaf9113555": "反序列化漏洞和fastjson实际漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247513111&idx=2&sn=a8407e9bcd004aac577fbf3fd9558dc7": "朝鲜威胁行为者利用 Chromium 中的零日漏洞 CVE-2024-7971", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650958176&idx=1&sn=f826441ecf3a8c2c87726b3394ca825d": "CORS漏洞学习", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485324&idx=1&sn=ec8874faf2c018db193b568338bd2964": "「漏洞复现」用友NC link∕content SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651300584&idx=2&sn=a83b17c1ed134e4fc9f60875e4899b7b": "FreeBuf 周报 | 2024年网安最高处罚记录诞生；谷歌再提高Chrome漏洞赏金数额", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650599410&idx=1&sn=aa9f7ded8745a6c761dd42d9f898cbc0": "韩国黑客利用 WPS Office 零日漏洞部署恶意软件;强制关注公众号、获取大量个人信息，扫码支付怎么变得越来越复杂？", "https://mp.weixin.qq.com/s?__biz=Mzg5MTM5ODU2Mg==&mid=2247500766&idx=1&sn=a587bd51a90cb20b7edbf77c6cbcd001": "[译] 威胁分析报告：12.APT29利用spy软件供应商创建的IOS、Chrome漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTM5ODU2Mg==&mid=2247500766&idx=1&sn=a587bd51a90cb20b7edbf77c6cbcd001&chksm=cfcf7313f8b8fa0574eeb0e8e598e910f86d6df9e27fe3e9ae2d09cd74ff54ccb65a940f3e44&scene=58&subscene=0": "[译] 威胁分析报告：12.APT29利用spy软件供应商创建的IOS、Chrome漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495675&idx=1&sn=b2f83dec52050274e8eafc46f30c606d": "一个$1600赏金奖励的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzOTI2NjUyNA==&mid=2247484902&idx=1&sn=eae50a81028e28f70c0b9c992a84f2b1": "CVE-2024-21413 Microsoft Outlook远程代码执行漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492696&idx=1&sn=4a504cdfca410835fca9403592e7d584": "某系统存在默认凭据漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064070&idx=2&sn=7239638bdebe1719d8bd1c3cc6d8db1b": "【安全圈】微软曝光朝鲜黑客利用Google Chrome浏览器零日漏洞窃取加密货币", "https://mp.weixin.qq.com/s?__biz=MzkyMTMxNjQ5NA==&mid=2247484791&idx=1&sn=4160ee6707e37e6885085d5813a4f104": "「0day」金和OA C6 jQueryUploadify.ashx存在sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247493575&idx=3&sn=3c376e3f80656a67c52a3fa4c8541e21": "针对蒙古政府！疑俄罗斯APT29利用与NSO和Intellexa“惊人相似”的漏洞实施水坑攻击", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485435&idx=1&sn=99f5eb0f17d458b8c2069dc178885434": "2024年最新新小剧场短剧影视系统代码审计(RCE)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247488285&idx=1&sn=93e26682915f36381c11de4d5c201d38": "人工智能AI漏洞扫描工具PRO版SmartScanner-1.23.0-Pro版补丁更新|漏洞检测", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247543153&idx=1&sn=d2b8b12d5e17292082e41466224a072a": "记一次某中学系统越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247543153&idx=2&sn=7b877e3365ef72190578f4e1a0bd2bd2": "漏洞挖掘｜自动备案批量查询脚本", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247612683&idx=1&sn=ce0ad67f72ba3658c0f2860f8f33d5e8": "开源软件中的加密漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247612683&idx=3&sn=9fce372dd44e785ffffdc36a6c85bc40": "车辆漏洞管理 - 从设计开始有效保护软件定义车辆", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485065&idx=1&sn=a62a0479493cae0a6b6cea6506250443": "实战|任意用户漏洞挖掘分享", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485332&idx=1&sn=cfd3a526b441fa5f1eb00b908033b9df": "「冷漠安全」八月份0day∕1day∕nday漏洞汇总", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650599479&idx=3&sn=1cc7929df512bd6969f4150b5b969660": "【总结】设备漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651300585&idx=3&sn=fd4708f6d06b3f193b4c030bcd27ea70": "韩国黑客利用 WPS Office 零日漏洞部署恶意软件", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490380&idx=1&sn=538ffde4f200d11080b50e5d40c4a7eb": "漏洞预警 | Ivanti vTM身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490380&idx=2&sn=df1affa756439486c0a7d9e4986bcdc1": "漏洞预警 | 赛蓝企业管理系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490380&idx=3&sn=57c6a9b39234d3e0fb0d3a1a3a8d201f": "漏洞预警 | 同鑫T9eHR信息化管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492608&idx=1&sn=58853db4366ab941adbcef183a9a8cb2": "漏洞复现 || Bazaar swaggerui目录遍历", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495675&idx=1&sn=b2f83dec52050274e8eafc46f30c606d&chksm=e8a5e598dfd26c8ef4bed0dc19c6c4a9838a819f166679ac03fa5b0e4c0c6efc888116dde0ac&scene=58&subscene=0": "一个$1600赏金奖励的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485002&idx=1&sn=ff76852b82c0dbe8d44f0ad7b6a4ac71": "漏洞推送|用友U8C reservationcomplete存在sql注入可RCE", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485341&idx=1&sn=b02dd419f6671b4d1407d3c15f433710": "「漏洞复现」WookTeam searchinfo SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MDQ0NzkyMw==&mid=2247484850&idx=1&sn=d8259a8a6f631c69a331466ec553adaa": "HVV2024POC漏洞核查思路", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492703&idx=1&sn=945b1ecb68f1d8853ba2d2792f1602a5": "某系统存在路径遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMjYzNTE4MA==&mid=2247485024&idx=1&sn=b7fefd2c21e5df19413546fcf9618f10": "【Nday】短视频矩阵营销系统 user 敏感信息泄露漏洞【附poc】", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485865&idx=1&sn=75af3c999502318ebcdf0fb6908ad949": "红队武器库漏洞利用工具合集 - VulToolsKit", "https://mp.weixin.qq.com/s?__biz=MzkyMjM0ODAwNg==&mid=2247488058&idx=1&sn=3cb21c6ed20893aa8b5f76007d577c58": "MSI 文件漏洞的探索", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651300656&idx=3&sn=3a17f5dc582f0f0007863eb1ba578030": "案例征集｜2024移动互联网APP产品安全漏洞治理优秀案例征集", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786826&idx=1&sn=5836a828206db72a5c4643bca67de664&chksm=8893b9a5bfe430b386427669dfc669d65e16f9ebfb2388771f56ff7a703089c1471750fbf486&scene=58&subscene=0": "美航空管理服务系统存在严重SQL注入漏洞：允许未经授权人员绕过机场安检", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501978&idx=1&sn=61c623acad92737f00bcef0c5d233829&chksm=fe79ec02c90e6514f2a3f9dfa4c965e4bd2f7564b0fbb65741aed98ae042d7200a125f983d3c&scene=58&subscene=0": "安全热点周报：Google Chrome 和 Apache OFBiz 漏洞被黑客利用，紧急修复措施发布", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520645&idx=2&sn=db3b91279c8927a20b8803d337553df8&chksm=ea94a0efdde329f99b47426cd38ffb58a35fb2dfc1c4037771332b1adac06119f08b376e6cad&scene=58&subscene=0": "研究员利用SQL注入漏洞绕过机场的TSA安全审查", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495227&idx=1&sn=9187af7308b472287a51ffacd76b43f7&chksm=fd74def2ca0357e40ead351657ac36a999f6508668c4d42c6bee9c2459e1011a31855cac318d&scene=58&subscene=0": "CNVD漏洞周报2024年第35期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495227&idx=2&sn=bd78a786194d867f9ec3252f293da309&chksm=fd74def2ca0357e4d5a4cb6efcbe5aa4696ca0804b691806246e8f44727a746f2589576470ea&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240826-20240901)", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492305&idx=1&sn=d9cc7a790db58f5b22afa02b52a9cde2&chksm=e90dc8fbde7a41ede9648f2572bb5e59d26f8e7c663778e3bb1a1fdc5560c59c3bb6668177cc&scene=58&subscene=0": "黑客组织利用WPS Office零日漏洞针对国内用户展开攻击活动", "https://mp.weixin.qq.com/s?__biz=MzkxODczMzQ1MA==&mid=2247484674&idx=1&sn=86a7bb2160c9da1bba46aa4564ff44f9": "[24HW总结] 400+漏洞POC汇总", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495762&idx=1&sn=434fd10109993b75f20958419e34818f": "sign加密小程序漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488804&idx=2&sn=409d1274dfb07474fae0068a3eee0beb": "【漏洞预警】vim代码执行漏洞(CVE-2024-45306)", "https://mp.weixin.qq.com/s?__biz=Mzg4NTgxNTc5Mg==&mid=2247486675&idx=1&sn=63e6f415e8df75ebc74724e870224326": "Adobe ColdFusion （CVE-2023-26360 入侵了美国联邦民事执行局）漏洞分析，实现反弹思路，", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247514839&idx=1&sn=5da207a82544f6ace7596001e395d30f": "【CNVD证书get】某集团信息系统存在未授权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247501597&idx=5&sn=2c94bec2d8c4269eb40124ee83685b12": "强大的间谍软件漏洞引发新一轮“水坑”攻击", "https://mp.weixin.qq.com/s?__biz=MzkyMTMxNjQ5NA==&mid=2247484796&idx=1&sn=40ec636837b552124e00b05b6fcccd82": "「POC」用友U8-Cloud系统接口RepAddToTaskAction存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247484863&idx=1&sn=742bcdb07ad43feb536332915632a87d": "影响WPS Office的两个任意代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247486192&idx=1&sn=50a65af2527cf436fae0ace628e999e2": "金和OA C6 jQueryUploadify SQL注入漏洞复现及POC", "https://mp.weixin.qq.com/s?__biz=Mzg4MzU3MTcwNg==&mid=2247485680&idx=1&sn=c874c954fee0807a4e717df8c0ed0f6f": "逻辑漏洞——验证码篇", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064118&idx=3&sn=e8c491c09d170fcdfc57c3a67ba7a5b4": "【安全圈】Durex India 的安全漏洞泄露了客户的个人数据", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512533&idx=2&sn=59c7c075584844fac09165ec9597045e": "航空安全系统曝严重漏洞，黑客可绕过安检进入驾驶舱", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501997&idx=1&sn=4250ae8d9c3b15a1f415b1fe31a2bdb4&chksm=fe79ec35c90e65237e2ab8c4b59b1a8b4bb67fa64b7b1e09cc25988186b744580cddd86e5386&scene=58&subscene=0": "【已复现】Jenkins Remoting 任意文件读取漏洞(CVE-2024-43044)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503077&idx=1&sn=89af6affce528a5801fc34b663c10676&chksm=f2585f96c52fd6804cd2250c0fe4a0eeb8ca448d87db81f77c33e1eda130c0abab5dc94dc600&scene=58&subscene=0": "雷神众测漏洞周报2024.08.26-2024.09.01", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512533&idx=2&sn=59c7c075584844fac09165ec9597045e&chksm=ebfaf6f5dc8d7fe38e645f02f28851e04561973264e47dd42aa89328a041bdd661fa7e0e1886&scene=58&subscene=0": "航空安全系统曝严重漏洞，黑客可绕过安检进入驾驶舱", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064118&idx=3&sn=e8c491c09d170fcdfc57c3a67ba7a5b4&chksm=f36e6536c419ec20ec6c8dbba8fd1b6cb2575b19e3ec46921c6b8d16b733e47e2eaa9db762de&scene=58&subscene=0": "【安全圈】Durex India 的安全漏洞泄露了客户的个人数据", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247577796&idx=1&sn=688d856a01c7b230c32b8c18dc012b4e&chksm=e91460fede63e9e80281f68cb78e9487926fd2648745163007e14b4e6f3d1026a164e8951cc4&scene=58&subscene=0": "恶意软件利用零日漏洞感染报废的AVTECH IP 摄像机", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499313&idx=1&sn=5d3b3cac772fc286cb235f96abdeafca&chksm=973acd53a04d4445dc6d6ee84c6dd54c26216cd5558878d657141ca8b0991b5f6a4ffc63bc41&scene=58&subscene=0": "CNVD漏洞周报2024年第35期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499313&idx=2&sn=532e346579ef66b6342499ec2fa0ce05&chksm=973acd53a04d4445bf162a4d9f40a21e7d84581ec6e9eee0e9611e57c27af4784ce84355552c&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240826-20240901)", "https://mp.weixin.qq.com/s?__biz=MzI2NzI2OTExNA==&mid=2247516903&idx=1&sn=7d8947bd52b5fd4540e4345bd767cb86&chksm=ea83a472ddf42d646ecf522b28af66cf52a72c8862d14e73543eb383b46d113ef6cb1c4756e6&scene=58&subscene=0": "小米中秋活动开始啦，礼盒兑换&漏洞翻倍在等你，冲鸭～", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546725&idx=2&sn=c4dbbf0aae29b7f972e6b36b2d394146&chksm=fa9381a4cde408b280ee644051703f8b7b81e4d06c664d4507ae8d507ed10703620ffa200d45&scene=58&subscene=0": "朝鲜黑客利用Chrome零日漏洞部署Rootkit", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488812&idx=2&sn=7775fe2ef8cf6bdf886ca2462007fa98": "【漏洞预警】Apache OFBiz SSRF致代码执行漏洞CVE-2024-45507", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247514912&idx=1&sn=ad5f0315fe634390d9e14290fd2b84a8": "【SRC】某众测项目中有手就行的几个漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485449&idx=1&sn=6da3eb65c8cdd4717a3098a097183c09": "招聘启事-漏洞挖掘工程师", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247491193&idx=1&sn=0b4f11ecd294dd99667d2b21ba9ec44b": "中科院软件所 | 一种针对非回溯正则引擎ReDoS漏洞的有效检测方法", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492711&idx=1&sn=087ee2540301bf77bbc8c352b35d3f5a": "某防火墙存在远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650958675&idx=1&sn=1d86b38d04a873fd1c87c1118ae5fda4": "比较有意思的几个漏洞挖掘记录", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247517239&idx=1&sn=f81cd23d9d9b7ab8278b1c2c829fc6e4": "Src挖掘之比较有意思的几个漏洞挖掘记录", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064138&idx=1&sn=53220a217e6d037a4a2660176faf81c0": "【安全圈】尽快更新！Zyxel 路由器曝出 OS 命令注入漏洞，影响多个版本", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247617161&idx=1&sn=3891a70924cc4a21b2198b11ccfb35e0": "齐向东：“数据三角”的安全体系各自为战，是网络安全最大漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247491193&idx=1&sn=0b4f11ecd294dd99667d2b21ba9ec44b&chksm=fe2ee1f2c95968e4852df2a4c4f8252a9e40265645fc3c8b9dc391d8637dcca7d1d5d5ddabdb&scene=58&subscene=0": "中科院软件所 | 一种针对非回溯正则引擎ReDoS漏洞的有效检测方法", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520668&idx=1&sn=33ddf9ab82fd7db2d5c560e478add189&chksm=ea94a0f6dde329e00b344533f754d89385c211e8596d9ad29addaf0ee37d57d5ea6a58459475&scene=58&subscene=0": "D-Link 不打算修复 DIR-846W 路由器中的这四个RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520668&idx=2&sn=a47864fc0328391d921ce4629b3bac8b&chksm=ea94a0f6dde329e023f990c89d3f4b6a44d09f2026fcdb3ad4e8deed8958ffe6ef4fa464fc38&scene=58&subscene=0": "合勤提醒注意路由器中的严重OS命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520668&idx=3&sn=899efb652a40601d77b2cb2fffa9e4a2&chksm=ea94a0f6dde329e0c294039de56f65cffda877a972c98fbfebe68abac81d4ee415d453a6203e&scene=58&subscene=0": "VMware 修复Fusion中的高危代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502006&idx=1&sn=cb69b47b02bcfc5ff4836ba5403fec0c&chksm=fe79ec2ec90e65380654be1e4b959fcfde77763ecee1b2aac3d13cc7595c172d9ed284186b6c&scene=58&subscene=0": "Apache OFBiz 服务端请求伪造漏洞(CVE-2024-45507)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064138&idx=1&sn=53220a217e6d037a4a2660176faf81c0&chksm=f36e65cac419ecdc21d88b0b992bc733d43a72cfdf95554403ccb9531d4f08c9ffaf2906559c&scene=58&subscene=0": "【安全圈】尽快更新！Zyxel 路由器曝出 OS 命令注入漏洞，影响多个版本", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545632&idx=3&sn=1a5b5a9455da06cb57832c3cacf88afe&chksm=c1e9bf71f69e3667fac031d888ccd6cb7f0e63da1d6576e16b42056153c55fa308a12c21070f&scene=58&subscene=0": "恶意软件利用零日漏洞感染报废的AVTECH IP 摄像机", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545632&idx=4&sn=56bb16ab43e5ed769e22fb7332101b6d&chksm=c1e9bf71f69e366711339d915d0dea11dd33d68c51574030b4a042afa01c1278356ff0166495&scene=58&subscene=0": "航空安全系统曝严重漏洞，黑客可绕过安检进入驾驶舱", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247486242&idx=1&sn=f4b22189165d6cc0af032b4b426f4835": "用友NC show_download_content SQL注入漏洞POC", "https://mp.weixin.qq.com/s?__biz=MzIyMDAwMjkzNg==&mid=2247513380&idx=1&sn=c597ca25d97dfa3d225abefdc38ec2ce": "SpEL表达式注入漏洞总结", "https://mp.weixin.qq.com/s?__biz=MzkyODcwOTA4NA==&mid=2247485387&idx=1&sn=98ba5b0e0967ecba746a0c0e140b4922": "nuclei+burp 快速构建护网漏洞武器库！！", "https://mp.weixin.qq.com/s?__biz=MzkzOTI2NjUyNA==&mid=2247484918&idx=1&sn=0414f876c0d77a66e7f16a319822a208": "超高危 Wordpress RCE漏洞 CVE-2024-5932 全网资产 5W+ 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492718&idx=1&sn=a33252cb33ce8147cb6d79a626d9e3f7": "某视讯平台存在敏感目录文件泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502008&idx=1&sn=32eb5b732b23cab67d8003b1974eb88c&chksm=fe79ec20c90e653629a844feee3fdd101acbd5cb2b5f841aa7aefb53bdc20748d4f36dd6addf&scene=58&subscene=0": "公开的隐秘：CVE-2024-30051在野提权漏洞研究", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247512365&idx=1&sn=710b2599bd33984303fdd16660edd361&chksm=ea66465add11cf4cdd356438020e41b92263c87bc7219fc04f3e4837e4527555fd80cbd8c12d&scene=58&subscene=0": "公开的隐秘：CVE-2024-30051在野提权漏洞研究", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520683&idx=1&sn=00f735c28afb0e6cc70f919cade9dc5c&chksm=ea94a0c1dde329d7537d32cf0cc038587d8e6da619b0dc82fb99bb8917e432ece7028a7dd65c&scene=58&subscene=0": "思科修复已有 PoC 的根提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664224600&idx=2&sn=1de60783b88daab0ab81b0280e7614e1&chksm=8b59d5a1bc2e5cb78dcd92738723de7e6054e27b1e86b876add7543c5936d051c2bf7b136495&scene=58&subscene=0": "报名开启 | CCS 2024成都网络安全系列活动——国家漏洞库网络安全漏洞治理产业协同创新研讨活动", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523564&idx=1&sn=10f214e39c6a8000a11eb0a4f35c0ac1&chksm=ce4617fcf9319eea12a5d926f35c9c86b08e8618e385ae84d761303b04f4064a5ddab01d3a60&scene=58&subscene=0": "【漏洞通告】Apache OFBiz服务端请求伪造漏洞 （CVE-2024-45507）", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484655&idx=1&sn=2661756f5e49f4a5168faf30cd1745d7&chksm=c12af96ef65d707884432e641bc6c163d8234567c44b7747fbaeaf2b7848926cfa4c53c4726e&scene=58&subscene=0": "【复现】 Apache OFBiz远程代码执行漏洞（CVE-2024-45507）风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2ODc0Mjc0Mw==&mid=2247484101&idx=1&sn=a0cedc41f3e38dbc7ad0a57ff454ec89": "漏洞不收不就安全了", "https://mp.weixin.qq.com/s?__biz=MzU0NDc0NTY3OQ==&mid=2247487857&idx=1&sn=d884699b9103af848b9618c881780d1b": "红队技巧分享：躲避现代检测系统的命令执行", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489721&idx=1&sn=aac489fdf71eec0dac0723c03ffdeb9f": "Apache OFBiz 更新修复了导致远程代码执行的高严重性缺陷", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492726&idx=1&sn=0ce7b47bfebf264b917e962c8e54458e": "某视讯平台存在登录绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MTY5NDQyMw==&mid=2247520138&idx=1&sn=ec007593d1fbab50393005cd3256e658": "Tomcat CVE-2024-21733漏洞简单复现、分析", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652093435&idx=2&sn=3d72c981bf7de50e7fbc9c84b70b615e": "黑客活动家利用 WinRAR 漏洞对俄罗斯和白俄罗斯发动攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651301191&idx=3&sn=229cee39f8d034cce3d979395f0b94ee": "尽快更新！Zyxel 路由器曝出 OS 命令注入漏洞，影响多个版本", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064175&idx=2&sn=3f54fca5e0c49722e56e0d3e226be408": "【安全圈】LiteSpeed 曝出严重漏洞，致使超 600 万 WordPress 网站遭攻击", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499926&idx=1&sn=7084340f10b3ffc3b370b80237a212b6": "【漏洞复现】Apache OFBiz远程代码执行漏洞（CVE-2024-45195）", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490038&idx=1&sn=3235605275d5b7bdf36280124086c7b8": "【已复现】Apache OFBiz存在未授权远程代码执行漏洞（CVE-2024-45195）", "https://mp.weixin.qq.com/s?__biz=MzkxNTU5NTI1Ng==&mid=2247485855&idx=1&sn=f6975c51f543a81eaed123cbed06c635": "Safety：Python 依赖漏洞检测与安全保障工具", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247521204&idx=1&sn=1d4bfea09b7d3dffc1799a441b253206": "总结RCE漏洞(常见RCE的组合案例）", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502018&idx=1&sn=cf4b96420aefe1c1c6a2e624c4568c0c&chksm=fe79ec5ac90e654ccd9ce71c63e6c66514c7eb82807b05995a88e1d3b091a282f3bdc9f5ed3b&scene=58&subscene=0": "【已复现】Apache OFBiz 远程代码执行漏洞(CVE-2024-45195)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520714&idx=1&sn=df4e06a4fa7f19703c54eeb2ccf244d6&chksm=ea94a0a0dde329b6b9068782af2d2311165f4ac3aea68076c75da8cfa12aec8d17c556e6f0fc&scene=58&subscene=0": "Veeam 修复5个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520714&idx=2&sn=a3784b5b2245f1449edaefa3064d676f&chksm=ea94a0a0dde329b6ca2b17012b7eb003867fd983c6abcc5e7fde821968dec1ea86592860496c&scene=58&subscene=0": "Apache 修复严重的 OFBiz 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247501969&idx=3&sn=4c46939ec96ab5a8013ec34eb54fea29": "Zyxel（合勤科技）路由器中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247501969&idx=5&sn=37b97c04c8b0e48e22d8a7b473fa7c6f": "中控智慧终端漏洞：黑客可访问受限区域", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247518541&idx=2&sn=9c54b3eedbb7e8e3259caec044f262cd": "实战 | 测试文件上传漏洞的5个小tips", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492734&idx=1&sn=b809f231c4711e36b9079d5367a51189": "某视讯平台存在未授权任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064191&idx=4&sn=2fe0d56663512b21ba1785d9a22bcd38": "【安全圈】研究人员发现Yubikeys中存在一个难以利用但也难修复的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247484396&idx=1&sn=1eaf044032849dd9a642f72330921b4c": ".NET反序列化漏洞类型以及案例分析（1）-LosFormatter", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484176&idx=1&sn=075c87d06e177c5cfc335bc6dbcf67dd": "入选作品公布｜安钥®「漏洞处置标准作业程序（SOP）」征文第一期", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458572213&idx=1&sn=6f216d0dd151bf49db7607367a01d861": "CVE-2023-4208复现笔记", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485388&idx=1&sn=867c422735a6515a7f990a8020c763f3": "「漏洞复现」停车场后台管理系统 GetPasswayData SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247484963&idx=1&sn=5682d175e2b9907a7a93439a4f64c2d2": "俄罗斯APT29再度出击：重复利用NSO Group和Intellexa开发的iOS与Chrome漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247489305&idx=8&sn=e5e9b6fad46ed8ab874972f4284abef8": "CVE-2024-45076 (CVSS 9.9)：IBM webMethods 存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247485950&idx=1&sn=3f4bb6cf0bf446a7947b950392f8baf6": "本想分析rce还出了一个sql注入", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247490888&idx=1&sn=36fc9449d74f7e3d4b59775930f4265b": "继上一次权限绕过漏洞代码审计", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649792317&idx=3&sn=92893f4a7e7c5090b547d8cf01fd1b47": "CISA 打破沉默，回应备受争议的“机场安检绕过”漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458572213&idx=1&sn=6f216d0dd151bf49db7607367a01d861&chksm=b18de53f86fa6c299538c10a4071807acb9e4a2b5aa5a3a383eb5d1d1db0f3ce49f89337041a&scene=58&subscene=0": "CVE-2023-4208复现笔记", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064191&idx=4&sn=2fe0d56663512b21ba1785d9a22bcd38&chksm=f36e65ffc419ece95bd1e15cc3b1eb19a4fe27400937238106b5b34bde708be50cd7af470869&scene=58&subscene=0": "【安全圈】研究人员发现Yubikeys中存在一个难以利用但也难修复的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492741&idx=1&sn=034e5d529304de4e4b75ea6e90382f06": "某摄像机系统存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247485954&idx=1&sn=8527585ced54072fb2565c1c4ebd6df5": "支付漏洞之拆分购买漏洞案例", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247630209&idx=4&sn=13b7e384901a33504a2f3bcf0e976ac1": "LiteSpeed 曝出严重漏洞，致使超 600 万 WordPress 网站遭攻击", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247513599&idx=1&sn=aa6fb0f490fb240d8e600ebd4bae0fe1": "Windows DWM 核心库特权提升漏洞 (CVE-2024-30051)（2024 年 8 月 15 日发布）", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247513599&idx=2&sn=b25be6ece986744ffd85d9161050359e": "Copy2Pwn：CVE-2024-38213 如何仅通过复制粘贴绕过 Windows 安全机制", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247495117&idx=2&sn=e01a452e7ec7591d0ce4c072ca7a99da&chksm=fa594320cd2eca367401579eda5ca61a2b34d32f0fe1e69f829aca5eecbc06a998e4d565faee&scene=58&subscene=0": "献礼中秋！ | .NET 文件上传漏洞对抗最新研究成果和新工具发布预告", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495853&idx=1&sn=e2491623e5caefdaadabfac23ad5bc2d": "未知技术大揭秘，让XSS漏洞无处遁形！0x2", "https://mp.weixin.qq.com/s?__biz=MzkwNjY1Mzc0Nw==&mid=2247485803&idx=1&sn=53b5c0dd82c224a4f2eed99846c2a4bf": "漏洞不收，系统就安全", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502031&idx=1&sn=c8e850fe73d19f83709ccb2fd1fbcbfc": "安全热点周报：HAProxy 漏洞 CVE-2024-45506 正在被利用需要紧急修补", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291588&idx=1&sn=e5d6b00bc850160b3d4f0d7615cb115b": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486283&idx=1&sn=b5539ba26595b5e6bb75cc17c0174299": "【漏洞通告】Google Chrome 安全漏洞(CVE-2024-7970)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486283&idx=2&sn=c8c0be5d21df164f65b935065ca1c59f": "【漏洞通告】Google Chrome 安全漏洞(CVE-2024-8362)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486283&idx=3&sn=8b9cac95c2168c9ef33e9368c6e07f6b": "【漏洞通告】Vim 中的堆缓冲区溢出(CVE-2024-45306)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486283&idx=4&sn=ad0d01a874ed28df70220a5fcb50d307": "【漏洞通告】TinaCMS 中的锁文件泄露 Tina 搜索令牌(CVE-2024-45391)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486283&idx=5&sn=4b53fd8a53fa5ade807248873d5c6816": "【漏洞通告】 ActiveMQ 服务在 OpenEdge 管理 Web 界面注入未经身份验证的内容(CVE-2024-7654)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486283&idx=6&sn=dab423aa01c0d69dc548faaa4e9d52d2": "【漏洞通告】使用 OpenEdge 默认 TLS 证书的客户端连接可能会绕过 TLS 主机名验证 (CVE-2024-7346)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458572285&idx=2&sn=0222e2ed9589877a875eb5cb86056ac2": "CVE-2023-2008复现笔记", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458572285&idx=4&sn=f46ed7fb4fee1632b7844f82c7f17301": "【零基础】系统学习移动端漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499934&idx=2&sn=0a517feb485eedfbb6f699b53824282a": "【漏洞通告】Progress Software LoadMaster远程命令执行漏洞（CVE-2024-7591）", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499934&idx=3&sn=d97dffa533752178ad2b8111d4f1dfb4": "【漏洞通告】Kibana任意代码执行漏洞（CVE-2024-37288）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520732&idx=1&sn=8fafa0f4d8f56d2a8361866cce3ac84c": "Progress 紧急修复影响 LoadMaster 的超危RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520732&idx=2&sn=080d86bc26683d38189a49ac073be44c": "CISA提醒注意百特、三菱产品中的多个ICS 漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247493777&idx=1&sn=853ffd52cd3e4fe26b3ace83a7d96042": "50万元奖金池｜ByteHACK漏洞挖掘赛等你报名", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495269&idx=1&sn=7a5a422f10ca150bbd73702a76e550bf": "CNVD漏洞周报2024年第36期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495269&idx=2&sn=eea86aadf895bd9500df03bddd96b8f7": "上周关注度较高的产品安全漏洞(20240902-20240908)", "https://mp.weixin.qq.com/s?__biz=MzU2MDE2MjU1Mw==&mid=2247485655&idx=1&sn=dc5948522083140e8f4649d471c8bf0f": "记一次帮朋友扬眉吐气的逻辑漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786854&idx=1&sn=25f5439f2c74dc7cc3ec94a747abc73e&chksm=8893b989bfe4309fd963a838e1969fff8021a2ad98ff018949349385565dfd71096351b12e72&scene=58&subscene=0": "或致防火墙崩溃！SonicWall SonicOS 管理访问和 SSLVPN 中存在访问控制不当漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458572285&idx=2&sn=0222e2ed9589877a875eb5cb86056ac2&chksm=b18de57786fa6c61103d2f5c157fbdb516461dcba4b82b88daea0ed03e0c2bfbfefa1fb7d8ad&scene=58&subscene=0": "CVE-2023-2008复现笔记", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458572285&idx=4&sn=f46ed7fb4fee1632b7844f82c7f17301&chksm=b18de57786fa6c61316915818d9526dfe76e89364ad695fc013bf6ea1816431769ab3f86bc46&scene=58&subscene=0": "【零基础】系统学习移动端漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503092&idx=1&sn=7eb9b0a033af163cd89464f3755bf727&chksm=f2585f87c52fd69170614c7ba395865961e3ec98e2972b274795314cc2b6e97829f91390f78d&scene=58&subscene=0": "雷神众测漏洞周报2024.09.02-2024.09.08", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520732&idx=1&sn=8fafa0f4d8f56d2a8361866cce3ac84c&chksm=ea94a0b6dde329a0b734a3f78a7d08346686d7c08491cae9150d82ce56df6a5d2aa9356b6d2b&scene=58&subscene=0": "Progress 紧急修复影响 LoadMaster 的超危RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520732&idx=2&sn=080d86bc26683d38189a49ac073be44c&chksm=ea94a0b6dde329a0e47b16a1c1c32be51890c7425e0aca2e0aed1907a6567ce9de33ff378023&scene=58&subscene=0": "CISA提醒注意百特、三菱产品中的多个ICS 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247577870&idx=2&sn=e83ce73fccab4a6d0c7d4fb148fb3c47&chksm=e9146134de63e8225cb28582033da7a52ea67635411e71c8f4df2ebd9c1ded247a001fa9f5f2&scene=58&subscene=0": "安全动态回顾|网络安全知识手册正式发布 谷歌将Pixel EoP漏洞修复程序反向移植到其他Android设备", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495269&idx=1&sn=7a5a422f10ca150bbd73702a76e550bf&chksm=fd74deacca0357ba465e29d1157d18fc515ff141dc41659fab73c00c00b7a5a58e9bc755174f&scene=58&subscene=0": "CNVD漏洞周报2024年第36期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495269&idx=2&sn=eea86aadf895bd9500df03bddd96b8f7&chksm=fd74deacca0357ba69cba5c41acd60a32012831bb3e822fcbf65b2eb881b1aab17753ff3fa2a&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240902-20240908)", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492319&idx=1&sn=2bc2e6350f0d55656a7d48f640abc307&chksm=e90dc8f5de7a41e3148222ca6d7ed1370352ea86fa4783409fee3b32f05d92acdb19ebf0af63&scene=58&subscene=0": "腾讯微信存在可能导致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488839&idx=2&sn=fcd32690a504a9872791c88b214c515d": "【漏洞预警】Apache Airflow<2.10.1 远程代码执行漏洞CVE-2024-45034", "https://mp.weixin.qq.com/s?__biz=Mzg4Njc1MTIzMw==&mid=2247485682&idx=1&sn=bc1af13e2702db928a49381db10efa39": "CVE-2024-43044 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247486270&idx=1&sn=109d74d540fc4f336f7d36015fc357b9": "通天星CMSV6车载定位监控平台 getAlarmAppealByGuid SQL注入漏洞复现及POC", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651301371&idx=2&sn=00caa6e8c45708f265c740f2edad10ef": "SonicWall SSL VPN曝出高危漏洞，可能导致防火墙崩溃", "https://mp.weixin.qq.com/s?__biz=MzU5OTg4MTIxMw==&mid=2247503293&idx=1&sn=2993df5b35103c1436e5793b18fbec8e": "技术详解 | Divide and Conquer：ZK除法中隐藏的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5OTY2NjUxMw==&mid=2247513037&idx=2&sn=129204f4fb27bf8e1352d7eace42e2b8": "实战 | 某外汇常用CMS通用未授权RCE", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247630251&idx=5&sn=9bc4275223f801b6c81d099064753e1d": "美国网络安全漏洞披露管理情况研究", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502047&idx=1&sn=4976c29872b358ad54c24144d77593f7&chksm=fe79ec47c90e6551465957209a3719e2a12bbd7dbb860dc36a9edd85f7f8dd2e8d1528480c7f&scene=58&subscene=0": "FreeBSD umtx释放后重用漏洞(CVE-2024-43102)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502047&idx=2&sn=02def7dfd210294564b852a1c08450f3&chksm=fe79ec47c90e6551b868ea62e10ba5c9958c86c2642f2cded4d8bedaf27e100d34e02060ccf3&scene=58&subscene=0": "【已复现】Apache OFBiz 服务端请求伪造漏洞(CVE-2024-45507)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520744&idx=2&sn=d688e69adb847820b551749458a9b1b2&chksm=ea94a082dde32994e04c2f938e2fe0eb8aa1705c92cd5936096716788c157aff940c5983a116&scene=58&subscene=0": "FreeBSD紧急提醒注意严重漏洞CVE-2024-43102", "https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650849411&idx=1&sn=a65104c9166e2106afae06305049936a&chksm=80dba326b7ac2a3015a67bc263b6a654ca0e8d529c6dc375b2a1138f70c3c576d763ceb85073&scene=58&subscene=0": "青藤获评CNVD年度最具价值漏洞报送单位", "https://mp.weixin.qq.com/s?__biz=MzUyMTcwNTY3Mg==&mid=2247486263&idx=1&sn=f73406fc022a52936ad43f7b4d6adb58&chksm=f9d64a90cea1c38677f79c1c642b50d2371de1cf6f687a5f2a33ec022cd1a15db5bb77d47e9b&scene=58&subscene=0": "关于中通SRC恢复漏洞测试的通知", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247515741&idx=1&sn=4844e5434f49a01d9ca7e4dfa5a3cd8a&chksm=c144cce0f63345f682b14293450572f91013bfe8aa243de0049fee6aaf521decb3b74a6bb49f&scene=58&subscene=0": "攻击者正在以创纪录的速度利用漏洞——以下是应对措施", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499334&idx=1&sn=578d488c866c1b1f4931876613436946&chksm=973acd24a04d4432be35ea573f286a3d5382fd4cbb01f78e2938184bc0a9ddcbe924adc212b2&scene=58&subscene=0": "CNVD漏洞周报2024年第36期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499334&idx=2&sn=30d323fe7703de45ff63454267337734&chksm=973acd24a04d4432987ce1dbb4f130e01bc13809dfad68cad7b07c50f58d6df3cefd550eef8d&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240902-20240908)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495274&idx=1&sn=918ff18c97eecfe93c1816c31a2a0d78&chksm=fd74dea3ca0357b5a4cbbdd1ce172ef6f0702db64d44c1684604bd0c226681267b06daf04e8c&scene=58&subscene=0": "2023年度CNVD优秀单位（个人）表彰名单", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488847&idx=2&sn=4bf12094bda39048ae52b9edb1ea2e1b": "【漏洞预警】Ivanti Endpoint Manager 未授权反序列化漏洞可导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664225217&idx=1&sn=0ebd1a9b4ffa506ab68f550a7dff2059": "CCS 2024 | 国家漏洞库网络安全漏洞治理产业协同创新研讨活动成功举办", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651456430&idx=1&sn=2fc8e4a6c25f2aedf0780201cf653d78": "CCS2024 | 国家漏洞库网络安全漏洞治理产业协同创新研讨活动成功举办", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786863&idx=1&sn=830d42f5a9877e0226f0be133543e6a8&chksm=8893b980bfe430960a4d3f99dfd5fefe6d1c298ab14665d4cccab6322be1d5689712b289b465&scene=58&subscene=0": "涉及微软多款产品，4个被利用的0 Day漏洞亟待修复", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502059&idx=1&sn=2a4c7dc68382398f1e644be7ef2820e7&chksm=fe79ec73c90e656573c8297ab60ed4699b08361a5cf6fbcf954b080a5f0fb8d7c32f13070418&scene=58&subscene=0": "微软9月补丁日多个产品安全漏洞风险通告：4个在野利用、7个紧急漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520759&idx=1&sn=abba88eb7f82857147b09b6d65f6a0bd&chksm=ea94a09ddde3298bd3eabfaf2b2d2b717a79896e6ee33f80bd7f180e34018a9592c880374715&scene=58&subscene=0": "微软9月补丁星期二到底修复了4个还是5个0day？", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520759&idx=2&sn=1fc5e0f7a15b2f6ee85191294e7148e0&chksm=ea94a09ddde3298b03f1d93d760c4ebe1bbf0831c2823c5d15bdc98a012ee7662c48075afa5d&scene=58&subscene=0": "Ivanti 修复Endpoint Management 软件中的严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247519878&idx=1&sn=88171477acce677f3ea59c51ae78a90f&chksm=eb7050b9dc07d9aff1465fa38febad1891e0ec5e104de9545d309c56afae28bced7beca62c75&scene=58&subscene=0": "2024-09微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247508186&idx=1&sn=866d9f074a573e308aa16343c41de7db&chksm=fa527564cd25fc72e6b1b3db72d5076e9768a947504c3e6de113d99b2e24fe0223df594f98b4&scene=58&subscene=0": "微软2024年9月补丁日重点漏洞安全预警", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064335&idx=2&sn=ae95b2ac3eb9fe50dc11b71ae2308f86&chksm=f36e660fc419ef19c976b3738d066d4b60f7f036f183ba48fbafaed13f5584b33c4080e6a1cb&scene=58&subscene=0": "【安全圈】WhatsApp“阅后即焚”功能曝漏洞，黑客可反复查看", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064335&idx=3&sn=ef8069d8946623ebc55c3e93a45ad582&chksm=f36e660fc419ef19327e756dcb04ba4ac776b959972bfb8b560427de7fae57d06333410a3ea0&scene=58&subscene=0": "【安全圈】SonicWall SSL VPN曝出高危漏洞，可能导致防火墙崩溃", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523597&idx=1&sn=50c7a69fd3cdadcf9260a6ebd8d8f145&chksm=ce46161df9319f0b446aaff350028dad89891db30da8040766bb16c851b5504844ef7d50b65f&scene=58&subscene=0": "【漏洞通告】SonicWALL SonicOS 访问控制错误漏洞(CVE-2024-40766)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523597&idx=2&sn=8b37864c2d0ad3b3d5d38e5b5f081f6d&chksm=ce46161df9319f0bb837971b3d1b5f4a01bb985dff4713589a46f43a8c820e18404fd6b60fb5&scene=58&subscene=0": "CNVD漏洞周报2024年第36期", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488858&idx=2&sn=a158b142f68c979b4d73dcb63a9f1cda": "【漏洞预警】GitLab CE和EE 权限管理不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488858&idx=3&sn=38f32c755e6456532e48944e63b36f05": "【漏洞预警】Adobe ColdFusion未授权反序列化漏洞可导致代码执行", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247515333&idx=1&sn=120ba17b146038df61811e208c7dd6bb": "记某src通过越权拿下高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247542076&idx=4&sn=5d192220d90813cbeb79c594b648750d": "聚焦AI与网络安全漏洞治理 推动国家漏洞库产业协同创新", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512612&idx=2&sn=ae566de4b75dbca3e319e0346eb6a590": "硬件密钥集体破防，英飞凌芯片暗藏14年高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485435&idx=1&sn=19f79ffed6a900a401edf811b06f4e2f": "「漏洞复现」智联云采 SRM2.0 autologin 身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502078&idx=1&sn=01e8c66b9473341191586457712ebbd3&chksm=fe79ec66c90e6570ba8594d8c1f113277d90c73c4abe4aae21303da31ed17ed6c9093931f7dd&scene=58&subscene=0": "GitLab身份认证绕过漏洞(CVE-2024-6678)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520782&idx=1&sn=e5eaa66675d142213f7058469e5446bb&chksm=ea94a364dde32a72ce25776dba29053b255994b2a432f179d45b77761bdd6400a0d76195be17&scene=58&subscene=0": "Adobe 修复Acrobat Reader 0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650988435&idx=1&sn=6f045ca2902b977ac512c9c90104e2a1&chksm=80799da1b70e14b7f248baea53b0cb6c498c01a08274785298680319d6141c728d8d3a1c5cf1&scene=58&subscene=0": "原创 Paper | Apache OFBiz SSRF to RCE(CVE-2024-45507) 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512612&idx=2&sn=ae566de4b75dbca3e319e0346eb6a590&chksm=ebfaf504dc8d7c12866f47210b7c808f483616741cd5de1799ec78594f70bb54d60d66049da7&scene=58&subscene=0": "硬件密钥集体破防，英飞凌芯片暗藏14年高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247515433&idx=1&sn=7cb2d6b820800ffcb6aba2dc6cfe081f": "【SRC】比较有意思的几个漏洞挖掘记录", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492749&idx=1&sn=da357c7c2b994374c55b6dc7b70b670a": "某群管理系统存在默认凭据漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247488087&idx=3&sn=86731e9bc4cbd890cfe511414d20e180": "红队终极指南：“A-poc∕RedTeam-Tools”", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247521300&idx=1&sn=84ae528eacd397beb5132491e9211fa7": "全文干货！Redis漏洞利用详解 （上）", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247630351&idx=4&sn=7c9a2680f3c37fd0b28b9ee0516e9a1e": "硬件密钥集体破防，英飞凌芯片暗藏14年高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247501798&idx=1&sn=a76d5474a92c90670c66f8e9b85316f2&chksm=cfc560b9f8b2e9af07005fbaf393e5be4c3544e75d5d50c38398f79105e487214d2c7c08c495&scene=58&subscene=0": "中秋元月特设百万奖金池！增设10%额外奖金激励和豪华礼品！以洞会友，360漏洞云邀您共赏明月下的安全之美！", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520799&idx=1&sn=2e34312c9e5c05291452bf69189cd8b5&chksm=ea94a375dde32a6355837cb4f23e5933d2192469425e3f2054204b18a8780163e090447f172b&scene=58&subscene=0": "GitLab 提醒注意严重的管道执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502111&idx=2&sn=a0e2e886edfb053f6e7a1694f1f8c228&chksm=fe79ed87c90e6491bf04dd2b03940c922066d6ba7c27b3d94172b185aaeb95b2b646abead2f7&scene=58&subscene=0": "Ivanti Endpoint Manager反序列化远程代码执行漏洞(CVE-2024-29847)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247508210&idx=1&sn=f4d51b36b045dc0575cac5343103829e&chksm=fa52754ccd25fc5a6e8a575662b4fe57916e8fc1a0c90a6cf2917cabd4af7fb14a88da0a4a22&scene=58&subscene=0": "山石荣获国家信息安全漏洞库CNNVD多项年度大奖", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484672&idx=1&sn=4c77e764e5765c0ad1569cae53a066c5&chksm=c12af881f65d71970b0da2104ef3a933f1c76da88821d891a50daf16dd7813052ed3d74a9e6f&scene=58&subscene=0": "【复现】 Zimbra 未授权远程命令执行漏洞(CVE-2024-45519)风险通告", "https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247505032&idx=2&sn=c75b3ad01df79dd65e9b15f78d79cd51": "第二届“天网杯”网络安全大赛，华为安全产品零漏洞完赛", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492757&idx=1&sn=dc9dd4d1d67d4fb2c56dc12b05f5195c": "某群管理系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTUwNTU5Nw==&mid=2247486492&idx=1&sn=98cf86db13198f7536c05f0ee025a34e": "【漏洞情报】惊！PC端某云盘存在Bug？", "https://mp.weixin.qq.com/s?__biz=MzU5OTg4MTIxMw==&mid=2247503353&idx=1&sn=0638683a745a06bcfa2780066b864099": "技术详解 | CertiK协助修复Solana大整数模幂运算中的DOS漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458573672&idx=2&sn=e7904e70a178847a903038130b5fdab2": "苹果Vision Pro被曝安全漏洞：眼球追踪技术或泄露密码", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650259822&idx=1&sn=3b0245be9578373bfbfcf824509c11dc": "【赏金15000美元】通过监控调试模式实现 RCE", "https://mp.weixin.qq.com/s?__biz=Mzg4MjY5MDE4NA==&mid=2247484226&idx=1&sn=4bd1a82ac2d7f30f8bdf0fbf9408d78c": "实时更新的漏洞库索引工具推荐", "https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247486880&idx=1&sn=e898bb43f0ebcd28df583ed34e08ef82": "向日葵RCEbypass", "https://mp.weixin.qq.com/s?__biz=Mzg4MzU3MTcwNg==&mid=2247485703&idx=1&sn=54fe4f888a552a21a9049472d6daff2a": "一次简单通用漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247486361&idx=1&sn=c3a760a9131d252ca4b230fbbc8e2a99": "万户协同办公平台ezoffice filesendcheck_gd SQL注入漏洞复现及POC", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520811&idx=1&sn=890fffef04e0244ca4a0fe359dfb3886&chksm=ea94a341dde32a57534c153b9526fd132574d3fa54a5c70c2bf6fe73dcf1c38e1c35c88ce3d1&scene=58&subscene=0": "CISA 和 Ivanti： Cloud Services Appliance 高危漏洞已遭利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520811&idx=2&sn=cdd399a1e596944337296b502f39a272&chksm=ea94a341dde32a57462d257dbcf7542f8174cff89c0d51445832a0fbc2c9c94617cb6672be9e&scene=58&subscene=0": "Apple Vision Pro漏洞暴露虚拟键盘输入", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664225572&idx=5&sn=909cc8ab173a1ba6cdcd7a5a2c7c083b&chksm=8b59d9ddbc2e50cb971db9698bc8d95f04ffe8dff64c932d435490adae32bcaff9a711a38fa9&scene=58&subscene=0": "CNNVD | 关于GitLab安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064389&idx=1&sn=7a205baee5ce2be6ab3b75ba6a3c86c8&chksm=f36e66c5c419efd3d7b7824ab4d3b6ce965b4f87f2b86d1e236ffb7f3e3469f8b5e4e8cceefe&scene=58&subscene=0": "【安全圈】苹果 Vision Pro 曝出严重漏洞，黑客可通过用户眼动输入窃取信息", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495890&idx=1&sn=b243c56b528e1421f5ff31bca30701b5": "赏金15000美元的 RCE", "https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653930809&idx=1&sn=2b2812ff7b44b09082681743d1a2f018": "硬件密钥集体破防，英飞凌芯片暗藏14年高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3Nzk1OTA1OQ==&mid=2247484711&idx=1&sn=a697ff02702f42dff3f352e70cdc6ed0": "Fastjson 1.2.24 RCE复现", "https://mp.weixin.qq.com/s?__biz=Mzg4Mzg4OTIyMA==&mid=2247485735&idx=1&sn=4b22a954aa056bd97255e56f870c8b5d": "漏洞？忽略！忽略！忽略！", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247543592&idx=1&sn=ac94fd8b219d4813431a8ed23ce63693": "漏洞挖掘 | 记一次针对blade站点的渗透测试", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247486762&idx=1&sn=f6e65d0f82a5926b428ee57450f7f081": "API接口文件包含+命令执行", "https://mp.weixin.qq.com/s?__biz=MzU2MDE2MjU1Mw==&mid=2247485702&idx=1&sn=3f9ff14b98a25f19e2f62cf6e6691201": "ThinkPHP5路由rce漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490621&idx=2&sn=338a788a251ffb769772ad5f1bcb4993": "漏洞预警 | 浪潮云财务系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490621&idx=3&sn=abbfaa6e264b587103b417a551ed5b2d": "漏洞预警 | 亿赛通电子文档安全管理系统反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495890&idx=1&sn=b243c56b528e1421f5ff31bca30701b5&chksm=e8a5fab1dfd273a72bd6d2b7f4dc8bb00deb611ecf8179ae1371f2bca1ccf07b175a701daf7b&scene=58&subscene=0": "赏金15000美元的 RCE", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492765&idx=1&sn=81092c3fdd5d05d5d63c64de16623c58": "某群管理系统全版本存在登录绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247543615&idx=1&sn=54bf466b40d894cbd76c3abaaab0f4b9": "小程序渗透 | 利用ce修改器挖掘内存修改漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247613012&idx=1&sn=48f79244af863de979f6f28ffc191ddc": "漏洞挖掘 | 发现隐藏子域的虚拟主机", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485471&idx=1&sn=a7a8304b7f63c4013d9b9cd0b52b6556": "「漏洞复现」用友U8 Cloud AddTaskDataRightAction SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651302005&idx=3&sn=942ea6bf2349d306ead962b60cf819b1": "2024年推出的11个顶级漏洞悬赏项目", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247490953&idx=1&sn=2d774577bc76cb86e26ca2ef54c04852": "代码审计 | phpcmsV9.6超详细RCE代审流程", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490633&idx=3&sn=d5857d3cf223b7c6f6226d1e64d588e2": "漏洞预警 | 泛微E-Cology SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485035&idx=1&sn=591d00a4c81f2feee376ea8b445237c2": "漏洞推送|Array Networks APV应用交付系统命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247505935&idx=1&sn=69ea4216b3d472df4bc011e01a477e21": "寻找IDOR漏洞：Key Endpoints and Resources", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247613013&idx=1&sn=5a900033e5a651e882949308eac88392": "黑盒测试 | 挖掘.NET程序中的反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247543616&idx=1&sn=09b4d91f88fd6da791a09b13d8217cba": "漏洞挖掘 | 记某大学信息服务平台密码重置缺陷", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485480&idx=1&sn=98ac1c915968172bae2f5e91462f8e8e": "「漏洞复现」唯徳知识产权管理系统 DownloadFileWordTemplate 文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NzUzNzk1Mw==&mid=2247497074&idx=1&sn=11d005d6c531b2412d88443edf8cf9dd": "使用Joern进行漏洞挖掘(Joern支持Android漏洞挖掘)", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650259834&idx=1&sn=4d9522a2c80eda88a87262e7cc067b9a": "Gmail 中的 HTML 表单注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247515474&idx=1&sn=ceb0a66335902d4aa2974021d04e15c0": "手把手edusrc漏洞挖掘和github信息收集", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247521351&idx=1&sn=cb4e12582f843e6211bac2dd8fa7e5ad": "全文干货！Redis漏洞利用详解 （下）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458573979&idx=3&sn=3d9c0d170d71f48b1b6c87b0b10c0e5e": "今日更新第十章录播！0day windows", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247506979&idx=1&sn=cf1a5f323f458590215473dd71ad4555&chksm=cfcabf37f8bd36214d8a6355a6b51781fdc382de7fbbf0ae147b1ca4e34a117a6dcd14af296f&scene=58&subscene=0": "漏洞通告 | Ivanti Cloud Service Appliance 命令注入漏洞（CVE-2024-8190）", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503099&idx=1&sn=1832f11e6c8c65f016aac1a47d2d93ce&chksm=f2585f88c52fd69e177373358cd9638181df5d2f1673a1b6320c7830bf4f96d0d04fb87a963f&scene=58&subscene=0": "雷神众测漏洞周报2024.09.09-2024.09.17", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520848&idx=2&sn=d95814f9037c7711dfcb09cd0e590f0c&chksm=ea94a33adde32a2cc2d70ae1c9f784e58a1068b3439966be8fc0130d96ff48e1aae33021a835&scene=58&subscene=0": "博通修复 VMware vCenter Server 中的严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520848&idx=4&sn=5dd6c8f2b2d48123ef978d8ef1b071ff&chksm=ea94a33adde32a2cfb349b7e9cc119746f3287400e9fd952e369f64de22f4b7a706240b85d71&scene=58&subscene=0": "Google Cloud 依赖混淆漏洞影响数百万台服务器", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502134&idx=1&sn=188a5e6a0729aeb0acdfa68c6f634eaf&chksm=fe79edaec90e64b8a70ffe83db1e01417bce3429dc8304556cd7dece2f28f643fb06cfcd836c&scene=58&subscene=0": "VMware vCenter Server 堆溢出漏洞(CVE-2024-38812)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064505&idx=2&sn=4f43301ff2f7aea69701f9caee393e63&chksm=f36e66b9c419efaf8abe64f74ac1deebb763a2ad3298be33ecad40d79f7d7eb8c50ee69e6649&scene=58&subscene=0": "【安全圈】VMware vCenter Server 漏洞让攻击者能够执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247578012&idx=1&sn=8f71511509699663e10b684f507e850d&chksm=e91461a6de63e8b0588b8f65c1d668014ee13a7b52f21c346c5d24a3829662398a9289002b91&scene=58&subscene=0": "黑客自 8 月以来频繁利用公开漏洞攻击 WhatsUp Gold", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247508415&idx=1&sn=dcf10b1f8619a087f4f5cc65105f49cd&chksm=fa527401cd25fd17f06017d2d19cddd790b2921d65a84f074fa89bb4e1411bd980b5854088f2&scene=58&subscene=0": "FortiGate SSLVPN 堆溢出漏洞分析与利用", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495294&idx=1&sn=c41d53679f352766144c8cb1da62a9ce&chksm=fd74deb7ca0357a1f50cb03e184552d8ae2c866eb4285aa8474bb704a4a0e379c0e303858925&scene=58&subscene=0": "CNVD漏洞周报2024年第37期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495294&idx=2&sn=9aebbbfe94c24d3a4691f81461c6196c&chksm=fd74deb7ca0357a1edd2a96e0702d41fd6263b15b6f0bebbaf4a23d390dd1c0ec3c5ca413692&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240909-20240915)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495928&idx=1&sn=1afca4fc9b4535d61ae95af4c09b168f": "一次十分详细的漏洞挖掘记录,新思路+多个高危", "https://mp.weixin.qq.com/s?__biz=MzkyODcwOTA4NA==&mid=2247485533&idx=1&sn=b70b23874678655aa24a3f25024b593d": "【海外SRC赏金挖掘】供应链攻击，通过依赖投毒实现RCE（Dependency Confusion 漏洞）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064524&idx=3&sn=ac02f46258dacbf415152fe2bad17d2e": "【安全圈】建筑行业会计软件Foundation遭受攻击，威胁行为者利用MSSQL漏洞进行入侵", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485498&idx=1&sn=eef8d9f5be09d05d40f17078b097d54b": "「漏洞复现」华望云会议管理平台 checkDoubleUserNameForAdd SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520856&idx=2&sn=e42af408ee177430c69f52668c7cc6eb": "CISA、FBI督促消除XSS漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523639&idx=2&sn=f72c98fada6e952b880ce69d69e1f446": "CNVD漏洞周报2024年第37期", "https://mp.weixin.qq.com/s?__biz=MzAwNDUzNDExMQ==&mid=2247485066&idx=1&sn=558a7a2dfc736e15b0826905c799ef0f": "Patchwork(白象)APT组织PGoshell后门攻击场景复现", "https://mp.weixin.qq.com/s?__biz=MzI4NTE4NDAyNA==&mid=2650396972&idx=1&sn=cf200ebcf2ba4ee3988760f23507cc03": "【安全科普】OSS存储桶漏洞总结", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512642&idx=2&sn=028197550edfd20b6316e7d8e8b1f2e9&chksm=ebfaf562dc8d7c74377e4de3061c541587ecccfae85d1fcc3f4de157f976354eb2f57e9ccf47&scene=58&subscene=0": "谷歌云被曝重大漏洞：或影响数百万台服务器", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502168&idx=1&sn=218d2b0e656b39a5e0ba5453cb151804&chksm=fe79edc0c90e64d60068b582d417b2f2df79b628fed0b9f6868a071dc3c2b6fd6480d3d17ed5&scene=58&subscene=0": "GitLab SAML 认证绕过漏洞(QVD-2024-40180)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502168&idx=2&sn=5331760540fabf360fd05ab9f060c51d&chksm=fe79edc0c90e64d64b3af5b90275bf2792a703588343e49cddfcce7b2981be18577010f48589&scene=58&subscene=0": "【在野利用】Ivanti Cloud Service Appliance 命令注入漏洞(CVE-2024-8190)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520856&idx=1&sn=99796b9ba1361fcd9611a05729e2219d&chksm=ea94a332dde32a2463e0bfdcf157730ba4f594970fb1f1c5d6338bd7b9fb1c0f066de30cf974&scene=58&subscene=0": "GitLab修复严重的 SAML 认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520856&idx=2&sn=e42af408ee177430c69f52668c7cc6eb&chksm=ea94a332dde32a247ff4d6cdf023ddf6f8317162ed60c534809d8bcaff0fc7ce94e472f08532&scene=58&subscene=0": "CISA、FBI督促消除XSS漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499350&idx=1&sn=4cc74803538598b1beb87141e065be88&chksm=973acd34a04d44227871d98d556dcc37e1a86f744212f05ae44b6dd5b3d11d21aa3d94d48471&scene=58&subscene=0": "CNVD漏洞周报2024年第37期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499350&idx=2&sn=4102c823ee70a61fbb84a0eb8d98af47&chksm=973acd34a04d4422e8b978aeeb23b403acacbd9e398eb75b004a3ee1d4d2683be1fd5a912e6f&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240909-20240915)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064524&idx=3&sn=ac02f46258dacbf415152fe2bad17d2e&chksm=f36e674cc419ee5aebd784b2bec5e460e41f1df53702204b3d3abd741b7d28e67b64223ab4db&scene=58&subscene=0": "【安全圈】建筑行业会计软件Foundation遭受攻击，威胁行为者利用MSSQL漏洞进行入侵", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523639&idx=1&sn=e1a9a1309d80e72dce3a14ecad7c3119&chksm=ce461627f9319f31cb245eca32db530f0283eaed784dd2b1008f477a71a0524ae660e6fc579c&scene=58&subscene=0": "【漏洞通告】VMware vCenter Server缓冲区溢出漏洞(CVE-2024-38812)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523639&idx=2&sn=f72c98fada6e952b880ce69d69e1f446&chksm=ce461627f9319f315af0de69576d08d05eda5ae6d09554f945683b40a5ef946a54bf6dee90af&scene=58&subscene=0": "CNVD漏洞周报2024年第37期", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495934&idx=1&sn=5b61a877e3f1aef771b82f1d489db53d": "命令注入漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247490728&idx=2&sn=ca8ae5825b37f344fb72b658d9b38764": "WPS的漏洞原理解析【黑客渗透测试零基础入门必知必会】", "https://mp.weixin.qq.com/s?__biz=MzkzOTI2NjUyNA==&mid=2247485008&idx=1&sn=00337e072eff92e67f03b3d57e06fc03": "macOS 日历 0-Click RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMjAyODU1NA==&mid=2247491632&idx=1&sn=6edbe0baa82b577229a8e00a2e680e9d": "易行网安学习平台：3000+ POC文章，等你来“取经”", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499994&idx=2&sn=d531771e2f43278c12836011c3406696": "【漏洞通告】Ivanti Cloud Service Appliance 命令注入漏洞（CVE-2024-8190）", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485507&idx=1&sn=581907af866932abfcd794f98e71e17e": "「漏洞复现」万能小程序运营管理系统 _requestPost 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651456579&idx=1&sn=152d44b230945dc282843378b205c121": "信息安全漏洞周报（2024年第38期 ）", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247489765&idx=3&sn=e446cb2faef7325f096cd7ad4e727070": "什么是已知被利用漏洞 (KEV) 目录", "https://mp.weixin.qq.com/s?__biz=Mzg4MzU3MTcwNg==&mid=2247485719&idx=1&sn=3824e63b8c04f2ff371ffb48e88d1601": "一次简单通用未授权漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512650&idx=2&sn=0eabde31993b06b2caf7204aa68c6caf&chksm=ebfaf56adc8d7c7c7e69336a2f4b969c13cee905fada9ca951f51e1348c1cc1ab85bfe3fcba4&scene=58&subscene=0": "“PKfail”漏洞曝光：全球近千种设备安全启动机制失效", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502180&idx=1&sn=162866a32a0466de02a7e97212e45005&chksm=fe79edfcc90e64eabf7c347da74ba93f7855ace35b296f6ca338f9ed0ce3b3a1a9701c15a1e9&scene=58&subscene=0": "【已复现】Ivanti Endpoint Manager反序列化漏洞(CVE-2024-29847)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520876&idx=1&sn=4efce31d5b8659ed3e426f95d90c4384&chksm=ea94a306dde32a10266fe5b357f6ce4e9f8404a2fbef256f7a4ef79b91a3158a225b496f9f09&scene=58&subscene=0": "微软SQL服务器漏洞被用于攻击承包商软件", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247506983&idx=1&sn=c086ab2af199f50371565cb8c7b7b6b5&chksm=cfcabf33f8bd3625ce4ad4262146c35456c6f35f7397c88af4eb714f90ee008dc79fff7c3d4c&scene=58&subscene=0": "漏洞通告 | Ivanti Endpoint Manager 远程代码执行漏洞（CVE-2024-29847）", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492637&idx=1&sn=902b7d00667aae6392217033d7241912&chksm=96f7fb70a180726656d4f57bcfecd7b45dbc6cf43dc805d5c5052e355dd8eada1b48d774f487&scene=58&subscene=0": "【已复现】Ivanti Endpoint Manager 反序列化致远程代码执行漏洞（CVE-2024-29847）", "https://mp.weixin.qq.com/s?__biz=MzA3NzE2ODk1Mg==&mid=2647791525&idx=1&sn=53fda8c621f38d6a60214e808f654212&chksm=87709ff2b00716e457a360871bd408a5902b703ce4f85c89b54d26a810c9e10a7100d9005bfd&scene=58&subscene=0": "下一代SAST |灵脉SAST3.5智能AI漏洞验证技术智慧再升级！", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485049&idx=1&sn=6de51cd0b0f7da7f4725bf6f4806006b": "漏洞推送|【0day】深大智能科技有限公司管控平台getAreaInfo存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064581&idx=1&sn=a8d25f47e9142354cddaccee15a9e264": "【安全圈】速更新！GitLab发布更新修复CVSS满分漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523651&idx=1&sn=eadc5c5144a966ccbb3daf5470278865": "【漏洞通告】Ivanti Endpoint Manager 反序列化漏洞(CVE-2024-29847)", "https://mp.weixin.qq.com/s?__biz=MzI4NTYwMzc5OQ==&mid=2247496908&idx=1&sn=7dfe5c5b700278fba8e76368a37520d6": "2300$：分享4个高危业务逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485516&idx=1&sn=ee9e2fcfcb9eadb2840c574b194480c7": "「漏洞复现」灵当CRM marketing∕index.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485621&idx=1&sn=1b13c64244a3add656f9f9c4d082f471": "某最新微信广告任务平台存在任意文件上传漏洞(RCE)", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492274&idx=1&sn=301cfb2a6ccda3bad5c3a7fb805106bb": "一款用于检测jsonp及cors漏洞的burp插件", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247489858&idx=5&sn=27c6a1a37bf4c0173ad9b9f6dd377a02": "Broadcom 修补紧急 VMware vCenter RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649792463&idx=3&sn=03ab8c9e798942a59829883192aaa3fe": "CISA 警告 Apache HugeGraph-Server 漏洞遭积极利用", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650600682&idx=4&sn=5579dc3c28547367010fca0545123bec": "ScopeSentry-资产测绘、信息收集、漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247529598&idx=2&sn=26aadaff6022074bcfefaa80cd52e22b": "警惕风险突出的100个高危漏洞（下）", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247516296&idx=1&sn=6a7f606a07a056c53e6534c8cf6ce3e2": "记某src通过越权拿下高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064581&idx=1&sn=a8d25f47e9142354cddaccee15a9e264&chksm=f36e6705c419ee130f4d3f0e49710c74c10402ee7aa922bcf4c208d71d1956c64caa923497ee&scene=58&subscene=0": "【安全圈】速更新！GitLab发布更新修复CVSS满分漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523651&idx=1&sn=eadc5c5144a966ccbb3daf5470278865&chksm=ce461653f9319f45836e08626ff56f08b0539cc52b0ae1793a96c6a7877e7f4289609bd9e743&scene=58&subscene=0": "【漏洞通告】Ivanti Endpoint Manager 反序列化漏洞(CVE-2024-29847)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247515521&idx=1&sn=799603ba4aee9963ef177ab5e5022953": "建了个SRC专项漏洞知识库", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247630684&idx=3&sn=1a2ce93b4bef5e52ca10194680f36bab": "“PKfail”漏洞曝光：全球近千种设备安全启动机制失效", "https://mp.weixin.qq.com/s?__biz=Mzg4Njg3MDk5Ng==&mid=2247486723&idx=1&sn=acb600df69a2783386c771505c276b14": "nuclei+ai 解放双手，自动刷洞，同时poc共享！！", "https://mp.weixin.qq.com/s?__biz=MzkyODcwOTA4NA==&mid=2247485556&idx=1&sn=124abd373abcf05cfce32306e6ee3cbe": "【海外SRC赏金挖掘】供应链攻击，通过依赖投毒实现RCE（二） -- PyPI", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247494898&idx=1&sn=023b74a598e5750ffce665ac515eea64": "SRC挖掘实战之某勒索病毒解密平台命令执行", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495950&idx=1&sn=c424f3a1985e8525da2274979195b9eb": "寻找IDOR漏洞：Key Endpoints and Resources", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488909&idx=1&sn=f75bdb706102963e90f97ff2d965bc38": "【漏洞预警】Ivanti CloudServiceAppliance 未授权 路径遍历漏洞CVE-2024-8963", "https://mp.weixin.qq.com/s?__biz=Mzk0OTUwNTU5Nw==&mid=2247486506&idx=1&sn=da29f2232dde980f8760042ae32f20af": "【相关分享】记一次某985高校的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247505943&idx=1&sn=7c0f15870782a61558fbb2add2e482cd": "Android活动（Activities）Exploiting 技术", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485057&idx=1&sn=10dbde78f656bc4714701e2063a354cd": "漏洞推送|数字通云平台智慧政务存在登录绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651132290&idx=1&sn=c647762ca51047695761be68b988000b&chksm=bd15a1518a622847ef28400f58a458e4df0033d1228b7fbabad25ffeec88e1ad3c6fc5fdc1f5&scene=58&subscene=0": "警惕风险突出的100个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786922&idx=1&sn=65c358c89c58d491a2f92c2b3631ca7a&chksm=8893ba45bfe4335380d4a58bf6c3a5e54f4c0d13f8a4d2503f2a996b11bbb998c2858f824979&scene=58&subscene=0": "ZeroLogon 到 NoPac 漏洞：Black Basta的漏洞利用武器库", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502185&idx=1&sn=4c979dfd0e63af2bb96c91360d9e23d9&chksm=fe79edf1c90e64e7751ef785fcb7e26cf09d317648d2b36002ac1b42ec41a60b323d60527343&scene=58&subscene=0": "安全热点周报：时隔一周，Ivanti 又公开一云服务设备漏洞正面临在野利用", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507011&idx=1&sn=e966bc67a09c85f8e234fadcb822e12b&chksm=cfcabf57f8bd36418bf9a324af25302777a1d6e6ec1f3dfa7c0a2f2d2d55fe4c40778ed553e8&scene=58&subscene=0": "漏洞通告 | Ivanti Cloud Service Appliance 路径穿越漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520886&idx=1&sn=d50fe47ebc8b4ad640aab8d8ead453e4&chksm=ea94a31cdde32a0a3cb660901fbb4949d1bd11b55a7718fcf71f3c28cf274e27bc3e091b0c27&scene=58&subscene=0": "CISA 提醒注意已遭利用的 Apache HugeGraph-Server 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520886&idx=2&sn=126c04a9c54e26df9c23fa6d3ce0a917&chksm=ea94a31cdde32a0a9d0038d0c44c2cdb76dd526d2aef602402cdea8f1901b21dc339b653ba1b&scene=58&subscene=0": "速修复！FreeBSD 中存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503106&idx=1&sn=23ddf55f8f40bb2367fcbaaf425edf8c&chksm=f2585ff1c52fd6e7e85f797c28988112b945c7e9158ab46c6f8ec8b5927216d0b80948cb5d27&scene=58&subscene=0": "雷神众测漏洞周报2024.09.18-2024.09.22", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495308&idx=1&sn=69a2bef801bb9d86845d338bed9efc0b&chksm=fd74de45ca0357535b3277a535bf7d21e672a4972b88f50412fd9b5574952cd2c16498210789&scene=58&subscene=0": "CNVD漏洞周报2024年第38期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495308&idx=2&sn=fe020ae08c8c54e40ed0683eac5665be&chksm=fd74de45ca03575353101e3329ca94fe73c5617c10acd2a652e53963cf1acc5ec876e6004c85&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240916-20240922)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488914&idx=1&sn=88ee3915a1e646fe7d315363f89d9525": "【漏洞预警】Apache Tomcat资源分配控制不当漏洞可致拒绝服务CVE-2024-38286", "https://mp.weixin.qq.com/s?__biz=MzkwODUxMDUwMg==&mid=2247483800&idx=1&sn=e6374d549b72047491deabdb535f1c70": "Thinkphp5.1.0-Thinkphp5.1. 文件包含漏洞（CNVD-2024-29981）", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489804&idx=1&sn=208a870745cf2cc96f3f4a90779302d0": "警惕风险突出的100个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664226041&idx=3&sn=87dad19f51d6050fe425f9c4c3ef63e9": "警惕 | 风险突出的100个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664226041&idx=3&sn=87dad19f51d6050fe425f9c4c3ef63e9&chksm=8b59de00bc2e57166ef9392900d9dfd2d9ad5b31ae7c0b3213fa0283d836cad5e1612773e17c&scene=58&subscene=0": "警惕 | 风险突出的100个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499360&idx=1&sn=7cc2d4a08ebffe00391492e76d7d3abd&chksm=973acd02a04d4414462822489e2701a535ce2456914037bb717f32ee1b6eff40f9b9862a8c8a&scene=58&subscene=0": "CNVD漏洞周报2024年第38期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499360&idx=2&sn=dbb3747c61799c5448c0974d7f616e97&chksm=973acd02a04d4414b15d84ec513fe6fd9f09a99fc65835143af33e1f44cbb36d3802c8b4eda1&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240916-20240922)", "https://mp.weixin.qq.com/s?__biz=MzU4MjYxNTYwNA==&mid=2247487486&idx=1&sn=50026139607238479c299cba6efbf37a": "GraphQL API 漏洞挖掘基础学习", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488928&idx=1&sn=9b041c33441ec8dad16d2e9aa1d5f8d8": "【漏洞预警】PgAdmin身份验证缺陷漏洞CVE-2024-9014", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488928&idx=2&sn=414f128e94f5fb795fc1b07d9edeb18c": "【漏洞预警】Apache HertzBeat SnakeYaml 反序列化漏洞可致远程代码执行CVE-2024-42323", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488928&idx=3&sn=aaefa8b1dc4835c9c7b6d1856cad91e4": "【漏洞预警】Google Chrome Dawn UAF漏洞CVE-2024-8904", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485558&idx=1&sn=3c314e2081007f57f119b3007f0b9976": "「漏洞复现」某徳知识产权管理系统 UploadFileWordTemplate 文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484244&idx=1&sn=69857ae11e16ae9b9f7951034746293b": "第六期 · 安钥®「漏洞处置标准作业程序（SOP）」征文启示", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247618627&idx=1&sn=ac13190f67261a80fcad3befe8ddcf53": "【实战攻防纪实】“NGSOC+N”联动出击，7分钟扼杀危急漏洞利用攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520913&idx=1&sn=ff28d982d0fbb9bf50ea1e84d3243134": "10个严重漏洞导致数千燃油储罐易受攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520913&idx=2&sn=2148647cf20c87cf57d601cf283f4805": "CISA：这个严重的 Ivanti vTM 漏洞已遭利用", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500015&idx=2&sn=fa3c164a593a346616882cf67bd8bdea": "【漏洞通告】pgAdmin信息泄露漏洞（CVE-2024-9014）", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500015&idx=3&sn=92c0fd669af8f3ac0706529c42eaf15e": "【漏洞通告】Apache HertzBeat SnakeYaml反序列化漏洞（CVE-2024-42323）", "https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649167011&idx=2&sn=113127a8f0ae39344a8a09d1559c1f82": "你的接口漏洞该补上了……", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247515974&idx=3&sn=6e2161a830081cda8b67c38236329724": "编写 iOS 内核漏洞利用的分步指南", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247515974&idx=4&sn=3ebabe689ca0e75be47034b569f34b2c": "CVE-2024-9014 (CVSS 9.9)：pgAdmin 的严重漏洞使用户数据面临风险", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786931&idx=1&sn=d811fc395cb65cd42f076751aa4df447&chksm=8893ba5cbfe4334add98d795a0fadf030fc6f74bee6394f49d954c1990f6b2e088822b67fdef&scene=58&subscene=0": "影响全球数百万用户：主流路由器默认设置检出30个可利用漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520913&idx=1&sn=ff28d982d0fbb9bf50ea1e84d3243134&chksm=ea94a3fbdde32aedc953dbffb875f58c341aed345f6bbb1e75e371fa144ca55cd4d11f52ba04&scene=58&subscene=0": "10个严重漏洞导致数千燃油储罐易受攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520913&idx=2&sn=2148647cf20c87cf57d601cf283f4805&chksm=ea94a3fbdde32aed7e1bc8dad03d352202f8a631fd67d368bec1d9d01ce90fda64458ba4cdb2&scene=58&subscene=0": "CISA：这个严重的 Ivanti vTM 漏洞已遭利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064660&idx=3&sn=76404297d360a8a29d29bd4e1754bf06&chksm=f36e67d4c419eec244711e4bb0c826cc9d4dcec6041c9fba8c7c58e55ac12b7addde0fdb3206&scene=58&subscene=0": "【安全圈】你的接口漏洞该补上了……", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649792547&idx=3&sn=823d400dff519ab40c4110032852ffb6": "TeamViewer for Windows 漏洞可让攻击者提升权限", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490778&idx=4&sn=1ce49903acde1db6b71e74a79373edbe": "工具 | Poc-Monitor", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650988745&idx=1&sn=7614cfdb45e03ac394179c55a5ecb303&chksm=8079a2fbb70e2bed49da87ac41567a61d9448264392ab96640bf673f06aa62f0b09c233cc28a&scene=58&subscene=0": "【知道创宇404实验室】警惕 Unix 系列 CUPS 多个安全漏洞最终可导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512712&idx=2&sn=1462102ea6899032e23a0e2c3f92f742&chksm=ebfaf5a8dc8d7cbe7bfbcd97e005992c93312c65e14e9522f033a1569d658fa6d41c80d84e6d&scene=58&subscene=0": "起亚汽车曝严重漏洞：仅凭车牌号就可远程控制汽车", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502207&idx=1&sn=cfc9b1847e536079d77a15b62c233f71&chksm=fe79ede7c90e64f152e40ebd2eb9ea5c25f60156788a4a3ba17b585916170400fcc6cb8739d3&scene=58&subscene=0": "cups-browsed 远程代码执行漏洞(CVE-2024-47176)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520951&idx=1&sn=05f9503385c7ca3c9f3e13e6c82e0f69&chksm=ea94a3dddde32acb03298861ce169a6c4c83c15dd24d70d9fe591e2d0aa7ddc17fffe73092b2&scene=58&subscene=0": "仅凭车牌就能远程控制起亚汽车，漏洞已修复", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507014&idx=1&sn=61509a9ff7f832712d14e53f16aa5587&chksm=cfcabf52f8bd36446dd0ad3a1f8b89c463fec0ad2bb65bbd333807707111b21ff33e1d6ceb4d&scene=58&subscene=0": "Unix系统打印服务爆RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486358&idx=1&sn=aaa326ccbda26617b134607032873818&chksm=ec6fec96db186580a977e00197d6d466c3106efd5efd42c98d42b8e177b4c6afdd0fa1f9fe5c&scene=58&subscene=0": "Unix CUPS 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458576190&idx=2&sn=a3ed8ca9a5fdd06e093e2a6fc36dfb70&chksm=b18dd5b486fa5ca2fef1a21738c63db1056fdc46ae8c15de0dea98a184932ca6db29d2450fea&scene=58&subscene=0": "起亚汽车曝严重漏洞，仅凭车牌便可远程控制起亚汽车", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064708&idx=2&sn=bf69c637c7d271c8d448931606eaae24&chksm=f36e6784c419ee924165c15dde3c2a7866369a8243bcdc17416bd9e83f80b425804d7f0d3c77&scene=58&subscene=0": "【安全圈】Linux圈曝出高危漏洞：远程代码执行风险升级", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650182336&idx=1&sn=e6cc1cbfee8b7289ecfe56d1b9ee179f&chksm=f448697cc33fe06afdf4135e96754b4e3309faa336f83f0a173cf1371a5ad604e58c775d3618&scene=58&subscene=0": "【更新】Unix打印机组件RCE漏洞已复现", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523672&idx=1&sn=6e1a31099f47934302aa92d40af90630&chksm=ce461648f9319f5eb4e4b221faf298e3e6beab2dc56c5736bd5e0a3ca5d305d171461718a05d&scene=58&subscene=0": "干货分享 | 2024年漏洞利用五大关键趋势", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247578221&idx=2&sn=69bbe929a17138a57a3de2a5cf92b578&chksm=e9146257de63eb4184599261d7c268a8569d8cfa24bdfd47ef37f96857e5238ec7531f68be85&scene=58&subscene=0": "GitLab 公布存在严重的管道执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495975&idx=1&sn=db6b0aefc65adf02759bda48c194704a": "api漏洞系列-401、404和302", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485585&idx=1&sn=c711481e190027598179924e34fcfb23": "「漏洞复现」九块九付费进群系统 wxselect SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247490346&idx=2&sn=e677ac0fbbe56316f33dcfe83c2faa03": "【Exp】绕过 EDR 防病毒软件以获取 Shell 访问权限", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650601088&idx=1&sn=0c99dc169f2ebe2626e133081e85d7cb": "上交所系统被股民买崩了？异常卡顿、交易延迟……现已陆续恢复;|起亚经销商网站曝出严重漏洞！黑客可在30秒内远程操控数百万辆汽车;", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247516775&idx=2&sn=d362c5f08126a7cf97aaf861acbd4384": "Cups 浏览的远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651303102&idx=3&sn=fa91293a9b750eac95bd18ebebf9fa5e": "起亚经销商网站曝出严重漏洞！黑客可在30秒内远程操控数百万辆汽车", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649792560&idx=2&sn=e47d6e8a61a4c6094ecd910ca9ceeab6": "所谓“核弹级” UNIX 打印系统 (CUPS) 0day漏洞可远程代码执行，但严重程度不及预期", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247530424&idx=2&sn=49f41b8f25ca827e202d8e7e3dd4eead": "1_【漏洞预警】GNU Linux打印服务多个安全漏洞导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490796&idx=1&sn=a6123b3c3e1f7ce6772dc9a7d568ea84": "漏洞预警 | Apache Tomcat拒绝服务漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490796&idx=2&sn=341b147c2dd9efefb58dcf81539ec8ec": "漏洞预警 | 唯徳知识产权管理系统任意文件读取和文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490796&idx=3&sn=090bd94b95dbff2dee3a5ac216a2b97e": "漏洞预警 | 商混ERP系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247488670&idx=1&sn=bb32ace8a9ef4d320c453c944cba4648": "警惕风险突出的100个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786965&idx=1&sn=9d5d6532dfa21eebce12d91147a0581d": "仅凭车牌号就可远程控制汽车！研究人员揭露汽车严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247497246&idx=2&sn=245d6a5e964aedf66d4cfbed2adcfd85": "FYSA –GNU-Linux系统中的严重RCE缺陷", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652111095&idx=2&sn=5a90bb275b25a3fa20da73c1c6ee5bc6": "高危漏洞：思科修补 IOS 软件中的高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064747&idx=2&sn=794aa8ee4f38945f6c525525ffa0fcf1&chksm=f36e67abc419eebd4c6abf786ab80ae28d1d0f727283f05add4aa4ea22224aea23ccf3f15642&scene=58&subscene=0": "【安全圈】ChatGPT 客户端曝“记忆”漏洞，黑客可令 AI “转发对话记录”", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064747&idx=4&sn=0ad8e79bc37793bdec4e27ceccd86183&chksm=f36e67abc419eebd1f227c0320e2024d7e1443e23e6e656cc7b8c73ea12037871637df6270d4&scene=58&subscene=0": "【安全圈】起亚经销商网站曝出严重漏洞！黑客可在30秒内远程操控数百万辆汽车", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495975&idx=1&sn=db6b0aefc65adf02759bda48c194704a&chksm=e8a5fb44dfd272524f459cf590fed356305b2ccf497f563ac78e659b880aab93f3c688530cbb&scene=58&subscene=0": "api漏洞系列-401、404和302", "https://mp.weixin.qq.com/s?__biz=Mzg4Njc0Mjc3NQ==&mid=2247486416&idx=1&sn=911c51ebc3ca6d1c300664448e32d652": "Linux 最新 CVE 9.9 分末日漏洞，还居然被偷家先泄露给黑产", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488944&idx=1&sn=6e56b8ac17480c984aa0ed08a2d28149": "【漏洞预警】ArubaOS 存在代码执行漏洞 (CVE-2024-42506)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495980&idx=1&sn=3836d926af7f7a250ab81bb9cc036cbb": "由403所发现的SSRF高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjQyMjcwMw==&mid=2247486505&idx=1&sn=49391bc87433d43d4fa2e05bac3d222d": "某电子文档管理漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247515753&idx=1&sn=7bd1a5c5390651ee8dd6458a53d98b44": "实战 | 记一次1000美金的TikTok盲打XSS的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg3NTk4MDQ1NA==&mid=2247484706&idx=1&sn=9dd2681a298415b991066ce04dba18f6": "泛微E-Mobile client∕cdnfile 任意文件读取漏洞【漏洞复现】", "https://mp.weixin.qq.com/s?__biz=Mzg3MDk0OTc1Nw==&mid=2247487762&idx=1&sn=ceddd0b685d873b2d207f46e97c26a42": "开源：快速代码审计辅助工具，助力0day挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491220&idx=1&sn=6440ccbe44aee8599facf701e45cd66c": "黑客利用Windows 漏洞-盲文“空格”进行零日攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064768&idx=4&sn=4a40b11619da28fb516d2360775dd505": "【安全圈】CUPS 漏洞能使攻击者对Linux电脑远程执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247490000&idx=1&sn=b6f9fa784439345553fe6af8361f1d00": "CVE-2024-21310 Windows Cloud Filter Driver 池溢出漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520960&idx=1&sn=919fb43b3860018ef3997b0e4159dee6&chksm=ea94a3aadde32abc1b1672f51c4f96ac9221aa568d099da519cf4bbabc756923465716a0ad6e&scene=58&subscene=0": "Progress：尽快修复 WhatsUp Gold 中的多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520960&idx=2&sn=245f37b0bdb6b7db64b1b5f20c65a6d8&chksm=ea94a3aadde32abc108ecad23597f05291d6371f5eedbb64d286868f3aaa0f5a360d87b3c36b&scene=58&subscene=0": "英伟达容器工具集中存在严重漏洞，攻击者可获得完全的主机权限", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651132386&idx=2&sn=474202fb0308842c0b28c6ad93793beb&chksm=bd15a1318a6228275f9c84a220df913ebc76eb922b7086a1fc26b9862b297c3f545cbe6bcb0d&scene=58&subscene=0": "Patchwork集团攻击手段升级，利用新型后门威胁我国网络安全；英伟达容器工具包严重安全漏洞威胁主机系统安全 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495980&idx=1&sn=3836d926af7f7a250ab81bb9cc036cbb&chksm=e8a5fb4fdfd2725902b8f15a8ac5c96133a29105f8175c5c833bf2b84988af37080230c81532&scene=58&subscene=0": "由403所发现的SSRF高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247487124&idx=1&sn=a82e0e0fca275c4cc59c978d3b1dedc9": "第105篇：方程式工具包图形界面版V0.42，更新永恒浪漫exp对Vista、Win7系统的利用", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488949&idx=1&sn=5eec8829e9d5dbdc1b3b13f4c1a84fbe": "【漏洞预警】Apache HertzBeat SnakeYaml反序列化漏洞（CVE-2024-42323）", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502218&idx=1&sn=1911aaea26cf117a13c8db46af66a5ba&chksm=fe79ed12c90e6404076d806b29b138e8264d9b0a1360a43d0046a74692889ba53aa00906a2f8&scene=58&subscene=0": "安全热点周报：严重的 Ivanti vTM 身份认证绕过漏洞现已被攻击利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520981&idx=2&sn=804d3895d9a0ec8b221e9c44449e8673&chksm=ea94a3bfdde32aa9f5bdbcd7d9bc4439b09e511516e9c3a98c685f059104336ba92c2d6638a7&scene=58&subscene=0": "PHP中存在多个漏洞，速修复", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503113&idx=1&sn=9e0af14b0914adb98dda4decfe908e5e&chksm=f2585ffac52fd6ec9c2078a493874ad925d0cd35a1aa5c7176ad513d6dcfcc4c3e39c345df9e&scene=58&subscene=0": "雷神众测漏洞周报2024.09.23-2024.09.29", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247578261&idx=3&sn=b15c40e0a69bb0c74e3dadee1da58822&chksm=e91462afde63ebb9ebd5fa6b9d9f9604ee77def49bba75bb7ae728aa1eb0b619a0ac5f3e1b18&scene=58&subscene=0": "安全动态回顾|国家计算机病毒应急处理中心监测发现13款违规移动应用 起亚经销商平台被发现存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247542901&idx=2&sn=2133da115eacf4e2a0d2e2c9206b1cff&chksm=f9ebf6d8ce9c7fce557fe7aca4c1671c15110094e6d07863cda92cecefef7aac440653b8ccba&scene=58&subscene=0": "Linux爆出9.9分高危安全漏洞 暂无漏洞补丁且已存在十多年", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495340&idx=1&sn=3d093fe9f3dfeb695eb080fd4b940171&chksm=fd74de65ca0357735eab0ab2cf130bb9856280e03a8e0cb40a891489ac179a1c1bd71a1ce5c0&scene=58&subscene=0": "CNVD漏洞周报2024年第39期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495340&idx=2&sn=566b5c7a05d1154964e8b138ed472b94&chksm=fd74de65ca0357735a4e9ed1af74e892e8217e688e8338bf4ce7c2dffed774f433507a9f72af&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240923-20240929)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064805&idx=3&sn=41d291b0ddc00a4ac2d49d81a437a9ac": "【安全圈】起亚修复高危漏洞：影响数百万车辆，攻击者几秒内可定位、开车门、启动引擎", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247517271&idx=1&sn=f0645f7ae4a1a0b6e76d4456cde051ba": "通过代理实现代码执行——DLL 劫持的另一种方式", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485622&idx=1&sn=d3236f8be8aeac1dca9cd4585ebd5f5d": "「冷漠安全」九月份0day∕1day∕nday漏洞汇总", "https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649166535&idx=2&sn=2b17b73c26da870ac1f97bf62637a908": "美国各地的法院和政府使用的系统漏洞百出", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247543968&idx=1&sn=dfec28a16768863af56a710fdb6ce477": "漏洞挖掘 | 招聘平台验证码爆破+短信轰炸", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064829&idx=1&sn=43b9a1718f1914415bedb5011a00c419": "【安全圈】ChatGPT 曝严重漏洞，聊天记录黑客随意看，网友：本地运行也没用", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485623&idx=1&sn=553cbfb3000b00b5e080ec11c460e49a": "「漏洞复现」百易云资产管理运营系统 ticket.edit.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651303863&idx=1&sn=1aab462ce475163468d2c71df97ba194": "CUPS 漏洞能使攻击者对Linux电脑远程执行任意代码", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485704&idx=1&sn=0359d7e4517b159b06fc603c6e170de0": "某微商代理商补货商城系统RCE漏洞审计", "https://mp.weixin.qq.com/s?__biz=MzkyODcwOTA4NA==&mid=2247485884&idx=1&sn=85a5f93e52e3636328292437b47a78a4": "【海外SRC赏金挖掘】Microsoft微软高危漏洞 403ByPass (二)-- 协议降级实现403绕过", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDExMg==&mid=2247484538&idx=1&sn=a62effbf20173d741cef019ad352ca83": "【漏洞复现】FastAdmin 任意文件读取漏洞（CVE-2024-7928）", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247613395&idx=1&sn=cebfde08750ae954e7947af136687434": "漏洞挖掘 | 强制 SSO 会话固定", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247490557&idx=3&sn=1670eb215c0480c52fc8e00d530fba8f": "安卓0day风险预警", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650601500&idx=1&sn=77c2a70c9eadad53c566d263822307de": "抓获4人！五马公安打掉一侵犯公民个人信息犯罪团伙；|英伟达高危漏洞威胁全球数百万AI应用", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650601500&idx=4&sn=a3f80a96b3afcfebc350549b3663a015": "一款集成了H3C,致远，泛微，万户，帆软，海康威视，金蝶云星空，畅捷通，Struts等多个RCE漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486156&idx=1&sn=870a429389f89f3f1418b35f47001465": "安服水洞系列 | Tomcat堆栈跟踪启用漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247487663&idx=1&sn=eaaf918e4d876f277aafdd19396dbe8f": "插件化指纹 POC 扫描插件", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495999&idx=1&sn=1b4d0f45c6f63df8fdd433266911827e&chksm=e8a5fb5cdfd2724a334a4fdb7fc1f5377af1e828cb80efe40819d30819cf51a129e0f2ffb1ad&scene=58&subscene=0": "Src漏洞挖掘-一个严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDExMg==&mid=2247484544&idx=1&sn=c24c78f413a2f5661a6f3accbf369575": "【漏洞复现】pgAdmin4 敏感信息泄露漏洞（CVE-2024-9014）", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485719&idx=1&sn=3d1debe6f24dbb672949a68126a62453": "某返佣理财商城系统存在前台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496005&idx=1&sn=967eeaa012e8650468701d28c0e9f62a&chksm=e8a5fb26dfd27230380b3bfbe7c3ae3c67b2569cf139bd32290d543bfcc6cedb9bfeeb334e6b&scene=58&subscene=0": "通过报错实现的一次五千漏洞赏金记录", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064930&idx=2&sn=9e0b6e9777472bb86645d8c262c2d91b": "【安全圈】用友U8CRM存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064930&idx=4&sn=50aa62340aafdd3857cb784843b9b10c": "【安全圈】Zimbra高危漏洞已被大规模利用：无需身份验证即可控制服务器", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485641&idx=1&sn=80739363ddb3f675ca46a010ee1edebc": "「漏洞复现」EDU 某智慧平台 ExpDownloadService.aspx 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247517490&idx=1&sn=49ae75eb5899ede375569566b1c9fe10": "使用 Joern 查找用于利用 Java 中 Unsafe Reflection 漏洞的类", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485732&idx=1&sn=fe631724694459fc2a6c69023ceb98cf": "微信公众号小说漫画系统存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyODcwOTA4NA==&mid=2247485910&idx=1&sn=e2a5538f51f3b642a15fe87af794a031": "【海外SRC赏金挖掘】诺基亚漏洞！！ 403ByPass (三) -- 修改请求方式实现403绕过", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247515975&idx=1&sn=fc34ebb2e5bf60646927fd254eb9d533": "SRC通过越权拿下高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247490647&idx=4&sn=ca25e8cdf784d1e303508b25d46192a2": "Jenkins 中发布安全公告，修复多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247490647&idx=5&sn=52e7e60a1ec5853f036f3f99896cf8e0": "Chrome修复任意代码执行漏洞，字节跳动无恒实验室上大分", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651303865&idx=2&sn=726d3bbf72947a2f7f09b4f79154a8a4": "如何使用大型语言模型（LLMs）自动检测BOLA漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649792613&idx=2&sn=64f4d18d7cd2fdd782092c138ac35cd1": "研究人员披露微软 Office 漏洞（CVE-2024-38200） 技术细节，发布PoC代码", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649792613&idx=3&sn=f5f0dce3519b7d232c2c256b09de7e77": "14个新漏洞使超过70万台台湾产 DrayTek 路由器面临黑客攻击", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247495769&idx=1&sn=b9db5a3d353f4c6b25399db7552e42fd": ".NET 回顾 | 一款反序列化漏洞的白名单工具", "https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650207772&idx=1&sn=e55029c4e9a3c39c0f304200e8d7bd7c": "安全行动，只为中国（三）—— 重大事件分析研判与高危漏洞响应篇", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485650&idx=1&sn=cdfbafea55559c878216919bcd7b2455": "「漏洞复现」用友U8 CRM config∕fillbacksettingedit.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247505976&idx=1&sn=f89635b0fdc90f31c1b644dee84014bb": "寻找TeamViewer 0day漏洞—第一部分：故事的开始", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247517532&idx=1&sn=dceaebe6a99d759168baea5bfc276467": "通过转储文件利用 Visual Studio - CVE-2024-30052", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247517532&idx=2&sn=86bcf7e4bb8859df00575d90436f5688": "CVE-2024-7479 & CVE-2024-7481：利用TeamViewer中一个漏洞的概念证明，用户到内核的权限提升", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247517532&idx=3&sn=9de249a520ca0d15ef257421a838eb31": "CVE-2024-6769：毒害激活缓存，将完整性从中提升至高", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485743&idx=1&sn=25c078ba226e0d13ca8cd43fb03fceb6": "微信公众号小说漫画系统前台任意文件写入漏洞(RCE)", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247490670&idx=1&sn=cf7dcab59375ba4fb36340a145abc927": "本周漏洞报告汇总：NVIDIA、Adobe、CUPS", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247490670&idx=2&sn=fceac47dae2120463ad6ad23302594fb": "Zimbra 电子邮件服务器存在RCE,CVE-2024-45519", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650601550&idx=1&sn=908bad1691b6b423af9150a98a9f4e74": "ThinkPHP 的老漏洞依旧是黑客手中的大杀器；|网警提示：举国欢庆享长假，个人信息要护好", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247493592&idx=1&sn=a5ae2ac61b4c791986e06b8466bdb73d": "【Nacos】漏洞利用Poc整理", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651303866&idx=1&sn=995c5e3bbec1e68de1e2fa754d5c4c0f": "ThinkPHP 的老漏洞依旧是黑客手中的大杀器", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247506009&idx=1&sn=f16378da4eef9713e48225b98db38346": "寻找 TeamViewer 0day 漏洞（二）：逆向身份验证协议", "https://mp.weixin.qq.com/s?__biz=MzkxNTU5NTI1Ng==&mid=2247486037&idx=1&sn=d6c64bfc8ba212200da23f420f5a294e": "针对 Electron App 的漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkzNjQwOTc4MQ==&mid=2247489661&idx=1&sn=c299c5bf6f7b9270c5138b9e83c9e8c1": "红队武器库漏洞利用工具合集 - VulToolsKit", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247544038&idx=1&sn=58da88837125a4aeedc3c7ff7b89d091": "bladex漏洞思路总结", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485659&idx=1&sn=e281df00860e8b672e57e78ccb217067": "「漏洞复现」用友U8 CRM config∕fillbacksetting.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247503083&idx=1&sn=be4a6143eb42c3717ae07ce965573cde": "某众测项目中有手就行的几个漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyODUzMjEzOA==&mid=2247483787&idx=1&sn=56053a927cb73e0a494c2df1ee450d36": "从shiro命令执行到远程桌面登录", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247490693&idx=1&sn=2d210489f41cb79e203171301389b8de": "【PoC】CVE-2024-45519 - Zimbra Postjournal 漏洞利用教程", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247490693&idx=2&sn=e6306a33dfc404f7ed2ca40249ff453d": "【PoC】 TeamViewer 用户到内核权限提升", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247497367&idx=2&sn=255c1db5fef5f72eeb2040e6721361a5": "新的蓝牙漏洞会在配对时可能泄露密码", "https://mp.weixin.qq.com/s?__biz=Mzg3NTUzOTg3NA==&mid=2247514050&idx=1&sn=2536ede840f63cdf0250e2d94ddb8b8a": "【总结】设备漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzkyMzY4NjQwNg==&mid=2247483867&idx=1&sn=2723bd2857b3dd694141031842e5e08e": "xx学院漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492334&idx=1&sn=ba57cfcb9d3b7a70e372e34914c6976c": "一款基于Go语言编写，针对赛蓝企业管理系统的漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458577823&idx=1&sn=33a9a6d291b672fdfc6bb86c1afd0740": "SDC2024议题聚焦 | 探秘语法树：反编译引擎驱动自动化漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247487320&idx=1&sn=2086c03b38cab1994df7a4a5c9c190a0": "CVE-2024-9014", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247487320&idx=2&sn=dc810095158ae07d52b7e57492d74068": "CVE-2024-45519 poc exp", "https://mp.weixin.qq.com/s?__biz=MzkyMTYyOTQ5NA==&mid=2247485393&idx=1&sn=ed4f71197933ca368e923fd71781fd81": "带你体验一款主流且开源的Web漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247544039&idx=1&sn=060b0e54309235e58f40c8f53718ce75": "漏洞挖掘 | 某平台存储型XSS", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485668&idx=1&sn=cd8475d7058d6019c91f51f5cb22a647": "「漏洞复现」魅思-视频管理系统 getOrderStatus SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485751&idx=1&sn=f269f2e394f6779cdc687f97d4d9c0e8": "微信公众号小说漫画系统存在前台任意文件上传漏洞(RCE)", "https://mp.weixin.qq.com/s?__biz=MzkyMTMxNjQ5NA==&mid=2247484829&idx=1&sn=16c3c7cf6b58179bb669c3697c75a1fa": "「0day」通过 iTunes 入侵 Windows - 本地权限提升", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496037&idx=1&sn=8baa21296ec3927599c0f53deaeb66b6": "通过分析JavaScript文件寻找漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488957&idx=1&sn=cdc7a68e3f43fa0b9a1e05193bb25cdc": "【漏洞预警】Redis缓冲区溢出漏洞可致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488957&idx=2&sn=1d7d57a0f1b28a9935412a057edcf203": "【漏洞预警】Jenkins OpenId Connect Authentication Plugin 身份验证缺陷漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247515894&idx=2&sn=09562b713be1b351ba4eef99a9153169": "建了个SRC专项漏洞知识库", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247487907&idx=1&sn=d23ca74c67a2e9f3c8958147f083d16a": "金和OA C6 SignUpload.ashx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502231&idx=1&sn=064d60427f108f8f909c083eeb668d62&chksm=fe79ed0fc90e6419d5697cfa860a5d6ecbd8b7329cbbd76b01abc16f26cc66321db05e1e2547&scene=58&subscene=0": "安全热点周报：研究人员警告称，利用 Zimbra Collaboration 关键漏洞发起的攻击正在持续发生", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520994&idx=1&sn=0feb249fd14e6b8b07d5d6531f3287c2&chksm=ea94a388dde32a9eb0fccc6276a05b3ffc8ece88601d58cd5cded78e58234b59bfe4172d8caf&scene=58&subscene=0": "Apache Avro SDK 中存在严重漏洞，可导致在 Java 应用中实现RCE", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520994&idx=2&sn=ef89231ad1b43e2679e43b82ddb620f4&chksm=ea94a388dde32a9eaaa26c00774eea9eacc851b7bfac4dd8327e24dbc59a2ed40d011b782248&scene=58&subscene=0": "高通修复已遭利用的高危0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499384&idx=2&sn=fcf8911d518e900182a3c74752ec702f&chksm=973acd1aa04d440c1d405bec7eab91f7f0de8cd4242a153a0a6e65883ed92a731c0af303752f&scene=58&subscene=0": "CNVD漏洞周报2024年第39期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499384&idx=3&sn=1bdce0da6aeb3a8beb40f4bba0a11bf1&chksm=973acd1aa04d440c23a14d694654e5ba8c431415d1de6e24b336f28bf1fe53b8f24b325bc361&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240923-20240929)", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247486748&idx=1&sn=46e2c665774918fd88693d73fdfb0a0c&chksm=c22295e5f5551cf3db16503a2dda80ff895aa21c9d20192e08efbba7a5120179ec3ffb5ac154&scene=58&subscene=0": "WPS Office从路径穿越到远程代码执行漏洞(CVE-2024-7262)分析与复现", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496037&idx=1&sn=8baa21296ec3927599c0f53deaeb66b6&chksm=e8a5fb06dfd27210d3f13ee64d487ac203c0fc67ce1f41a413715ac6188ab68ceab18c0013a4&scene=58&subscene=0": "通过分析JavaScript文件寻找漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzOTI2NjUyNA==&mid=2247485060&idx=1&sn=88aeba728cbc508c7e8d8a6877287b14": "MediaTek MT7622∕MT7915 芯片组驱动程序RCE 利用 CVE-2024-20017 4 种不同的方式", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488968&idx=1&sn=3c44fc1cc0fe46e63aef0d92d84c57b6": "【漏洞预警】微软2024年10月补丁日多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488968&idx=2&sn=95d11417c369f02cbcdc0f55f836197b": "【漏洞预警】Ivanti CSA 需授权 命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488968&idx=3&sn=6f678e1039632d1ef226ee55c4023c1e": "【漏洞预警】Google Chrome类型混淆漏洞CVE-2024-9602", "https://mp.weixin.qq.com/s?__biz=MzkxNTY3MTE5MA==&mid=2247485437&idx=1&sn=acaf6ae20643ae4d49f3c37d3d918a28": "微软 2024 年 10 月补丁星期二：已修补零日漏洞和严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5OTk2OTY5MA==&mid=2247485638&idx=1&sn=45a92ab8c4fe708de3b1bcc2cfd19e52": "Microsoft 10 月 CVE 漏洞预警", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247521654&idx=1&sn=4706aef45ec08ad3eda23aa9ce5ba7f1": "最新Ruoyi漏洞复现", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458577958&idx=3&sn=5299b845cc0ae3b5cfa70c929ff1dda7": "微软10月 Win10 ∕ Win11 更新修复118个漏洞：5个零日，3个“关键”", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521006&idx=1&sn=7a1549af926e4d8c203943ef0147805d": "微软十月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650619186&idx=2&sn=09f5d678e743a7e4e21eddbd6f5bc528": "涉及121个漏洞！微软发布10月补丁日安全通告", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485068&idx=1&sn=2fd9dd1e1c990a4b13d1f1a0d7691f31": "漏洞推送|用友U8CRM_fillbacksettingedit_存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651456731&idx=1&sn=be34023aa8dea84245e6cfe828e4c626": "信息安全漏洞周报（2024年第40期 ）", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503120&idx=1&sn=615871a4daccb1d5d5b43011a71d1eb9": "雷神众测漏洞周报2024.09.30-2024.10.07", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247516613&idx=1&sn=a067b289eeadfb59c90b418869f7aff7": "威胁行为者利用GeoServer漏洞CVE-2024-36401", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500053&idx=2&sn=e1a2f5cc2d40e3615471baaddd9da894": "【漏洞通告】微软10月多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502240&idx=1&sn=9d1336306a715b56d6e6705fbe518d38&chksm=fe79ed38c90e642e4a1c2d6f9c60bac4b495f718856cefabd2e6b3466ec79ce5575465d27828&scene=58&subscene=0": "微软10月补丁日多个产品安全漏洞风险通告：2个在野利用、3个紧急漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503120&idx=1&sn=615871a4daccb1d5d5b43011a71d1eb9&chksm=f2585fe3c52fd6f58e74efaf918a8d901ccee90036dc85e4fd4c762b7171bef68fdabcd728a0&scene=58&subscene=0": "雷神众测漏洞周报2024.09.30-2024.10.07", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521006&idx=1&sn=7a1549af926e4d8c203943ef0147805d&chksm=ea94a384dde32a9223171956acb5627589c8694d14ab3d52b24f09e985f4d3abd94d7e3fdc39&scene=58&subscene=0": "微软十月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521006&idx=2&sn=9a5993bb8ee14a8ab3071f40bb56c909&chksm=ea94a384dde32a92ccb1a8526ad5c231c4b03f141939c534f660d161815dae61f90ad81795c6&scene=58&subscene=0": "Ivanti 中的3个0day已遭活跃利用", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523705&idx=2&sn=4630dc368c780bcd3b7409d9d65ac622&chksm=ce461669f9319f7f785e685bc9181750f4a023bf8b73338fdbc09223a76fdc279d3268fc3512&scene=58&subscene=0": "【漏洞通告】Redis 缓冲区溢出漏洞(CVE-2024-31449)", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247520122&idx=1&sn=d27143db34cd4266b43bbec74b58e5ba&chksm=eb705145dc07d85352e5f290abf2553a3667a1858790b552e721e448538131fa4af87e417deb&scene=58&subscene=0": "2024-10微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzg5NDU3NDA3OQ==&mid=2247490628&idx=1&sn=5dddd171f4a50dd6ee8aa5c475b2a9f9": "【工具】Poc扫描图形化工具-脚本小子必备神器", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488981&idx=1&sn=31f1223c3e134d773514c42de986895a": "【漏洞预警】GitLab CE∕EE关键更新修复多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488981&idx=2&sn=ac749c0555df5d4ef714f88780a0a92f": "【漏洞预警】Apache Subversion命令注入漏洞CVE-2024-45720", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488981&idx=3&sn=a438c463223451be6cb9f37118a05329": "【漏洞预警】Laravel Livewire 文件上传限制不当漏洞可致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247506148&idx=1&sn=fc1ab80e699dc72968314607d6fafb49": "NodeJS 0day！代码安全为何重要 —突破强化的环境", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247496262&idx=1&sn=68a875b8658ce94beffe7a60f13b59fd": "福利 | 超低价三日SRC漏洞挖掘课重磅上线", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247487968&idx=1&sn=810e34c9ca8b7b22041f33278f6f5071": "JeecgBoot 权限绕过致AviatorScript表达式注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247487332&idx=1&sn=3790f3b08fa68d5849d92c2b34c102fb": "CVE-2024-46627", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247487332&idx=2&sn=ae3176157adc7539e4fc37663a694171": "微信公众号小说漫画系统 fileupload.php 任意文件上传漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247515911&idx=1&sn=539939cd6e859cbf211e5b2024233dd9": "实战 | 记一次X站逻辑漏洞到到管理员后台", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486333&idx=1&sn=affa5ae7a5b4cd40032b82cac254d7d5": "【漏洞通告】Windows 路由和远程访问服务 (RRAS) 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486333&idx=2&sn=46a8ce123f925f7caadf6f44360bd9e5": "【漏洞通告】Linux 版 Visual Studio Code 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521019&idx=1&sn=9271b20273e3b193c059558ab4844fcf&chksm=ea94a391dde32a87f79666c661628c4452d6cdc35a07001450db6ed6c017dd177937fd6328ed&scene=58&subscene=0": "Mozilla 修复已遭利用的 Firefox 0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247508440&idx=1&sn=069bf25599fdcf6ab2f7082fe209ef75&chksm=fa527466cd25fd70dd56fa773e56119b6aa8dab21d70d9a882266134542f636d50a81a540b96&scene=58&subscene=0": "微软2024年10月补丁日重点漏洞安全预警", "https://mp.weixin.qq.com/s?__biz=MzU0MDcyMTMxOQ==&mid=2247487728&idx=1&sn=c5bab130b8939748b305e97018968ca2&chksm=fb35b938cc42302eb6ee9d5c39cd5bd24a55f006fc9e15428ee399e70b9f8427971dc69c421b&scene=58&subscene=0": "「推安早报」1010 | 近期漏洞、红蓝工具", "https://mp.weixin.qq.com/s?__biz=MzI4NTYwMzc5OQ==&mid=2247497343&idx=1&sn=e1c215673f3e24642603f65ca22a3c6a": "漏洞案例：提升Self-XSS危害", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247515926&idx=1&sn=1a3b44c1541f5d747fe89d45857c91da": "实战 | 一次敏感信息到接口fuzz-RCE", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485083&idx=1&sn=4333c36b842e0f3ff156694d22ecff88": "漏洞推送|某户协同办公平台GeneralWeb_XXE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247488008&idx=1&sn=000cae539fcdc3108050d6059a4d04f7": "同望OA tooneAssistantAttachement.jsp 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651304295&idx=2&sn=338088b2ca1a5e534879eaea3e726836": "研究人员在Windows版的SVN中发现代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651304295&idx=3&sn=5d68b349de95a82767974f4180930681": "Veeam曝出关键漏洞，勒索团伙趁火打劫利用RCE攻击全球企业", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652093803&idx=2&sn=6e442c59bc197593f5e7e9fcc44f92b5": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065126&idx=3&sn=d8f627407df3a5064e3fae6c93f446fe": "【安全圈】Veeam曝出关键漏洞，勒索团伙趁火打劫利用RCE攻击全球企业", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247521682&idx=1&sn=6386647ae2cacf08d74b221e1c94f495": "cnvd通用型漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=Mzg5MzE4MjAxMw==&mid=2247484364&idx=1&sn=d63d36282e797a36f8ca5eea10bcc91b": "Ruby-SAML Bypass && GitLab SAML Bypass(CVE-2024-45409)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664227116&idx=4&sn=8dbbf9cbef7eb99802bbbd62166c06e0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521035&idx=1&sn=2551f0b914e44081d01813a9f39a47c4&chksm=ea94a261dde32b77e9f71015064c4ea237b5843d654575058520e4256615a479b230e5b288a8&scene=58&subscene=0": "GitLab：注意严重的任意分支管道执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247495927&idx=1&sn=b390dc5b5e080b28a5ab543a09698407&chksm=fa595e1acd2ed70cbfd020a35a68db9d2619fa2876f50b66b11db352df43ae9bba135320f0c8&scene=58&subscene=0": ".NET 一款事件查看器反序列化漏洞绕过UAC的工具", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523743&idx=1&sn=e644e27dc857081ad51b891224719a70&chksm=ce46168ff9319f993557ca8f7f660d45ff3ff3adad0a8b550ed272f32e6d1415fca9e904ce79&scene=58&subscene=0": "【漏洞通告】Mozilla Firefox Animation timelines远程代码执行漏洞(CVE-2024-9680)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523743&idx=2&sn=516f37895ba787576d2124b19ba0772a&chksm=ce46168ff9319f99b53023d2a6b733ebf17a7d9e272d8662486704c5538ddf564924102c664d&scene=58&subscene=0": "【漏洞通告】GitLab EE 权限绕过漏洞(CVE-2024-9164)", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485716&idx=1&sn=e95e1de5a3ab8374301732f2b11278aa": "「漏洞复现」锐明技术Mangrove系统 任意用户创建漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247486119&idx=1&sn=d6a8a4e144d2452a72b382ebd93fa464": "某赛通-数据泄露防护(DLP)多个接口代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651304452&idx=2&sn=172d4f156c16758bf457cb4a2a25f868": "FreeBuf周报 | Apache Avro SDK曝关键漏洞；Word神奇Bug会直接删除文件", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488994&idx=1&sn=d7ca42d79b8fa4c6d18ab08b99e92f74": "【漏洞预警】Mitel MiCollab SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247484762&idx=1&sn=7744d4f3a1f601cedd365fd4880da362": "致远oa表单导入任意文件写入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065140&idx=4&sn=1c9477d3d6b96c81067c89ebb34124e3": "【安全圈】GitLab 曝出严重漏洞，可能导致任意 CI∕CD 管道执行", "https://mp.weixin.qq.com/s?__biz=MzkyMTQyMzkyMg==&mid=2247484062&idx=1&sn=514a51596c625e7a30139b4db960c8fa": "BlueCMS 1.6漏洞复现CVE-2024-45894任意删除文件漏洞+SQL注入", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247550891&idx=1&sn=58dde38d5244c56d59b734ffcaf673d6": "Hoverfly 任意文件读取漏洞(CVE-2024-45388)", "https://mp.weixin.qq.com/s?__biz=Mzk0NzM4NzI1MA==&mid=2247486171&idx=1&sn=e44babcf73dce91d36a9d026603c80ba": "CVE-2024-38816 Spring路径穿越漏洞分析复现", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502274&idx=1&sn=7cfe89f647e27a1ff53d00457d072c3c": "【在野利用】Mozilla Firefox 释放后重用漏洞(CVE-2024-9680)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651132583&idx=2&sn=927cc74d7f74f7f30828c1bcd13465da&chksm=bd15a2748a622b62badec66a8ab4dfa7d9fb50a404070ca6095346cf5f932594d5699c50aa6e&scene=58&subscene=0": "个人数据资产可以变现了？国家数据局已官方辟谣；Palo Alto紧急修复多个严重的防火墙劫持漏洞 | 牛­览", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502274&idx=1&sn=7cfe89f647e27a1ff53d00457d072c3c&chksm=fe79ed5ac90e644c9213d0dd5c02c04727b85122b3e6558a7599c86fff12346e349b4aa8de03&scene=58&subscene=0": "【在野利用】Mozilla Firefox 释放后重用漏洞(CVE-2024-9680)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247495950&idx=3&sn=bde8270c0e5c37e962ef4613dadd7d13&chksm=fa595fe3cd2ed6f59aab65cc5ea10c5fbd76078dc84834f09e518245cff009237870de468bfe&scene=58&subscene=0": ".NET 一款通过事件查看器反序列化漏洞绕过UAC的工具", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486363&idx=1&sn=baf45524fbf14d61eed273fa14654e2c": "【漏洞通告】Lightroom 桌面版越界读取", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486363&idx=2&sn=a466b7b8f2e8320c4996a20938008152": "WordPress WP JobSearch 插件 <= 2.5.9 - PHP 对象注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486363&idx=3&sn=fa9cf740d90ddb661a5ecd10872b1a0a": "UserPlus <= 2.0 – 未经身份验证的权限提升 (CVE-2024-9518)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486363&idx=4&sn=415fe376c4eab2e76fd07e8a95c6819b": "Apache Subversion Windows 平台命令行参数注入漏洞 (CVE-2024-45720)", "https://mp.weixin.qq.com/s?__biz=MzkyMzY4NjQwNg==&mid=2247483880&idx=1&sn=3eb6c7a3afe2860482dc4a3c80dda7db": "EDUSRC漏洞挖掘思路整理", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489002&idx=1&sn=17ec8989802800573eb311df4b18c882": "【漏洞预警】Fortinet Fortiproxy越界写入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489002&idx=2&sn=692bbe2b67e7376823617ba1f6076bd5": "【漏洞预警】Fortinet Fortiproxy未授权外部资源引用不当漏洞可致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487509&idx=1&sn=ef7b4ed4bce6dbe5db7f2055a04a98f0": "灵当CRM wechatSession∕index.php接口处存在文件上传漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247488122&idx=1&sn=de222db52e4f55f3fd4fb09e07f9a50d": "用友GRP-U8 dialog_moreUser_check.jsp SQL注入漏洞(XVE-2024-10610)", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502444&idx=1&sn=25d31e4dd9032784d9312068efb74c90": "【成功复现】SpectoLabs hoverfly任意文件读取漏洞(CVE-2024-45388)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502279&idx=1&sn=7d6b8cb849a31ab262adeb5bd8e046f7&chksm=fe79ed5fc90e6449c03830212b75378e987057b90d6178496fee7926daa442b488d4144d002b&scene=58&subscene=0": "安全热点周报：超过 87,000 台 FortiOS 设备易受远程代码执行攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521075&idx=1&sn=2987012f618a751eabf08e620add0615&chksm=ea94a259dde32b4f7f4cd4bbb93cd3024cf4fe292975773a34fe5eecddb3c01f64facf63d74e&scene=58&subscene=0": "Palo Alto 修复多个严重的防火墙漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5Njg1NzMyNw==&mid=2247488397&idx=1&sn=803555aaa261b72338ff9174a93e22cd&chksm=fe5d0b0dc92a821bd595bbfa006245c3bee34848c37698e92aff9ee1b13101377059fc1e03da&scene=58&subscene=0": "DataCon2024漏洞分析赛道 | 快来“挖洞”了，46万赏金等你拿！", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247495981&idx=3&sn=aae5bd11f9ebc1214ffbe7e93d94fa74&chksm=fa595fc0cd2ed6d64f5a6be9228c74f8617998b5aae687ad56a15560e3fe625dd7ddc0f3f7c6&scene=58&subscene=0": ".NET 一款通过事件查看器反序列化漏洞绕过UAC的工具", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495360&idx=1&sn=08c8aaa599655248498915b802e02910&chksm=fd74de09ca03571f4e114de1799a4f8e268697f2dad0045ab53d4da688de5506311147b1391d&scene=58&subscene=0": "CNVD漏洞周报2024年第40、41期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495360&idx=2&sn=a946b22916a7ec84210e348b79bd5140&chksm=fd74de09ca03571f679f9ddb17539a205a372f8818529708ce3b46fe5d744ce9e7187fc7e96c&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240930-20241013)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487538&idx=1&sn=3d81bb489c2cac56a6265f1f7c082975": "泛微e-cology CptInstock1Ajax.jsp接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg3ODkzNjU4NA==&mid=2247485474&idx=1&sn=efbbd22dbe26059c22b5825f4d3b0750": "国外大牛都在用，助你高效获得漏洞赏金", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489010&idx=1&sn=9b1216ebf12b27eb4ea276b4db64b71c": "【漏洞预警】Apache ActiveMQ Artemis需授权,权限管理不当漏洞可导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489010&idx=2&sn=9efe7afeda1c5a29dedb67750f9dc19a": "【漏洞预警】Splunk Enterprise需授权路径遍历漏洞可导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247614530&idx=2&sn=660a0db793b4125e1d4361931f3f5bfb": "在早期车辆开发中主动解决网络安全漏洞的方法", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485893&idx=1&sn=d072ddebbdf2fb8f20c9d19a19ed1d23": "图形化界面的cms漏洞检测框架 - FrameScan-GUI", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247488142&idx=1&sn=af2f73aa9df9fe6d2cb1acd53d0965f8": "用友U8 Cloud ExportUfoFormatAction SQL注入漏洞(XVE-2024-4626)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496152&idx=1&sn=ddedfa05e83130aba8435d365a25e48d": "api漏洞系列-API权限升级", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489848&idx=1&sn=70375bbc9c85aad3fcc4f884ed10a631": "WordPress 插件 Jetpack 修补影响 2700 万个站点的主要漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521093&idx=2&sn=0e8722e391f5315692fb46494ee4c4b9&chksm=ea94a22fdde32b39c594e884c3d9c1189f426e88c963cd7073b26e7d547a6f3b1ceabdf1498e&scene=58&subscene=0": "2016年就已存在，Jetpack 中的这个严重漏洞终于被修复了", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065256&idx=2&sn=980220c27c207e4156417e7e6a6c2657&chksm=f36e61a8c419e8beda8644a1da99eb23c6b4b5bc49fe59673a854f6c38bdd77c924120e00ea7&scene=58&subscene=0": "【安全圈】乡镇公交车系统信息泄露漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503127&idx=1&sn=f41a55862318c3c009544720b185d7b2&chksm=f2585fe4c52fd6f245763aea3cd47026d9b2b3b13ea6635d8f2137f35c59793e15891a9f563d&scene=58&subscene=0": "雷神众测漏洞周报2024.10.08-2024.10.13", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247505280&idx=2&sn=2cbb1124020b1ffe7fa08942bb363d3a&chksm=eaf99dccdd8e14da4f825a654836eff592f88ca9277fccf44e7700b04d48c049e7b8d9e4c304&scene=58&subscene=0": "DataCon2024漏洞分析赛道 | 快来“挖洞”了，46万赏金等你拿！", "https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653058147&idx=1&sn=26bb3c8ec058f16c2eff407d714460ff&chksm=7e5709d5492080c30fc8626a8661173f161d3f0e4fced378f21cbc12a73c6b6159e66497a661&scene=58&subscene=0": "记录生生不息的创新力量｜2024 年度「InnoForce 50」启动", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247493935&idx=1&sn=4b066ad41530b8a863afaab67a718f2a&chksm=fa9d1279cdea9b6f86e8734b39314a764d3bcbd0cab4ab8232acfc2c9b79f2caa8a6f622b744&scene=58&subscene=0": "ByteSRC活动｜生活服务漏洞奖金提升！双倍积分专测来袭～", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499400&idx=1&sn=e66e05258ce846cb6a6d5e29aa31532d&chksm=973acdeaa04d44fc2b083d0b411bf903fa7177406a3f4d6c22240adbd19c1bd23ca6bcc537cc&scene=58&subscene=0": "CNVD漏洞周报2024年第40、41期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499400&idx=2&sn=ab09f3d7c1abf5549d539d6491fda613&chksm=973acdeaa04d44fcf5289afa87e3fe57db123f39183824b6f0e8fb437318cae9cb677b53fa9f&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240930-20241013)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496152&idx=1&sn=ddedfa05e83130aba8435d365a25e48d&chksm=e8a5fbbbdfd272adf06e30d502c2484eee74f611168c8cafe744e15609ad9ce596e575538e59&scene=58&subscene=0": "api漏洞系列-API权限升级", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489018&idx=1&sn=25b15d96d4bc9970a941dbfc8cf01dac": "【漏洞预警】Apache Solr 认证绕过漏洞CVE-2024-45216", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489018&idx=2&sn=b6463e9e1c223c7061c5f5031ee1236b": "【漏洞预警】Oracle 2024年10月补丁日多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247487339&idx=1&sn=b7a322912471738372ced61d13d4b408": "漏洞预警 | Oracle WebLogic Server 存在反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247516132&idx=1&sn=836d0bf24b23efd4cafb6d02109c7b15": "万户ezOFFICE协同管理平台 GeneralWeb XXE to RCE", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247488162&idx=1&sn=c0a4ed867540fb32daba33e4c392a250": "用友 NC saveXmlToFIleServlet 任意文件上传漏洞(XVE-2024-6507)", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787042&idx=1&sn=9ff9664f254d1077000edf4df5aeb18b&chksm=8893bacdbfe433dbddfdff5e5b5ff909029b141c9c1b7ddb9543066891e251c28569991008e3&scene=58&subscene=0": "Linux系统安全告急：新技术绕过“noexec”，任意代码执行风险激增", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521118&idx=1&sn=19780899ec9f4282e334e41a25f88aa3&chksm=ea94a234dde32b22456eab2d416b2ae3e9baeb788e7522fb6a65a51b8fbd47d5083ff9c5dbc1&scene=58&subscene=0": "GitHub Enterprise Server中存在严重漏洞，可越权访问实例", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512828&idx=2&sn=d9c0cdb53702ee4b2ae0bad511238d05&chksm=ebfaf5dcdc8d7ccaa01f994a12a740f7f0322a1da473e5b9c51c36307a8247e7b17ba8729640&scene=58&subscene=0": "美国州政府利用漏洞奖励强化防护体系，安全众测成为联合防御最佳实践", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507134&idx=1&sn=69655f32f2e4294df6a9d9cc5dac80e0&chksm=cfcabfaaf8bd36bcc77b7272635fa42e235244a9b23804d2bff2b3a4ed42012c70e89b9f7c11&scene=58&subscene=0": "捕获在野利用！Weblogic RCE 数月前已支持检测", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502283&idx=1&sn=834229924382fbc68f713cf9d9a8e2ce&chksm=fe79ed53c90e644508dde2790e07290568b6a1bb509d06d88b8de01fefcc99e727038963686d&scene=58&subscene=0": "Oracle 2024年10月补丁日多产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485003&idx=1&sn=5ccde4dc82fa09bd366a7f2de01ff1bb&chksm=c2b1043df5c68d2b005f4b5523973459c8717c99e881f1551c3c3d6686df0cd277c4cd62e81d&scene=58&subscene=0": "腾讯安全威胁情报中心推出2024年9月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247543210&idx=1&sn=19f7add2afcfe39cfdf7c03cc03ffea9&chksm=f9ebf707ce9c7e1178e7b19be262e0935e0a2e1ed0d93523039f451af307042b0f1627c8e4d7&scene=58&subscene=0": "零日漏洞风险加剧 NDR或是一大可行之解", "https://mp.weixin.qq.com/s?__biz=Mzg5MTM5ODU2Mg==&mid=2247500845&idx=1&sn=62b16be90b356915a3d4f4fa81bef9ac&chksm=cfcf74e0f8b8fdf67590d03b1319ceb57d3883a3c1f55768e879535d50a78c9bbbd392b4fc79&scene=58&subscene=0": "[漏洞挖掘与防护] 04.Windows系统安全缺陷之5次Shift漏洞启动计算机机理分析", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247509921&idx=1&sn=9fdd6ea2cedf4dd4274a85ef3bf2f92a&chksm=ec9f7ed2dbe8f7c4086f98662d1ba0decb9eba3fe75e1d9f4a135ed538eb467812e802e39302&scene=58&subscene=0": "24年9月必修安全漏洞清单｜腾讯安全威胁情报中心", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487562&idx=1&sn=99753a0058790bd700823d05c2b8c9ec": "DataEase存在数据库配置信息暴露漏洞(CVE-2024-30269) 附POC", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247491904&idx=1&sn=8f3ae793af4b84ed6315c1d558b961d9": "Adobe ColdFusion 反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247491904&idx=2&sn=b1052d613073438fa5a8d38862c91bb4": "Adobe ColdFusion 文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489029&idx=1&sn=e06fcf8b161146051562b020df371242": "【漏洞预警】Kubernetes Image Builder凭证管理不当漏洞CVE-2024-9486", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489029&idx=2&sn=45c13fae69d09e919a581792b920dd43": "【高危漏洞预警】Apache CloudStack 模板验证绕过漏洞CVE-2024-45219", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489029&idx=3&sn=c7839c7032c6a427251183a661c11555": "【漏洞预警】Apache CloudStack请求来源验证绕过漏洞 CVE-2024-45693", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247516149&idx=1&sn=cbe88eb7ebe0586102f335b02213fa33": "CNVD通用型漏洞挖掘思路-平台漏洞列表一眼定睛法", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651304727&idx=1&sn=12c12769972fdea40ed8af5245c31654": "谷歌：2023年被利用的漏洞70%是0 Day", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485763&idx=1&sn=cd985bec3b400befb5bb20dc16fceade": "「漏洞复现」英飞达医学影像存档与通信系统 WebUserLogin.asmx 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065297&idx=3&sn=763d27a5148619b21d8a21de71663c4c": "【安全圈】SolarWinds Web Help Desk曝出严重漏洞，已遭攻击者利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065297&idx=4&sn=6553ac6cf6c694af3a1a0522d91e551e": "【安全圈】谷歌：2023年被利用的漏洞70%是0Day", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651132707&idx=1&sn=bd2c2d2f6660a916bde388c86ee21002&chksm=bd15a3f08a622ae6ec4388e5375c28f7f22b8e192a26b9f47c3bbbc6cddfd225327e74effc09&scene=58&subscene=0": "面对英特尔CPU触目惊心的安全漏洞， 除了排查，更要加速信创发展", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521136&idx=1&sn=8dae0f9e90eb71b97f2e0b1158775cb8&chksm=ea94a21adde32b0cd92f1996cd9d86287351e84ca7c503267ffd83e79c363ced14eec5b768e0&scene=58&subscene=0": "谷歌：2023年70%的已遭利用漏洞是0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521136&idx=2&sn=092bf2813ecefa63156a83b9d8eab160&chksm=ea94a21adde32b0c330f235f9beca98c24ce44fcacdb92e916ec286a71acd272b5c86b1d517b&scene=58&subscene=0": "VMware 修复HCX 平台上可导致RCE的高危SQLi 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247519596&idx=1&sn=88483bcb603bb9106ca73d388a24ae3c&chksm=c144ffd1f63376c7f65520acac781b6e83d1c8748666964ba534ab28f1441519a06bc648f410&scene=58&subscene=0": "安全漏洞曝光：AMD 和 Intel面临新型攻击威胁", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247519596&idx=2&sn=2e6fa57e983a1089d0bac2b689b5ad0a&chksm=c144ffd1f63376c75dd07ed764dbe9256be18213697902d9bf9eeb691864c901e864371bfe57&scene=58&subscene=0": "漏洞频发、故障率高：应系统排查英特尔产品网络安全风险", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065297&idx=3&sn=763d27a5148619b21d8a21de71663c4c&chksm=f36e6251c419eb47fce614b9c2353cfdc1ca30e5dc890827e6e25466db25669bd30f6e9ca3b3&scene=58&subscene=0": "【安全圈】SolarWinds Web Help Desk曝出严重漏洞，已遭攻击者利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065297&idx=4&sn=6553ac6cf6c694af3a1a0522d91e551e&chksm=f36e6251c419eb47d1871be661931a6925259b6104043a45226869c6771428e3a794d49dd5c3&scene=58&subscene=0": "【安全圈】谷歌：2023年被利用的漏洞70%是0Day", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664227620&idx=4&sn=e9585c8752086698d13714a906e6256c&chksm=8b59e1ddbc2e68cb89f65aeb671229f601d5cc51c1faa29f8cc724c2e7a1893aba22919cf478&scene=58&subscene=0": "CNNVD | 关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247508470&idx=1&sn=dfd1ab29e0bb1ca56156c689c03be221&chksm=fa527448cd25fd5ec170e8ee587eb3f3d1f366b9652a5b26ead1e2b8a008f1a804379faff2d2&scene=58&subscene=0": "手把手玩转路由器漏洞挖掘系列-ZigBee协议", "https://mp.weixin.qq.com/s?__biz=Mzk0OTUwNTU5Nw==&mid=2247486715&idx=1&sn=d9e461792e604356a775307b342be280": "【漏洞情报】惊！安全圈众多师傅都在用的\"它\"，竟存在文件下载的bug？", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247487688&idx=1&sn=594252eb04e54a09a9bc39b28335db12": "明源云erp报表 geterpconfig 未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5OTI3MTE5MQ==&mid=2247485336&idx=1&sn=47d85adfbc1d7d31d68137edf003a899": "【开源工具】 - 从漏洞数据库搜索漏洞的工具go-exploitdb", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652093845&idx=2&sn=8e1ba2c88682415efe17b9bcbb051aef": "CNNVD | 关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653930961&idx=2&sn=d4474c33b0bd0366619c93841ac6dced": "因漏洞频发、故障率高，英特尔产品被建议启动网络安全审查", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521146&idx=1&sn=9082baa037a6e59fedb1cd685658ae1c": "F5 BIG-IP 修复高危提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521146&idx=2&sn=671909f46dea5c8b54973aff9c570634": "Kubernetes Image Builder 严重漏洞导致节点易遭root访问", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247521814&idx=1&sn=7c04b027e05981c97b949d4d6ea1b6cb": "初学QEMU虚拟化漏洞利用——XNUCA2019-vexx分析", "https://mp.weixin.qq.com/s?__biz=MzkxNTU5NTI1Ng==&mid=2247486066&idx=1&sn=7513b610056f889b69775198f52c3617": "python 代码审计工具和TripleDoggy -- 基于clang static analyzer的源码漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523756&idx=1&sn=25bc11e88e2e6316cb3d20ecd0352283": "【漏洞通告】Spring Framework 路径遍历漏洞(CVE-2024-38819)", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247551010&idx=1&sn=619a3e6770abc85e382e9ec6ef8bb653": "kernel heap exploit", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489038&idx=1&sn=76e5f6ff889433b7e3828482025eb228": "【漏洞预警】Spring Framework路径遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651132716&idx=1&sn=8d52a87f9d70ea0278b7e3c51b015fdf&chksm=bd15a3ff8a622ae934ab86db5bed30a0bdd4190e986bf72dfd45c8b6224c00afca5eeda00012&scene=58&subscene=0": "FIDO联盟提出全新密钥交换标准，旨在破解跨平台应用难题；CISA就多个新发现的关键漏洞发布紧急安全提醒 | 牛­览", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787055&idx=1&sn=5fbaf89659bf338d051cb13fa1bf9923&chksm=8893bac0bfe433d624ae16f6ea2aac5b4e7f989baf93d651e5c5725c4a3df924fd0e735b0fb4&scene=58&subscene=0": "AI驱动机器人暴关键漏洞，可致机器人失控执行危险行为", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521146&idx=1&sn=9082baa037a6e59fedb1cd685658ae1c&chksm=ea94a210dde32b06c309bdfeedbfb7bd2cf44ef71cdb29f41dc41e4af7102a5f3336ac6a51b3&scene=58&subscene=0": "F5 BIG-IP 修复高危提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521146&idx=2&sn=671909f46dea5c8b54973aff9c570634&chksm=ea94a210dde32b06ee8de3eb6a5b2d7a1eac4ace624827b816fa13689f076425780451afa345&scene=58&subscene=0": "Kubernetes Image Builder 严重漏洞导致节点易遭root访问", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502299&idx=1&sn=069a958959ae15278139095c33508054&chksm=fe79ed43c90e6455a2fc9c729de185bf1defc9325a602adc4c8e65889bcf3917632f49bdf156&scene=58&subscene=0": "Spring Framework 路径遍历漏洞(CVE-2024-38819)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523756&idx=1&sn=25bc11e88e2e6316cb3d20ecd0352283&chksm=ce4616bcf9319faaea917287193ae0665c6c74641b9b5e3fd5fca82afd04d9f633a4dcb3320e&scene=58&subscene=0": "【漏洞通告】Spring Framework 路径遍历漏洞(CVE-2024-38819)", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492366&idx=1&sn=a4b61bc1dfa3c615999b2eb232269619&chksm=e90dc924de7a4032e1555fa467b97d3b1509e4f98c743db55e9bcaf257add39d745e94fb1aaf&scene=58&subscene=0": "疑似有国家背景的APT组织利用0Day漏洞针对Ivanti CSA展开攻击—每周威胁情报动态第196期（10.11-10.17）", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487588&idx=1&sn=39be759d6fe21c5a270a606bcdaf2076": "畅捷通TPlus FileUploadHandler.ashx存在任意文件上传漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485642&idx=1&sn=bddf508c37501c451564ebe8f130ad95": "CVE-2024-31449｜Redis 缓冲区溢出漏洞 可致远程代码执行", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485642&idx=2&sn=c5119101d9eefb333bd6589e995cffa9": "CVE-2024-45216｜Apache Solr（插件）身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485642&idx=3&sn=c84b84a4fd15c783aa141a963d53bc65": "CVE-2024-28988｜SolarWinds Web Help Desk反序列化远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247488248&idx=1&sn=7d1b8380479581f2ad430159d1d0148b": "泛微E-Mobile ∕client.do 命令执行漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkyMTYyOTQ5NA==&mid=2247485431&idx=1&sn=a8a41e58f8be63da19896c7b97b1bf3f": "六大知名Web安全漏洞靶场", "https://mp.weixin.qq.com/s?__biz=Mzg4NjI0MDM5MA==&mid=2247486743&idx=1&sn=d5c3e200b5e29e1d45944abc315a89b0": "【工具推荐】DockerApi未授权漏洞一键利用工具，适合攻防演练内网梭哈。", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485781&idx=1&sn=18e0ea9bae3b7a875fdc01ed67fcd4dd": "「漏洞复现」某普SSL VPN 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247544351&idx=1&sn=2d72e6818a965ce03ead29b88c67beeb": "热乎的EDU证书站点漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485869&idx=1&sn=eba54d4b768cd77acedbc40f9642bc7d": "WordPress BookingPress 插件存在远程文件写入漏洞0day分析(RCE)", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650602174&idx=2&sn=d7a013f508f9e888a248d2910468f387": "谷歌：2023年被利用的漏洞70%是0Day", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649792777&idx=2&sn=8d93414a26d37cff85a47a61cd5f6a99": "Kubernetes镜像生成器存在严重漏洞，允许未经授权的Root访问", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650960266&idx=1&sn=0b0657c2d8e4b27d3037f7b2b9ddbb85": "内网常用38个漏洞nuclei-poc", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496184&idx=1&sn=7014f42d58aee7478234c29528d5208c": "api漏洞测试-GraphQL自省问题", "https://mp.weixin.qq.com/s?__biz=MzkyOTc0NDY2Nw==&mid=2247484396&idx=1&sn=3ec965e87120a0015871c598f7e170c7": "NSA的\"主板Bios后门\"原理&复现与检测方案", "https://mp.weixin.qq.com/s?__biz=MzkxNTY3MTE5MA==&mid=2247485458&idx=1&sn=8840f1796f6f0fa2a4fc68b6f9c4b050": "使用 LLM 和静态代码分析查找可利用漏洞的工具", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247488306&idx=1&sn=18c46dcdc76deba5e3b03d212a80459a": "浙大恩特客户资源管理系统 Quotegask_editAction SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486084&idx=1&sn=bcb54b256e2ad9b89b48606289fa29b4": "漏洞 POC 编写", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247491509&idx=1&sn=400eff89a6efb8cee54b33fad24ee6e0": "【PoC】开源监控平台Grafana 后认证 DuckDB SQL 注入（文件读取）CVE-2024-9264 （9.9）", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247544353&idx=1&sn=3b3bd7946016d0094679ec5e4467a6cf": "漏洞挖掘 | 全站一个Cookie鉴权，哪哪都能越", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247491968&idx=1&sn=ac9ba78b3f9279f5860cb55441ef096e": "Hadoop-未授权访问-内置配合命令执行 RCE", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651305000&idx=1&sn=56853f3edbfbffb3e3263ccd81746397": "新的macOS漏洞允许攻击者绕过安全控制", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247496111&idx=1&sn=a9c13386be33a20f5686d5f025838111&chksm=fa595f42cd2ed654a4ffbdc980de3e3b470254c804574c60f2132169b7d98ecd75e80f386b73&scene=58&subscene=0": ".NET内网实战：通过白名单文件反序列化漏洞绕过UAC", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496184&idx=1&sn=7014f42d58aee7478234c29528d5208c&chksm=e8a5fb9bdfd2728d04ec4b21fd8e06a8354615684c8ab6ae00d618ea35f3b4eedfffaa5ba930&scene=58&subscene=0": "api漏洞测试-GraphQL自省问题", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489043&idx=1&sn=8e8e88ba3a013bde42389a566b434230": "【漏洞情报】北大方正电子有限公司方正畅享全媒体新闻采编系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzU5MDMxOA==&mid=2247484079&idx=1&sn=1b435fb3c548049216a2c3e3b2b78c33": "Edusrc证书·实战分享|逻辑缺陷漏洞才是最好挖的高危！", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487624&idx=1&sn=33135f963826604ee69c3fa856c5c052": "明源云ERP报表服务GetErpConfig.aspx接口存在敏感信息泄露漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485799&idx=1&sn=6230dec2d2b0c39e0c38016487a6d4d4": "「漏洞复现」明源云ERP报表服务 GetErpConfig.aspx 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247488364&idx=1&sn=c12971a0443f4d300e0123651fa99f54": "联达动力OA UpLoadFile.aspx 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652093854&idx=2&sn=17caca1b98cbfb4b15d5da5554a19c61": "CNVD漏洞周报2024年第42期", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502468&idx=1&sn=fdcfaaf1af096c1acb9eff80808fbea1": "【成功复现】Bazaar swaggerui任意文件读取漏洞(CVE-2024-40348)", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487298&idx=1&sn=e65e9056ec5802e7b6ac0254d2254783": "国外漏洞平台收集", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787064&idx=1&sn=eb0e5b2ca525fbe78c6e915d6ca10a26&chksm=8893bad7bfe433c1b5181788c6b975e2ad01d9cb21059bb2825cf761e3b2dd2f0b245d4f7812&scene=58&subscene=0": "macOS 用户注意： Safari严重安全漏洞可致摄像头、麦克风数据被捕获", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521165&idx=1&sn=7b3b7e63cd3887724011c1eb4c584441&chksm=ea94a2e7dde32bf12a8f6cd4ff3687c49864e1369095f8f1fad77a56829cf6a8b8d01cf23abd&scene=58&subscene=0": "朝鲜APT被指利用IE 0day 发动供应链攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521165&idx=2&sn=7bfb29f17ff7d1e5ee3a692d0325509c&chksm=ea94a2e7dde32bf194da0ee3afbb6e7b53ba6046185343d45732773ec0b1c7298b65203944a5&scene=58&subscene=0": "Roundcube Webmail XSS 漏洞被用于窃取登录凭据", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502304&idx=1&sn=39a8312527ed9247cdbdebef5de8f796&chksm=fe79ed78c90e646ee1f3a370bea49f6df5cc8082b2b8be47d00cda48f7f214936da8381d923b&scene=58&subscene=0": "安全热点周报：OilRig 利用 Windows 内核漏洞针对阿联酋和海湾地区进行间谍活动", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247520738&idx=1&sn=f5660b24e2b5dc8b58b68b60bb20ba76&chksm=c144e35ff6336a495bbcd1c10e70325946e9336571babc4758819d55ee1b730498c12c2cd6d4&scene=58&subscene=0": "CISO焦虑：砸钱买工具，漏洞为何依旧“逍遥法外”？", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512862&idx=1&sn=985a72021a5e4cbab44d293299fed951&chksm=ebfaf43edc8d7d282746dad19ad03b0997600ca3c1a37382d730a5612d90d08e3101f0dcb223&scene=58&subscene=0": "突破！首次利用大模型在真实环境发现十余个零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247496137&idx=2&sn=55fd4d14cf887dad2994acb352efafa4&chksm=fa595f24cd2ed63236dc96bc03b88dce4f3f5f5a21ed1c8417e52c2886eb11135bc74a231892&scene=58&subscene=0": ".NET内网实战：通过白名单文件反序列化漏洞绕过UAC", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495379&idx=1&sn=2b0c92687662122ccf63124e85d690a0&chksm=fd74de1aca03570c7b58afda767a83603481ae981cc083cf2b0c88b04ce81644c53f2a34ce70&scene=58&subscene=0": "CNVD漏洞周报2024年第42期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495379&idx=2&sn=d14d89fd1abf7c552ef725fc62e854e8&chksm=fd74de1aca03570cbdf702090bf2911f0eed247b3014a174db00eee30681901496e8ba114c33&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241014-20241020)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489048&idx=1&sn=8ff851d6670d9d279b89268ddbf94dfa": "【漏洞预警】VMware vCenter Server 堆溢出漏洞(CVE-2024-38812)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247516187&idx=1&sn=4bb0112ddb6d2c03390ed916b7962441": "实战 | 记一次实战中SelfXSS+CSRF+越权漏洞的组合拳", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247503769&idx=1&sn=c6f976c22cb8304fa3b8937ea45b56f1": "WhatsApp 的多设备加密漏洞可导致设备指纹识别", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247488420&idx=1&sn=07be9c3be205933e69cd4175656b0083": "鸿宇多用户商城 scan_list.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247620069&idx=2&sn=c2bd23f2cfb5c20c5a22a265d59cb2e1": "突破！首次利用大模型在真实环境发现十余个零日漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651305162&idx=1&sn=b65db7335b3786d4873f6755e1eb933a": "K8s曝9.8分漏洞，黑客可获得Root访问权限", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065418&idx=2&sn=787d8f4417c21d5b963ec8d4bd7652a2": "【安全圈】多款云存储平台存在安全漏洞，影响超2200万用户", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502313&idx=1&sn=8a541914c191770ce4a526f904df3d16": "VMware vCenter Server 堆溢出漏洞(CVE-2024-38812)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503134&idx=1&sn=b72aa0c10a0231bc871832249bfdfb92&chksm=f2585fedc52fd6fb7fc0e99ca6c80c3dc5b09df78e4860b33b16042eb978b7c0153bbe6606fd&scene=58&subscene=0": "雷神众测漏洞周报2024.10.14-2024.10.20", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521197&idx=2&sn=f0f32cd958563d41b14cb555f2762a85&chksm=ea94a2c7dde32bd1a32b3d2d35ef7aa57cf0cfb210340478ffad469c368154ce8aba26ed865e&scene=58&subscene=0": "谷歌云漏洞奖励计划发布，最高赏金101010美元", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247501857&idx=1&sn=2e079402b260598477d6e163ca3128ec&chksm=cfc56f7ef8b2e668c223c903c3f0b7d3fa2e30eb39f0d34f97a233fa159ee87303cdb4bebad3&scene=58&subscene=0": "智领未来，安全共生 | 360漏洞云亮相“S创上海2024”，共探AI安全发展", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247578576&idx=1&sn=af22a7aa77dc9421a9f89d19b22a0e46&chksm=e91463eade63eafc5d2d910ffeb0b54892bb97f09d19f2dbd1be6ccbf95470ea7a7d6ed16af4&scene=58&subscene=0": "Palo Alto Networks 警告公众利用防火墙劫持漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499416&idx=1&sn=09fb2a778dda4995b337380f6c5435ce&chksm=973acdfaa04d44ec0ae0d49b1f9f104174e4c5bcea45fde80e8b975059a6656c04784bf9a42a&scene=58&subscene=0": "CNVD漏洞周报2024年第42期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499416&idx=2&sn=06f15d4281288d345aec0f26f8db7831&chksm=973acdfaa04d44ec732b40d4a70349afd53f745a48387b3d82fb0071c0b7b77837035bc26621&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241014-20241020)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489053&idx=1&sn=6b9831d7cffc0e16f83d2ca7e5494d64": "【漏洞预警】Microsoft Remote Registry Service特权提升漏洞CVE-2024-43532", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487647&idx=1&sn=c097b974aed0d81ebbb39b47e560e070": "时空智友企业流程化管控系统uploadStudioFile接口存在任意文件上传漏洞 -老漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487647&idx=2&sn=0a6daa07bc040bc9d6b31d2179c49de8": "高校人力资源管理服务平台系统ReportServer接口存在敏感信息泄露漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247488439&idx=1&sn=dc594d32088d00f69d51b137d775322a": "号卡极团分销管理系统 index.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485822&idx=1&sn=d8c7be2cc93bee896585fe8e7a1fab40": "甄云SRM云平台 SpEL表达式注入漏洞(XVE-2024-18301)", "https://mp.weixin.qq.com/s?__biz=Mzg4MDY1MzUzNw==&mid=2247497733&idx=1&sn=e7d88ef8bf93a838a6f99e1ee37b91ec": "警惕！泛微E-Office漏洞引发数据泄露风险", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489881&idx=1&sn=8407b31be58a4d7df854956230d46a62": "VMware 发布 vCenter Server 更新以修复关键的 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065432&idx=2&sn=c5c869e24ab938b185e97679ede50f75": "【安全圈】高通64款芯片存在0Day漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065432&idx=3&sn=8dd024db6fb200b80ea9bd4b0ab86a5a": "【安全圈】K8s曝9.8分漏洞，黑客可获得Root访问权限", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065432&idx=4&sn=e821667ba35126b55834a52a98cbf559": "【安全圈】三星设备曝出高危零日漏洞，已在野外被利用", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651132888&idx=2&sn=b405ddb420bbe1c66190259e178df00d&chksm=bd15a30b8a622a1df5a88dd3c982736d21d0697cbebf8bb6b8d55b88c29341fdf8d6f24c4739&scene=58&subscene=0": "美国海关执法局间谍软件项目被叫停，将接受白宫合规审查；新型Spectre漏洞变种持续威胁Intel和AMD处理器安全性 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065432&idx=2&sn=c5c869e24ab938b185e97679ede50f75&chksm=f36e62d8c419ebced3dfe7c7c112dd6fa9c2cce62710befa6d8ed1a4619a93818b4963036f5a&scene=58&subscene=0": "【安全圈】高通64款芯片存在0Day漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065432&idx=3&sn=8dd024db6fb200b80ea9bd4b0ab86a5a&chksm=f36e62d8c419ebceefe101ff0bc1b587b6e99447dcd96e41f562f8cf9aa4303b7eec61418712&scene=58&subscene=0": "【安全圈】K8s曝9.8分漏洞，黑客可获得Root访问权限", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065432&idx=4&sn=e821667ba35126b55834a52a98cbf559&chksm=f36e62d8c419ebcee6861d148234c4240e97f32ff3ae4d2ecce99feef2c26006edc5b720092f&scene=58&subscene=0": "【安全圈】三星设备曝出高危零日漏洞，已在野外被利用", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247578604&idx=2&sn=c0b781c34f0739765cd98e9a80e88115&chksm=e91463d6de63eac0b3554a00897098303ddd44ee55066b7bb8966b5f850812c79ae4a02ead90&scene=58&subscene=0": "Jetpack 修复了 2016 年以来存在的关键信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523759&idx=1&sn=0017e7e09220abab6863e930d09e9778&chksm=ce4616bff9319fa9f3f362abe9c8b14ae2f3dc0e600c6c17b86ef86e6681e85e93de88966548&scene=58&subscene=0": "【二次通告】VMware vCenter Server堆溢出漏洞(CVE-2024-38812)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523759&idx=2&sn=ade609dc4121e8db8cdd22351a70b964&chksm=ce4616bff9319fa92a4326734635d92d6946e3314447a9a01e11890b67f98d70862f213abc6c&scene=58&subscene=0": "CNVD漏洞周报2024年第42期", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496207&idx=1&sn=f671487cb5cace98ea383ac5ace90a95": "深入分析自己曾经挖掘到的有趣的XSS漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MzU3MTcwNg==&mid=2247485773&idx=1&sn=52f845eead540944388f53f878302c9d": "企业SRC简单漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485831&idx=1&sn=16b34c4a018d0f4203b4d95d58649f40": "「漏洞复现」东胜物流软件 GetProParentModuTreeList SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489058&idx=1&sn=530bd6b2063c2ff38531ad4ad70603e5": "【漏洞预警】Fortinet FortiManager身份验证缺陷漏洞CVE-2024-47575", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065447&idx=1&sn=af6b1e3779b7cc108da77693a2bd8568": "【安全圈】苹果、特斯拉均受影响，新型漏洞迫使GPU无限循环，直至系统崩溃", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651305339&idx=1&sn=647dd10900af35cc6dc491808ed58233": "苹果、特斯拉均受影响，新型漏洞迫使GPU无限循环，直至系统崩溃", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650988899&idx=1&sn=a13937c80af8c787059b4745aaa94748": "【知道创宇404实验室】警惕CVE-2024-47575针对Fortinet FortiManager的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MDg2NDI4OA==&mid=2247490111&idx=1&sn=95011f51967fa1c60a10b9691bccf675": "0day 挖到手软，403 到 getshell", "https://mp.weixin.qq.com/s?__biz=MzUxNTQxMzUxMw==&mid=2247524106&idx=1&sn=faa6020cdee1e1b30188ceafa8fef815": "安全通告丨网络安全漏洞通告（2024年10月）", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502325&idx=1&sn=96b42ac12247f0bfe4fa746ce232ee8c&chksm=fe79ed6dc90e647b040d50365f5f1f16e5dd0464c3dd3cbb6e943b2a6d9b022f8fc74346337e&scene=58&subscene=0": "【在野利用】Fortinet FortiManager 身份认证绕过漏洞(CVE-2024-47575)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507206&idx=1&sn=1bd7a83db8388ec3fec86f43feb61d99&chksm=cfcabe12f8bd3704bc28c1362cd66bef001bee5a96dfea9f1912eab7f51ed9d6b8c3def0a513&scene=58&subscene=0": "已知利用！Fortinet FortiManager远程代码执行漏洞（CVE-2024-47575）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065447&idx=1&sn=af6b1e3779b7cc108da77693a2bd8568&chksm=f36e62e7c419ebf1cd9ee388d190e5348b4f3438c42df530721e3ada741af2723a0779c39ec6&scene=58&subscene=0": "【安全圈】苹果、特斯拉均受影响，新型漏洞迫使GPU无限循环，直至系统崩溃", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495387&idx=1&sn=4b11b67781cc01260f323237f4760f1d&chksm=fd74de12ca03570409b90f05069bcce53813287269fc25f8a73f92667d6a9d85378ee794eb27&scene=58&subscene=0": "关于VMware vCenter Server存在堆溢出漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521255&idx=2&sn=96000770c62b8decfa9e07a493e63e88&chksm=ea94a28ddde32b9b8ba137aabc05013a57d35ead43238f1f5f4b42cb723d96b1f4792e330c13&scene=58&subscene=0": "关于VMware vCenter Server存在堆溢出漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521255&idx=3&sn=a3d253a523be442f0e1f72789ba75fb2&chksm=ea94a28ddde32b9b8de1966962ff8445b3814e03944529cc5ba0b88db8ff3ee88e958cd066e8&scene=58&subscene=0": "谷歌：三星0day漏洞已遭活跃利用", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512888&idx=2&sn=9ab92be86bc560da728a970bb6326045&chksm=ebfaf418dc8d7d0ee48db9f08c4c5345ef2a33cb3e806075e7fd3588f3e72c575aba72a92d3c&scene=58&subscene=0": "CNCERT：关于VMware vCenter Server存在堆溢出漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523765&idx=1&sn=d5269efa9c133e8386aac651056fa956&chksm=ce4616a5f9319fb3f628b88d8a0c2065d23addc3a2b3c41320194419c8a2eb2170dce710ad1e&scene=58&subscene=0": "【漏洞通告】Fortinet FortiManager 身份验证漏洞(CVE-2024-47575)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496207&idx=1&sn=f671487cb5cace98ea383ac5ace90a95&chksm=e8a5f86cdfd2717a414c6dae83b8d8a9e54ad22f299240439abf70d0b9e5517c8373e51dfb66&scene=58&subscene=0": "深入分析自己曾经挖掘到的有趣的XSS漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247487150&idx=1&sn=17db604e5005721b42fc9f2863f361c7&chksm=c25fc1d5f52848c3d5c67253f51bfe1d452764930bf3d384ea7d69e1f45a895da74b3cc96b18&scene=58&subscene=0": "第106篇：深入分析自己曾经挖掘到的有趣的XSS漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664228108&idx=2&sn=abc43d62cb95085716ab56b10e4614b9&chksm=8b59e7f5bc2e6ee374296f40186fcbab2104b021dcf4449410b4828db7d5c14fc65a785e97fb&scene=58&subscene=0": "CNNVD | 关于Fortinet FortiManager访问控制错误漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489063&idx=1&sn=c7a9b986007651dd85fdccbbe1c90fdd": "【漏洞预警】php-heic-to-jpg远程代码执行CVE-2024-48514", "https://mp.weixin.qq.com/s?__biz=Mzg4NTA0MDg2MA==&mid=2247485397&idx=1&sn=0ae94a98aec6037d9a6289476b51416c": "Suricata之CVE-2024-21773 Tomcat请求走私检测", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247488507&idx=1&sn=845d497240abaa6b5112b03f3ca0c258": "易宝OA ExecuteQueryForDataSetBinary SQL注入漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247530534&idx=2&sn=752691d53f9685030ee94e7b3646e0fd": "上周关注度较高的产品安全漏洞(20241014-20241020)", "https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651388403&idx=1&sn=ccd6b4cab598267ee5adf8bfb0fc7dd8": "勒索攻击离你有多远？（附勒索漏洞检测列表）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458579138&idx=2&sn=d49eabd04ac16baca0e9c0ff3e7a6d16": "Fortinet安全产品出现高危零日漏洞，恶意组织积极利用", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458579138&idx=2&sn=d49eabd04ac16baca0e9c0ff3e7a6d16&chksm=b18dc04886fa495e50b5b4f91ab4a8c029eeb4be08525cbbc3d68d2d9bcd7fddc0f25f3145b4&scene=58&subscene=0": "Fortinet安全产品出现高危零日漏洞，恶意组织积极利用", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247496225&idx=2&sn=f6933902136b7b238acbe1c6f78d718f&chksm=fa595ccccd2ed5da5b6ba7d157628c2d6c1da8716361531ea23fb206270067855fb51757b1a2&scene=58&subscene=0": ".NET内网实战：通过白名单文件反序列化漏洞绕过UAC", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521275&idx=1&sn=23094a8bbc6812308a558007e25112aa&chksm=ea94a291dde32b87e35eaab4a3eaca0db1c4a21c577bfdffa7e0bc64e4aa607f757182427737&scene=58&subscene=0": "思科紧急修复已遭利用的 ASA 和 FTD 软件漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521275&idx=2&sn=19b473f06f7cec3e44d2eaabe7de9012&chksm=ea94a291dde32b87aff71cc0155c176a313b40ce3d7e6f79a0f7ffc2adc898412e8c6a0b0be0&scene=58&subscene=0": "苹果创建 Private Cloud Compute VM 助力漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzUyMTcwNTY3Mg==&mid=2247486275&idx=1&sn=38fd591f0eddaef23fedadee61aa0b95&chksm=f9d64ae4cea1c3f2e197e864064a7e972ed44a14db900244dddd58d438db5eaa0b2bc63495a7&scene=58&subscene=0": "【公告】中通安全应急响应中心漏洞评分标准V4.0正式发布", "https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651388403&idx=1&sn=ccd6b4cab598267ee5adf8bfb0fc7dd8&chksm=8d39887bba4e016df24244933ab63898c91f2b086c7a9f23eba853b0ac91cb36af9d28d1fe63&scene=58&subscene=0": "勒索攻击离你有多远？（附勒索漏洞检测列表）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247516245&idx=1&sn=948e700d1384f7322cfbc4d3ca0375e7": "建了个SRC专项漏洞知识库", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485671&idx=1&sn=0bcb6efe26a9d6e6c0deaf625f1db8c6": "CVE-2024-47575｜Fortinet FortiManager身份验证不当漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485671&idx=2&sn=3c50f92d11faad65195774409be07b3b": "CVE-2024-9264｜Grafana SQL表达式允许远程代码执行（POC）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458579145&idx=2&sn=ac98ac7f79cffd3013852fcf53069c62": "“协作共御、洞见未来” | 首届华为漏洞管理与应急响应技术大会于深圳成功举办", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247491969&idx=1&sn=56688650d3492c29222fdd4727f6b75d": "InfluxDB JWT未授权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247488545&idx=1&sn=c8f4e293b57313327db9532c7fbeb9dc": "易宝OA GetProductInv SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486036&idx=1&sn=52131d932e8fe4f24db3d7bdf41625a0": "对抗零日漏洞的十年（2014～2024）", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484325&idx=1&sn=de7186ee2bde1a9178df7086cf65b1d9": "入选作品公布｜安钥®「漏洞处置标准作业程序（SOP）」征文第八期", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247521535&idx=3&sn=33711754cf017150c1a7bfb6002a1331": "PS5：“Byepervisor”漏洞文件及演示幻灯片发布", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485883&idx=1&sn=e3e846d7e1ab99552ba08fa54d5d8dea": "RAISECOM网关设备存在远程命令执行漏洞(RCE)", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485849&idx=1&sn=d7a6732d1e7a22003f4bec5ff10a3a4d": "「漏洞复现」BladeX企业级开发平台 tenant∕list SQL 注入漏洞复现(CVE-2024-33332)", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247491778&idx=1&sn=eec7f9dd81bd03b107fec9d6bc9e68fc": "【Exp】Windows 11 通用日志文件系统驱动程序存在提权漏洞 0day", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247491778&idx=2&sn=35f98ca87e5bf812a496b5c0b509e004": "【PoC】Wi-Fi 联盟测试套件中存在命令注入 0day漏洞CVE-2024-41992", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247492616&idx=1&sn=e6b40211569149267d234ff709f15c24": "windows&linux中 命令执行的各种绕过方式", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492544&idx=1&sn=181f09ae3c4f0d8d2aebf1427e547926": "一款越权检测 Burp 插件，通过增加AI分析模块 && 进一步优化检测逻辑，大幅降低误报率，提升越权漏洞检出效率。", "https://mp.weixin.qq.com/s?__biz=MzkzOTI2NjUyNA==&mid=2247485162&idx=1&sn=0d63c7f890eb4563656383fdbb5c295c": "CVE-2024-9465：Palo Alto Expedition 未经身份验证的 SQL 注入 POC", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651305558&idx=3&sn=33b0add5bc3325a56111ff4eeb8ece15": "多款云存储平台存在安全漏洞，影响超2200万用户", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247516790&idx=1&sn=b1bd8c8ef193dafc29cb1b70a33b6336": "PHP序列及反序列化安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486036&idx=1&sn=52131d932e8fe4f24db3d7bdf41625a0&chksm=fb04c93ccc73402a24144d8262153a73bc18c2098109a9885d2413dba9a33af83f8d664bc317&scene=58&subscene=0": "对抗零日漏洞的十年（2014～2024）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458579145&idx=2&sn=ac98ac7f79cffd3013852fcf53069c62&chksm=b18dc04386fa4955358d7719249adf13d0ef93ba9c77308c13d8123b231a4d7b5338bd5daae8&scene=58&subscene=0": "“协作共御、洞见未来” | 首届华为漏洞管理与应急响应技术大会于深圳成功举办", "https://mp.weixin.qq.com/s?__biz=Mzg4NTY0MDg1Mg==&mid=2247485591&idx=1&sn=5769b72d3516063e4f68feab9cd46e15": "ChatGPT中的高级API攻击以及AI供应链漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496224&idx=1&sn=9b8aaafd8f73e348cfbc19ab9f57e033": "有关漏洞挖掘的一些总结", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065543&idx=3&sn=b8a04fa9094f1ff644a46c7e77e91aad&chksm=f36e6347c419ea5117820d0337cd4fc89a241b03666d801bebddaba03c52cb638805deea4261&scene=58&subscene=0": "【安全圈】​Fortinet安全产品出现高危零日漏洞，已被恶意组织积极利用", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496224&idx=1&sn=9b8aaafd8f73e348cfbc19ab9f57e033&chksm=e8a5f843dfd27155019c191efd5162d7080eb5181b1a7e0990039e813dd3519e5db7a82d12a7&scene=58&subscene=0": "有关漏洞挖掘的一些总结", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489068&idx=1&sn=6ee0ddbf78a091d62549611d721d7ebb": "【漏洞预警】Codezips Sales Management System信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651305632&idx=2&sn=abcc7f6ea28f282e6e84f1baa318862e": "利用Windows漏洞，攻击者能降级系统组件恢复漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247516303&idx=1&sn=eed8364856f2f0b86782e634a9333f21": "【干货总结】浅谈src漏洞挖掘中容易出洞的几种姿势", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489902&idx=1&sn=58965be5053725e329d20a6c84261eaf": "针对 Microsoft Windows 内核的操作系统降级漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502343&idx=1&sn=c581c4fefdbb5b55df5877b9ce52c210&chksm=fe79ee9fc90e6789ecb2b69f8bad06387c6f053c88a9528d0a991a4004936a8e021e5980cd06&scene=58&subscene=0": "【已复现】Cyber​​Panel 远程命令执行漏洞(QVD-2024-44346)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502343&idx=2&sn=f3ecf71ee875550a542839608c722045&chksm=fe79ee9fc90e6789619f3e2ad7f4f170cabde1967b8e0962c9452f64c9bc1819341bc8960307&scene=58&subscene=0": "安全热点周报：UNC5820 威胁集群利用 Fortinet 零日漏洞窃取企业配置数据", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499585&idx=1&sn=bb3e82184bfc1090abf8ec83acf49f06&chksm=ec1dcf69db6a467f2f75c4e0073e1032006639afcc51c13bd3115bec66944e074807f1d852bc&scene=58&subscene=0": "一键检测 PbootCMS 历史漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065566&idx=4&sn=2b801b48c3a2637022eda84b8ded4b9b&chksm=f36e635ec419ea48fb3673df944a0a01efd65ec51428521954973b7f681350f5cba836cf2779&scene=58&subscene=0": "【安全圈】利用Windows漏洞，攻击者能降级系统组件恢复漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489073&idx=1&sn=3b9a9cfc65a343f1abd7e6bc67deaf45": "【漏洞预警】CyberPanel upgrademysqlstatus未授权命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650960992&idx=1&sn=9aa63c3d1281d916e9082e0f627e0e5d": "本工具为jeecg框架漏洞利用工具非jeecg-boot！", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502500&idx=1&sn=38e5bc2cf558c49c7b9b71342e9a74b3": "【成功复现】Palo Alto Networks Expedition 远程命令执行漏洞(CVE-2024-9463)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502355&idx=1&sn=d02ee95b980e1540ef75c5a0f0f10f5b&chksm=fe79ee8bc90e679d2beeef7ce3ff4a032f4e9bd79fe2e0f3f690b65ed6e720af290e491fcc2a&scene=58&subscene=0": "【已复现】Apache Solr 身份认证绕过漏洞(CVE-2024-45216)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650988902&idx=1&sn=2a04b8d588193921ddcf484e998cea72&chksm=8079a354b70e2a420bc72f2616a230d619eb09f0fdae05e36bfba84a84e6cffa276af718fd55&scene=58&subscene=0": "【知道创宇404实验室】警惕CVE-2024-38812 VMware vCenter Server远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503163&idx=1&sn=bb163ba65161abfdfca8d8316610d55a&chksm=f2585fc8c52fd6deae42a920a09826b50fe56878ec56d0f7887f2c603873588ec374ca9146d0&scene=58&subscene=0": "雷神众测漏洞周报2024.10.21-2024.10.27", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458579476&idx=3&sn=a068c8f37e67f44576894bd4525a3be6&chksm=b18dc29e86fa4b886b74ef63e071b4feff13d277532cea3a21cbf0f7168a31fde1eb79d4f282&scene=58&subscene=0": "​研究者揭露微软 Windows 内核的操作系统降级漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521319&idx=1&sn=cbfae51c8facf463612f1507daddd94f&chksm=ea94a54ddde32c5b7ff26a5495c0c74862c8d1d5d0f76cbca0ca1a506b5dc7d6f3328da0a5ff&scene=58&subscene=0": "Mozilla：十六进制代码可用于操纵 ChatGPT 写 exp", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499430&idx=1&sn=0a75b4ee3ae57467d0e470d7bc420974&chksm=973acdc4a04d44d24daf7f1e240999f466c84de627290332f167043cd1942e8f40c6552b2953&scene=58&subscene=0": "CNVD漏洞周报2024年第43期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499430&idx=2&sn=0d5599512ccbb7bf2c6f53cccc609f3d&chksm=973acdc4a04d44d2b49e070e8e9d9b5315d469f7677c37d284d028af56dfb94198b71e7489b7&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241021-20241027)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495419&idx=1&sn=8b5c4919259cf65b80eb4f0ed8f609c7&chksm=fd74de32ca035724df35cec0f34fab9a85dacbcadd8e68d03bf0508ef141873d761af5448c6a&scene=58&subscene=0": "CNVD漏洞周报2024年第43期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495419&idx=2&sn=8d5402906f78b000befa396e8c14d460&chksm=fd74de32ca035724d51b1235867f6c2e967da9ebeeb2fa24babafbc289c473284185748fabc3&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241021-20241027)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247501886&idx=1&sn=780951e4861d8b26ed8ed6276602a3c2&chksm=cfc56f61f8b2e677a640e3268488c2bbf7bc6c550bfc2c39cc01c733cce1c264dd276ea49f55&scene=58&subscene=0": "360漏洞云亮相看雪峰会，携手行业精英共话安全创新", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489080&idx=1&sn=f530f172b19670cc5a325374b967ef70": "【漏洞复现】Apache Solr路径身份验证绕过漏洞CVE-2024-45216", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507329&idx=1&sn=0a2cf458a45cbd59b0416309a4bcfdf5&chksm=cfcabe95f8bd37833e6a5024c97259be35a8948851b49eaafd4184990e41bb88b853159f0a9b&scene=58&subscene=0": "可任意文件读取，警惕Solr身份绕过形成的漏洞利用链", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512950&idx=2&sn=8dd420cffbbe201209b733f10108d32d&chksm=ebfaf456dc8d7d40d20f36730f47f7d2220ec4a6c4edae00cbc78a3cedb1fa7a88bc5c113a98&scene=58&subscene=0": "苹果悬赏百万美元查找“苹果智能”安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521331&idx=1&sn=e13cd9f9dccd9d17953e551df9108205&chksm=ea94a559dde32c4f32a18c5ad4c3a2fc98f17fb29f69f73cac5c613c67ae28f36ab473d14936&scene=58&subscene=0": "研究员在开源AI和ML模型中发现30多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521331&idx=2&sn=71c64c97cc3e699a2bf61baa2a1d09d4&chksm=ea94a559dde32c4f31512e2ba17773a1688545d45b94fa660cb6d7416b5ad9d187bb38882894&scene=58&subscene=0": "这个已存在18年的提权漏洞影响 X.Org 服务器", "https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247491605&idx=1&sn=e7a98ec2cfec80361cbc51e7d443ab06&chksm=ea484a52dd3fc34490249df4936289d4c6c589fecc6f23845f2f11ff2722d1a38fe5984b0aeb&scene=58&subscene=0": "开源安全检测的漏洞，从哪些维度考虑整改标准？两种场景下（供应链软件入库，应用投产上线）针对检测的漏洞需要强制修复吗｜总第270周", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247579103&idx=2&sn=adfdc60fab72010fc498354e6b8e034d&chksm=e91465e5de63ecf3b84e279ce2aa6052f69aa36f7f173acd826db6b6aa4ba09b72015ede4daa&scene=58&subscene=0": "谷歌：2023年披露的被利用漏洞中有70%是零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247521490&idx=1&sn=33ee9166ab5cf893dcaf4018e242d991&chksm=c144e66ff6336f79c03afd673af4ba5c00c4cf71053a2310975d7774d5ced316bf0f92c47cfa&scene=58&subscene=0": "这谁防得住？Wi-Fi 联盟官方测试套件中存在命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1MjgwNzc4Ng==&mid=2247511952&idx=1&sn=fb6c167d7e11e70f7c74b2dc72ab2a2f&chksm=fbfe9395cc891a838b2137f982fe26ffd6086b203b3b72f93f249399022f284a94e58a0cf9e2&scene=58&subscene=0": "BinaryAI更新布告｜漏洞存在性分析功能上线", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484700&idx=1&sn=48eb10e18c40164bf672a3e7a8a36e39&chksm=c12af89df65d718b1147d7cbd64e4d33eebebe24618e137438c2c8418dd84a2b49f557e691c5&scene=58&subscene=0": "【复现】 Apache Solr身份认证绕过漏洞（CVE-2024-45216）风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523812&idx=1&sn=e47ad6d6110101bd34045546f03ed5e6&chksm=ce4616f4f9319fe296ec3e7eb302ab62746c722066830a2014c99336ef4f3c9bcf67018e8193&scene=58&subscene=0": "【漏洞通告】Apache Solr 认证绕过漏洞(CVE-2024-45216)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523812&idx=2&sn=eb2f4b3b34ac1799bcb461c02fb1e6f3&chksm=ce4616f4f9319fe2cee38c81934e037f2f6a972955ed5fa0bd7ae9d1f3d2419b572ac1a5e19b&scene=58&subscene=0": "【漏洞通告】CyberPanel upgrademysqlstatus接口命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTMxNDM3Ng==&mid=2247488710&idx=1&sn=5223f08864253e636c04a27e2f87e8bd": "自动化漏洞检测平台-解放劳动力", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260089&idx=1&sn=a928eb710d68d2d5998b1b8e67870c78": "如何从IIS欢迎页面中快速挖掘漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489096&idx=1&sn=c8accee68b4718e765f61dec8cbe8f8b": "【漏洞预警】DrayTek Vigor2960 Router命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489096&idx=2&sn=9d456db4a342d43da8256ed6ddf9e893": "【漏洞预警】ServiceNow Now Platform未授权代码注入漏洞CVE-2024-8923", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489096&idx=3&sn=25f7a2a8f8f7e4b964e70fa30accba7a": "【漏洞预警】QNAP SMB Service安全缺陷漏洞可致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489096&idx=4&sn=73d4c51435bd454c408d416cea9a5b99": "【漏洞情报】Vmware Spring Security访问控制不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485900&idx=1&sn=d861a393e4d4a859614fb991e1868bbe": "「漏洞复现」瑞格智慧心理服务平台 NPreenSMSList.asmx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502372&idx=1&sn=400ea5c9c064b177d0b240c397a749d5&chksm=fe79eebcc90e67aa16307551e35b7b7002d193a6cdbe965ed72a47d1db7eed6fd3f08142a32d&scene=58&subscene=0": "【已复现】Spring Security 静态资源权限绕过漏洞(CVE-2024-38821)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521342&idx=1&sn=355a1e1a938422e3437d8a957f360c7e&chksm=ea94a554dde32c42e130665c527ed8a177be5afa09da92ec4ea9eb9f45b2b85a56062bff40b2&scene=58&subscene=0": "谷歌修复由苹果报送的严重 Chrome 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521342&idx=2&sn=f31a6cd39b33c9b2bd7cd10c19169e81&chksm=ea94a554dde32c4280fdfcb682ecbd81e1802f47e0b691b8784f9c448c03289cbcd65c02d0fb&scene=58&subscene=0": "Opera 浏览器修复严重漏洞，可泄露用户信息", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523818&idx=1&sn=cc8b5b5a74093b7a22d801da1132bd66&chksm=ce4616faf9319fecfebae28dae8ce14b0cf427706a9de714ff032080609c0830726222f52a10&scene=58&subscene=0": "【漏洞通告】Spring Security 静态资源未授权访问漏洞(CVE-2024-38821)", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247486129&idx=1&sn=3bbbd1dcdb4a01b60c222f4c03f9034e&chksm=c1f44e79f683c76f71275d0ec73d9c3ea50dd75449eb7bfb10cdcd9147b93563c3e62d6ea701&scene=58&subscene=0": "「技术研报」以子之矛陷子之盾 · 用AI对AI漏洞的利用探索", "https://mp.weixin.qq.com/s?__biz=Mzg4MzU3MTcwNg==&mid=2247485823&idx=1&sn=e0e2cd99f757953e163e4ec3d8dccdf3": "记一次edusrc漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247487803&idx=1&sn=e035cdbd9c75fbd7e2a4f157e8ff1596": "KingPortal开发系统 kingclient 任意文件读取漏洞复现及POC", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489102&idx=1&sn=e436c94e09979e7fdf47fd9109dc4024": "【漏洞预警】PyTorch反序列化漏洞CVE-2024-48063", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485210&idx=1&sn=63c31c73b77a35e945817222ee66ee76": "【翻译】0day 代码审计 CyberPanel v2.3.6 RCE", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247487563&idx=1&sn=dadb2bd3a148fb3e1cd64f1707f785ff": "CVE-2024-38063：IPv6远程代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065645&idx=2&sn=77c5717f51ce4ad0db60c17c295d7d49": "【安全圈】热门摄像头曝零日漏洞，黑客借此入侵政府部门", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065645&idx=3&sn=77a3bd1b9376d22214d1764a39ccbcfb": "【安全圈】LiteSpeed缓存插件漏洞正对WordPress 网站构成重大风险", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485911&idx=1&sn=8fc8a06eaff8a30e5c870d8259f6d2ff": "「漏洞复现」F22服装管理软件系统 openfile.aspx 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzcwODQ0Ng==&mid=2247484033&idx=2&sn=b67b8ad347ea0cd24538bd99d42019d1": "【漏洞推送】CVE-2024-23897 文件读取漏洞（poc）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458580008&idx=2&sn=477b16b48e296bf88d2ad7ec6b81dfbf": "PTZ摄像头曝严重零日漏洞，黑客利用漏洞发起攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247522412&idx=1&sn=d948303b4a3110511090563e55017ff5": "RapidCMS 1.3.1代码审计 （超多漏洞点）", "https://mp.weixin.qq.com/s?__biz=MzI3ODk3ODE2OA==&mid=2247484373&idx=1&sn=cb9cf6754bfb3422c1199a404f122579": "各类勒索软件利用CyberPanel RCE严重漏洞无差别实施勒索攻击！", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458580008&idx=2&sn=477b16b48e296bf88d2ad7ec6b81dfbf&chksm=b18dc4a286fa4db434ee0d7e082ead04be9d5fa649871858014538e187deedb7554777709cf8&scene=58&subscene=0": "PTZ摄像头曝严重零日漏洞，黑客利用漏洞发起攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521357&idx=2&sn=dc9695c878770ba5390c627bc3e3681a&chksm=ea94a527dde32c31d351cd6dca491aa437fa8431c26df61f85217feb3f68a6a8070a59cfc195&scene=58&subscene=0": "开源客户端qBittorrent 修复已存在14年的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486059&idx=1&sn=47222bc64fb7a59d81b46147bf1c1df3&chksm=fb04c903cc734015bf6f159f27ff8d7a2210df186ff70093d8fed2e4c1b4cf656195b38e41dc&scene=58&subscene=0": "IBM X-Force 进攻性研究组(XOR)安全研究员", "https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247491610&idx=1&sn=438031527be962084da64f2670cadb29&chksm=ea484a5ddd3fc34bef2d60cd3b08851f246386a56f1a886279d24a86bed7a6dcf6f94161afb4&scene=58&subscene=0": "关于勒索防护的探讨（防入侵+数据恢复）；EDR主机安全管理、漏洞管理、资产管理的日报如何汇总统计；对威胁情报的讨论｜总第271周", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065645&idx=2&sn=77c5717f51ce4ad0db60c17c295d7d49&chksm=f36e632dc419ea3be15c455ff9750d3f460e878279abe47483f01b516b7e909fe59e89ff21b7&scene=58&subscene=0": "【安全圈】热门摄像头曝零日漏洞，黑客借此入侵政府部门", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065645&idx=3&sn=77a3bd1b9376d22214d1764a39ccbcfb&chksm=f36e632dc419ea3bc182f81324976058181f1909b7d1d7eaf616f592b4eb130862a2bf5c8242&scene=58&subscene=0": "【安全圈】LiteSpeed缓存插件漏洞正对WordPress 网站构成重大风险", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496260&idx=1&sn=389e904c78fac4570ca21f6ae5ad56b5": "一个价值【$2000】的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247516620&idx=1&sn=e117b52652f6e9f7f081b9551fc8ceb7": "【SRC】记一次实战小程序漏洞测试到严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065679&idx=3&sn=837c6f8a05d0deea042a4571a86897f5": "【安全圈】BT 客户端 qBittorrent 修复存在 14 年的远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485685&idx=1&sn=838e54bc45cab050c38c37137d553fa1": "CVE-2024-37383｜Roundcube Webmail存储型XSS漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485685&idx=2&sn=13428af7f389014028621bea8c536f63": "CVE-2024-43532｜Microsoft Remote Registry Service特权提升漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486110&idx=1&sn=ec77fd3511dcbf2344c05615c27f127d": "某edu供应商cms存在URL注入（通杀0day）", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247494580&idx=3&sn=20c8a26dfc67f5be797fbc55b1863089": "PTZ摄像头曝严重零日漏洞，黑客利用漏洞发起攻击", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485948&idx=1&sn=5379268e13fe9269e003aa3bb435e143": "(1day)某最新版快递微信小程序系统存在前台任意文件删除漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492069&idx=2&sn=36de75895b12de22074f18cfbfbccac1": "【PoC】Spring框架爆出严重漏洞CVE-2024-38821详解", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247522085&idx=1&sn=42efe18b02498de744de84434d5e1cb8": "使用 CodeQL 发现 Portainer 中的隐藏漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTUyNTI5OA==&mid=2247486298&idx=1&sn=925a50f99eaeb64dc0401aa2fababe5d": "【工具篇】Apache Shiro 反序列化漏洞检测与利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg5OTY2NjUxMw==&mid=2247513052&idx=2&sn=8ac9499394e27147aa0c69e5bc30d9c1": "漏洞扫描工具 -- vulcat", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065679&idx=3&sn=837c6f8a05d0deea042a4571a86897f5&chksm=f36e63cfc419ead9175f76caac71a824f76895371f4158517fdb542330ffeab1b09ddf1652de&scene=58&subscene=0": "【安全圈】BT 客户端 qBittorrent 修复存在 14 年的远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247488793&idx=1&sn=600d11f7470d5babb37801dd5ed65fa3": "英飞达医学影像存档与通信系统 WebUserLogin.asmx 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247631817&idx=2&sn=0ed49d551b896693f6ee10bd6af08488": "LiteSpeed缓存插件漏洞正对WordPress 网站构成重大风险", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489112&idx=1&sn=4091a1b02ed1720fac4784544ff29ef5": "【漏洞预警】泛微E-Cology QRcodeBuildAction SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487685&idx=1&sn=513f6f10d762dfcbd9844d6fbb7a78f1": "用友NC Cloud service∕esnserver接口存在任意文件上传漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247631892&idx=4&sn=7486d5bda90d3b4c016da44b9938b5d2": "首次利用大模型发现内存安全零日漏洞 (附大模型挖洞经验)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247516696&idx=1&sn=c4e0c1073d45876a00992736c5a0671b": "(SRC漏洞挖掘五)越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491048&idx=1&sn=d048136385519ecbe50e950e278c312d": "漏洞挖掘 | 全站一个Cookie鉴权，哪哪都能越", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485101&idx=1&sn=cb6b47bc40d3f0c3a270a14ca20ebb57": "漏洞推送|美特CRM sync_emp_weixin存在反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489931&idx=1&sn=b39c0c26a6e1015e54ba65799810e0bb": "Google 警告 Android 系统中存在被积极利用的 CVE-2024-43093 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTY4NTQwMg==&mid=2247483938&idx=1&sn=9faf94b4298a6188c09a87f82195b204": "新闻 | 谷歌大模型挖到0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521392&idx=1&sn=5ed582159f171db2001138a8ba65e297&chksm=ea94a51adde32c0c02371dadb481e0b6f1d6763dc98bc2b323c974300a40d061d2aa67a43277&scene=58&subscene=0": "用户名太长的坏处：Okta 修复认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521392&idx=2&sn=75cd21ca2fe9a85ff4068e97cde7a6cc&chksm=ea94a51adde32c0c617d16fed416a8b1c92c13c260ef7ec42b84c5f4a43aefdd7102fba9a980&scene=58&subscene=0": "PTZ摄像头中的严重0day漏洞遭利用", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499443&idx=1&sn=6d39e19c7eb6f9aa7a0e364b748bb603&chksm=973acdd1a04d44c790ef7b9e87d4d1759190e066421ee5179d4bfe544ca1dc718aa918dcf053&scene=58&subscene=0": "CNVD漏洞周报2024年第44期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499443&idx=2&sn=8486ce03af29247af53c30b12bd5cc7e&chksm=973acdd1a04d44c79048bf258e847f1b628920403efabc642a478fd5f507399d4c633b163a95&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241028-20241103)", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512989&idx=1&sn=3db390e902ccf6b370d33cf57039a63b&chksm=ebfaf4bddc8d7dabeb3eb7f7a2d1da640e786c734a47ba8735de0e749fac50d107c43658a4ff&scene=58&subscene=0": "首次利用大模型发现内存安全零日漏洞 (附大模型挖洞经验)", "https://mp.weixin.qq.com/s?__biz=MzkyMzE5ODExNQ==&mid=2247487460&idx=1&sn=8c5d9a22b844d923d9d5fb938bd920a0&chksm=c1e9f828f69e713ec32ee1ed21079a5963d0b11dce114958bb9d73c5ac60c4f0bebbbb951561&scene=58&subscene=0": "Open-Source Intelligence Summit 2024议题慢递", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065731&idx=2&sn=ec1234ec73aa6227c6092ac7f59a2a1d&chksm=f36e6383c419ea95b652d8e0d3e28f413e419b31f88142e6e6631f248ff8921ae09270e90b14&scene=58&subscene=0": "【安全圈】微软SharePoint RCE漏洞，安装火绒杀毒后导致安全防护崩溃", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065731&idx=4&sn=1865f8c94d510093c5028b8b63f9b02a&chksm=f36e6383c419ea9504d4986e57eb7b3947367eebcc2f52aa9f277891a3fa457671970378d39b&scene=58&subscene=0": "【安全圈】重大突破，谷歌AI大模型首次找到0Day漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247544687&idx=1&sn=22924643aa95c3eba97f52ac536b87a6&chksm=f9ebf1c2ce9c78d417a9c3bf74e40693061380d60191073390ff15d669dede4c58e61f807870&scene=58&subscene=0": "Wi-Fi测试套件漏洞入侵商用路由器 背后原因剖析", "https://mp.weixin.qq.com/s?__biz=MzkyMTQwNjA4NA==&mid=2247485118&idx=1&sn=eee78d9d95d9656113e2124fd9944b29": "Exp-ToolsV1.3.1更新", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247492554&idx=1&sn=79d368cda39d6845d7774be7e5c470a4": "0day 挖到手软，403 到 getshell", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489117&idx=1&sn=361148c5c0871789f40e6758bde5c3f7": "【漏洞预警】Google Chrome Serial释放后重用漏洞（CVE-2024-10827）", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489938&idx=1&sn=e959f5a5df92072bbe3d96fe05fab604": "Ollama AI模型发现六大漏洞，能导致DoS攻击、模型中毒", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521406&idx=1&sn=af981c3476e81115ffa11866a0bb7b7d&chksm=ea94a514dde32c02776e9a8a0d78022cfa4b713f7c32259d90a550950b10f2b9692a01826316&scene=58&subscene=0": "谷歌修复已遭利用的两个安卓 0day 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521406&idx=2&sn=1a37afaf7e8cd1893b64cc0183aae730&chksm=ea94a514dde32c02df3f45ffe36a3bc5f29632e75d87ca05c0296cf0f528796ba0a3a5facadd&scene=58&subscene=0": "Synology：速修复零点击RCE漏洞，影响数百万 NAS 设备", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458580536&idx=3&sn=07f91dc9d9d91ecd1ab33fbac3e076d5&chksm=b18dc6b286fa4fa41a3b684cde43528429157587b3b6285f0eea22c43c5ac73c742b29b405ba&scene=58&subscene=0": "Ollama AI框架发现严重漏洞，可能导致 DoS、模型盗窃和中毒", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065749&idx=1&sn=b8878258d3b73972d34180a4f45b9858&chksm=f36e6395c419ea83933909751917712797ee725716d53445c905e31288295910cc4fae20086d&scene=58&subscene=0": "【安全圈】Ollama AI模型发现六大漏洞，能导致DoS攻击、模型中毒", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485967&idx=1&sn=5a936d865874c1e2d229ae517527a9a2": "「漏洞复现」快递微信小程序系统 httpRequest 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487712&idx=1&sn=c689a918835d8fd979a54c56110824f5": "用友U8 Cloud uapbd.refdef.query接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg5NDU3NDA3OQ==&mid=2247490706&idx=1&sn=9000b39b5cf76ad0b2c04e1c6d61a3a8": "Nacos从快速发现到漏洞利用，没想到如此简单？", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247516769&idx=1&sn=ce9e6b53923a5ca91aa19e5a4f68b6c1": "有关漏洞挖掘的一些总结", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521416&idx=1&sn=dd174cdf4dec9fc76bae7be5c63bbd68&chksm=ea94a5e2dde32cf4e638ee3f72a13942731f386460354ea9e67337c58ebd9209a77a4d9c6b27&scene=58&subscene=0": "思科满分漏洞可使黑客以root身份运行任意命令", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523827&idx=1&sn=a926b2cc9de4cc0c3453404c3f6a5324&chksm=ce4616e3f9319ff5ff6983e8a22f17859ff07cad09a170c5648c9d7b0fce795ac301966aa60e&scene=58&subscene=0": "【漏洞通告】Google Chrome Serial释放重引用漏洞(CVE-2024-10827)", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247504292&idx=1&sn=63c9d389a9d50e5c4b5748b3a7214f45": "马自达信息娱乐系统存在零日漏洞，汽车面临接管攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496304&idx=1&sn=2c8db754f88f6dcc2b2a31ce0784c1c3": "一则SSRF漏洞的故事", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485108&idx=1&sn=48e8e3233f08d51fb2ae2540b1c2e39e": "漏洞推送|章管家listUploadIntelligent.htm存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487724&idx=1&sn=bc4ff16c25b5f725c98a97a4467bfe2f": "WordPress Time Clock插件存在远程代码执行漏洞CVE-2024-9593 附POC", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065786&idx=1&sn=195423ec6a9e07c9345dd1881df02828": "【安全圈】马自达车载信息娱乐系统 （IVI） 中的多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247531101&idx=2&sn=d95ca2f86113617ec76f711d47435df2": "聊热点｜工信部印发《工业和信息化领域数据安全事件应急预案 (试行)》、重大突破，谷歌AI大模型首次找到0Day漏洞……", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247544815&idx=1&sn=d83743a98032be2d6fe5d1fb19950a44": "高通芯片0Day漏洞事件分析及安全建议", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521429&idx=1&sn=8d164e84c96d33be487787e9f3024b73": "HPE：Aruba Networking 访问点中存在严重的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247494143&idx=1&sn=2824f44b6636aac11c899b6d79c8cb74": "【Pikachu】RCE远程命令执行实战", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458581737&idx=1&sn=11b4721ad2d8cab57cd181d05200a709": "SDC2024 议题回顾 | 探秘语法树：反编译引擎驱动自动化漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513033&idx=2&sn=ad9b7aed64a0dd5dbae5e6a488f7cdca": "Ollama AI框架被曝严重漏洞，可导致DoS、模型盗窃和中毒", "https://mp.weixin.qq.com/s?__biz=MzI0NzY1MDgyMw==&mid=2247512985&idx=2&sn=3adce1104c839e2306d519512d538937": "《中国信息安全》| 基于能力成熟度模型的车联网漏洞管理探索", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133278&idx=1&sn=84243d8902f4572a208cf40cfc2c6059&chksm=bd15a58d8a622c9bf5acd24730338536a7622347f3a7f49417c4d1a8628c883ff335a10108e2&scene=58&subscene=0": "加拿大政府以国家安全为由下令TikTok关闭在加业务；思科工业无线设备曝高危漏洞，未授权者也可获得root权限 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513033&idx=2&sn=ad9b7aed64a0dd5dbae5e6a488f7cdca&chksm=ebfaf4e9dc8d7dffafb2c9ad7e832bcfe9124a1a686531b7ba2c531a7eb307afc7ea1d614e93&scene=58&subscene=0": "Ollama AI框架被曝严重漏洞，可导致DoS、模型盗窃和中毒", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458581737&idx=1&sn=11b4721ad2d8cab57cd181d05200a709&chksm=b18dca6386fa4375804d8beb8353440531590367024d6230a89304c1be3dab81f5c7ed2d064b&scene=58&subscene=0": "SDC2024 议题回顾 | 探秘语法树：反编译引擎驱动自动化漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247486773&idx=1&sn=d265a545b7ba37c5291d890bb91d4528&chksm=c22295ccf5551cdaabeb73f0632d091dde76ca101a9b892a510a9e6f158243d848e01978010f&scene=58&subscene=0": "Xlight FTP Server整数溢出漏洞(CVE-2024-46483)分析与复现", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247579462&idx=1&sn=541bd360da0c5a0e969b17d37f31681c&chksm=e914677cde63ee6addc2f0510740f14706afe244ad9f07bb05ef43e5a56bceea731f0f8f06e5&scene=58&subscene=0": "Microsoft SharePoint RCE 漏洞可被利用来破坏公司网络", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065786&idx=1&sn=195423ec6a9e07c9345dd1881df02828&chksm=f36e63bac419eaac8777aacb1a9fd693375bd2abebbe6b09359966cf8140eccfc72dc10465b6&scene=58&subscene=0": "【安全圈】马自达车载信息娱乐系统 （IVI） 中的多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247544815&idx=1&sn=d83743a98032be2d6fe5d1fb19950a44&chksm=f9ebf142ce9c7854257c89dbe483c9ea46c9aebe738338be3bfd68e883f8e073baec2cb51950&scene=58&subscene=0": "高通芯片0Day漏洞事件分析及安全建议", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521429&idx=1&sn=8d164e84c96d33be487787e9f3024b73&chksm=ea94a5ffdde32ce9ee2d699be9c9511a6937a03eb2f97cedf23574474bd5683d6d9375d453b4&scene=58&subscene=0": "HPE：Aruba Networking 访问点中存在严重的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496304&idx=1&sn=2c8db754f88f6dcc2b2a31ce0784c1c3&chksm=e8a5f813dfd27105ffe5bb66e2b7b6b29c3acaa8ce510cc34d12a3298708abb33f91aa73efea&scene=58&subscene=0": "一则SSRF漏洞的故事", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484564&idx=1&sn=d9d85e66140fdd8d9dc110b7b55dfd95": "【漏洞复现】宏景人力资源信息管理系统uploadLogo任意文件上传", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484564&idx=2&sn=b07efea55f510216ba422ee7f05cf037": "【漏洞复现】蓝凌OA hrStaffWebService任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODY1NzEwMA==&mid=2247484559&idx=1&sn=dfa06985780ced7479518e5c4f1a7d1b": "1day ｜ 网神SecGate3600-A1500会话鉴权逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247516847&idx=2&sn=42974687df2f0be746a8c87ed3daf826": "建了个SRC专项漏洞知识库", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247567022&idx=2&sn=c328654f4fab285159092f50ab3bf509": "Web常见漏洞合集，420页Web应用安全权威指南（附PDF）", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491078&idx=1&sn=9801251a60e0eba261b3d56515676ce0": "某蓝星抖音快手微商城RCE漏洞审计", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247488988&idx=1&sn=97902a623e312af600c0ff3bf2d9a1ed": "万户 ezOFFICE SignatureEditFrm.jsp SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247489470&idx=1&sn=5f23e7f0e6637873fe59950a8d899e1d": "【必刷靶场】JavaSecLab-Java漏洞平台", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651306556&idx=2&sn=3544323a467462a66f36ec24cb615b41": "FreeBuf周报 | 谷歌AI大模型首次找到0Day漏洞；诺基亚被黑客攻击泄露大量数据", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492347&idx=1&sn=5c1f5626d796a237d2d06cf6196c837a": "近期暗网0day售卖情报与预警", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492347&idx=3&sn=1fc0229e77e5ee97f00aaeb516eaf468": "黑客称他们利用反作弊漏洞封禁了“数千名”《使命召唤》玩家", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650603262&idx=2&sn=ca2003ffa397c1b521dc28ce4711d769": "德国起草法律保护 IT 白帽黑客：发现并上报软件漏洞不用承担刑事责任", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650603262&idx=3&sn=c86a3f497bd78655e9c41dd9b76f387c": "某订货系统文件上传漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzk0MDY2NTY5Mw==&mid=2247485539&idx=1&sn=cc966d740f341ab5a0417166bafd8a37": "[含POC]宏景人力资源信息管理系统uploadLogo存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650962002&idx=1&sn=c3d5dc01f62b5b616729c291359c4b35": "记一次实战小程序漏洞测试到严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MTc1MjY5OQ==&mid=2247486133&idx=1&sn=febe31ffff79efcf3b3fdfac6080f7a7": "中间件安全|WebLogic漏洞汇总", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486040&idx=1&sn=6520123ba9bbe8eb5c7937f7be6fcf10": "(0day)API接口调用多用户管理系统存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247509188&idx=1&sn=47ae6fc613e62202d4e630f4456a6803": "黑客可利用系统漏洞访问马自达车辆控制系统", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247485022&idx=1&sn=8231fa01055d9cb41f3643ab3ed507bc": "利用现代二进制中的盲格式字符串漏洞：来自 2024 年 Pwn2Own 爱尔兰的案例研究", "https://mp.weixin.qq.com/s?__biz=Mzg5NDU3NDA3OQ==&mid=2247490728&idx=1&sn=b241414c796601ba5bce5a401730aa73": "一款简单好用的漏洞管理工具-miscan", "https://mp.weixin.qq.com/s?__biz=MzUyMTA0MjQ4NA==&mid=2247551185&idx=1&sn=8944d940a4a3cbb93b88c363dcc06c35": "简约风-tomcat漏洞批量弱口令检测、后台部署war包getshell", "https://mp.weixin.qq.com/s?__biz=MzUyMTA0MjQ4NA==&mid=2247551185&idx=2&sn=68605f476421afa6d5732501aedf2e9f": "一款Burpsuite自动化检测越权 未授权漏洞插件(更新至2024.8)|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485976&idx=1&sn=fd297219fc1ee88452e677d064b0f9e8": "「漏洞复现」用友U8 Cloud service∕approveservlet SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793046&idx=2&sn=f4615670d051892447c4cdd51a29a748": "趋势科技披露多款马自达车型的信息娱乐系统漏洞，可能导致黑客攻击", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487736&idx=1&sn=4865fc23b95914c8edf9a3f840699298": "苹果IOS端IPA签名工具Sign.php接口存在任意命令执行漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496316&idx=1&sn=8a590c6f1202155c857fa00dca4c64b5": "一次通过Fuzz API发现漏洞的旅程", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247516976&idx=1&sn=dbf4db2c9ecdf80631540cea1fc96cd0": "某订货系统文件上传漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzk0MzI2NzQ5MA==&mid=2247486497&idx=1&sn=b3eb5ff474acdd0cc864d1669bb2cad4": "Apache ActiveMQ RCE漏洞(CVE-2023-46604)复现", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485987&idx=1&sn=87decb8f8c57f3828c6a6fbb23befb14": "「漏洞复现」某融信运维安全审计系统 download 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247631989&idx=4&sn=ed86d7a8443251eaed3d096f5b140c5a": "马自达被曝存在多个漏洞，黑客可执行任意代码", "https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247526543&idx=2&sn=c5bc8e32ced91ffee1bdb2f2cb7035fa": "快讯 | 马自达被曝存在多个漏洞，黑客可执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496316&idx=1&sn=8a590c6f1202155c857fa00dca4c64b5&chksm=e8a5f81fdfd27109aa6cd4067712ca755580d1f65523c292dd551d62b8f48213cd2bb9c31565&scene=58&subscene=0": "一次通过Fuzz API发现漏洞的旅程", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489139&idx=1&sn=9d86286b4ba4ffbb4aed4a1e75de0ec0": "【漏洞预警】H3C CVM fileUpload∕fd文件上传限制不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487750&idx=1&sn=fe3f4129970c2a296fce00901f6135f0": "用友-U8-Cloud service∕approveservlet接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492618&idx=1&sn=90efb91aa4bbdd9061a6322293c9b6a6": "漏洞复现 || 苹果IOS端IPA签名工具Sign.php接口存在任意命令执行", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247486745&idx=1&sn=34d7a9d0d600f3840faaef07591563e7": "从上传到入侵：揭秘文件上传漏洞的操作原理", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517074&idx=1&sn=8e8f2792d26aebcbc1ba39a4c550a7b0": "Src挖掘之比较有意思的几个漏洞挖掘记录", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489958&idx=1&sn=cf0b97f0b058c73b649423d7a0ddccf5": "网络犯罪分子使用 Excel 漏洞来传播无文件 Remcos RAT 恶意软件", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485924&idx=1&sn=880e377ede7aa9c733bfcc7c142fb276": "综合信息收集、漏洞扫描工具 - ScopeSentry​", "https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649166815&idx=2&sn=dfa5665a0947b0341e0e6efd2a73fbc8": "马自达汽车因这些未修复的漏洞极易遭黑客攻击", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094001&idx=2&sn=3243b539bbf64fc0751ab34bb2a22230": "未修补的漏洞允许黑客攻击马自达汽车", "https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247514303&idx=1&sn=fe607654fc7f15f1a6013398469ae07b": "马自达爆出安全漏洞，影响旗下多款车型", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521440&idx=1&sn=3bf8ff26ce74c0c7fbfeb2701a773a5f": "Palo Alto Networks：注意潜在的 PAN-OS RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521440&idx=2&sn=1ddad70ced916d3fad493805c8d04d62": "D-Link 决定不修复这个严重漏洞，影响6万多台 NAS 设备", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291845&idx=1&sn=f381efe5ebe05970c8e7c676b0885b9f": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521440&idx=1&sn=3bf8ff26ce74c0c7fbfeb2701a773a5f&chksm=ea94a5cadde32cdc6e1e16ba74e79862839d2d877a3da3944d99e684a1413808b48093170e2d&scene=58&subscene=0": "Palo Alto Networks：注意潜在的 PAN-OS RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521440&idx=2&sn=1ddad70ced916d3fad493805c8d04d62&chksm=ea94a5cadde32cdc87209411ca0df0d1e6fb8603675b20af28c666afba8db536266ea1921ce3&scene=58&subscene=0": "D-Link 决定不修复这个严重漏洞，影响6万多台 NAS 设备", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787211&idx=1&sn=40b97f9c64321b8516bbca6631808119&chksm=8893bb24bfe43232f5c4d89a8a9182ee80048792ee10b961e085a263348adaf3286f09f46441&scene=58&subscene=0": "为什么AI开发者必须拥抱漏洞研究与透明度？", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458581829&idx=2&sn=ae51e18b3e301f060ae8410a32df301f&chksm=b18dcbcf86fa42d92bae8cc2f3715e847a91f7f6f73eeb8782b5f428961d44c44ae7b55be2fe&scene=58&subscene=0": "马自达汽车系统漏洞引发安全危机：黑客可执行任意代码", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458581829&idx=3&sn=c1ae7509c268529b0ebb8db6f9a20d3a&chksm=b18dcbcf86fa42d97d34d5f6076db35f779433e43f6c42f4a563ac9f84428a72ddfa7b3d70e8&scene=58&subscene=0": "【入门篇】Android漏洞挖掘，实战演示挖掘技巧", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496338&idx=1&sn=80a4550b2c47fcef3288062f68a563bf": "从404到RCE，挖洞像喝水一样简单", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489152&idx=1&sn=aeea13224eb88755f02f3d652be34508": "【漏洞预警】Php开源框架-Laravel注入漏洞CVE-2024-52301", "https://mp.weixin.qq.com/s?__biz=MzkwNjY1NjI2Mg==&mid=2247487295&idx=1&sn=e3e1be9ae9f24240a8b4e85cc8347f3c": "挖掘漏洞-小白到脚本小子的进阶之路(小脑篇)", "https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485200&idx=2&sn=9af87d8fa4683d81431cadfc8435582c": "全球警报：零日漏洞攻击激增，网络安全新挑战来袭！", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094015&idx=1&sn=9023a1408c4836ae401f7476ecc527ca": "【漏洞通告】微软11月多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MzI2NzQ5MA==&mid=2247486587&idx=1&sn=692958f6dd36e647baa4c44504b444e4": "nacos身份绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5OTk2OTY5MA==&mid=2247485640&idx=1&sn=8b123244b4bcdbba6b3b8b9b4af5fb41": "Microsoft 11 月 CVE 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247485068&idx=1&sn=674a8d6280af068e1fa586eb59d2c77d": "掌握内存利用：基础知识、栈溢出、Shellcode、格式化字符串漏洞等", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133346&idx=1&sn=556b9a1064dfd11eb639b71bf3c7c736&chksm=bd15a5718a622c672c53da29aef5997274bbc076900718fcd2bd1bf6ddb1760c8ce8c357fe49&scene=58&subscene=0": "为何1∕3企业安全事件源头没法追溯，审视网络安全管理的6大漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133346&idx=2&sn=633af7e95341eb332fdb5296c7c0da20&chksm=bd15a5718a622c674fd63d39c579d48a472c1a2711e8ae7dfb92d210e25d5d3c1e4d34db9ebc&scene=58&subscene=0": "首届“数证杯”电子数据取证分析大赛报名启动；Epson打印机设备曝严重安全漏洞，攻击者可创建恶意管理员账户 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650989809&idx=1&sn=59e24b139d616af6ecba7ffe4405ddd7&chksm=8079a6c3b70e2fd50cece8a352d2222de22473efc6ecc19ddf08f65ba6d3fb3a8b4047078050&scene=58&subscene=0": "原创 Paper | Vigor3900 固件仿真及漏洞分析(CVE-2024-44844、CVE-2024-44845)", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513066&idx=1&sn=1f1e58c9bfd0c64d48f2d26a4ec2332c&chksm=ebfaf4cadc8d7ddc5a473f4f05bf0906cba0f94f6fe531716ea0f290040eaebb75c627252e0a&scene=58&subscene=0": "多国警告：零日漏洞攻击暴涨已成为网空新常态", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502410&idx=1&sn=5d483b57bf88202bb0946f066ba9a44b&chksm=fe79eed2c90e67c41a2f098c2b66533fcbc9c8e2572efafeaca7cd51d9d2d91c35796baf4efa&scene=58&subscene=0": "微软11月补丁日多个产品安全漏洞风险通告：2个在野利用、4个紧急漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521471&idx=1&sn=c305cea275e183b3f69b86df88828903&chksm=ea94a5d5dde32cc3de89c8d966920d171d8349630c6c42a4ad744a7ce734c022a357c43519d2&scene=58&subscene=0": "刚刚，Citrix 修复两个易遭利用的0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521471&idx=2&sn=2629744498ede8666250667452c2766f&chksm=ea94a5d5dde32cc348c8039432e0d0951418935225bd4ede79c06e3f0aacb455fc798c61d85e&scene=58&subscene=0": "微软11月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523842&idx=2&sn=b9124857bac988d1212fa9b72549629b&chksm=ce461512f9319c043e349dec8f94b6e5d53de154021d2b931e26bef2d01d01918032954e50ee&scene=58&subscene=0": "深信服漏洞治理综合技术能力获认可！CNVD给予12星好评", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247520504&idx=1&sn=b4f2a0fd94ef8bd4ef87c2cd0aa0b248&chksm=eb704ec7dc07c7d1a4b07f3b4ed99fc0d7de9b4a11125b9156f0cd94c2ed29a91e2f973c8f37&scene=58&subscene=0": "2024-11微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496338&idx=1&sn=80a4550b2c47fcef3288062f68a563bf&chksm=e8a5f8f1dfd271e73f7a96e316bb30c524c33dff6b8683dcb37836bae99b3bee08af166e27a2&scene=58&subscene=0": "从404到RCE，挖洞像喝水一样简单", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzc3MTk3Mg==&mid=2247488799&idx=1&sn=3fcedfd76ad5aa653ae31e9acc7ceacc&chksm=cf841334f8f39a220d354f51b25fef6784eb2f9c79a2814e4aa8907e11c1f2a2f2a6f538533f&scene=58&subscene=0": "Apache OFBiz 命令执行漏洞分析（CVE-2024-45195、CVE-2024-45507）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489157&idx=1&sn=1f5ad72d63c024e79894451071bcb1ac": "【漏洞预警】GitLab Kubernetes集群代理未授权访问漏洞（CVE-2024-9693）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521484&idx=1&sn=19327f5e0d0275273114fd7a7e37da3f": "谷歌AI平台存在漏洞，可泄露企业的专有LLMs", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521484&idx=2&sn=719611812a4cbf91cb5c976ad2da4620": "FBI、CISA和NSA公布2023年利用最频繁的15个漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4Njg3MDk5Ng==&mid=2247486759&idx=1&sn=dd53a459259c153a9a8cf3f7c9e6fdc5": "【SRC】未授权访问漏洞引发的惨案.......", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247487681&idx=1&sn=272487de1db94994ad44bab74b936541": "Apache ZooKeeper Admin Server 身份验证绕过漏洞 CVE-2024-51504", "https://mp.weixin.qq.com/s?__biz=MzkyODYwODkyMA==&mid=2247484533&idx=1&sn=fa4a3fb451fbbb11eb51b8c4af9b934c": "2023年被利用最多的15个漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDMyNjI3Mg==&mid=2247487184&idx=1&sn=834e20b19fcffcda9a3357c7621d7bcc": "springboot环境下的写文件RCE", "https://mp.weixin.qq.com/s?__biz=Mzg4NTUwMzM1Ng==&mid=2247512694&idx=1&sn=f2d74047d65ae9a8657b28f183ba852a": "Web版Java Payload生成与漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkyODcwOTA4NA==&mid=2247486916&idx=1&sn=7a2cb57896a75ea4c2b63eabefcc72d2": "【海外SRC漏洞挖掘】参数FUZZ工具Bug修复+实战利用案例（任意用户接管）", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496744&idx=1&sn=b93dff4344d705e558e15a9eb491261e": "【漏洞通告】Ivanti Endpoint Manager SQL注入漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521484&idx=1&sn=19327f5e0d0275273114fd7a7e37da3f&chksm=ea94a5a6dde32cb0f0b1bd0f310958066fd5a8549d8aedabac5528fbd6f1b55d985e8385ecf6&scene=58&subscene=0": "谷歌AI平台存在漏洞，可泄露企业的专有LLMs", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521484&idx=2&sn=719611812a4cbf91cb5c976ad2da4620&chksm=ea94a5a6dde32cb0722d7e16df5083beb3411e14f366c8386689fe82083864c14070292098a6&scene=58&subscene=0": "FBI、CISA和NSA公布2023年利用最频繁的15个漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133384&idx=2&sn=7bdabf0f97b6003aa96c3e448d46105e&chksm=bd15a51b8a622c0dccc7d2c0206564f36a7dbd2031c63d8863c6c2c5a694753e8363b287d42a&scene=58&subscene=0": "以色列支付系统遭大规模网络攻击，全国加油站和商超一度瘫痪；Citrix录制管理器曝零日漏洞，未经验证即可实现远程代码执行 |牛览", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247522718&idx=1&sn=18565624c487f6ebbdffa5caafd44c03&chksm=c144eb23f6336235b6f2107a8e371a668fc4b23534fa198557c6052b928b515723d5b625fffa&scene=58&subscene=0": "马自达警报：黑客利用未补漏洞发动攻击，你的汽车安全吗？", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523847&idx=1&sn=39421de38a4fa902816ab76b8c05b09a&chksm=ce461517f9319c012f5450f8086b9a584c065fdc518b3ae960793d8160565168385a0e26edbd&scene=58&subscene=0": "【漏洞通告】Ivanti Endpoint Manager SQL注入漏洞(CVE-2024-50330)", "https://mp.weixin.qq.com/s?__biz=MzkxNzY0MzE2NQ==&mid=2247483950&idx=1&sn=f1b198ac63084dea04a2ad4503124b5a": "2024∕11∕14 CNVD漏洞跟踪复现报告", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247494285&idx=1&sn=1457a3d2448681e7a007c4daf8accd3b": "【Pikachu】PHP反序列化RCE实战", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496368&idx=1&sn=776d5575867f08de6b73d3b5ba545171": "从302到RCE，拿shell就像喝水一样简单", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496368&idx=1&sn=776d5575867f08de6b73d3b5ba545171&chksm=e8a5f8d3dfd271c579aa9dade1e836ea3788b9505ea767b835216a7b0b616ff932f766ae7e3c&scene=58&subscene=0": "从302到RCE，拿shell就像喝水一样简单", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496371&idx=1&sn=93ad4b6d65fb25b94f1496a72fb90ad1": "如何快速找到 RCE", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496371&idx=1&sn=93ad4b6d65fb25b94f1496a72fb90ad1&chksm=e8a5f8d0dfd271c6f011c293424a7b367c1e38d60c056a3117fe74af8c0a42ae72dbe8750171&scene=58&subscene=0": "如何快速找到 RCE", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133464&idx=2&sn=16e48bc09bde1b9e2e0b383257d60d2a&chksm=bd15a6cb8a622fdd7342748a49b9016e788160220efd1c253e0fae530e4375ba99d89fb3222e&scene=58&subscene=0": "美国国会图书馆邮件系统遭攻击，近9个月通信内容或泄露；ChatGPT沙箱环境存多个严重安全隐患，仅20%漏洞被修复 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492420&idx=1&sn=983ff5f33ddc1bf11baeca0a42b1516d&chksm=e90dc96ede7a4078dd37a6fa8042d5b533576a416e384248af4710dc495252353c671a1a9311&scene=58&subscene=0": "关键的 Windows漏洞使数百万台服务器面临攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247494359&idx=1&sn=73d1bfaf36566466761237f63dbc8251": "【DVWA】RCE远程命令执行实战", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247545694&idx=1&sn=08893a5d79ebcadd741a29b0a011327c&chksm=eb84d8fedcf351e8c814b2a07a2672d4d106b081847112b501146d33275db05bf23a5d669bbe&scene=58&subscene=0": "什么！这条PoC∕EXP的作者竟是？", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486109&idx=1&sn=ec2de28da805a6862479f62c88baa86f": "「漏洞复现」微信活码系统 ucenter∕index SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247496868&idx=1&sn=086918413912fb2d458b885b4ef7b36a&chksm=fa595a49cd2ed35f7c824e981f1b937ed1fc725ada05083e40abca7c120bf1f087a2949104b1&scene=58&subscene=0": ".NET内网实战：通过动态编译混淆代码执行Shellcode", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524569&idx=3&sn=94367f341068640a73141f77d8660cc1": "Ruby 3.4 通用 RCE 反序列化小工具链", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247496912&idx=2&sn=e31c73bcb3dd603db5bd1640d808e197&chksm=fa595a3dcd2ed32b0373269efe1cc1ccf6944719a00f03acf5d94547d4357dc79b2b6ea3e77d&scene=58&subscene=0": ".NET内网实战：通过动态编译混淆代码执行Shellcode", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486155&idx=1&sn=3a958fa80af2b26a774df1ce587f8218": "「漏洞复现」顺景ERP Download∕GetFile 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517424&idx=1&sn=f752827decb18a5d0f8b591374c8b49d": "从404到RCE，挖洞像喝水一样简单", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247484119&idx=1&sn=c39d95f9cf5532ea16ca05fd549f5fcb": "从 LFI 到 RCE 的旅程！！！", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486212&idx=1&sn=2c15b71df98eb927c666b4e0030fe500": "「漏洞复现」用友U8 CRM lead∕leadconversion.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484709&idx=1&sn=b9e726441e7c55aa51751d27d441bcd3&chksm=c12af8a4f65d71b20f4833b8438f7b19703ec3e2b75eea5769a49144a2e6957613009801c7e5&scene=58&subscene=0": "【复现】泛微 e-cology前台SQL注入漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486236&idx=1&sn=ab4b94dd00b317fbf6812afbb94bb15b": "「漏洞复现」用友NC yerfile∕down SQL注入漏洞(XVE-2024-34596)", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247485622&idx=1&sn=c6b1a76d598054eb86efa917775f6188": "Spring Properties 远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzkwODQyMjgwNg==&mid=2247485335&idx=1&sn=38f3023b39c5fd027dee549e09ba0eac": "用可命令执行的大模型进行偷家", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489592&idx=1&sn=d4b5b3b2d49bb277a97a0f4f1ade1c30": "用友NC ∕portal∕pt∕task∕process SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247512202&idx=2&sn=73814a49bc3d3b62dc7f2528d46458b9": "见证无限可能！火山引擎冬季 Force 大会开发者论坛来袭", "https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247512202&idx=2&sn=73814a49bc3d3b62dc7f2528d46458b9&chksm=e9d37b68dea4f27e6f64f1a323a67002693f5291b1781afa2b24fb19912db7beeefd95a65b26&scene=58&subscene=0": "见证无限可能！火山引擎冬季 Force 大会开发者论坛来袭", "https://mp.weixin.qq.com/s?__biz=MzAwNTczMjAzMg==&mid=2650239261&idx=1&sn=f15bf183207a5552c9f41fe325a94da3&chksm=831bf2b2b46c7ba49f5d2495c6783473d869a42151273dcb48466592200c9d4b660d52902c21&scene=58&subscene=0": "聚焦纽创信安 | 上海ICCAD 2024-Expo", "https://mp.weixin.qq.com/s?__biz=Mzg3NzYzODU5NQ==&mid=2247484894&idx=1&sn=513ddea2f76c9a5bc7e6b7e6986b9c25&chksm=cf1ea372f8692a649a82ba31296a0367a3ed3cbe91863b71f8d217351f73503a214f6d1fe09e&scene=58&subscene=0": "主机侧命令执行监测的规避", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484729&idx=1&sn=c4e43f6027f2caeeca0e8ac1610504d6&chksm=c12af8b8f65d71aec1a49d16f82e0099855d69377e7615d359fb7a7f8db99f6f5d5a418376a7&scene=58&subscene=0": "【复现】 Apache Struts 文件上传漏洞（CVE-2024-53677）风险通告", "https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653069382&idx=1&sn=dc216dec7a27133253dec39e9f725188&chksm=7e57ddf0492054e651e2d5da482f15d83be9df05fa44b26a4e380e2aa8b1c24105a1096d917a&scene=58&subscene=0": "看见创新力量！极客公园 2024 年度「InnoForce 50」发布", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247494891&idx=1&sn=7ced433ec09c940da8d57846e884096d": "【bWAPP】OS Command Injection(Blind)&PHP Code Injection 系统命令执行", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzc3MTk3Mg==&mid=2247488827&idx=1&sn=f3086118f07d69c4ba6746464f993e16&chksm=cf841310f8f39a06855e329956e6033407a0a66e4e90bb99d1ad3153c4241036054b9fa9ff7a&scene=58&subscene=0": "Apache Solr 身份验证绕过漏洞分析（CVE-2024-45216）", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzc3MTk3Mg==&mid=2247488851&idx=1&sn=efb4d5fe76d020e05760236c16b33ac5&chksm=cf841378f8f39a6eab0cdfd36b2528308afa3d73035190c02720c94c9d17a0b7629e7a6ece5b&scene=58&subscene=0": "Apache Struts2 文件上传漏洞分析（CVE-2024-53677）", "https://mp.weixin.qq.com/s?__biz=MzkwMzcwMDU5OA==&mid=2247484107&idx=1&sn=efc2381710f01860a5727090f7f992f4": "记录一次RCE无回显突破内网隔离", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488790&idx=1&sn=376728eef98af14fb13112cf8db0c80d&chksm=c2c6421df5b1cb0bf4d652a5327391b380ed9f96e669ea2f562500cca152e6b8f911693e7459&scene=58&subscene=0": "【处置手册】Apache Tomcat条件竞争代码执行漏洞（CVE-2024-50379∕CVE-2024-56337）", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492485&idx=1&sn=34cb96ae174f9f538a189541e923423a&chksm=e90dc9afde7a40b9a9fbbd74a45b7d9d4125bcc18dfcdad745f47c36a2b3b575db7f8407fa99&scene=58&subscene=0": "以色列NSO Group公司利用WhatsApp漏洞部署间谍软件展开APT网络攻击", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580480&idx=2&sn=22f89a7412dbbbf2caf0286dbef998ec": "Apache 修复 Tomcat Web 服务器中的远程代码执行绕过问题", "https://mp.weixin.qq.com/s?__biz=MzU0NDc0NTY3OQ==&mid=2247488323&idx=1&sn=48b714fc62e8ad09f232a9ee6ee1fd02": "【漏洞通告】Apache Tomcat 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247486184&idx=1&sn=5c1bd5ddbc40812af82fbfa7a9f22770": "（滥用） ClickOnce 实现可信任意代码执行", "https://mp.weixin.qq.com/s?__biz=Mzg5NTUyNTI5OA==&mid=2247486378&idx=1&sn=e03dd256a0ee13f3f03024f4de886e7a": "edu挖掘从弱口令到RCE", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496813&idx=1&sn=eab6d19d242d637c1797d76ec3ae43fa&chksm=e8a5fe0edfd277188a3ce54336fe9ddf992716daadef1e899d9d6e4de34f5c25335a2222782c&scene=58&subscene=0": "从 SQL 注入到远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492518&idx=1&sn=d4196de8b812e3a2d29209b50328cec0&chksm=e90dc98cde7a409a795581029d39c4e66bc71c3ad662c7e7c84782d0baae9a74a858889ab838&scene=58&subscene=0": "网络安全领域研究人员遭遇假PoC专项攻击", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487032&idx=1&sn=3953d7b15c531d645369722844c65578": "Lua项目下SSRF利用Redis文件覆盖lua回显RCE", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247488263&idx=1&sn=269b6a44555f773dd66be01cffb6ef76": "从302到RCE，拿shell就像喝水一样简单", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488860&idx=1&sn=d1d87ac982c32f01e05fc74e29efccff&chksm=c2c64257f5b1cb416e9fd6d3a45e35247f42e76947e51170f466288638bc9ff50a5e290f30c1&scene=58&subscene=0": "【漏洞通告】Rsync缓冲区溢出与信息泄露漏洞（CVE-2024-12084∕CVE-2024-12085）", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492698&idx=1&sn=31b2a6d8629fb3f69e5a9c159e42c650&chksm=96f7fb37a1807221e222b2e62698c88569521b9b0ec86deebfe7d0dab53b302b142b23b9358f&scene=58&subscene=0": "【已复现】Fortinet FortiOS∕FortiProxy 认证绕过漏洞（CVE-2024-55591）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067407&idx=3&sn=8ab61dc14be99150b80875b0242ba5ee&chksm=f36e7a0fc419f31991628c4d2745df5c3bc235f99efb1f272830e57fe97a8ce3d84f7a21bcb2&scene=58&subscene=0": "【安全圈】超过 660,000 个 Rsync 服务器遭受代码执行攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518264&idx=1&sn=6823adc5590ea93b5292ad7b512fc377": "$40,000！如何将路径遍历升级为RCE！", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496907&idx=1&sn=bf65d0102436150a0dc5482d51b5c998": "$40,000的RCE！", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496907&idx=1&sn=bf65d0102436150a0dc5482d51b5c998&chksm=e8a5fea8dfd277be56fc6d30fe19c8d65094b9ea55e1628f0c5742c243d612eee6b973167e6b&scene=58&subscene=0": "$40,000的RCE！", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492526&idx=1&sn=247ea35cbbd8abee04db13ecd2a84025&chksm=e90dc984de7a4092b4afde879c894da6d97959d30ded3154090dba8f222c4e460b1ee2a8519b&scene=58&subscene=0": "因WordPress新漏洞，全球数百万网站面临被攻击风险", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067526&idx=4&sn=b3d1ba063b429d95b1315af7a9713b77&chksm=f36e7a86c419f390195cd33fd72a55eb69f0bae4bcd587dd7e23f6258b3c8848d14b5fba092e&scene=58&subscene=0": "【安全圈】OWASP 2025 年十大漏洞 – 被利用∕发现的最严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652114147&idx=1&sn=257856caede83532d8fbbbbaa718c6be": "OWASP 2025年十大漏洞–被利用∕发现的最严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490021&idx=2&sn=78ca373b771055bfce301e58e2d94839": "渗透技巧 | 小白都能会的通用漏洞挖掘技巧", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490313&idx=1&sn=74c67202db6cc3e463b34c9f381ceebf": "博斯外贸管理软件V6.0 log∕logined.jsp SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527156&idx=1&sn=ce41716d54949eb8045c2dec96ee44a6": "在受限的 Rails 应用程序中通过任意文件写入实现 RCE", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518315&idx=1&sn=5664abc72c27c8258f88adcb7ac37b50": "从 LFI 到 RCE 的旅程！！！", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490023&idx=3&sn=254de260da45916c1b80cf6eee6c4ed4": "对 404 站点的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI0NjA3Mzk2NQ==&mid=2247496095&idx=1&sn=4bba7300e436e3e9e1eb11a361c42c25": "攻防靶场(54)：从LFI到RCE", "https://mp.weixin.qq.com/s?__biz=Mzg2MjYxODQ4Mw==&mid=2247484982&idx=1&sn=226d2daae237f9ead22b087b2611e457": "UbuntuServer24.04上使用NVIDIA GeForce RTX 4060Ti部署并训练DeepSeek R1大模型", "https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037457&idx=1&sn=32e47044585804b9f31934fb3a7a3f5c": "Redis数据库主从复制RCE影响分析", "https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037458&idx=1&sn=0ee75174afec20a34c3f3243329d42e4": "无参数读文件和RCE的利用研究", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247570693&idx=1&sn=91430db87cc7d4fe301b95d1c68fda36": "21.4k star,开源安全漏洞扫描神器，可集成CI∕CD", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527476&idx=1&sn=3c6e650cd3989e4318e4de87b1cab4a3": "Microsoft SQL Server 中的 RCE：探索错误配置并获得命令执行能力", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497057&idx=1&sn=42c4340829ae711582db88434152f996": "任意文件读取rce", "https://mp.weixin.qq.com/s?__biz=MzkzNzg4MTI0NQ==&mid=2247485520&idx=1&sn=e4925fcac21853b179581f4104118a38": "CTFHub-RCE题目wp", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497057&idx=1&sn=42c4340829ae711582db88434152f996&chksm=e8a5ff02dfd2761440e3cd7b38f1a2a845e5a66ac40336e851191a7ed141d130c8c8df1efc33&scene=58&subscene=0": "任意文件读取rce", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490027&idx=3&sn=a55241cb4ad74dea7e2a68b523143d8c": "Tabby 2.0 自动化代码静态审计：CVE-2024-53675&53676 HPE IRS XXE&RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492534&idx=1&sn=61ec9a86fe31f884fa4184f67dc9097e&chksm=e90dc99cde7a408ad941003edd68c1a1b59dfbc542e9105616e3e6ab01b75a4a9dea867d58db&scene=58&subscene=0": "朝鲜APT组织Kimsuky利用新型恶意软件ForceCopy发动网络攻击", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247546875&idx=1&sn=d9b18c05b05ea8484c12487babb3a2d5&chksm=f9ebe956ce9c6040247d660dbf932319455da5e20940c069063e8bea74558abb03599f55f5cf&scene=58&subscene=0": "一月漏洞信息简报", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487102&idx=1&sn=cba6188bace0bf873c12474f7685fdd1": "通过 ROP 实现 RCE", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094783&idx=2&sn=87b91e610336b534cc5d4cdcf539aae7": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487125&idx=1&sn=5d3ee2705a46c90599478e027fbeb548": "探索堆利用机制：深入理解 House of Force 攻击技术", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MjAwNQ==&mid=2247486782&idx=1&sn=c600479f6914a1a887f7c345c57c86fd": "从路径遍历到RCE：解锁$40,000赏金的黑客进阶之路", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247505047&idx=1&sn=24e6bb5aea2968471e3bde09e7dac13d": "我如何入侵荷兰政府：利用无辜图像进行远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497094&idx=1&sn=fd7fe711af4c15fb8cc6bd275d1e15b8": "通过供应链发起的RCE攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497094&idx=1&sn=fd7fe711af4c15fb8cc6bd275d1e15b8&chksm=e8a5ffe5dfd276f357da7fd881af1d4fdc80b39ba455245f9ba2a7ae9eb8da4638733ec29b73&scene=58&subscene=0": "通过供应链发起的RCE攻击", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247492585&idx=1&sn=0e00cf9c90545a036b2dfd1a3025966d": "实战 | EDU 某些985∕211证书站 (漏洞挖掘)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522246&idx=2&sn=fbca692993726f368c05fa16b80eb5a8": "新型 “whoAMI” 攻击利用AWS AMI 名称混淆实现远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522246&idx=2&sn=fbca692993726f368c05fa16b80eb5a8&chksm=ea94a6acdde32fba818898dc5b3793d9312e2f4883cf817d13cb650172d5a2898b6b96717130&scene=58&subscene=0": "新型 “whoAMI” 攻击利用AWS AMI 名称混淆实现远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488037&idx=1&sn=e95060073c6bd35b738e6465d0b60b50": "漏洞预警 用友 UFIDA NC portal∕pt∕office∕checkekey 接口存在 SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497171&idx=1&sn=8ca08a7437f1a26a0c136af6fda98438": "从开放重定向到远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497171&idx=1&sn=8ca08a7437f1a26a0c136af6fda98438&chksm=e8a5ffb0dfd276a6d18a974e8e5a98377b41ace5f8fa8630955361d271604ac952982eda96f4&scene=58&subscene=0": "从开放重定向到远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247510554&idx=1&sn=42c98f4263928e124525e90ee39adbc6&chksm=fa527fa4cd25f6b24ecff2015fd9c0adae0adf7f648e7d55c4ce7824d72ea227aac38fd43b44&scene=58&subscene=0": "通过ROP实现RCE的一次技术探索之旅", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488094&idx=1&sn=017c55356ea1da2d85e1726e6695cfc9": "方正畅享全媒体新闻采编系统reportCenter.do∕screen.do接口存在SQL注入 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247510936&idx=1&sn=900e317a8277593e850658cd395d3cc5&chksm=fa527e26cd25f73060aa8891de74b5a990928c7dbdf8f75a8e7e61a2d19bbece7666ceaacad2&scene=58&subscene=0": "Apache MINA CVE-2024-52046漏洞复现分析", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497210&idx=1&sn=ccc4160591fb0b69fea00023035d6b2e&chksm=e8a5ff99dfd2768faeb837ce640c41bf2e04ff2a2b13bde9c0a3da1d8367b5bb5ffd05932884&scene=58&subscene=0": "【漏洞挖掘技巧】新手师傅从0到1如何挖洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484341&idx=1&sn=a46a82777c2e17a48608a61876ca6b8b&chksm=c006cb45f77142533dcef205389e16dc8a4aaf4b85364271e1969a646bff7d10079056ee660b&scene=58&subscene=0": "应用安全不仅仅是漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488323&idx=1&sn=086e4caa87776a8beceee9e29aacf5be": "用友crm客户关系管理borrowout∕ajaxgetborrowdata.php接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489903&idx=1&sn=45b60628a72c9d08161aaff449250ee7": "【漏洞预警】PgAdmin远程代码执行漏洞CVE-2025-2945", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247491094&idx=1&sn=64efc1868367b9b6eaf2b6e29255b4f3": "一行代码引发的灾难：PHP文件包含漏洞全面剖析与防御", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486454&idx=2&sn=cbab7efd444f59e85a05e6533d64937e": "玲珑安全第六期漏洞挖掘培训开启！福利多多，速来围观！", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486454&idx=5&sn=a20e29ef98478fbcdddf3c5d1ab5b030": "\"0day\"漏洞裤", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486673&idx=1&sn=c2ca26d2b8ad1423184df53dd95a00b6": "【漏洞预警】pgAdmin 远程代码执行漏洞（CVE-2025-2945）", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651317886&idx=3&sn=183f8704e264104213ccad7bd5d4ec2d": "谷歌修复安卓系统中遭攻击利用的两个零日漏洞及其他60处缺陷", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068959&idx=4&sn=e57a187e3a257c344e9371d382cfa185": "【安全圈】Dell PowerProtect 系统漏洞可让远程攻击者执行任意命令", "https://mp.weixin.qq.com/s?__biz=MzU0NjU5NDE4Mg==&mid=2247485575&idx=1&sn=868a7708d13adce2fb67a49e090f7846": "EMQX后台插件命令执行", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068976&idx=3&sn=f9111a0c6b1ffd4f0343440dd3e28f00&subscene=0": "【安全圈】假冒 Microsoft Office 插件工具通过 SourceForge 推送恶意软件", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499392&idx=3&sn=39ea8ccae55109a2df63bb3741bf2c1a&subscene=0": "突破 .NET 身份认证，上传定制化 web.config 实现RCE", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581892&idx=1&sn=cfdb826f07e961227de9a4eea2dac941&subscene=0": "滥用WooCommerce API的梳理工具在PyPI上下载了34000次", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247547487&idx=1&sn=c830ae49e2dce87e99ce5c6f7b7e5344&subscene=0": "三月漏洞信息简报", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581907&idx=1&sn=8427207ebd9d65dbf78eb5299105c613&subscene=0": "假冒的微软Office插件工具通过SourceForge推送恶意软件", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458592315&idx=3&sn=015a7f7e6a2c5be21c61063231419004&subscene=0": "440万用户记录被出售，黑客声称入侵WooCommerce电商平台", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497401&idx=1&sn=90eda1b06e1f03b62249f21e6509a522": "RCE", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497401&idx=1&sn=90eda1b06e1f03b62249f21e6509a522&subscene=0": "RCE", "https://mp.weixin.qq.com/s?__biz=MzkxNjc0ODA3NQ==&mid=2247483905&idx=1&sn=bb01f1a332c9f8a8f1bfcbb3c3e93448": "如何发现AI chatbot 中的RCE", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484846&idx=1&sn=6b0b65d2a82971a0756c5fb755742bf9&subscene=0": "泛微Ecology后台远程代码执行漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458480115&idx=1&sn=8e3211890f0da696ad3be2371a2fe2eb&chksm=b18e5d7986f9d46faeddc98950ea0a2f82fbac0677c761cef3fc43934133aa9563e5ef59fa8b&scene=58&subscene=0": "CVE-2018-17463详细分析及复现", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491615&idx=1&sn=a03326f5f60da16680f0f7f3b7b9bec5&chksm=fe26e51ec9516c08b1410d7449e843bd20ca49e9aaba4743e42950d3572bf1dd79f11e5118f4&scene=58&subscene=0": "CVE-2022-34721：Windows IKE协议扩展远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247532917&idx=2&sn=0e3d66662a5333079a98caca45c6bb12&chksm=c1e9cd24f69e443285f1c3913b94c8f11cb97997cff79b8fa6825906e859d0186c8886403725&scene=58&subscene=0": "新攻击利用Windows安全绕过 0 day 漏洞投放恶意软件", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514814&idx=1&sn=4b21aca000d15beda25426bb096a28d7&chksm=ea948bd4dde302c24b745c39ef1eac1f344225d97e67e0eea5c1563b626468ec92c838104593&scene=58&subscene=0": "思科ISE多个漏洞可用于一次点击exploit", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514814&idx=2&sn=d77760825e29cde63586a63c502a43c9&chksm=ea948bd4dde302c23aaeb3cca7bc0319a84411de5600ffbdd5a3f0b8d9241858e091fa9b19f8&scene=58&subscene=0": "华硕修复可禁用安全启动程序的UEFI漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247497097&idx=1&sn=5ec364d92f62c6b8c09c491aa4b6cfe3&chksm=c1448734f6330e227feecbdf9830cb5f9029815a32dc7204b64b02944cf3f71d98b50537f5ae&scene=58&subscene=0": "[调研]错误配置和漏洞成云安全最大风险", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247487282&idx=1&sn=88d6db85d37a02aa7331b7a20dbff1b7&chksm=fa5aa1dfcd2d28c93201241a496cac457930c9cff11a69df8637a37dd3c3af7957deb9ac4693&scene=58&subscene=0": ".NET 任意文件下载漏洞绕过", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247535287&idx=3&sn=e347508d2b0b26476aeb9b5453a4fefb&chksm=fa93fc76cde47560a39c163459ac3ee95b4d38d58704dc7249aa321cd119023aba4654e8c37e&scene=58&subscene=0": "TPM 2.0安全漏洞可窃取加密密钥", "https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247491091&idx=1&sn=2e92be66d078b12bd4accecc94a1c267&chksm=c187de02f6f05714718695b4ba38c4d8a2b3a2f38cff218afdf39da87f489fe21aef06f5b8d6&scene=58&subscene=0": "CVE-2023-21752 Windows 备份服务漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247501760&idx=1&sn=a6b0688f0dfc67ca43e21be3770fe318&chksm=cfcaa4d4f8bd2dc29c46295b156d66aa21bae973c4430b67d81dc0afcf97422c362f717b4ead&scene=58&subscene=0": "0day通告｜用友 NC 反序列化远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458504808&idx=2&sn=f1c6d6a58ddd92dfaa4efef07369e9ca&chksm=b18efee286f977f4ad8ff4541fb08e58550bc673a64fdf7fe5dcf88ee36cb3e95724028443c1&scene=58&subscene=0": "直播预告 | 系统0day安全-boa漏洞挖掘实战", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516580&idx=2&sn=fee108ee4d61523b8dc544a5c1bfd2b8&chksm=ea94b0cedde339d822e3ed4ea277e795e733ad86df5ff4de2e3d1c97f16ea72d051b98a2395c&scene=58&subscene=0": "Barracuda 邮件网关遭 0day 漏洞利用攻击", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487263&idx=1&sn=3bba56ec214c0123d4d8add0f4325e57&chksm=fb028247cc750b51f0899a6430cd5a51459a6af48305e106c11500ba95a4ff82fe37821c03aa&scene=58&subscene=0": "Azure Functions 上未经身份验证的 SSRF 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498936&idx=1&sn=8be5979ad8dcb3db66ed76590f2e87a1&chksm=fe79d820c90e5136a83023fd6346c09eb26c0df43e1eaf5dfba2e4d45c715898252b33b37b5a&scene=58&subscene=0": "为了做好这件事，他们在漏洞堆里挖呀挖呀挖", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247491714&idx=1&sn=aba7be143506bbef9329eaeb52557b35&chksm=e8a5eae1dfd263f7aac84cf815247cbc5f5bb7f2c51e69e8c3ec7d7e9b264b00e629fd1aae73&scene=58&subscene=0": "GraphQL中api漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517466&idx=1&sn=56ec3d83af97ad62084124c205e2349b&chksm=ea94b470dde33d66e66beaa6ad53e44d25babf2e6c0517f8b86135be8ba15399ba13dcea6b78&scene=58&subscene=0": "数千台未修复 Openfire XMPP 服务器仍易受高危漏洞影响", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458515490&idx=4&sn=85a285318e4ff0158c7304b182bb1097&chksm=b18ec8a886f941be5cfb760d9ad76a8f3b8b8b53989d71bfb96e7063a9c83071d57bf73e0b52&scene=58&subscene=0": "CVE复现漏洞精讲-从基础到入门", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493761&idx=1&sn=3f1a17ad2be1ca942cab1e8ac0d1977a&chksm=fd74d848ca03515ecb806117d2d72b4f13726fba04f3a43a51c626b2be587c5bde5a90b302bb&scene=58&subscene=0": "CNVD漏洞周报2023年第34期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493761&idx=2&sn=74200ae252e0743fbb393b6c1b383053&chksm=fd74d848ca03515e69520fe0619dadc83d6d7ef59513fe4716014fa667fa65861fc66558470c&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230821-20230827)", "https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247491365&idx=2&sn=52810aeff38a65a8b6bc920141cb26c8&chksm=ec1bfef6db6c77e0974d0e8d362bbf474e34aea742d4af5b799bd6a5231bc8aaa07d592a062f&scene=58&subscene=0": "爬虫漏洞活动，翻倍奖励长期有效", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650178496&idx=1&sn=553331af63986690a2e2ba1b22e3eab8&chksm=f448787cc33ff16ab50d1eb7a4fdcf319eb7dfbe0b244d0a9b9a568a1876cd402a6601fe3754&scene=58&subscene=0": "不是我懒，王者级漏洞真不用修！", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247495205&idx=1&sn=478d16827a5d93cb0471b6771214aae0&chksm=fe26eb24c95162320fd4e30a73e995bfa260d162566931d652aa249e11841879073637c0534b&scene=58&subscene=0": "CVE-2023-38831：RARLAB WinRAR代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247495205&idx=2&sn=2bfbb15158e63bcc9f3fc002bac4435f&chksm=fe26eb24c95162324fd1e3dff521985c96b0556450e3c8469dd20526430cceef9b945d659c1f&scene=58&subscene=0": "CVE-2023-36874：Windows 错误报告服务权限提升漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509634&idx=2&sn=4e60c4c5baa19987a0a12486feeb93da&chksm=ebfae1a2dc8d68b44db885d87cc5a6d1dbd958ebdadfff1993fda4ff826cc464f346e607a022&scene=58&subscene=0": "多省农信社网银存在漏洞，被非法窃取百万条银行卡信息", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247491725&idx=1&sn=e33912dbd54c0fffafe5e97d5fb60e0a&chksm=e8a5eaeedfd263f8c6cbc5d3e358632738c7b5ac8c0a8fa553aab3d6579c4dc09f8b4ad6c602&scene=58&subscene=0": "记一次神奇的垂直越权漏洞挖掘案例", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247564239&idx=2&sn=4c1eaabae9f1c620b44292ad4e52fecb&chksm=9f8d6bc7a8fae2d157a2c3d1e3e7331789959e133d3d951c69b13eee36b8b89478543a4d3557&scene=58&subscene=0": "360亮相HITBSecConf 2023，独家揭秘重磅漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247564239&idx=4&sn=b1ddbbacc3c61ef4480c628759e8644e&chksm=9f8d6bc7a8fae2d16844a2963dc13cc0d36dba0395cd30ff7ffe8b261de6f1b4218a0e0ca929&scene=58&subscene=0": "WinRAR被曝0day漏洞，360第一时间全网拦截", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517476&idx=1&sn=0c931ea491e1ceec5bc4d0c6633d9fea&chksm=ea94b44edde33d587886a4ead4f7e7be77d88f83456be4274728de062d3cbe95501c219bff65&scene=58&subscene=0": "Rapid7 2023年中威胁局势回顾：勒索攻击ROI仍高居不下；0day 漏洞利用规模扩大", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247539381&idx=2&sn=234a0391fcc1af16246f3f121beaf17b&chksm=c1e9d6e4f69e5ff283c154a90f31df04bed58548913f20d25b9cb66934221da6b51b6fc85280&scene=58&subscene=0": "WinRAR再爆0 day漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498627&idx=2&sn=3afcf636bcffb68fe623e46f26a0fa0a&chksm=973ac8e1a04d41f7590c540c7cca946bc898ec95d7a2d3e4f70521630cbd6cc4b9db896f790e&scene=58&subscene=0": "CNVD漏洞周报2023年第34期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498627&idx=3&sn=b887f4dbaf0453d739c0ed5b4c3aee25&chksm=973ac8e1a04d41f7c53762254b8b3716fd9186533ea311a645f9f57f69d90f3244bab948c5dd&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230821-20230827)", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487948&idx=1&sn=0796075e9677c3c3fd251545998f416f&chksm=fb029c94cc7515825b6f185be93bf0457e1ef928d851d8456db7af2ae353ee20844c84104f34&scene=58&subscene=0": "攻防好工具Java RMI 漏洞扫描器：remote-method-guesser", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785376&idx=1&sn=91f9f423188b48c275fc482dbf36f0e4&chksm=8893b44fbfe43d59bad9020996d8c3dbf17a87a49eed0ffaeb57e5f357e85f57b405c107305d&scene=58&subscene=0": "CVE-2023-36900 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785376&idx=2&sn=2c3ebd6d77c9494ae8b315a6a3a8a6b8&chksm=8893b44fbfe43d59df0c8f1fdaf361acdffc49c04b3eca8d4d1a8115f69f9c1e16cf821fcd63&scene=58&subscene=0": "WinRAR被曝0day漏洞，360第一时间全网拦截", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247488459&idx=1&sn=1d60fe9199f0b617fd6689f71f395a42&chksm=fa5abd26cd2d3430754fa51845e229af40b783653d133c6316db36771ea0c951666c8db470c5&scene=58&subscene=0": ".NET 序列化生成 JavaScriptSerializer Poc", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509655&idx=1&sn=0af44b6f2001ca28def6b10700f8ff04&chksm=ebfae1b7dc8d68a1df22465aed5dd79d57e4e2dc8faecd64abacb80737442d396e3731912cb0&scene=58&subscene=0": "美国政府通过漏洞披露计划修复上千个漏洞，强制漏洞披露成为最佳实践", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517495&idx=2&sn=f20e793a89665c09e42c6341755a3e88&chksm=ea94b45ddde33d4bec3d0c06c238e806e9061130fc138a24354059fe0f857cafc9054fe04e3c&scene=58&subscene=0": "VMware 修复网络监控产品中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785436&idx=1&sn=71d2dcb9c61b5b22ac03a9c8e3d1408f&chksm=8893b433bfe43d25abb0c700484fb3e19c4ad820f2ce502900d73da5855689a2d762fc794b14&scene=58&subscene=0": "【漏洞复现】Typora 远程代码执行漏洞(CVE-2023-2317)", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785436&idx=2&sn=3d2f85e224251932c9b6d433fe75b813&chksm=8893b433bfe43d2539407b83b1193ef3a5792107a7643250e04eb16fa0d4e35528e9f1f639c3&scene=58&subscene=0": "两个漏洞的故事 - 分解 CVE-2023-36884 和感染链", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499456&idx=1&sn=23098ef44ead21565402a43ddbe1fb83&chksm=fe79da58c90e534e28c7d33469f3ee1b546bbabb5a17d59e9f12bc59973ca8173b478bffa53f&scene=58&subscene=0": "VMware Aria Operations for Networks 身份认证绕过漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247495398&idx=1&sn=62f9636ff07e4dd71819f5f2316d350c&chksm=fe26ebe7c95162f1269c3d7b90f7fc0d854cd27ec6f8d4e7e56023b5dca0021936ad6506c9f6&scene=58&subscene=0": "VMware Aria Operations for Networks 身份认证绕过漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517509&idx=1&sn=2d5195a93e5a896c8beec87780a35783&chksm=ea94b42fdde33d39b1462cc81add2c73f67959e0e0001bef9b626bf291bd9d747b7ee2e00615&scene=58&subscene=0": "严重的BGP 漏洞可导致长时间断网，一些厂商仍未修复", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487959&idx=1&sn=ec1d60812cbf898ea8c743f7f8a0dc36&chksm=fb029c8fcc7515997ccb91bc75a93ef3bad8d8e3f33c73cc37023cd0a0f804800f9f9f613e40&scene=58&subscene=0": "安全课堂｜关于小程序session_key泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247539632&idx=3&sn=cae94da59f4b1b679837099232758020&chksm=fa93ed71cde4646774cba06cb3cbeed022747c7b326f32a2a1fdc8d84404bcc91396cebc210f&scene=58&subscene=0": "美国政府通过漏洞披露计划修复上千个漏洞，强制漏洞披露成为最佳实践", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247510768&idx=2&sn=df1c5d6eb7c365fbe715e5e2b6d20de7&chksm=c2d1d654f5a65f420ddea26d5aa093159172858d8596264aee8e7f24344c94db9fc5e57b2acd&scene=58&subscene=0": "Yakit 近期漏洞复盘", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045518&idx=1&sn=1f4188e41cceede9d8bf127f703a5730&chksm=803facd0b74825c652cc1d48108e52b18b0e6f15701ac5189747753ede1a0aa11dded8199ab5&scene=58&subscene=0": "【漏洞预警】HPE Aruba Networking多款交换机跨站脚本漏洞威胁通告", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247491737&idx=1&sn=75751d3af038982c680cf92afaf5d557&chksm=e8a5eafadfd263ecdcc8cfed32c8cd73339d786ecea4e814b3236507ffe19f1f63d7178bc2ec&scene=58&subscene=0": "(SRC漏洞挖掘二)XSS漏洞挖掘下", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247491737&idx=2&sn=5af96c4c8fa061fa1c12d3c0bbd5a7b0&chksm=e8a5eafadfd263ec7de06e879496595d8f09e7eaee9687a3aba34b57253805295eea9c6ced5e&scene=58&subscene=0": "“0元购”支付逻辑漏洞的意外发现", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247515573&idx=1&sn=ff8f4d0d185abbb84acce7fcb02aa30a&chksm=eb70638adc07ea9cd4ae712d235bebe55c86cc7dac6aa5e02de100031253b4077a2d011ced6e&scene=58&subscene=0": "​【火绒安全周报】《原神》服务器曝出严重漏洞∕某男子投放木马致百万台电脑中招", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520433&idx=3&sn=2087097b4ef2616ff0c33aa4e6b29661&chksm=ce461ba1f93192b7b82660730a6cf850d6b224aea56331cc1062721c7026a5fac623c8a2ba65&scene=58&subscene=0": "【漏洞通告】Apache Airflow Spark Provider反序列化漏洞(CVE-2023-40195)", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487974&idx=1&sn=3ad33e9b038d3e6021a84a4e4b7eadb8&chksm=fb029cbecc7515a814ca172281b22e6491043e9a158a5d16f959979d0ce3510b5598c37f03a3&scene=58&subscene=0": "安全课堂｜关于小程序AppSecret密钥泄露漏洞官方", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517521&idx=1&sn=4ba48f444fa6833ef1644afc64166e6d&chksm=ea94b43bdde33d2da1972c61341823a26525a31d829f832b0f227f6f2fd3393b3d353e7e0b60&scene=58&subscene=0": "Splunk 修复 Enterprise 和 IT Service Intelligence 中的多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458515993&idx=3&sn=beddac3c601892af9fb977054dea0a80&chksm=b18eca9386f943854a61b88c09a13667c8d2c086038a6131afa6265ca3565dd726d28f2f21b7&scene=58&subscene=0": "即将开课！系统0day安全-Windows平台漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785459&idx=1&sn=196ce1a57fd712decfc32f8e0b620fc6&chksm=8893b41cbfe43d0a85d0150e178e4185666d261ed40063543829e1cfe6d4db1ed7f44e8e9ba1&scene=58&subscene=0": "研究人员发布（CVE-2023-34039 ）PoC 漏洞利用代码", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502297&idx=1&sn=131f16b9ea862a7500fcc0c0d49110af&chksm=f2585aaac52fd3bcb94d5e7e27ff5740cb0a318e97b016313781e3dce708d68086d021603e57&scene=58&subscene=0": "雷神众测漏洞周报2023.08.28-2023.09.03", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493795&idx=1&sn=3520cf57be372bdac6880160482470c3&chksm=fd74d86aca03517c62dc09e8e5ea10cb4c08e65e745b04f7378e1fa5c75002d092d0c72f5b06&scene=58&subscene=0": "CNVD漏洞周报2022年第35期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493795&idx=2&sn=f76a8a639484d3dd7b4ebd70b6ecdd83&chksm=fd74d86aca03517cdc6b08216fe67b4d94b6fdd2c276b32b1fe878d703e78a1e43b3bd78124c&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220828-20220903)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520523&idx=2&sn=aa64ea628ca033312f2ff4a0d116d0b3&chksm=ce461a1bf931930da2c2cafd6c73637bbe594966ab497200a53ae907d8276dbf8348e011585c&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220828-20220903)", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247529637&idx=1&sn=95d4f341231d495b34dfdb67d9a2bd6d&chksm=eb849f05dcf31613fa264f7e40a36b69e35099672f0cdaf0308236e3823e29d4f55733eb083c&scene=58&subscene=0": "漏洞分析｜Adobe ColdFusion WDDX 序列化漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzUyOTkwNTQ5Mg==&mid=2247488381&idx=1&sn=0a41751291122c78aae53108dca52008&chksm=fa58b146cd2f38508e30393c4c3f33be0fe03dbb8464138f146fe96bfd40740cfc32c0332e48&scene=58&subscene=0": "从某mail看0day漏洞的防御法则", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785486&idx=1&sn=13b85540aa3b6e83a22f8f4f36aa8867&chksm=8893b4e1bfe43df7cedf83b6f0e795e9d5e6bb4f62eaba2cc87fea33a12d82aa8542c0913a40&scene=58&subscene=0": "匿名研究员发布AtlasVPN Linux 客户端 1.0.3 远程断开连接漏洞POC", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785486&idx=3&sn=95c626d048629578782a21e551dba236&chksm=8893b4e1bfe43df70b96c7b4de9513a8466bb6045a7682c5f35c8066da41ad5a76600a4f176e&scene=58&subscene=0": "EVIL_MINIO 漏洞被用于攻击 MINIO 存储系统", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517551&idx=2&sn=8ffd41e1e450dfc4af6a55aa0de56c8f&chksm=ea94b405dde33d1371b97b39c7238f48c9e1e675f37dbcae210f7f4f982b1f61f702d9f67ba4&scene=58&subscene=0": "黑客利用 MinIO 存储系统漏洞攻陷服务器", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247539505&idx=4&sn=7c5208fb471c80d14c07b365b0930efa&chksm=c1e9d760f69e5e76d80f53447fb932c0f00e1ca65add532eec679a0457232e7cac33ae29efda&scene=58&subscene=0": "影响Windows 和 macOS平台，黑客利用 Adobe CF 漏洞部署恶意软件", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247566547&idx=3&sn=21dee36e98b195c83d7506adbc15131e&chksm=e91414e9de639dff24123b2b53d07b3e15dc6cea37b30fa9ffe5fb9bceb97fd73b48433f2732&scene=58&subscene=0": "Kinsing恶意软件利用新颖的Openfire漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493801&idx=1&sn=59c75955a8023534a8d10b44b160db02&chksm=fd74d860ca035176bc31c6339a3116ace7c91176a8f1a6f9d96122a8d1f97ad7e10d0f69d309&scene=58&subscene=0": "CNVD漏洞周报2023年第35期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493801&idx=2&sn=afb4189cefc76f9adba268b68e2ad60f&chksm=fd74d860ca035176946fde0d0b1c62347464c53e6957b937deaa49a28d47f2ced391e64c0e9c&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230828-20230903)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517570&idx=1&sn=34fd77e3506951e7f7fd62a7ab442b2c&chksm=ea94b4e8dde33dfe4882db94eae6cfe3f510868509c9e72ccc806d2d65d5c5faaea9897b5af3&scene=58&subscene=0": "华硕路由器易遭多个RCE漏洞影响", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517570&idx=2&sn=7f19eccf19674dfcdf5f6515082f6989&chksm=ea94b4e8dde33dfedce31e414840f4579284cf9589c84909a1efa2bda3cb52dea3b0de2e1433&scene=58&subscene=0": "PHPFusion 开源 CMS 中存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498650&idx=2&sn=5bb3f6cb681b879b3006e51135f7d4f2&chksm=973ac8f8a04d41ee47ae0f05baa37e0aec3a011a526996080ee259c69b519f74180db6593415&scene=58&subscene=0": "CNVD漏洞周报2023年第35期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498650&idx=3&sn=22559e3db536ecef26a290555b01d2e1&chksm=973ac8f8a04d41ee55cdb43a9d85a20ea6672a2e37e1f9efbd20f7a20908588f4d3308ba2e9f&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230828-20230903)", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247539775&idx=1&sn=ce8cc807903614d6a8a3d6881f00e2a2&chksm=fa93eafecde463e8aec19de23e614955ff700c5518a8164689161c44801ab517ba6510170c7b&scene=58&subscene=0": "Kinsing恶意软件利用新颖的Openfire漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458516883&idx=3&sn=c2a377ecbe89f2aace2bc53887717ed1&chksm=b18ecd1986f9440fe740f39d6566f28f4d81c0a40160eaa84321a5c2343f510111825fb90289&scene=58&subscene=0": "这些华硕路由器存在远程代码执行漏洞，请立即更新固件", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491742&idx=1&sn=488574bf9c2a45cb770a5c7b1b46064a&chksm=96f7fff3a18076e5a14c694cd68207a857902f30d6467b55f1ace2b2e9e8a1dab0d63f4ac8c8&scene=58&subscene=0": "风险提示｜致远OA前台任意用户密码修改漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503025&idx=1&sn=05673584c83d016e23f374c12d77d685&chksm=cfcaafa5f8bd26b3103a0815a7ac9c74618a8ec191269e2ea682901785e1efb4351e7bdde59d&scene=58&subscene=0": "8月漏洞人工验真报告合集，看看有漏的没？", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247495733&idx=1&sn=7ee03e359582d2f6b58bedf18e91f839&chksm=fe26f534c9517c22716a2603f20b10982675be92fc9c0de494301f83720c80ffda5316353040&scene=58&subscene=0": "CVE-2023-39361：Cacti 前台SQL注入漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517584&idx=1&sn=37b84a3349271c0f40eb59108b6ebf14&chksm=ea94b4fadde33decfc9df5392f6bb398a7c9f557bfde7dc94564b2459d97d2285e8da38936db&scene=58&subscene=0": "谷歌修复已遭利用的安卓 0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247502079&idx=1&sn=b34d8f6a21229ef52fa7fd300e570860&chksm=fa521d41cd259457ed7afdc6a99848e578bb2bd1839b490cd63885537118f956e5c0fc84b6c4&scene=58&subscene=0": "手把手玩转路由器漏洞挖掘系列 - 固件加解密", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487981&idx=1&sn=7410761fcf0e7c91e2cc39b712dae48b&chksm=fb029cb5cc7515a3b0f7c1a549b3e668330bd8867a8852f6d392e72a4f5ab5c02ad385fe7bb7&scene=58&subscene=0": "风险提示｜致远OA前台任意用户密码修改漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247491888&idx=1&sn=91f021155effafedcaec16d2785d75ff&chksm=e8a5eb53dfd26245446b059fd598c3eb4b98c878c2c7db25263aaca4477bc2286409bd849729&scene=58&subscene=0": "一个简单的越权漏洞成功拿下Admin权限", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458516910&idx=3&sn=36ef485c3ceddf4b73be761848b172f9&chksm=b18ecd2486f944327b721d2bf63fa59c910e4e6e262d8937d23f222d742b4357a7a32b97b044&scene=58&subscene=0": "CVSS评分10.0，思科披露其BroadWorks平台身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517599&idx=1&sn=f4c64820b9383523f48091354491d150&chksm=ea94b4f5dde33de3f2f7c7d26b6bc5178d7deb13b62b5e3b5220b9ad188751bce855b427f00b&scene=58&subscene=0": "苹果紧急修复两个已遭利用的 0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517599&idx=2&sn=5f9a5852520d96bfe05fa6acf6b1202b&chksm=ea94b4f5dde33de35803a6bed6a97f99decb06ce2f8819f5b903779f2688af79045529facfc3&scene=58&subscene=0": "思科 BroadWorks 受严重的认证绕过漏洞影响", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517599&idx=3&sn=f9b4133a88826774ba2370f315ddb483&chksm=ea94b4f5dde33de31fafd6622cb2b37398ceb935de72fe956bfdb5dc3d1b4a4ae61195437351&scene=58&subscene=0": "Apache Superset 漏洞导致服务器易遭RCE攻击", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499481&idx=1&sn=783c32e2a7ac48f32db61443021e1f52&chksm=fe79da41c90e5357327a96f15ca56ea2cc87eb9e60c5e4a608f19797d739309080906eb0b8d2&scene=58&subscene=0": "Apple多个产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651385555&idx=1&sn=c1343d8ff06694a8de5cd55ca0c4fd31&chksm=8d399f5bba4e164dc91072af86bfcfb9a3be2fe98b21eb90dc6d0f34d2febce9c333127ad467&scene=58&subscene=0": "当攻击队放了个0day，在你的内网穿梭……", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247502096&idx=1&sn=f0cae6b30c368681579ba07cf9997b84&chksm=fa521caecd2595b8564d22c79672401dc9031f5c4d37a4a5943fec5e91a2fee797eca7a1ce96&scene=58&subscene=0": "Android系统内核漏洞利用技术入门", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247539832&idx=2&sn=7543abfd32cdc3ce48aeebb50255df11&chksm=fa93eab9cde463af2a2f248f235b23bb4c28d4d6ff76aaa518c991cb6621142116c00b346431&scene=58&subscene=0": "美网军司令部官宣：伊朗黑客利用Zoho、Fortinet漏洞侵入美国航空组织", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520547&idx=1&sn=05d08836a6598ed5160b2ce69f4a60da&chksm=ce461a33f93193252af0afaa8d11b4159cf936bbbdf5acfcba90e3cb2f79be019559db06bdbf&scene=58&subscene=0": "【漏洞通告】致远OA 前台任意用户密码修改漏洞漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652043995&idx=1&sn=cb0b83fc1f7c3b326316b9e1f4ee74c4&chksm=f36fd69bc4185f8d79421136a671017750dd0571fb878f3868cd585831eeec8c4b7173e7e011&scene=58&subscene=0": "【安全圈】苹果被曝2大安全漏洞，用户需尽快更新系统！", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652043995&idx=3&sn=0c4d998adbeec85e53c5184506d913eb&chksm=f36fd69bc4185f8d1d67a76df4ac93702c564c8159ad0f25f3ec410c0b4f0345c63551632085&scene=58&subscene=0": "【安全圈】Atlas VPN 曝出漏洞：允许查看用户真实 IP 地址，官方：修复程序正在开发", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247491913&idx=1&sn=04e8abea9b17f7de23fad5de5e48127b&chksm=e8a5eb2adfd2623c57c390aec197613d7247dcc1c20d14dd1f355db9e30743945c1f937a1d22&scene=58&subscene=0": "漏洞挖掘 | 一处图片引用功能导致的XSS", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458516946&idx=2&sn=2089f98886013b2f713e04bf3707b803&chksm=b18ecd5886f9444ea253c26611e2734370834f595bdb1fccf31a7f48a4c539dd7bebaf657708&scene=58&subscene=0": "CVE复现漏洞精讲-从基础到入门", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247488596&idx=1&sn=89cc562414558b6e9ca1543e605be3b8&chksm=fa5abab9cd2d33afb9187c212e8183898b4b38f2987fc9a908fe0fdee28c22d473a5fe0b32e1&scene=58&subscene=0": ".NET 上传web.config文件实现RCE", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520559&idx=1&sn=33d05e383ff9a87b799fdb214ab6ca1d&chksm=ce461a3ff93193292939d8b45be790df0f8cd6fc03c2ed40d71c8e437a632e5ee6feaef46ee3&scene=58&subscene=0": "【漏洞通告】Cacti SQL注入漏洞CVE-2023-39361", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517611&idx=1&sn=28a10f71ab386f9648ee872a42f78f3e&chksm=ea94b4c1dde33dd73d0d676ca01bc8900c89a11ec78ba3a85863ac60159d3e26b2299be914d8&scene=58&subscene=0": "Notepad++ 8.5.6 发布补丁，修复四个漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458517045&idx=3&sn=3057d8a695134cb5d50ae1674db35414&chksm=b18ecebf86f947a91df126fccafec89c93b55de1136ba231cac378b96f00456f2856771d4dfa&scene=58&subscene=0": "入侵系统无需用户交互，苹果针对两个零日漏洞发布紧急安全更新", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247495863&idx=1&sn=45e7fc214031261a9f03e8c92a00ba59&chksm=fe26f5b6c9517ca06be78576038f315a74781d7c396a4122a1ab1aad5baedaa8ed0a049cb87c&scene=58&subscene=0": "致远OA前台任意用户密码重置漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502323&idx=1&sn=e74afe8601d2c50b33acb6b6e863ec94&chksm=f2585a80c52fd39635fa50fb9e3d52c373973434f5987b9fda2a5763fc438aa396b5980545b2&scene=58&subscene=0": "雷神众测漏洞周报2023.09.04-2023.09.10", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493834&idx=1&sn=ede7d18bb68820eca993c826b2091f02&chksm=fd74d803ca035115ae609a5d9d775bb5006b37002cf61c31a9a00658d7e61135bdcaf074aa56&scene=58&subscene=0": "CNVD漏洞周报2023年第36期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493834&idx=2&sn=7a691292ef51f9fe10f24cea12759936&chksm=fd74d803ca035115e52b0111743bc54a16cbf1adf80f14e9b890bb6302d76bf07270e1488066&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230904-20230910)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652044089&idx=3&sn=07a39c75fb543e659e7c0e1fee3ae09a&chksm=f36fd779c4185e6fc7bafc224069d3d77bf4ed50b7d3105ed0e4e110f4fb63d7aabd755c9e34&scene=58&subscene=0": "【安全圈】CISA 警告 Apache RocketMQ 严重漏洞被利用，用户需尽快更新补丁", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499511&idx=1&sn=0a1c182a7517e04185f562823fb91065&chksm=fe79da6fc90e537900a930c7298a7a9c9fc6df855b92f7c0c2ebcf8982f12ba811f31d53c922&scene=58&subscene=0": "Google Chrome 远程代码执行漏洞(CVE-2023-4863)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517626&idx=1&sn=516906d0d9c95466942c198e8b3644eb&chksm=ea94b4d0dde33dc68afa3a330f73b5e599c28832120edd5bd8f61ef250cf8d2ea50d208b5591&scene=58&subscene=0": "谷歌紧急修复已遭利用的 Chrome 0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517626&idx=2&sn=921ec378de811403d36c65128b56574f&chksm=ea94b4d0dde33dc6429f65de907a52cf21165252c50d83491901120e4593128fa6804c292269&scene=58&subscene=0": "Socomec UPS产品中存在多个漏洞，可导致设备遭劫持", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458517213&idx=2&sn=a0030b651ac1185fa3a7cb03ae15d999&chksm=b18ece5786f9474168c296678d20e2768d032f45ac1f93b9076eea7297ec3b16dab1e3f703d5&scene=58&subscene=0": "2020强网杯线下-RV110W赛题复现", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247491954&idx=1&sn=c4719882a8574bcf638c6b6fc75f1ef3&chksm=e8a5eb11dfd2620712428adfb71564be16cd653d9f62430c3b8742fe3162fafb2c5416d411b3&scene=58&subscene=0": "(SRC漏洞挖掘四)短信发送功能点", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247566916&idx=1&sn=9a05bc087a39ffc31b9f8c91241a3bdc&chksm=e914167ede639f68ff2ec8f5357d306328e47c5e57e1ec86e0b0f927d263328e2c3e36a2a237&scene=58&subscene=0": "【技术原创】ADManager Plus漏洞调试环境搭建", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458517400&idx=2&sn=18b8f2675ff8fbd623f6115d43cfb828&chksm=b18ecf1286f946041defebbaa98236f645f5ce76a07a7f83502191043f2bef1d57362c2d0534&scene=58&subscene=0": "浏览器漏洞正被利用，谷歌、火狐用户尽快进行更新", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517643&idx=1&sn=83e85b6b9bf3a9f0cf0c1843c9589950&chksm=ea94b4a1dde33db74b2b9c5ff5da439c9a2169fcab51d215bdc495affe02787d31ab6bcf7b98&scene=58&subscene=0": "补丁星期二：微软、Adobe和Firefox纷纷修复已遭利用的 0day 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517643&idx=2&sn=b81972e95b8a5e1e30f65e6b872403c9&chksm=ea94b4a1dde33db74e07a12d23528dc86d8cde056cdf425f2ca09dda6e7986fd8568721afde9&scene=58&subscene=0": "GitHub 严重漏洞导致4000多个仓库易遭repojacking攻击", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488460&idx=1&sn=5327d54823b815f237cf836d7471ac1a&chksm=c2c644c7f5b1cdd19fd9445b9247d92f638e886316ec351b3828a9c71d3a5dff000993061b35&scene=58&subscene=0": "【安全更新】微软9月安全更新多个产品高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488460&idx=2&sn=04cca916932ed8935d247400df9aa8dc&chksm=c2c644c7f5b1cdd1dc1b5a14971b7d4a5e77ab96fd6e59f1e0cdc6a8cb1fd7b230b7c1afea43&scene=58&subscene=0": "【安全通告】Adobe Acrobat与Reader任意代码执行漏洞（CVE-2023-26369）", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247495986&idx=1&sn=4d01091d03c2e68c49a0ea3208feab7d&chksm=fe26f433c9517d259cddf5c379ab3c231dcb845c8a99e4c22bad6ee93df7020bde37b6633462&scene=58&subscene=0": "2023-09 补丁日: 微软多个漏洞安全更新通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499519&idx=1&sn=a4857fc7bc5f3c96fd95c50e0e42d0b6&chksm=fe79da67c90e5371cc15b2fef5c7a4762d358099532a67675e42cc7f682b7d11bb80948723a5&scene=58&subscene=0": "微软2023年9月补丁日多个产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247515630&idx=1&sn=9cf49353dffc74eddcc7c8e0c3ac60b0&chksm=eb7063d1dc07eac7411829a229f56de268a5488195607be55412c7c83c62eced22bc6f7f8c4d&scene=58&subscene=0": "2023-09微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503076&idx=1&sn=ec81dfe3ad42a54bb8a57ad0c300f67c&chksm=cfcaaff0f8bd26e6dd5c10f65735e2d2f7804b22cc2cd19a939b49a18b5e69aa6dbbedb620e1&scene=58&subscene=0": "漏洞通告|Jeecg Boot SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247489474&idx=1&sn=2e650cca1efdbf63b9a22d1bef721391&chksm=fe2ee849c959615f8a80322b3ae1cedfd9b153dc2063f5ff7a51f245c11d53541692b3ebf81d&scene=58&subscene=0": "南洋理工大学 | 当GPT遇到程序分析：在GPTScan中实现智能合约逻辑漏洞检测", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517654&idx=2&sn=652c4e44e960ea1468d3f6e14aa9ca26&chksm=ea94b4bcdde33daab2669f9abe0ceb5579f5b0531002bffd15cee9657a03daba686913b68c5b&scene=58&subscene=0": "多个Kubernetes 高危漏洞可用于在 Windows 端点执行远程攻击", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650972156&idx=1&sn=7b3be1cb57e460c5128709689684f52f&chksm=8079ddceb70e54d85f401ff78422db21590900951f8bb1437ac876fef5b7ea73558be269bb96&scene=58&subscene=0": "威胁情报 | Konni APT 利用 WinRAR 漏洞（CVE-2023-38831）首次攻击数字货币行业", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247539937&idx=3&sn=36ea22021024f019d24dcd436aab2de2&chksm=fa93ea20cde46336be30b5782476c62216376650fd652d419ef3683b2f891163b73f90a3ce91&scene=58&subscene=0": "GitHub 曝出漏洞，或导致 4000 多个存储库遭受劫持攻击", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247502181&idx=1&sn=2afb11c3982d35262c2ce99c03013e0e&chksm=fa521cdbcd2595cdc5a9cb21d3222bdc8e2d225896d48bcecbf1d4cac582b4b13e0c4f25f6d6&scene=58&subscene=0": "Windows 内核本地提权漏洞 (CVE-2023-38142) 复现分析", "https://mp.weixin.qq.com/s?__biz=MzkwNjMyNzM1Nw==&mid=2247500954&idx=1&sn=95e97816125b76cfa671e17e2be9c6b3&chksm=c0e8a0c8f79f29de7e526847abcf7fc091b48d00490b1e3d45239b1feaaa874e3e6e2efca62c&scene=58&subscene=0": "记一次曲折的exchange漏洞利用-ProxyMaybeShell", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517665&idx=1&sn=81658f5393b8756f823fdc4fce193db9&chksm=ea94b48bdde33d9d1a37b9ab3441a2942eb184e06da7107fc6fd382aa2eecaf8ec0363f8e88f&scene=58&subscene=0": "N-Able Take Control Agent 高危漏洞可用于 Windows 系统提权", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517665&idx=2&sn=c6944a499b07ed9b696150eef9f6a861&chksm=ea94b48bdde33d9dd4a98ebef50e715fca304b2a4552aecf7ac712a3efaea266de2596579c2b&scene=58&subscene=0": "微软发现ncurses 库中的多个漏洞，影响 Linux 和 macOS 系统", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247501119&idx=1&sn=c5c35086abbfe0c7e3383db95ff58ff2&chksm=ec9f1c4cdbe8955aff4e12eba47557275142622a9ed1bb7278943ac173f1cc2e31fc451c3da8&scene=58&subscene=0": "腾讯安全威胁情报中心推出2023年8月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247484516&idx=1&sn=763f65b626071bfdee432404fcdab291&chksm=c2b10612f5c68f04a17c9031a642b65a8317ee8d9acda1d6ed8719a5f5899870ca7bb27bce66&scene=58&subscene=0": "腾讯安全威胁情报中心推出2023年8月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247496150&idx=1&sn=7eb683906dcc35f1292abc42a9fa2a35&chksm=fe26f4d7c9517dc147e73c982ce34132f94f3753012939e09362d53ec08d293f3022e50197f9&scene=58&subscene=0": "CVE-2023-38146：Windows Themes远程代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247496150&idx=2&sn=6493780b5ab8d32afbfb991dce7fafe6&chksm=fe26f4d7c9517dc160e940bd4fce292f13637c984edf11025cf214b483c0df76df3e70340ecc&scene=58&subscene=0": "CVE-2023-26369：Adobe Acrobat Reader 代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247502301&idx=1&sn=c4529e693497bbaaade727e8d5cbf782&chksm=fa521c63cd259575ec296b835f98f15cafc9e3249c5cf1e7099f83b30b6e921ba3d65903ba2a&scene=58&subscene=0": "微软2023年9月份补丁日重点漏洞安全预警", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247492520&idx=1&sn=7628fbe63c81c2d2d2ee6e6ae7a3c407&chksm=fa78e2e4cd0f6bf25ea779c19cbb3be877979380fe083c164c272eff5cb255968aadc15ecd54&scene=58&subscene=0": "【众测挑战赛】第6期OPPO终端专场，单个漏洞奖励最高20万！", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520633&idx=1&sn=25a58e0705b8bebec74aad5c03c4e3fe&chksm=ce461a69f931937fd2a78d8d5a7534b6e9f93672af00cb10f1ebce22bc381766f62316e5631a&scene=58&subscene=0": "【漏洞通告】Adobe Acrobat Reader 代码执行漏洞CVE-2023-26369", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520633&idx=4&sn=c580cb132bde5376e19da293b3aa0b16&chksm=ce461a69f931937f5fcfe19abd7e11fc1419e5b4dfca915bf9da13a26daee1af12762c6c3860&scene=58&subscene=0": "【漏洞公告】微软补丁日安全通告|9月份", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499568&idx=1&sn=328532f0f6fca901db6ed02521611382&chksm=fe79dba8c90e52be0b21ac03db610d64e7e652204864d2253d3708d1d64a4427438daa42135a&scene=58&subscene=0": "【已复现】Internet 连接共享(ICS) 远程代码执行漏洞(CVE-2023-38148)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247498838&idx=1&sn=54eaeca9928e59bc8bc527f50b09a666&chksm=ec1dcc7edb6a45682bc40db937dad54f2363692f430e0157305a603718fa3f9ab0637502d2cc&scene=58&subscene=0": "盘点那些漏洞 POC 测试工具", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651125707&idx=2&sn=0ea3a147a314d644ae6d464904fb58c6&chksm=bd1447188a63ce0e4318b3df726bfc839b2282fcc5189a595be3255935a5f058213b268b2772&scene=58&subscene=0": "安全头条 |4项网络安全国家标准获批发布；CNNVD 通报微软多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520676&idx=2&sn=4c968eb0002c1c08c11b4e517e677cfe&chksm=ce461ab4f93193a216afce7077e4c34abab522ac5ec415fe29babd395aca60cec0ce087025bf&scene=58&subscene=0": "【漏洞通告】Windows Themes 远程代码执行漏洞CVE-2023-38146", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503116&idx=1&sn=1c4f5ce34d20061fc86d5bc246620ad7&chksm=cfcaae18f8bd270e3161e7d7bf64249c6aec9a1b1121779e6c6b8a202251cf7c8d83d75b1bc2&scene=58&subscene=0": "漏洞通告|JumpServer未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499573&idx=1&sn=f0d948c23680e04a9ae8a3bd3f49ecf8&chksm=fe79dbadc90e52bb613b41d39eefc515131c30b6fc6de323a094a3d16ad14338dbaa715f0d39&scene=58&subscene=0": "【已复现】JumpServer未授权访问漏洞(CVE-2023-42442)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458518175&idx=2&sn=910124753fdb7255581ed1a1362a6d74&chksm=b18d321586fabb03a42a64d077cbefc9d088d9e22a00dc516a3d67d501ae022625c61ff312c2&scene=58&subscene=0": "CVE-2022-0847复现", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517693&idx=2&sn=ee2f37800cd4fde8239f203b3abcd5d3&chksm=ea94b497dde33d818a22818925aba4c372988566412b75f81318126b467d62a54093436d6e12&scene=58&subscene=0": "Fortinet 修复影响多款产品中的高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517693&idx=3&sn=cf7aebe9fc74cea2001da86238add0cb&chksm=ea94b497dde33d81e53986ae709bb0281448e059268e057b632beb1f3589b7d6b28b9dc32158&scene=58&subscene=0": "上万台 Juniper 设备易受未认证RCE漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498683&idx=1&sn=d456d873e3e4d056ffba7fa1d6476d4a&chksm=973ac8d9a04d41cf5b117d1187eb142a31325e46e1ff27179126909a0ca3a15ce3141da49e5e&scene=58&subscene=0": "CNVD漏洞周报2023年第37期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498683&idx=2&sn=c33c92688b866ffbabe3283bda443dbc&chksm=973ac8d9a04d41cf8ae0f655c6f89462cb4b3a03056a3f42a2266302120c425f1fb92f4dddd9&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230911-20230917)", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247496277&idx=1&sn=783a8a6993967e1a0de7b0ec587c1b5d&chksm=fe26f754c9517e42c35e430b50d0666c51e6cbf154b7f59db686d97a26750dd90483fa29a70d&scene=58&subscene=0": "CVE-2023-42442：JumpServer未授权访问漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247540018&idx=3&sn=2e418bd04e341ee7e1a2508673035338&chksm=fa93ebf3cde462e513895cc77467a914a3fcdb941c3e5fb0cc9b55ee50e8f5464da269026c0a&scene=58&subscene=0": "即将被零信任取代？企业VPN屡屡曝安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520687&idx=1&sn=17343a98c9f15166d38a575b8b07d328&chksm=ce461abff93193a9c197221f37896559ee59a2aee2c09cd4899122b50f309f604389e45304d0&scene=58&subscene=0": "【漏洞通告】JumpServer未授权访问漏洞CVE-2023-42442", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499592&idx=1&sn=c551bdbcc671a540cd17514fe8d51092&chksm=fe79dbd0c90e52c607d4521866efdd67a30a094975382361604549b1a25d52503c276ab10c68&scene=58&subscene=0": "【已复现】Windows 内核权限提升漏洞(CVE-2023-35359)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517716&idx=1&sn=f6e084fe97c196160642647dfb778385&chksm=ea94b77edde33e688613beeefc1a659a68506fb10262cdf1c5266f6de10600d6e2b18f022a94&scene=58&subscene=0": "Nagios XI 网络监控软件中存在多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517716&idx=2&sn=bb6c7c66b683c80219cced543e465691&chksm=ea94b77edde33e68252a8d4070bc17761a318bf95afa97399d33bc0b34b28d14817270245968&scene=58&subscene=0": "虚假WinRAR PoC exp 释放恶意软件VenomRAT", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491806&idx=1&sn=473158c10d50b1f5ed9c04231d3e3ff9&chksm=96f7ffb3a18076a54e47cb326c8db62581b6166072fff23a80e475fde4265ab46fc2d7c7101b&scene=58&subscene=0": "风险提示｜用友GRP-U8 bx_historyDataCheck.jsp SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491793&idx=1&sn=a94f8e3f153fbec41edab599db2d8158&chksm=96f7ffbca18076aac762aa1ba2dfcb5ee18985cbd8c1eb7df066c56f71aa8f9e2d4c45f3bba3&scene=58&subscene=0": "数据泄露风险｜JumpServer堡垒机会话回放未授权访问漏洞（CVE-2023-42442）", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247496404&idx=1&sn=3e3317a6dfd5c8c0f7ce3856e6567c9e&chksm=fe26f7d5c9517ec3a7e5f0fe906939b65d4253d0426a6c5f912279c4498048303da57b4dc702&scene=58&subscene=0": "CVE-2023-4998：GitLab 身份认证绕过漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650178858&idx=1&sn=c697e46d4cb7a2b1708855e2b0afe56f&chksm=f4487e96c33ff780b9b53c9c2bfbf1c9bb326b4f17e8a5aa697394a113511e1ad6f1023f78b3&scene=58&subscene=0": "手慢会被删，这两个重磅企业被0day攻击", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247567352&idx=1&sn=f8446e3636beb3a17f7630b70a789718&chksm=e91417c2de639ed4e1259e5504463d24139a9e7750517c7132441c566136b959ea06a1b38d79&scene=58&subscene=0": "持续性威胁：新漏洞将数千个GitHub代码库和数百万用户置于险境", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517726&idx=1&sn=6812214f8fc21189da02ba2731b87720&chksm=ea94b774dde33e62737863151185ae158018de3e7f683d689e2a466982db356c57f6d7c1de92&scene=58&subscene=0": "苹果紧急修复已遭利用的3个0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517726&idx=2&sn=fb70a13cea95f2a283f72cea5e804abc&chksm=ea94b774dde33e62ceae3c08c4f637d76f5c3e2592a17823a66b9442cfc21a4a65b04d7edfce&scene=58&subscene=0": "Atlassian 安全更新修复多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503127&idx=1&sn=4ee7b17be9ef988b1bf0469692cc0433&chksm=cfcaae03f8bd2715687d37ca64f5644e4806d22e162b09b3bfc7fb54dec42c6a01fd1dba0c4f&scene=58&subscene=0": "漏洞通告 | 用友GRP-U8 bx_historyDataCheck.jsp SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499600&idx=1&sn=60040a01b2d6f613491273a1cae0148e&chksm=fe79dbc8c90e52dee9c9fb56675ef653ae9fa2b3dd3f586ceff1c479a395d50fad70c84487ec&scene=58&subscene=0": "Apple 多产品多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458518475&idx=3&sn=4f8ecfc3f7f13f0ffbf2d085451a03cf&chksm=b18d334186faba57fdc7b868b6dbbe0947d090283a087497aa9bee883f9b22ea001ca403db1a&scene=58&subscene=0": "GitLab存在高严重性漏洞，建议立即更新版本", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458518475&idx=4&sn=fb40adab88dd79ddd26ae61a764bcd6f&chksm=b18d334186faba5759ea5ef5b3b061e1f7f024b58faef58a3f327fe4e6757724b9a4d343de08&scene=58&subscene=0": "已开课！系统0day安全-Windows平台漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247498691&idx=1&sn=c7c209b008f4fd1e67e21baa9e7f4dbc&chksm=c007565ff770df4982dcd0cef4367179be6640f314f914199ec96e11c6c9a9a65e1b270edfb2&scene=58&subscene=0": "【技术干货】CVE-2023-23638 Apache Dubbo反序列化漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247484636&idx=1&sn=b4693187b796f4d870a2bac92e531d6d&chksm=c1f44014f683c9021721c3be906f74233dc1afca0dd35fdaf8851e96753718e8ccd56ee6884b&scene=58&subscene=0": "「 特别预警」这个新iMessage 0-Click漏洞可能影响你", "https://mp.weixin.qq.com/s?__biz=Mzg3Mzc3NTYyNw==&mid=2247484404&idx=2&sn=2f2886b33d8cc24ca86d340cd4ce901a&chksm=cedb9490f9ac1d86e310a30798a54cbd4e365168521da5cd6fe6f4946e826a5dfe1c001d88f5&scene=58&subscene=0": "韩国科学技术院 | 探索基于LLM的Bug复现", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247539833&idx=3&sn=ed94d382e20e1bf44801bc4214f7f67f&chksm=c1e9d028f69e593e6e8182b3fe30005975727e81da33682acd78aac481b5389bc4cd2bb85bb9&scene=58&subscene=0": "持续性威胁：新漏洞将数千个GitHub代码库和数百万用户置于险境", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488054&idx=2&sn=afdd6204aa61e98c6ff76d60ece5c5fa&chksm=fb029f6ecc751678b49eae3e7bc165e33b62b6dfdd2a87bcacee92780f697f748e32114ea2bc&scene=58&subscene=0": "数据泄露风险｜JumpServer堡垒机会话回放未授权访问漏洞（CVE-2023-42442）", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488054&idx=3&sn=2c8fc219310bf8cec14f349a17c0dfc6&chksm=fb029f6ecc751678428c395920d9aea97f5a7b2a81e7acc81f20758828a1f9ed78462a2bf7c4&scene=58&subscene=0": "风险提示｜用友GRP-U8 bx_historyDataCheck.jsp SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520747&idx=1&sn=58d273e1feba92c281fabb50194f6b64&chksm=ce461afbf93193ed0cd19b78b460e5596858c96115f2d551a70dd572680a3be724e8c0425789&scene=58&subscene=0": "【漏洞通告】GitLab 身份认证绕过漏洞CVE-2023-4998", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520747&idx=2&sn=4c5874640d4b5087864e85ffe0f47125&chksm=ce461afbf93193ed9c1e7154f2b24c5fb22201bc5f7b8daf65b1894c1d5d84569e3789cb352a&scene=58&subscene=0": "【漏洞通告】用友 U8Cloud ServiceDispatcher 反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520747&idx=4&sn=5e26e71a327b296170997e7a14c48c5e&chksm=ce461afbf93193ed8c62cef8cc3d9f83d55bf3c90b19020ba221cf2f328c19adc0eb55ff43f6&scene=58&subscene=0": "【漏洞通告】用友GRP-U8 bx_historyDataCheck.jsp SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247496465&idx=1&sn=e88e14b6d072a8139457fe760f0e88fb&chksm=fe26f610c9517f067e31fb23159dfe49b35880d29b64f361ce58bc655e151d3431c8d29623e9&scene=58&subscene=0": "CVE-2023-35359：Windows 内核权限提升漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247488736&idx=2&sn=d24aaa297c51eb620ccdf67af513086d&chksm=fa5aba0dcd2d331bbb22f3f5657199d718c90efed42fcb9cb67ec23d342f887c117e4858f1cb&scene=58&subscene=0": ".NET 上传变种.xamlx文件实现RCE", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492027&idx=1&sn=b3103bc423916d000130703a57b2e6e5&chksm=e8a5ebd8dfd262ced8661d5c4d3b144dc09149410c8badb3603ffe39ce2cdc2ed56608ae38e6&scene=58&subscene=0": "如何将LFI漏洞从高危升级为严重", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458518567&idx=3&sn=5845aa88a06560b5666eae7ce4ae039b&chksm=b18d34ad86fabdbb626f57e5bcdf1970f5e157e5d5c7240f8e4793f1fd8bef5c5413deaafa7e&scene=58&subscene=0": "Windows内核漏洞分析与EXP编写技巧", "https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247498484&idx=1&sn=1f954283553ecf23e6a569a3b6aabd05&chksm=fdde8473caa90d65bfa7c6b118d12a80230d1309463fafd5eb2f1d704959321e9af3b45e267d&scene=58&subscene=0": "慢雾：Fiat-Shamir 冰心漏洞解析", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247489642&idx=1&sn=ba7b22a0b26dc774c88fccf13e5c60cb&chksm=fe2ee7e1c9596ef7bf2a7fbe5bcf58b95298ba984ce102fa149a3bfb7a29b5e72618097d6f8b&scene=58&subscene=0": "兰州大学 | ChatGPT 驱动的漏洞描述映射及评估", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493879&idx=1&sn=8e410c3be2ab1bfab006ff7775f1eb25&chksm=fd74d83eca035128ac4cccbec0de5224326b116e4ee36c8be693f8cffe0aaeebe0c6d136e5d4&scene=58&subscene=0": "2022年度CNVD支撑单位年度工作情况及优秀单位个人表彰名单", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493879&idx=2&sn=013410d4a75c8e621eeee7ce0c31eaca&chksm=fd74d83eca035128df2af53c8185b52b4d04aecf87b8e41ea93acfb0f5d02adbd32d1a472cd4&scene=58&subscene=0": "关于新增贵州泰若数科等八家单位为CNVD支撑单位的公告", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492031&idx=1&sn=a86406f133e36d1f2d34f3cbf05a0c81&chksm=e8a5ebdcdfd262caf2dd04029ebc49b6a2843385c59cd3a2ab9bd214a260e2e5fe2f6f337f0d&scene=58&subscene=0": "【0 day】畅捷CRM SQL注入漏洞获取管理员账号密码", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517736&idx=2&sn=3425c61c1f7349910eec3401ed3697cb&chksm=ea94b742dde33e546c960957e2e235031bcb2b96ad0872d9e1a991f1e02bdd4d0b3d8047af3b&scene=58&subscene=0": "CISA “已知已利用漏洞”分类计划加快打补丁速度", "https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247504271&idx=2&sn=66137a03262a79bfd7cf4cb16e267523&chksm=e9d31a6ddea4937b11c6e07c8bcf2af7aa86aaca23aa015afcc11b8a92a18f2775fdcb2cbab7&scene=58&subscene=0": "活动 | 官宣！首届「字节跳动开源OpenDay」报名启动！", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247492577&idx=1&sn=6aa1383a8191bcbe1c89d1e5632f1994&chksm=fa78e2adcd0f6bbbd7cb221e5c491a8d3f46874b661bf10ecea65a302c67f1b051e76f2654c4&scene=58&subscene=0": "OSRCX漏洞盒子，假期双节出击『终极挖洞计划』！", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493915&idx=1&sn=2626cf48031212a2c81491dffd19ef12&chksm=fd74d9d2ca0350c481f41a5422f3f562a835f9c2907a8446bccd37433e6466545fc868ba094f&scene=58&subscene=0": "CNVD漏洞周报2023年第38期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493915&idx=2&sn=ce330d56a1071599bc21ee816aed3f79&chksm=fd74d9d2ca0350c4306b3d1f2a7bf007a6e276c8e8405ff712d8023a0e564a912ff244fc2468&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230918-20230924)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499634&idx=1&sn=15594c846988adb56dfc78259761e74f&chksm=fe79dbeac90e52fc2277e7ffd30b1537c3258fd8bd6afefa0bca5ddf26d4f417e9ba07aeda28&scene=58&subscene=0": "【已复现】Linux Kernel 本地权限提升漏洞(CVE-2023-35001)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517746&idx=1&sn=0075949af101ed923a30865094aa5b5f&chksm=ea94b758dde33e4eed497321fbcde1b5e775602f446cd3c4b5bbc8d0aba92f2bfb4067686bca&scene=58&subscene=0": "严重漏洞可导致TeamCity CI∕CD 服务器遭接管", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509947&idx=1&sn=09953e7d15a512d4e5f35b8a6ce7120a&chksm=ebfae09bdc8d698dd507d6f8426133d3aa57ff977fbca299e4c57a17db17b97cdf7af6f0c1ee&scene=58&subscene=0": "苹果谷歌漏洞披露不完整，让腾讯QQ等数百万应用处于危险之中", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502399&idx=1&sn=3a5cd597e4abbd732b7f1084c01870b1&chksm=f2585accc52fd3da2eae02a72ba5ebbdf771f1fad7f10fd5e1eb8b02324570923700d8ba3fbb&scene=58&subscene=0": "雷神众测漏洞周报2023.09.18-2023.09.24", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650178936&idx=1&sn=5f5fc03115e7264ae38b46c0fc39919b&chksm=f4487ec4c33ff7d22760d43e96fbf7e6b5babf86a6239cda3ebadcfdf0a5aa21a8ae7107d307&scene=58&subscene=0": "漏洞能力再获认可 微步获评CNVD年度最具价值漏洞报送单位", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652045329&idx=2&sn=1950a01895e5d46f0124ce089ce715dd&chksm=f36e2c51c419a547688fe173eee8a74fa41fa403034439b048dd34e1a8c5ff0b1033ee7634fa&scene=58&subscene=0": "【安全圈】JetBrains TeamCity存在安全漏洞，需尽快更新以避免服务器被黑客攻击", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488078&idx=1&sn=31b487d322e4aeb75a6dd492629021aa&chksm=fb029f16cc75160092fa294c31030cfafb59644a075512b2aae682590ea1eeeac2b26f00fcac&scene=58&subscene=0": "风险提示｜泛微 e-office 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491814&idx=1&sn=95ee32a443028498e2c6036ebaf8419c&chksm=96f7ff8ba180769d8d74058e8dc8b4f2e77d48d8f7ed0c4c0521cfaa17d492de5f399753b7fc&scene=58&subscene=0": "风险提示｜泛微 e-office 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520817&idx=2&sn=6333a0d758fb3ad166bfcf87a812fdd9&chksm=ce461921f9319037dcbd3c96203994fc593d6cca6c5e070612ecad4ed984dba2c9abcd08dac0&scene=58&subscene=0": "【漏洞通告】Linux Kernel 本地权限提升漏洞(CVE-2023-35001)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517756&idx=1&sn=51f2802e3a8b5fda00cf08b818f9cd06&chksm=ea94b756dde33e40594ca15ab1b5e61f5b1a62e5b2ea659626bf64e94987627c8bce596be9e0&scene=58&subscene=0": "黑客利用高危 Openfire 漏洞加密服务器", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247496396&idx=1&sn=33295e50a8b599f2bae10ee92a6091e8&chksm=c063dc15f7145503a6e3aec17d9ddcc4b59e03f1c293e8c63aa923da14b1225011c580cbedd3&scene=58&subscene=0": "G.O.S.S.I.P 阅读推荐 2023-09-27 Android 在野漏洞 Exploit 分析", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247498546&idx=1&sn=ccb1e53141af55703e7effa6a3ad2de5&chksm=cfc55c6df8b2d57bf6f46b31930b904dba1debf39bdc230a2b7297d583e9c90e0b1792ee7bfb&scene=58&subscene=0": "连续上榜！360荣获国家信息安全漏洞共享平台多项荣誉", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247539912&idx=3&sn=c68fe6f4f236f8a8b9e087d876efbae8&chksm=c1e9d099f69e598ffc35e0f780be21f872f234da731341a7cd1daacc03126cf31add88be5365&scene=58&subscene=0": "勒索软件Akira突破思科SSL VPN漏洞，横扫110个组织，攻击持续升级", "https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650845903&idx=1&sn=4071b4143cc964e996fa56a4401a9512&chksm=80dbd16ab7ac587c205cbd0f76c8758cfd22d2c729810ac89a44b4697cb0d437dd04ffdb74c2&scene=58&subscene=0": "青藤获评国家信息安全漏洞共享平台（CNVD）三项荣誉", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498693&idx=1&sn=9413981ee5f8e20342f2a7685cd2b7da&chksm=973ac8a7a04d41b1413df979d57d60cf4dd685398c8fcddb56e583d8c83302048bc1d0006cb8&scene=58&subscene=0": "CNVD漏洞周报2023年第38期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498693&idx=2&sn=a4cd50df073b34b9a1be5e4bdc5965d9&chksm=973ac8a7a04d41b1666c0765777c727198858c252949fc415a089088748587e70175f13d1894&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230918-20230924)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664194057&idx=4&sn=b6a0b6675b7ad1ee2ad4f4d7b610ae95&chksm=8b5962f0bc2eebe673ac09eca109c71d0d241bfe93dbc5227eaa5493e510e23ec505e7010080&scene=58&subscene=0": "CNNVD | 关于Linux kernel安全漏洞情况的通报", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499646&idx=1&sn=108425ca60cca1234ab1a1570c24156b&chksm=fe79dbe6c90e52f0ddf1c47c639671d03c53876a670b6ba5ee82e418ee6e8add40be6b6edf56&scene=58&subscene=0": "Google libwebp 代码执行漏洞(CVE-2023-5129)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499646&idx=2&sn=ff9c409795a3d530267b217d1ea1c9c8&chksm=fe79dbe6c90e52f047813994687c6caf9d64bee841993a10610abc7ac58713ec21db5ba847b1&scene=58&subscene=0": "JumpServer 多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509959&idx=1&sn=df95626fed63f6efdab3f1ca822d6593&chksm=ebfae0e7dc8d69f1593f7f00157c53f7b2aebe26514143ec43fbb2803b74cc87f9d3d86fb686&scene=58&subscene=0": "又一个基础组件满分漏洞曝光！曾因披露不当引发全球安全社区混乱", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509959&idx=2&sn=402bd2ffdf780bad7af0cb1b4dcbe6d3&chksm=ebfae0e7dc8d69f1a136087bb3c6199a7223405e22d37b79be2ff5c64260a8689fe7f54cb16f&scene=58&subscene=0": "超级软件供应链攻击！MOVEit漏洞受害组织总数超过2000个", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247566562&idx=2&sn=a92542a14dea32976e046336c300e9f9&chksm=9f8d54eaa8faddfc3a6a3edbf698397b247bac2d37ae505678ccd213af8ef2943904c397fec5&scene=58&subscene=0": "连续上榜！360荣获国家信息安全漏洞共享平台多项荣誉", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247496639&idx=1&sn=4a5c3d06978c8149f83d9d59d473ed48&chksm=fe26f6bec9517fa800c1fbc7fdcedd96cbd8f50fa9fe84d0a683696a0c6a1fde465dc82bf6fa&scene=58&subscene=0": "CVE-2023-42820：JumpServer密码重置漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247540195&idx=3&sn=6654117073e50b229ed7fb94cd7906a1&chksm=fa93eb22cde46234be7ec1adb1481905e6586ec8ba85176739e7c6ffb7c3b892573e6e6df1d2&scene=58&subscene=0": "苹果谷歌漏洞披露不完整，让腾讯QQ等数百万应用处于危险之中", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247540195&idx=4&sn=74b66c8d5bbb6ee9aff4c436521caeea&chksm=fa93eb22cde462347979077069cbc8ddebb5f25d9061f451b07c28288d488259ec396efb9417&scene=58&subscene=0": "MOVEit漏洞导致美国900所院校学生信息发生大规模泄露", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458520741&idx=3&sn=826451934330bae34d18bac647695ddb&chksm=b18d3c2f86fab53943d04675301a1d7e9608af2fbd360ecf8bfa7c05ee597a31f8760790419e&scene=58&subscene=0": "libwebp图像库漏洞已在攻击中被利用，CVSS评级满分", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491825&idx=1&sn=67c0c76fdd18419ba3eb63998908430d&chksm=96f7ff9ca180768aea6629f52a36ab81fe494550ddf5f5d0a6ab4962d6b09518f0f04e3bb0c6&scene=58&subscene=0": "风险提示｜JumpServer 密码重置漏洞（CVE-2023-42820）", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509968&idx=2&sn=900042b1ec3f1cc268d4a6ca855eed0c&chksm=ebfae0f0dc8d69e6d7b2dd781c2c2fa10e8268d270d9ad7b1b8459688103e9f3d675c205af30&scene=58&subscene=0": "CNCERT：关于libwebp开源库存在远程代码执行漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247498566&idx=1&sn=4704a533e2d611522e385b83fa0a9dbe&chksm=cfc55c19f8b2d50fd6daf0b7da2bad219bcc8770051262040fd605921cc7638dff59f538d73b&scene=58&subscene=0": "放假通知|360漏洞云祝您双节快乐！", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247539954&idx=2&sn=d0cf6c1a7b9c1aaafa80eea7fc39942f&chksm=c1e9d0a3f69e59b56b56e125f40103fb0c5b02e6fd899eb04b3ecde27460bde672308c530111&scene=58&subscene=0": "又一个基础组件满分漏洞曝光！曾因披露不当引发全球安全社区混乱", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498705&idx=1&sn=4cf24523d1ecfc7858e893fc80e7af13&chksm=973ac8b3a04d41a57ecf9e3b37cdb6069bd56f19b884e95c2e943d95404aee0f09c46fdefa06&scene=58&subscene=0": "关于libwebp开源库存在远程代码执行漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247496694&idx=1&sn=fc105365a6656dc8a3ea06ddfba18088&chksm=fe26f6f7c9517fe1b36d79b1472fea7de4ffc0892e3ab77faa9663f2a6ada16f7828f3ebd715&scene=58&subscene=0": "CVE-2023-5217：Google Chrome libvpx堆缓冲区溢出漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493917&idx=1&sn=01368fc2e7e6e81bcf3572f1c2898c61&chksm=fd74d9d4ca0350c270badf3f59f28d07e2f922839f0ac3e4371fb811d6300b21b6ea64866f54&scene=58&subscene=0": "关于libwebp开源库存在远程代码执行漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517765&idx=1&sn=b7e9fb5dab86d46b0f3090c81402d31e&chksm=ea94b72fdde33e39a994bc9d7ccbb25cf3b14210ec657c34bea9464755eb08903ebc4e36eb7b&scene=58&subscene=0": "谷歌紧急修复已遭活跃利用的新 0day", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499661&idx=1&sn=0b4c8ebda6db3a193186e67312035efb&chksm=fe79db15c90e52030aea07c17ca1a6191696d528088da92bd2cb4a4ed74431c3a55bac594af8&scene=58&subscene=0": "【已复现】Google libwebp 远程代码执行漏洞(CVE-2023-4863)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499661&idx=2&sn=9ee9d18b547645e7691bbbc656a5b74a&chksm=fe79db15c90e5203a3bc4151f62273fc1d31134c7adf28cee84ec3f7988e2908fb9f3177e6a7&scene=58&subscene=0": "【已复现】Microsoft 流式处理服务特权提升漏洞(CVE-2023-29360)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499661&idx=3&sn=79fd2d0f4ba8cf2a1ca6770d1fe44ca6&chksm=fe79db15c90e52036d6708ce83975dccb2dc960bf0aec53e5baa1582560daf08891bd1ec1fcf&scene=58&subscene=0": "Google Chrome libvpx 堆缓冲区溢出漏洞(CVE-2023-5217)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492047&idx=1&sn=1c7c5d52112cdd69e81eee18f474b459&chksm=e8a5ebacdfd262ba9fbd7ec0137a76b8f13a048fd655e2457fe1a5f9ef02723cadc740aa68c8&scene=58&subscene=0": "一次绕过防火墙获取RCE以及提权到root权限的渗透过程", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247540214&idx=3&sn=f9b2d69631b40ead6b2d89c12538d1fd&chksm=fa93eb37cde462218d7f55786f43588d7c2b1c5dfb94a2d2a0dc212ba90e64c1617b2cd829d0&scene=58&subscene=0": "MOVEit漏洞受害组织总数超过2000个", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247539977&idx=2&sn=b5a3a7e909830b3444c6464ca018d123&chksm=c1e9d158f69e584eefd582373dd5b725cf82ce241a2071085b5329ce2fee8f4fefb5193011f3&scene=58&subscene=0": "关于libwebp开源库存在远程代码执行漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247540229&idx=2&sn=99bcc09b259f176b16670adfc85cf478&chksm=fa93e8c4cde461d278b45e36a5f4ad9f74e2f56186e63a022bdcf66fc74f3206b14ab17ab878&scene=58&subscene=0": "关于libwebp开源库存在远程代码执行漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458520790&idx=2&sn=957e67b97580bf11f4027363d2db9ed5&chksm=b18d3c5c86fab54aefbf5bb78339e79629d90b4a4e9de8747f6e46bee2b4b202c2d5478193d1&scene=58&subscene=0": "国庆充电不停！系统0day安全-Windows平台漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499667&idx=1&sn=34ffd286d7d5848306b8b35b69b4f63f&chksm=fe79db0bc90e521d2434776d7e71acc6310d82bcee73af08216ec90a6e9cbcd024c1fe0a05e3&scene=58&subscene=0": "Atlassian Confluence Data Center and Server 权限提升漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652045959&idx=4&sn=175dfa0d6b5ecf6d5ae8df166a829bb4&chksm=f36e2ec7c419a7d14065b23e4d05b171c8c5bca81071ddf7682a0114aad546a04f65ace47f7d&scene=58&subscene=0": "【安全圈】谷歌为 libwebp 漏洞分配新的 CVE 编号，CVSS 评分 10 分。", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652045975&idx=2&sn=558a7cb28bce8fd763b789ca9f814fa6&chksm=f36e2ed7c419a7c1857ab5ba5942d402de81e46c2ca296fc912801942d6f73b68383c37bb95d&scene=58&subscene=0": "【安全圈】微软更新 Edge、Teams 及 Skype 软件，修复 Chromium 零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652045975&idx=3&sn=b3f8f211d96264d3293877df85add1b1&chksm=f36e2ed7c419a7c16025d43219bbb0b7c8882f2fde68b0737181ef948e341f68e88622e0c5ec&scene=58&subscene=0": "【安全圈】Arm 发布安全公告：修复 Mali GPU 数据泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499672&idx=1&sn=e30ef1f59746163245bb8740445e0291&chksm=fe79db00c90e521621b1351559271226686498a2e28f693b690502e1ef901ac14cfb3b89e93e&scene=58&subscene=0": "TorchServe 服务端请求伪造漏洞(CVE-2023-43654)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517781&idx=2&sn=bb997e52e822a85d9557210284c73b30&chksm=ea94b73fdde33e296eebdd3ed4abe65621d3260c720dc544dd1bf5b285f4673167b913728d31&scene=58&subscene=0": "苹果再次紧急修复两个0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657164861&idx=1&sn=82647f320c8bfe056b3d391169089f8a&chksm=f1d4ecd8c6a365ce9f6e41023e895e42acb6ee793af7d696ae8ca16de0f5d9098e1e1482bf67&scene=58&subscene=0": "CVE-2023-41064一个被严重低估的核弹漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652046064&idx=4&sn=4a15ab8155f38a01162ef9703c111040&chksm=f36e2eb0c419a7a612ee67a9c54b6f98fa613a7bce79d8cdbb77d5497aa01648591c76257874&scene=58&subscene=0": "【安全圈】超微公司的 BMC 固件存在多个高危漏洞，目前并未发现被利用", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247568273&idx=1&sn=992cafe6843523f8e3f6ed8402bfa292&chksm=e9141babde6392bd129d75907b0bd3a326c11a52252c3be2924dbddf59560dca39564d0cf909&scene=58&subscene=0": "Marvin攻击：存在25年的RSA解密漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458521120&idx=4&sn=6e7966a0cab83e1d0f13bf0f191179c9&chksm=b18d3eaa86fab7bc0f6e1875adcbafc8fc08e92e52b12e7a004302278f8f3373a409f9326318&scene=58&subscene=0": "CVE复现漏洞精讲-从基础到入门", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517792&idx=1&sn=2597cf0fcd5b0d3561468663bbc2c62b&chksm=ea94b70adde33e1c4078d399916095b0e03ac6c5af4add39de2897fa077d31d2f2792e844d2e&scene=58&subscene=0": "思科紧急修复 Emergency Responder 系统中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247496825&idx=1&sn=cf059a6bd5005d7167065b29148f619c&chksm=fe26f178c951786e509fd460dec0adc8997d1c41647f9a9d5bf60cabf911f34530c187cfb2de&scene=58&subscene=0": "CVE-2023-42824：Apple iOS∕iPadOS 本地权限提升漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509990&idx=1&sn=c36ce28db13449761164c60dc93061d8&chksm=ebfae0c6dc8d69d0bc5e592a0d1abf6cd188b4bee7154330731f55addc18afff73c019626167&scene=58&subscene=0": "单个漏洞利用链最高近1.5亿元！零日漏洞采购价格暴涨", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247540015&idx=3&sn=f73cca6dfe3e7dcc208a37c9554ae4c9&chksm=c1e9d17ef69e58680fdf7f52f2a2e795e15f09082d7e191f8708974b692d314a590c746ce210&scene=58&subscene=0": "Marvin攻击：存在25年的RSA解密漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247540272&idx=2&sn=673027138e5ff0063ea2e01881cd7a13&chksm=fa93e8f1cde461e7fc9510dfe1b93606391035adf4dbda497833a9969d1bb90b440a183baa5f&scene=58&subscene=0": "请立即修复！服务器巨头核心固件曝7个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652046152&idx=2&sn=da1221a663adca6e0bc8ac1afa9fd24a&chksm=f36e2f08c419a61e458906a60389012218dbd84eb8bb3c6f68b55597b552cd64c8de1482ef85&scene=58&subscene=0": "【安全圈】最新消息，单个漏洞利用链最高近1.5亿元，零日漏洞采购价格暴涨", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520893&idx=1&sn=08905defcb3946110d0234a17349d464&chksm=ce46196df931907bb497ea294df1d455472c57f0dacfe24cd9dc964561b52a4a8604f18b8d0f&scene=58&subscene=0": "【漏洞通告】GNU C Library缓冲区溢出漏洞CVE-2023-4911", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247489766&idx=1&sn=3eaba020253f23f344e6927a2231500b&chksm=fe2ee76dc9596e7b1f97a6797c65305e199057acc4056d6bed3d2e4fb53c5cd2e4d7bfa7f2d9&scene=58&subscene=0": "弗吉尼亚理工大学 | 利用 ChatGPT 生成漏洞利用代码", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247497587&idx=2&sn=58397db0dcfee2f21f4f25ba42b2f15b": "EasyCVR智能边缘网关未授权访问用户信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247487787&idx=1&sn=04a7a600884e9c7e020b7a267ee02c46": "记一次某项目管理系统SQL注入1day分析", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247510866&idx=2&sn=9e9c37b829ccccbe70f7b99d9874f03f": "实战 | SRC邀请处逻辑越权到组织管理员漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247486762&idx=2&sn=de44cbd09ce7bf1fbbf2c42218e77565": "【漏洞预警】Exim 远程代码执行漏洞CVE-2023-42116", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247486762&idx=1&sn=a4b30953384838ec47b83bf269614de9": "【漏洞预警】Qualcomm Commpute DSP 权限提升漏洞CVE-2023-33107", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247484272&idx=1&sn=17bc0180c8beaa67bceb43501c031203": "​华测监测预警系统 2.2 存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247503514&idx=1&sn=473034bdbe3f8ba6b8bb9abbeb5f50d9": "【代码审计】某安全数据交换系统的多个RCE漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247488619&idx=1&sn=6387a777c63a1c046c125b48a3497c54": "物联网安全3.物联网10大安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649290100&idx=1&sn=a690e926a90a4e2586a1f57a8d8b0829": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247498611&idx=1&sn=1df9aa5d6715e06f9705e2dc8e10e529": "复盘｜Balancer 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517813&idx=3&sn=2547a20df3df5050c23af50502f6658d": "开源代码库 TorchServe 中存在多个严重漏洞，影响大量AI模型代码", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517813&idx=2&sn=6a3b7d66586da1ad6c1cb57b1db81155": "Atlassian 紧急修复已遭利用的 Confluence 0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517813&idx=1&sn=d93b115c2f34ccedd19200ec3263c342": "注意！开源命令行工具Curl 中存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493950&idx=2&sn=62467cea53fea897dbf8e94ecd44896b": "上周关注度较高的产品安全漏洞(20230925-20231008)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493950&idx=1&sn=39c0a061d14cc864e0b62783462bb5e8": "CNVD漏洞周报2023年第39、40期", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651443373&idx=1&sn=e7e43960ef4ccaa43a973c10b4b2b70f": "信息安全漏洞周报（2023年第39期）", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650930961&idx=1&sn=1a236ddcd4ec82584dd365907252e6db": "记一次内部系统渗透测试：小漏洞组合拳", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499693&idx=1&sn=353cddac7449dc669dc496df10818a4c": "Exim 代码执行漏洞(CVE-2023-42115)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI5NDg0ODkwMQ==&mid=2247485645&idx=1&sn=8e1dc5d662b03cef96d57c8419cc8707": "Jumpserver安全一窥：Sep系列漏洞深度解析", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502442&idx=1&sn=7d46ac23554c90f9c94f6b1684234c57": "雷神众测漏洞周报2023.09.25-2023.10.08", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502442&idx=1&sn=7d46ac23554c90f9c94f6b1684234c57&chksm=f2585a19c52fd30ff7795eef8344bf1f2df4936bd32b2a72d450d3f7999ad2c919759bc958d8&scene=58&subscene=0": "雷神众测漏洞周报2023.09.25-2023.10.08", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517813&idx=1&sn=d93b115c2f34ccedd19200ec3263c342&chksm=ea94b71fdde33e0974bce7d6de4b942fca9a77a250a6426c544c4657b24a753a32bb9a185c31&scene=58&subscene=0": "注意！开源命令行工具Curl 中存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517813&idx=2&sn=6a3b7d66586da1ad6c1cb57b1db81155&chksm=ea94b71fdde33e09a176e23f52637a496b5d244d21adece15ff30273b5a330a21fea95f10aff&scene=58&subscene=0": "Atlassian 紧急修复已遭利用的 Confluence 0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517813&idx=3&sn=2547a20df3df5050c23af50502f6658d&chksm=ea94b71fdde33e096c89bb979a25dd92138a4c04cf1cc21a96d87a7906ddd2cbe7f03fd8ff5e&scene=58&subscene=0": "开源代码库 TorchServe 中存在多个严重漏洞，影响大量AI模型代码", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499693&idx=1&sn=353cddac7449dc669dc496df10818a4c&chksm=fe79db35c90e52232d1fb915b1037f3966f0363d579815f44347385d8ef300d5a18fd219038f&scene=58&subscene=0": "Exim 代码执行漏洞(CVE-2023-42115)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247485252&idx=1&sn=da9eca24384b466d0b265a23f7336bb0": "[YA-20] libcurl 和 curl 中发现高严重性漏洞 (CVE-2023-38545)", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247488121&idx=2&sn=52b4588d77b12148554277467e07384b": "emlog | CVE-2023-44973", "https://mp.weixin.qq.com/s?__biz=MzU5MTc1NTE0Ng==&mid=2247484823&idx=1&sn=cdb09658b155d17297230c7a3676b0af": "【漏洞复现】深信服SG上网优化管理系统catjs.php任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247486798&idx=2&sn=a73254399328ec88dd96d3086930bb75": "【漏洞预警】Microsoft Exchange Server 远程代码执行漏洞（CVE-2023-36778）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247486798&idx=1&sn=66b50e4f369bfbcda300efdc13a13522": "【复现】Confluence Data Center & Server 权限提升漏洞（CVE-2023-22515）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652046395&idx=2&sn=e2db54a1fcbaafd2ec9412f37ba4a3a6": "【安全圈】大更新！微软发布103个漏洞补丁，其中13个为严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785585&idx=2&sn=9e77f7f41451a0eae1ceb30ead074920": "开源软件惊现十级漏洞！涉及数百万应用程序", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785585&idx=1&sn=7adadfc08da12e2548768a377d5b134a": "美国CISA：包括（CVE-2023-21608）在内的五个高危漏洞已被利用", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650931188&idx=1&sn=70443aae0da2f9986920b27d83873a91": "curl∕libcurl 缓冲区溢出漏洞（CVE-2023-38545）", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247532487&idx=1&sn=ff8d80f936a815f66f27b3cdb544e717": "虚惊一场？curl SOCKS5 堆溢出漏洞大可不必惊慌", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517855&idx=2&sn=5ea5455de3ad27bd027a363a4b11a95a": "Adobe Acrobat Reader 高危漏洞加入CISA必修清单", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664194610&idx=3&sn=5ca5d8f413ddd8b704cf4115dfc51a09": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499781&idx=2&sn=30c22df2f8fecb50f60d1e1145b8c7c5": "【已复现】curl SOCKS5 堆溢出漏洞(CVE-2023-38545)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499781&idx=1&sn=4813f16068d1a9f2370fb4b778e29cbe": "【已复现】Microsoft 流式处理代理权限提升漏洞(CVE-2023-36802)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzMDgwNTA5Ng==&mid=2247487426&idx=1&sn=6a4665dee91fd0be1dfbbc03a5f4dfab": "【高危安全通告】关于curl∕libcurl的SOCKS5堆缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649158851&idx=1&sn=2725d559790c7d539b9ddaba3da08764": "安全跟我学｜这些网络安全“漏洞”，你堵好了吗？", "https://mp.weixin.qq.com/s?__biz=MzIxNDU2ODg3Mw==&mid=2247485620&idx=1&sn=44409b077f2432d2ef1778dcc2f2f51b": "【Vidar论文研读分享】理解和提高linux内核堆漏洞利用可靠性", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651443380&idx=2&sn=aed65f0d254407d7da0b7ac177b0b311": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651443380&idx=1&sn=a51f11b70223c8a86ccdff0932a04113": "信息安全漏洞周报（2023年第40期）", "https://mp.weixin.qq.com/s?__biz=MzkwODMzOTA2NA==&mid=2247492135&idx=1&sn=02a2c789e71f88776003e89bd44eacb8": "漏洞复现|深信服SG上网优化管理系统存在文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499781&idx=1&sn=4813f16068d1a9f2370fb4b778e29cbe&chksm=fe79e49dc90e6d8bf1bfaeba24fa5aa4bc6540c54ccb1feee465fec6f4bbc10f05b640f77558&scene=58&subscene=0": "【已复现】Microsoft 流式处理代理权限提升漏洞(CVE-2023-36802)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499781&idx=2&sn=30c22df2f8fecb50f60d1e1145b8c7c5&chksm=fe79e49dc90e6d8b8364d6c43aeea306ce45375d05a1e843c495c108ab68c65e1fccac8ca86b&scene=58&subscene=0": "【已复现】curl SOCKS5 堆溢出漏洞(CVE-2023-38545)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517855&idx=2&sn=5ea5455de3ad27bd027a363a4b11a95a&chksm=ea94b7f5dde33ee34cdfbb1253dab1a695f4138beb5de5e782328ecbbfdee7df7e80594a5429&scene=58&subscene=0": "Adobe Acrobat Reader 高危漏洞加入CISA必修清单", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785585&idx=1&sn=7adadfc08da12e2548768a377d5b134a&chksm=8893b49ebfe43d88326d81bcd34f09033820c5ea23dddf0382877f969771de31abb085f2fe82&scene=58&subscene=0": "美国CISA：包括（CVE-2023-21608）在内的五个高危漏洞已被利用", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785585&idx=2&sn=9e77f7f41451a0eae1ceb30ead074920&chksm=8893b49ebfe43d88fb5d5678cf018b7dcb1a9e9cf78fcc68011c09ee22b4f62fb53a9a29f112&scene=58&subscene=0": "开源软件惊现十级漏洞！涉及数百万应用程序", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247540109&idx=2&sn=4118c9375478b7ad632e939ca93bc3d4&chksm=c1e9d1dcf69e58caa873cf6c69b0f3c0bb145775f20e0069aa24b334816ce1b4bad41292c2b3&scene=58&subscene=0": "堪比Log4j？curl曝出迄今最严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247540109&idx=3&sn=2fb238c51e6be2beea053b94cc1ee959&chksm=c1e9d1dcf69e58cacda1e6992b4ddb008d05a548c6b23819955901cd49b816e7915bdf47f887&scene=58&subscene=0": "ShellTorch漏洞影响数万PyTorch模型服务器", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247499458&idx=1&sn=736c797d3df1d6a5f08621c6db80dbd9&chksm=eaf9b68edd8e3f980ec297b3c785046c101b830ccaf8c36dbc839c3087c61758dff74fd78b06&scene=58&subscene=0": "现金大奖| 2023补天通用型漏洞专项活动第四期来啦！", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247499458&idx=2&sn=958122b31b17e66984edb284291beb12&chksm=eaf9b68edd8e3f98d226cf10ff0dbbceeccd04a302da3903333ac515ac6c62cc9ab91232ce2c&scene=58&subscene=0": "2023年通用型漏洞年度证书奖励计划公布！", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652046395&idx=2&sn=e2db54a1fcbaafd2ec9412f37ba4a3a6&chksm=f36e287bc419a16d71270d9280940a89b25aace74cd6c3330b4ca2284aa13936b86b5657799f&scene=58&subscene=0": "【安全圈】大更新！微软发布103个漏洞补丁，其中13个为严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652046395&idx=4&sn=bdb26c13ece0eeedaefb05505851c841&chksm=f36e287bc419a16d4ea4e55394a228934a54ef170d5e125faadd143630080cf63b04afcb9085&scene=58&subscene=0": "【安全圈】惊现十级漏洞！海量APP处于危险当中，到底是谁的锅？", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247569502&idx=3&sn=13b150d9076b9711464e0c85729505a2&chksm=e9140064de638972565f2ae23d4bf45d1c180f821f45ae8810a15cb1eea5d7879dda0f9b3363&scene=58&subscene=0": "对MOVEit Transfer SQL注入漏洞的最新分析（10月4日更新）", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664194610&idx=3&sn=5ca5d8f413ddd8b704cf4115dfc51a09&chksm=8b5960cbbc2ee9dd898e1066bfbe01560646d8bd53aef57db3165ea087fff94814700ea6fe61&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247540381&idx=2&sn=342c6b9a6ae7e7dbc2e54fbf13ca6fb4&chksm=fa93e85ccde4614a1137f919d76f6a2f088ba3a037aab4834a1edd51e9fba86132224ba6ae5b&scene=58&subscene=0": "利用主流路由器漏洞传播，Mirai DDoS 恶意软件持续活跃", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499786&idx=1&sn=ea7ee004bdb9f6a754d226eed988eb28&chksm=fe79e492c90e6d849bd572ab1df4c4928830168b51cc48ca65fbee568d08f0070d814c9039f6&scene=58&subscene=0": "【已复现】HTTP∕2 协议拒绝服务漏洞(CVE-2023-44487)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzU4NTMzNjU4Mw==&mid=2247489977&idx=1&sn=ee9273f587ad27a9512e66790701a5e5&chksm=fd8d4bd1cafac2c74612d7ba84cd3e59ac83c278989c9eb126ce0e1fcdd2e7b95aec634158d0&scene=58&subscene=0": "转转喊你挖漏洞了！", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247497158&idx=1&sn=97044f21cffc51f3b0e0a8781148314c&chksm=fe26f0c7c95179d19838c260cf6b8306cc7a0fcf9cc72f70842b1c3bda157b2f4b9534e266a9&scene=58&subscene=0": "CVE-2023-36802：Microsoft 流式处理代理权限提升漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247540124&idx=3&sn=76a1a4e16621fc6c51c1c693d38826d2&chksm=c1e9d1cdf69e58db192a22ed7e008daf1128d52866bbfbfec84ede1e36b49c9e6adbe86bde97&scene=58&subscene=0": "HTTP∕2协议漏洞被用于实施大规模DDoS攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652046475&idx=3&sn=af1f94489545c2648afb309b9e6717f6&chksm=f36e28cbc419a1dd12682dff5c3844083a50a38237c85f88a32a048f8085016f8c0b84117927&scene=58&subscene=0": "【安全圈】Apple发布iOS 16更新，用来修复CVE-2023-42824在旧设备上的问题", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247496449&idx=1&sn=ba9aa354c1ed47855958890e956947a4&chksm=c063ddd8f71454ce98c39cfcb57956df2111cba0908b7500776c295a41b85189256290056608&scene=58&subscene=0": "G.O.S.S.I.P 阅读推荐 2023-10-13 理解和提高 Linux 内核堆漏洞利用可靠性", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247540415&idx=2&sn=ced5fc6f4c1aab8daa409143cc49034b&chksm=fa93e87ecde46168d6e418c7b4c3fc3bdec5c0234917430abc339960a5c3dee25c6d33bdc340&scene=58&subscene=0": "微软超级修补！一次性修复103个漏洞，3个已遭黑客攻击", "https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651385710&idx=2&sn=381d63093265e9308ace2f64602f5181&chksm=8d399ee6ba4e17f069dd1c9dcbee5f17eb9af23a8a7122b339df23be56c9c3256024ab10cf2e&scene=58&subscene=0": "再获殊荣！长亭科技获评CNVD 2022年度漏洞应急工作突出贡献单位", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247499529&idx=2&sn=10711a8423db7f96c489f14c6b4045a9&chksm=eaf9b745dd8e3e53e82ec6ccf0b9b797cbacba2e91c5cc798b383e28983d17e6fbcd9f180f7d&scene=58&subscene=0": "2023年通用型漏洞年度证书奖励计划公布！", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247499529&idx=3&sn=478913d695915f820ae92442df837e76&chksm=eaf9b745dd8e3e53126fba83e1238bf80da787be89636e189b1a41192343e9a6451a69ef3324&scene=58&subscene=0": "现金大奖| 2023补天通用型漏洞专项活动第四期来啦！", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247484608&idx=1&sn=e2a414257451ea83b81e0f6b886dba65&chksm=c2b106b6f5c68fa058be61c95996f9787d08a0615bccf740a4719e7c12a362d456ab670ce6a0&scene=58&subscene=0": "腾讯安全威胁情报中心推出2023年9月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488172&idx=1&sn=6c370f4dd600861adf0b4d825e02a6e7&chksm=fb029ff4cc7516e24130ecafc500959bf5d8f5139e32f357ccb5325a06025b229b686b65b7e6&scene=58&subscene=0": "CVE-2023-22515 Confluence 权限提升漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488172&idx=2&sn=15766fcd628fa746eae11b055423aa6e&chksm=fb029ff4cc7516e2a921b129c0883968c35b25f60202ab58b8f00c26bf3ffbf945a6e0ea0151&scene=58&subscene=0": "风险提示｜curl∕libcurl 缓冲区溢出漏洞（CVE-2023-38545）", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247502548&idx=1&sn=971b17225582de2d3a7b71b767cc38dd&chksm=fa521f6acd25967c916cbc03b2b7317558b882d8af36715bb8eb56603bd5c633e4f61044e68c&scene=58&subscene=0": "微软2023年10月补丁日重点漏洞安全预警", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247569687&idx=2&sn=b6686b143563ab25389f75be489352e0&chksm=e914012dde63883b4f2446af0f464fee9abc7321aa81847c4478733d0639be51af2292f1cb73&scene=58&subscene=0": "“快速重置”DDoS攻击利用HTTP∕2漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTI5MTM4OQ==&mid=2247483951&idx=1&sn=99d21c14d121ffe4d9b4d2f62ff1cfea&chksm=fa62033dcd158a2ba4ff040486b23a843933b8ffcb5857751004b735821cdee003a3a513fef1&scene=58&subscene=0": "通达OA <12.4 反序列化漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652102153&idx=3&sn=be44043dd1555c8437149c7d3280234c": "“HTTP∕2 快速重置”零日漏洞被利用发起历史上最大规模的 DDoS 攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247486791&idx=1&sn=0eb7e9f7d6543295a86f1b8d70d7741f": "百绰网关管理平台RCE | CVE-2023-4873", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247052&idx=1&sn=3fd0c3a66b7e9e825863f98a486b0d0a": "Fastjson 漏洞利用技巧", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247511038&idx=1&sn=7aa2351bacaabe4260dd31043cf8f92d": "【漏洞复现】NocoDB任意文件读取(CVE-2023-35843)", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247483992&idx=1&sn=53aed86a29c897ef8a165f65f09ef706": "【新】鸿运主动安全监控云平台任意文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492261&idx=1&sn=6dbfcc427222545d49afab460b715923": "【0 day】鸿运主动安全监控云平台存在任意文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1NTQ5MDEwNw==&mid=2247484976&idx=1&sn=d12960b0e52bdb761ba7895eb7fd2b5f": "JumpServer 堡垒机综合漏洞工具分享", "https://mp.weixin.qq.com/s?__biz=MjM5ODQzNTE3NA==&mid=2247485299&idx=1&sn=ce3b786ff7e7a442c8a1e2611edf5d81": "『任何系统都存在漏洞，没有完美无缺的系统』", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247488501&idx=1&sn=7d1ab1353a044bacd9d389e4043a37c5": "RCE进入内网接管k8s并逃逸进xx网-实战科普教程(一)", "https://mp.weixin.qq.com/s?__biz=MzUyOTI5MTM4OQ==&mid=2247483995&idx=1&sn=6306013d788a3ea565c95914eb9e733b": "某路由器RCE漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520962&idx=1&sn=579a00255f6e2cd25e8785f63894bed0": "【漏洞通告】HTTP∕2协议拒绝服务漏洞CVE-2023-44487", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458523106&idx=1&sn=cda72f7fdac51544a6c24882f5829f02": "2023 SDC 议题预告 | 深入Android可信应用漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485022&idx=2&sn=f45c7cac562a39eb8161e2919b31e010": "【高危漏洞】QQ音乐存在命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485022&idx=1&sn=e41d3cdf0449bdb0f51e0328d9148fcc": "【严重漏洞】【poc公开】vriteio∕vrite中的服务器端请求伪造（SSRF）", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650931327&idx=1&sn=42ef6a27ddb912379a9bc70dd94b3b11": "一款全面而强大的漏洞扫描和利用工具", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247518620&idx=3&sn=5cd1ed8b7f0e7bcf7dd823a306dcbb5e": "每周安全动向--安全漏洞篇", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDExMg==&mid=2247484096&idx=1&sn=5757df929e13b53df479e318b1ec2cff": "【漏洞复现】GeoServer SQL注入漏洞（CVE-2023-25157）", "https://mp.weixin.qq.com/s?__biz=MzU0MjEwNTM5Ng==&mid=2247512944&idx=1&sn=f10810d0f7e65d3a79f78e6a58b25035": "五个被积极利用的漏洞，允许黑客窃取密码，发起DoS攻击", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650579820&idx=2&sn=5bf0a706bc4325b4178f31e088001807": "HTTP∕2协议漏洞被用于实施大规模DDoS攻击", "https://mp.weixin.qq.com/s?__biz=MzkyODMyODMyOA==&mid=2247487494&idx=1&sn=fb1b8accd8edbd8fe5af97e5ed6e5dd4": "\"PearlSky战队\"拍了拍你，并邀请你一起挖『漏洞』", "https://mp.weixin.qq.com/s?__biz=Mzg3NzIxMDYxMw==&mid=2247493656&idx=1&sn=275a76015da4f363beebbdc4c73c5684": "如何挖通用型漏洞？", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247501813&idx=3&sn=3f24c77e668e24f9faa6c121cfde7ac5": "CVE-2023-45648 和 CVE-2023-42795：Apache Tomcat 中的两个高严重性缺陷", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247501813&idx=1&sn=fc07dc26254202297496abaa5e0564dd": "野外0day - CVE-2023-36802：Microsoft 流服务代理权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499791&idx=1&sn=cb3b91253bb67006ffb0370afa847701": "2023年Q3季度 | 漏洞监测报告", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247486359&idx=1&sn=c112e35e915ccde615276b45116a5a87": "漏洞预警 | Apache ZooKeeper认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247484094&idx=1&sn=4ba228826842dcabe7149517f48705be": "CVE-2023-42820 JumpServer 密码重置漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458523106&idx=1&sn=cda72f7fdac51544a6c24882f5829f02&chksm=b18d256886faac7eee7786f980ac1a5c90697efa5d06fb6a9bae5edbe08a192a9a8b40bfa61c&scene=58&subscene=0": "2023 SDC 议题预告 | 深入Android可信应用漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520962&idx=1&sn=579a00255f6e2cd25e8785f63894bed0&chksm=ce4619d2f93190c4d9cb0b3968c3af9fa240322f3d6124aa4987ad82a49270e8cdbc4d8e7650&scene=58&subscene=0": "【漏洞通告】HTTP∕2协议拒绝服务漏洞CVE-2023-44487", "https://mp.weixin.qq.com/s?__biz=MzUyOTI5MTM4OQ==&mid=2247483995&idx=1&sn=6306013d788a3ea565c95914eb9e733b&chksm=fa620349cd158a5fdf21a419db379b5fb7a9bef663c19ac109efec345d1b979ad85c4e32b033&scene=58&subscene=0": "某路由器RCE漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502584&idx=1&sn=486183bb6d025d6ad8d41d7612292d83&chksm=f258598bc52fd09dcc28038467a32ffcea05b5d8543b6470d43e6a350cbf69cea847fa8b4e08&scene=58&subscene=0": "CFS三层靶场复现", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503309&idx=1&sn=df183f5929cfabfebbc6d5c506bb7838&chksm=cfcaaed9f8bd27cf5a74fbb92e7ce8ceb823026094ee0ba71759913cd10f582725c322becb69&scene=58&subscene=0": "漏洞通告 | WPS Office远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503309&idx=2&sn=5433892a6ff5a845f539deb256c5959c&chksm=cfcaaed9f8bd27cfb23ade275167f0239623c95777e609fc8c16595a5700fc1e808296d6faa5&scene=58&subscene=0": "漏洞通告 | 用友 U8 Cloud多处反序列化远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045573&idx=1&sn=bcc5169fcd05251757bd164612d7d4f1&chksm=803fac9bb748258db7fe1ac0abc4697aa66e2bae912e6e6e5ebd5b0e002a54d970fe35f20332&scene=58&subscene=0": "【漏洞预警】Oracle WebLogic Server 10月多个安全漏洞威胁通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247497424&idx=1&sn=db68ad22a55a9d4032df879936a6f3d2&chksm=fe26f3d1c9517ac7f876b9499cc13e6c427c78f9bd157fbec9f291e78e1712a2dd2b0b9e4860&scene=58&subscene=0": "2023-10 补丁日: Oracle多个产品漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247497424&idx=2&sn=9b2f025326716db83c05ac08517c7bb9&chksm=fe26f3d1c9517ac7f0741e89cd974edfdded89a0ca73f1e8e4e196b6acc8986eb665fb259e87&scene=58&subscene=0": "CVE-2023-4966：Citrix NetScaler信息泄露漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499851&idx=1&sn=226f5c243e3305ff0dd1da270d1ee531&chksm=fe79e4d3c90e6dc5f5a655d2d39dd8ff3e357945c4ec0f050e588dce3e90be712f40278e7cf1&scene=58&subscene=0": "NetScaler ADC和NetScaler Gateway 敏感信息泄露漏洞(CVE-2023-4966)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499851&idx=2&sn=8de9e4d9b822dfd18b19b1d0a5bce7c5&chksm=fe79e4d3c90e6dc59f0969e7b2f1b552f18e131ae88508a2a9bd086e5e7fa6cc5ea962a2e84d&scene=58&subscene=0": "Cisco IOS XE Web UI 权限提升漏洞(CVE-2023-20198)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499851&idx=3&sn=a2bd3ef1a2d8afdbe3bf82bc5d64c9b6&chksm=fe79e4d3c90e6dc5dc774b16a02d9456b1506671e786dd6d8fab9c679395280b672265fbcbcb&scene=58&subscene=0": "Oracle 2023年10月补丁日多产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664195071&idx=4&sn=edb858cb308a6b90e2108afe03feffb6&chksm=8b596106bc2ee810bd2e7125913e6963bb43e9eb6505b65e3b1d533535a7b6a8a3dfb16872c0&scene=58&subscene=0": "CNNVD | 关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664195071&idx=5&sn=1fe67ff8e96fc909a2cda03b8f1c81b0&chksm=8b596106bc2ee810502bf7d897be865025ad99ac8888248b7d8f16cbde64a9625e7be78fca21&scene=58&subscene=0": "CNNVD | 关于Cisco IOS XE Software安全漏洞情况的通报", "https://mp.weixin.qq.com/s?__biz=Mzk0NzE4MDE2NA==&mid=2247487756&idx=1&sn=eff63ff4ac80db52506eb423f5ada42b&chksm=c37b96e7f40c1ff1216edecd3ce5cc96083ebd0676eda51a0d5b5797ae511f616a8a9bd43168&scene=58&subscene=0": "CVE-2023-20198在野利用：超过170000台思科设备暴露", "https://mp.weixin.qq.com/s?__biz=Mzg4MDcxNTc2NA==&mid=2247486108&idx=1&sn=60abae499acb582d14ea20ead82f02a9&chksm=cf71b807f806311162432ed24cbb1343b7a44fa6b0d88e405a335ba290044e3eb7a19e2239cb&scene=58&subscene=0": "POC2023，Numen 议题 “Modern Browser Exploit Development” 欢迎关注", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247566939&idx=1&sn=8ec2548b60e5247d4843ce7c756dcd16&chksm=9f8d5653a8fadf4567224079d1bcca003732004bdede1a180a9460790d395a0731ec2428f978&scene=58&subscene=0": "受邀参会、实力霸榜，360漏洞研究能力获谷歌、微软双料认证", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651126035&idx=2&sn=f3c99b86e4cb620e1557b836b02389bd&chksm=bd1449c08a63c0d65838b88ecdb8eaa211f315903123f533ee954b7d9fbd0b0a04e06b1e411b&scene=58&subscene=0": "CNNVD通报Cisco IOS XE Software安全漏洞情况", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650973665&idx=1&sn=ea010521cd122ebabc6484c3180fdfa2&chksm=8079e7d3b70e6ec592c205c01f3b2ff6ed079fa4c61f518a0224fce156eff74d15ee9cc10d56&scene=58&subscene=0": "原创Paper | WPS WebShape 漏洞及利用分析", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247510081&idx=1&sn=af4057f304ed1d92ca7b27f3999a5993&chksm=ebfaef61dc8d66776d7eb6bf8a2bf96434396f9ca8e0ea50414155588b2e04c90ef7b299aa43&scene=58&subscene=0": "超过4万台思科设备被植入后门账号：零日漏洞攻击，暴露即被黑", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521014&idx=1&sn=159d4976908c8f12ff1c7771093b0538&chksm=ce4619e6f93190f0dcc19459c675da669b3898ce43b7a0f4cc8b55f6bc3c5eb86b4878091afe&scene=58&subscene=0": "【漏洞通告】Cisco IOS XE Web UI 权限提升漏洞(CVE-2023-20198)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492315&idx=1&sn=254ce64793273a74788c973067ee5f93&chksm=e8a5e8b8dfd261aef2d3c09d3fac4e078d61152bc7bd74e8a851323ccbdb805df72e8de8fc75&scene=58&subscene=0": "一个价值300美金的逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499861&idx=1&sn=e9451a1b922616ece9fdbbd06ce32f8d&chksm=fe79e4cdc90e6ddb80290d2a7614d67e9021647bddfbe91b6c9f98d536541cd4f8947c3c6b20&scene=58&subscene=0": "Cisco IOS XE Web UI 命令执行漏洞(CVE-2023-20273)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0MDI5MTQ3OQ==&mid=2247484603&idx=1&sn=7dfee9deb3909c29f30e35d9d90bb6ae&chksm=e91c5f43de6bd6559b62a285598cebba5325aa5a74f7a89a1dd7a1e08050553689c6092f3be7&scene=58&subscene=0": "As-Exploits 1.5更新", "https://mp.weixin.qq.com/s?__biz=Mzg2MTc1NDAxMA==&mid=2247484013&idx=1&sn=6fcb9b42aac7bd86d511f2096c127712&chksm=ce130598f9648c8eead7f6d7fe2f1d78cb3f790e1696b5d2549a230291a9361ca68e88ad658b&scene=58&subscene=0": "As-Exploits 1.5更新", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652047105&idx=4&sn=6577bfdc02d69ba1bad7211e3db0a6cd&chksm=f36e2b41c419a257fe2dcac166b14eb8a6752702e3130701fdb8f28265ab683031b1a787b4ab&scene=58&subscene=0": "【安全圈】iPhone X被黑客找到新漏洞 可恢复已删除照片", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785652&idx=1&sn=bfe3a1a98c0713750ada099d556ff20d&chksm=8893b55bbfe43c4d825a21b4eb03614807f0cd0d9b624853c85eb25bcad2dc2948643b7f193e&scene=58&subscene=0": "八大中间件介绍以及漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785652&idx=2&sn=a08621f4abead0e94d1a1bc43d66e6d0&chksm=8893b55bbfe43c4de86c47d7e6ccffb88964b5ebe07ac02dbef6c5cd43ccebe01902615bb0ca&scene=58&subscene=0": "CVE-2023-42793漏洞被利用，向国防、媒体、IT服务组织等机构发起攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503360&idx=1&sn=29f1738205f8ce6e4c05b868e6596691&chksm=cfcaad14f8bd2402958c119bffaf62c14bbba3b3aa56c2d313c90ba97b419062a27be5aad34d&scene=58&subscene=0": "漏洞通告 | Apache Solr 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494004&idx=1&sn=496dc07793795fe35ec05af465a05031&chksm=fd74d9bdca0350ab46017c924c82a775b41f2d31f9a5455aab2d136a0effa2719aef9fe61cae&scene=58&subscene=0": "CNVD漏洞周报2023年第42期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494004&idx=2&sn=8a126c64ebb0f7282a10b9f7d806c777&chksm=fd74d9bdca0350aba2e2078586fd495e0a5f4676f391443a6f2c6ac2eb0fbf624e7cb21bf96f&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231016-20231022)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247569981&idx=2&sn=9014044dee01b36b3d25aad4d07044be&chksm=e9140207de638b115b4215bb2e2c8bfd30c6ee2f057f17255d2748bdb7b3905284516fc9cd8e&scene=58&subscene=0": "威胁分子通过多条攻击链大肆利用Progress WS_FTP漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMDEyNTkwNA==&mid=2247495907&idx=1&sn=6f02a656e1c35c947cea4dc9ee486c8c&chksm=f9ed9c5cce9a154a40329958321441cbb8613de4fa5f728dfdd253272f129176a804d5b4dcac&scene=58&subscene=0": "神秘组织利用WinRAR最新漏洞，俄方政府再遭网络攻击", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491868&idx=1&sn=865fc8bd109b4ccc903bf7485af9c765&chksm=96f7fe71a1807767f6780baf9891c1dddb0d675b0f3ce7b040267843e19cdb5b791359d957a3&scene=58&subscene=0": "长亭观点｜先别急！Apache Solr漏洞情报补充", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785663&idx=1&sn=a85e5da1f24a8e26c6feabdb11000116&chksm=8893b550bfe43c46017a4512234e6dccf322a87ee592b9667d95542c77f079921886344dabca&scene=58&subscene=0": "利用RouterOS（CVE-2022-3496）漏洞，将符号链接作为挂载入口获取代码执行", "https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247489081&idx=1&sn=791eacc81bf8257cf7eb4252f17c41ec&chksm=fad4cb2ecda34238b5cd1d9d5d43ad9ccadfde795777a97b1883bb5db8d746ea896847b635a6&scene=58&subscene=0": "聊聊CS4.5下的CVE-2022-39197 RCE 的修复", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498754&idx=1&sn=1a59fee0690afd01be43831d4725e2d8&chksm=973acf60a04d4676bd1a7d7866083136495444bb099022c2b9c92bb77f04353adb5db638c01a&scene=58&subscene=0": "CNVD漏洞周报2023年第42期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498754&idx=2&sn=fe7c5f40cfbfa6ed532357f9ffb6df1b&chksm=973acf60a04d467629d4b8b0a5a12824201729480060d9682a12fcab2f9027aad7766af7892a&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231016-20231022)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492369&idx=1&sn=73f01a0f25db02cd603a27ad0eae838b&chksm=e8a5e972dfd26064bbe00bbeaf8ce39eb292945db2cf94ff11bfc49bd270a3fac11f2d0fa338&scene=58&subscene=0": "通过文件上传所获取的RCE", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488246&idx=1&sn=3c492823a366ef815a7a89e2df58e778&chksm=fb029faecc7516b87b4210744fad9ea5f2f84e53b1e04c4be41d9f98ad227ba5ce03a9de5c2f&scene=58&subscene=0": "长亭观点｜先别急！Apache Solr漏洞情报补充", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785672&idx=1&sn=84ccb360f7e53fb7446035075136f5a2&chksm=8893b527bfe43c31a12373d4033120893143c4cae407120827041cd4eb404ed3204e897c8c5d&scene=58&subscene=0": "“三角测量行动”利用 iOS 0day漏洞（CVE-2023-32434）部署后门", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785672&idx=2&sn=2cb72a8516b3adf6447803f80a7c67b4&chksm=8893b527bfe43c3163ae78d9e275676ff519af7c944f5e55055d5875ddff3c1dec2090b02203&scene=58&subscene=0": "研究人员发布VMware (CVE-2023-34051) POC 漏洞利用代码", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499888&idx=1&sn=39aad3896d585d0886e73a1f656d810d&chksm=fe79e4e8c90e6dfe845e8cd384071ef39fcf973bf1eed73b7ca2e974c0c089491a539eb102a9&scene=58&subscene=0": "VMware vCenter Server 越界写入漏洞(CVE-2023-34048)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458525914&idx=3&sn=bbf3fe2633337cc7af20333e48656406&chksm=b18d105086fa9946ab4ef041cb24a9919ab803e53932ba9cf6b642250b67f38b3c6ed0a4f9d3&scene=58&subscene=0": "系统0day安全-Windows平台漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247497707&idx=1&sn=7b6a98eecb8345186b74ad470e6cb8a6&chksm=fe26f2eac9517bfc408935635d7ce7d0eb6be7f931e7345dc792f01042360d8774274e3441b4&scene=58&subscene=0": "CVE-2023-34051：VMware Aria Operations for Logs身份验证绕过漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247497707&idx=2&sn=e353769c0aec6748b37ff47de9e9fc53&chksm=fe26f2eac9517bfc46daa37840008cda093f321abd34be96ed70b0086f9ad602079d8591e8f7&scene=58&subscene=0": "Apache ActiveMQ远程代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491902&idx=2&sn=bffffa6afba2c62c5446788a2edf669c&chksm=96f7fe53a18077450323e12c0b8fab74a6a289d24ffd58dd0ebbc80721039ed03de62fd36839&scene=58&subscene=0": "在野利用｜Apache ActiveMQ远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247489116&idx=1&sn=89343eb8c8936dba78f8afe83ea7f60e&chksm=fad4cb4bcda3425d1c74f1d80d2518b762872893215803ae69317c42d6560bd9fde160bfc4a9&scene=58&subscene=0": "CS4.5: CVE-2022-39197 XSS RCE 修复补充", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517985&idx=2&sn=bf96d48a8e813b54efe7b49e1d451d91&chksm=ea94b64bdde33f5d32a676ffb901bafbd88a9925b05af28720a33389cee0066b41f2b27046cb&scene=58&subscene=0": "VMware 修复严重的 vCenter Server 代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785685&idx=1&sn=c7b12ccb2db71d947ae3c32cb2360796&chksm=8893b53abfe43c2cd20e59d755c907fcf48447e9c6d2013918c049729fab9283934fa1dfe0c4&scene=58&subscene=0": "Citrix Bleed 漏洞（CVE-2023-4966）POC发布", "https://mp.weixin.qq.com/s?__biz=MzUyMDEyNTkwNA==&mid=2247495978&idx=1&sn=8a091762043b798b016b2cab609456ac&chksm=f9ed9d95ce9a1483408b72227e0d68b68e44783d228c42671ae6ab9996ebb814bc4cdd85e3eb&scene=58&subscene=0": "矛头持续指向印度国防部，Sidecopy加入CVE-2023-38831漏洞利用攻击队列", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499902&idx=1&sn=da1cde89cc5b7bc505481987ae6edb12&chksm=fe79e4e6c90e6df0ace5acb83763aa4e6518df83f6ffbe980bdad2b7082958eda64bcf2ee903&scene=58&subscene=0": "【已复现】Apache ActiveMQ 远程代码执行漏洞(QVD-2023-30790)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499902&idx=2&sn=7af303b10c230745498ef889ede7b3c9&chksm=fe79e4e6c90e6df06f3d1ad2e30c23cef0a3bc7b3f97fe735c12da8521f50d8e434883852e91&scene=58&subscene=0": "【已复现】NetScaler ADC和NetScaler Gateway敏感信息泄露漏洞安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499902&idx=3&sn=7516c7e1b06c60c7df2b872f21d9d0f7&chksm=fe79e4e6c90e6df0e6458483cc52515557873caf2daeebc250021ec01454e1add3551b1dba3f&scene=58&subscene=0": "【已复现】Squid 拒绝服务漏洞(QVD-2023-30699)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247535253&idx=1&sn=a63da635da47e36d7a285a69fff6f365&chksm=eb84a135dcf32823c3baa9ffe8764369b8ed1dbda68729cb451512fb86f09740320c78689cd8&scene=58&subscene=0": "技术分享 | 某下一代防火墙远程命令执行漏洞分析及防护绕过", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247496509&idx=1&sn=9c793be0e3671f9537234d53ef4a2312&chksm=ce96be03f9e137154e4c5794c4d12daacf947e254f87b3dba839b0b6a46ae26ce0f29f8b0b13&scene=58&subscene=0": "【风险提示】天融信Apache ActiveMQ 远程代码执行漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247502652&idx=1&sn=2c974b82d6183e139c2825ce9d049678&chksm=fa521e82cd259794a051f575cf8f8fc7502e55718ec98e461ef66a0e9e197b7c87a8edf39d29&scene=58&subscene=0": "山石携工控漏洞挖掘实践议题亮相看雪第七届安全开发者峰会", "https://mp.weixin.qq.com/s?__biz=MzkwNzMyNjU0MQ==&mid=2247484177&idx=1&sn=1dbebf382d730e52a797eebdbfc7e967&chksm=c0dba633f7ac2f259f421328a290fe78117cddb8f44f52a3900c5e07f07a3e9c895e6c0fbd5b&scene=58&subscene=0": "Joern In RealWorld (2) - Jumpserver账户劫持漏洞（CVE-2023-42820）", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503491&idx=1&sn=0c20967c5a008dea1a0455f154cf7194&chksm=cfcaad97f8bd248165e865d21809181d2f01895d987b1e4c9b7dc5d0c4f002cadc5f2503aaa7&scene=58&subscene=0": "Apache ActiveMQ “超危”漏洞，已捕获大量在野攻击，速修！", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247570174&idx=2&sn=755512d41a1d7facbea23a0bc3d5af49&chksm=e91402c4de638bd228abb97b2f74b51a0740a7b36c423e69ffb89e13b1a17e9fe1963e174591&scene=58&subscene=0": "MacOS“DirtyNIB”漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247510122&idx=2&sn=70d62a3e257057083c8c6387ac3b39fe&chksm=ebfaef4adc8d665c114c1ae8c5d71c2d08391e81fbf96b668ae274c5cf9b6f1e741dc8d3513a&scene=58&subscene=0": "上海一公司员工利用漏洞篡改ETC余额，一年私吞260余万元", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651126225&idx=1&sn=c424262d757996e9543c201ee15f5242&chksm=bd1449028a63c01408784c55633f6953c4f43c5e666c28d6af39ef3308e84b35d0c5f3dd514e&scene=58&subscene=0": "10款热门的漏洞管理工具及特点分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458526796&idx=3&sn=2c44563af28bb19f183f484901b0acaa&chksm=b18d14c686fa9dd067e17c76d16faa125f0de9d3d115822a296ecdacaa680a3ce8f55e1e1efa&scene=58&subscene=0": "10.28已更新：UAF漏洞分析与实操讲解-30小时教你玩转CTF", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502598&idx=1&sn=3c7a3c7437fa59b1191ae738870d8f18&chksm=f25859f5c52fd0e3d0a70cc706d79cd6e941145c370bebc32ebcb7736a16f3feb7164e29ee06&scene=58&subscene=0": "雷神众测漏洞周报2023.10.23-2023.10.29", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494036&idx=1&sn=a38aef6942f70c467575daf9e3300242&chksm=fd74d95dca03504bc60fee66c41231f2648941f14712e39150fff2d353bf22d77cb22aaa0f5b&scene=58&subscene=0": "CNVD漏洞周报2023年第43期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494036&idx=2&sn=d29dc27082c8609e6f20797cbd24bab7&chksm=fd74d95dca03504b20d79ae35e97fd657f94ee848e3c7fa14436c3dd144f5ed183f0c0b2ed31&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231023-20231029)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499933&idx=1&sn=51cd8771f4b40baa3db4b5853e17f896&chksm=fe79e405c90e6d13f3bdafbc8624809ec7eca23fb9b974c4efeac43214bcbaee35449caaa9c7&scene=58&subscene=0": "Atlassian Confluence Data Center & Server 授权不当漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491929&idx=1&sn=56c2476e383ccbcbae5e42a699d942f5&chksm=96f7fe34a180772261e685fab199cefce75e108104da8025763f48eee6184979ac57a13361a1&scene=58&subscene=0": "【原创0day】Atlassian Confluence 远程代码执行漏洞（CVE-2023-22518）", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785729&idx=1&sn=87d830fc6af27a3801b2e1fe9001559a&chksm=8893b5eebfe43cf87d26162dc647772b9cdef0abc53e2b1ec9585daeac82b61f8969b0a33264&scene=58&subscene=0": "Cisco IOS XE CVE-2023-20198：深入分析和 POC", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785729&idx=2&sn=5fc360e2b080454fa0652ee4e234f925&chksm=8893b5eebfe43cf873647d05b813f9bd538f21ca5a50596b782605fef5e830efa5b12dae22eb&scene=58&subscene=0": "Wyze Cam v3 的 RCE 漏洞公开发布，现已修补", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247499926&idx=2&sn=a35bc38d4dc4d0afab983f3bf10b9062&chksm=eaf988dadd8e01ccc5bdbd548963253745179206de40714b1c727da2fe23b2e490208209ce65&scene=58&subscene=0": "2023年“专属SRC”漏洞年度证书奖励计划公布！", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488270&idx=1&sn=ed36bba5615f3ace62ce8ee9646a23f4&chksm=fb029e56cc751740227959b1c20433c96ad416828adf99f1f2449470e9e0f73ef63c9c04ae39&scene=58&subscene=0": "【原创0day】Atlassian Confluence 远程代码执行漏洞（CVE-2023-22518）", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521175&idx=1&sn=a3de861709b7d4cc4c27920fdcdf4342&chksm=ce461887f9319191e42c74cb1637dd5e4cc796e1c0041ee46d88115b085647ad38e744335b78&scene=58&subscene=0": "【漏洞通告】Atlassian Confluence远程代码执行漏洞（CVE-2023-22518）", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492430&idx=1&sn=c97917fc9cb6fe4d4a8e2dc0987af8b3&chksm=e8a5e92ddfd2603b86a9815680f58de7c73ed35fd8916d15af5849e5432adb35383f4de6c4cf&scene=58&subscene=0": "实战 | 记一次艰难的任意文件下载漏洞挖掘和总结思考", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498769&idx=1&sn=ad075f58cd9651d2b6e756e215f64ee6&chksm=973acf73a04d4665208dbc3c51166fd3237182ca954f3750f6049e12db0bc4555cdb948d440c&scene=58&subscene=0": "CNVD漏洞周报2023年第43期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498769&idx=2&sn=aa431f1d3cb61a9f69122ddabfbdb227&chksm=973acf73a04d4665930b4684efc93eb8189191d7257e10abc1848a3d3ac701f588095c8d1b02&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231023-20231029)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503545&idx=1&sn=71ee45d71edb9d307537c7b33153a0de&chksm=cfcaadadf8bd24bb44a14650cf5fdfbecd8936c7c0d5d5963b7e61899803af45e734c8c8c933&scene=58&subscene=0": "风险提示 | XXL-JOB 默认 accessToken 身份绕过，可导致 RCE", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458527124&idx=2&sn=17cd7eb2332daf172f03dd9c67813013&chksm=b18d151e86fa9c08dddd8c5b60313797a7d49b418cf2773d916ac32d4dd0e9105c63f3209891&scene=58&subscene=0": "白帽访谈 | 挖掘上万个高危漏洞的安全守护者", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247498021&idx=1&sn=ecaf23b88a1467e5e05d8e1b0e69fa89&chksm=fe26fc24c95175325f95d4e2a99c9385e52fcc4d619d3991348abb5e1717b04f93fb5c8ceba6&scene=58&subscene=0": "CVE-2023-22518：Atlassian Confluence身份认证绕过漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247502713&idx=1&sn=db01623b954b9c1566f6f803bab1940b&chksm=fa521ec7cd2597d17cfcdd38745cfc99e1b1adacc3bd8fe134382b80aa7d06163419c2d93ab5&scene=58&subscene=0": "手把手玩转路由器漏洞挖掘系列 - SNMP协议分析", "https://mp.weixin.qq.com/s?__biz=MzU5Njg1NzMyNw==&mid=2247487419&idx=1&sn=06badcecbbb46644bb94b50a3f752629&chksm=fe5d173bc92a9e2d2cc61635d2c0fd6f6052ea1c827a871b1d1389deee6f1e6c4d1a8362dd49&scene=58&subscene=0": "一键预约 | AI安全及漏洞分析赛道出题人空降！DataCon2023赛前公开课来袭", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247499969&idx=3&sn=861b355de7f90ad3c233aeb9b5c41b28&chksm=eaf9888ddd8e019bdaba91eee6cb91e9f426a87c5c1f0cba534d7125aa095fcaa6a1e76386ad&scene=58&subscene=0": "2023年“专属SRC”漏洞年度证书奖励计划公布！", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521205&idx=2&sn=fe8329c778763c6dd68d8f3b99ad9485&chksm=ce4618a5f93191b34e6084b1a3d992da787bd4a91cececeb8c66a09d1889104e52b30cb3dec2&scene=58&subscene=0": "【漏洞通告】XXL-JOB 默认accessToken 认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499939&idx=1&sn=c603873f3ea231ce3330fa203dee29a6&chksm=fe79e43bc90e6d2d9e1ca8bcb7e45636c841820f83058dac9f95b6ac0d8c0b6d73c59aa17257&scene=58&subscene=0": "【已复现】Microsoft WordPad 信息泄露漏洞(CVE-2023-36563)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785763&idx=1&sn=acbf76a31544df9c95e9a4a636e381b0&chksm=8893b5ccbfe43cda9b4f3eff8cc4ea4fd7794905e5cc3403364e0856d8089b3341a77c637755&scene=58&subscene=0": "新的CVSS 4.0漏洞严重程度评级标准发布", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458527408&idx=2&sn=a49502e7f63089e80e5c1a83930ede77&chksm=b18d163a86fa9f2cbcdeb327ac7b7ac51aa8da17241c0f5d5d5c4addb11b2c842add526f848c&scene=58&subscene=0": "最新CVSS 4.0漏洞严重性评级标准发布", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458527408&idx=3&sn=c7ba23eff3777f0ed9fa2d97a3d9b77e&chksm=b18d163a86fa9f2c7141c65263fc9b7e44759ad440020c2b5ee7d0d21b9a79415e2332e07c9e&scene=58&subscene=0": "今日更新：堆溢出漏洞分析与实操讲解-30小时教你玩转CTF", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247540469&idx=1&sn=7c63f9dd7f0b202576e68c7a470dc815&chksm=c1e9d2a4f69e5bb2948374cff78ea6ae99699cce812838b9b52748ac639115fb60a08042772c&scene=58&subscene=0": "常见 Web 应用越权漏洞分析与防范研究", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247567321&idx=1&sn=88cea8dbf4ed3aad0d8c20d2bfd01f13&chksm=9f8d57d1a8fadec762a1a2555d1717ec7aa13ecae65d3f6388bd54174d5f42189d1afa83edf8&scene=58&subscene=0": "360获评国家信息安全漏洞库（CNNVD）一级技术支撑单位", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502615&idx=1&sn=f6e671c093d3659050705f08d7244889&chksm=f25859e4c52fd0f2f5851270d599c6347377512685e646863d726f942c58fb42b7a4d6b715ca&scene=58&subscene=0": "雷神众测漏洞周报2023.10.30-2023.11.06", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518068&idx=1&sn=604c9c5bff720e69d48c8a4c67adf491&chksm=ea94b61edde33f08c5b1621f39b640a67e73881625fe41ee1199403eda4c57b6795f42a34e73&scene=58&subscene=0": "ZDI称微软 Exchange 出现4个新0day，可导致RCE和数据被盗", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247510204&idx=1&sn=71ebeabf8164a36ec4d9e593b51359a7&chksm=ebfaef9cdc8d668a4fa9eff12286f26b70fdf6d52d2a8181570ef23bd98e7ff293be75614dcd&scene=58&subscene=0": "Okta被黑溯源：系统设计曝重大漏洞，机器账号未做安全防护", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521230&idx=1&sn=e5c905257172033749470ac4ab4e432c&chksm=ce4618def93191c8bc093b28b251747cc59d7e8e0806643edf256145cea134919c627c6aed3c&scene=58&subscene=0": "他们在韩国最大安全技术峰会，分享了这个Office高危漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494050&idx=1&sn=da2de8e1e567ef480d22b888f025d772&chksm=fd74d96bca03507d8e367b958c38a49692c93065b7f13c0d9af7db8271fe9cd19b789ccb56d1&scene=58&subscene=0": "CNVD漏洞周报2023年第44期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494050&idx=2&sn=c01a35a85f9561ed83c8199ca3c91cdf&chksm=fd74d96bca03507d829f8bd0e5c6d03eeb74ceed36dc783907555fa78a6071d53d3426f69390&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231030-20231105)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458527624&idx=4&sn=f7a11b447d6f295249b17cd7459abf00&chksm=b18d170286fa9e14f5f6afcf135f8e6c54ab0490f96342d8e52d5069fa968f83896849b530bb&scene=58&subscene=0": "今日更新-分析ioctl fuzz，syscall fuzz | 系统0day安全-Windows平台漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247510212&idx=1&sn=c66d2a9c916ef5e8d080814fd3aef3e9&chksm=ebfaefe4dc8d66f294b5c979534b41a8750e674cdbb5de526615ef15166bb1663d591a2008ed&scene=58&subscene=0": "现役美军信息1元∕条可买！美国数据交易产业失控引发国家安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518080&idx=2&sn=71583bf9067a3f7b1848503bf006dce0&chksm=ea94b6eadde33ffcf50e87af86318d2deea11f68e675ee8426e0d50b1d32679ca1c6499c3222&scene=58&subscene=0": "QNAP 修复两个严重的命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518080&idx=3&sn=186f168b319049fd88ec7557cb2458e1&chksm=ea94b6eadde33ffc3b7b219d6a0e6143f28a1c6c166c41882c63ee116d0acffba7acbed4dab3&scene=58&subscene=0": "Veeam ONE 监控平台存在多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498790&idx=1&sn=dd1640dcca3b488f95332e8ba24a21da&chksm=973acf44a04d46529fd6df4abd6aef5efcebc5f34a10d7040606839455c095c40a03cb1ba988&scene=58&subscene=0": "CNVD漏洞周报2023年第44期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498790&idx=2&sn=8e19f8c1ea7bc62dc044a9aede925d1b&chksm=973acf44a04d46529edd47b17c0e67e88ff68bf53e6077cee08c02328b93b2e3a7a90f9fea54&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231030-20231105)", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247502794&idx=1&sn=6b4496ac4e6c5b264a159c8298844738&chksm=fa521e74cd25976262e79a004b50eb894c831a21a35536de94f70ae1a563c724cbc7d0096453&scene=58&subscene=0": "Apache ActiveMQ RCE漏洞 CVE-2023-46604复现分析", "https://mp.weixin.qq.com/s?__biz=MzU5MTExMjYwMA==&mid=2247485659&idx=1&sn=47f1f78d5d2042482c976f06344733ac&chksm=fe32b82cc945313afe7408468863c49060a7ab45ab75755ebda5ceacbfe90375ec8eba627607&scene=58&subscene=0": "burp_crawl_rce复现-从点击劫持到rce", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503754&idx=1&sn=52b2af0607cc37179229b89c2eb42f98&chksm=cfcaac9ef8bd2588267c36c1e9154830883aa7df750f334ac3728b5b877cd7bc6a8c44ba2f06&scene=58&subscene=0": "漏洞通告 | IP-guard WebServer 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247496154&idx=1&sn=e3055e3c499b0dbe05a64b05dc884a6a&chksm=e84c5705df3bde13c38295ecff0e5d08fe814083d4052304da0faf28474a37d47f30d0daf4bf&scene=58&subscene=0": "【顶刊论文分享】The Leaky Web：自动化识别浏览器和Web中跨站信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458527750&idx=2&sn=d409b478da057c37c54d527677a63e02&chksm=b18d188c86fa919a5f6e3f844c7b04b52a356f7ed5172735455519ff3c315bf5af086c8891b5&scene=58&subscene=0": "ZDI研究人员披露四个Microsoft Exchange中的0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247540569&idx=2&sn=1763653924e77c3fcbb48763e7d25e19&chksm=c1e9d308f69e5a1e43754e537a2afaa5a35680f661c7157f7250be3c98a2336e8549f88302df&scene=58&subscene=0": "攻击范围扩大促Atlassian 修正漏洞评分-勒索攻击者已摩拳擦掌跃跃欲试", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492520&idx=1&sn=26428be564940ff7e733729fbaa29df9&chksm=e8a5e9cbdfd260dd3f1a6f99856325f31d6c256d7682252b2489382e39f3d4338e178f44c97d&scene=58&subscene=0": "通过分析JS源代码发现api漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491943&idx=1&sn=4361fe3877c793edf25960b3cd9d8c04&chksm=96f7fe0aa180771ce61184a8fcbb3e7d19397cdc975c45a64abac49bb88ce1e642e62643788d&scene=58&subscene=0": "【已复现】 IP-guard WebServer 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247496651&idx=1&sn=2e7ed67add84fa9d9953334f2551f663&chksm=c063dd12f71454047073d53effecd907f96cd10c0f62ccec8cc723dbfa898b00be787a8b12d6&scene=58&subscene=0": "G.O.S.S.I.P 阅读推荐 2023-11-09 基于签名的静态分析检测重复出现的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518099&idx=2&sn=042defdaef2c1342d2ef87dcd4895e6f&chksm=ea94b6f9dde33fefa6b268879b4fdebfe7f61d217d8685b96e7a50ce4970c416edd433698fce&scene=58&subscene=0": "CISA称SLP高危漏洞正遭活跃利用", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247492723&idx=1&sn=584860d9d77c2ef9f1f89a48f590c6dc&chksm=fa78e53fcd0f6c29dccb18ad819deb0cf5a349628990acc27ac6371c70b2d04a9c68be1c358d&scene=58&subscene=0": "漏洞马拉松2023 | OSRC正式加入，赛程已过半，成为纵横榜C位的秘诀都在这里！", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247494254&idx=1&sn=2fa6d94cb26dc9fef8670e74afc8f2d9&chksm=96d8e1b4a1af68a2b487059ec166e18f2eaf41f0ac9290dc21e39e8cfe9ba66bc49193f1fdf0&scene=58&subscene=0": "漏洞情报 | IP-guard WebServer 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247570896&idx=2&sn=b6f8f34b4b7763d45f9c9a641f1069b6&chksm=e91405eade638cfc5431cea8d22a83d5408459f4c1d0315de7ab4dbe4c8fb223a671082bf581&scene=58&subscene=0": "Kinsing恶意软件团伙利用Looney Tunables漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247567430&idx=2&sn=f1915c0f02983250c6a48f43a3dc1fbb&chksm=9f8d584ea8fad15896dff16c4469a9d62b84f0cc140f69826f0263cb0764f707db1ff04010d6&scene=58&subscene=0": "360独家揭秘：警惕Cerber新变种L0CK3D勒索软件借助漏洞多平台传播", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458528170&idx=1&sn=2566a845cd8c4284e09fa7aa51c35f49&chksm=b18d192086fa9036a38e7f0ed066e3972d83f6709cc2f6e29500e1375910480762706f057063&scene=58&subscene=0": "2023 SDC 议题回顾 | 轻舟“难”过万重山——工控漏洞挖掘的探索实践", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518109&idx=1&sn=ea1969d5f6961265242e634ad3228096&chksm=ea94b6f7dde33fe132cc88251eab7c283bd586cce97c1f70e82ba7debd24fd3003e6b9f2f7a9&scene=58&subscene=0": "微软称 SysAid IT 支持软件 0day 遭利用", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521281&idx=2&sn=cf1fece1418234889d7c35582ac72116&chksm=ce461f11f931960755a5c19cc49675d5e4e4cacd6c5c33d9032815bfee0e763eb64e11b4fec1&scene=58&subscene=0": "【漏洞通告】IP-guard view.php 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785872&idx=2&sn=4a5fce4955451b2484758023bee5a076&chksm=8893b67fbfe43f69f8a0a74fc083c0d96cd27641375fea851c7c7a44ae3bf8d4326fecc591a4&scene=58&subscene=0": "美团SRC｜漏洞奖励翻N倍！", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502622&idx=1&sn=2c033d3e1f79462c8cee3a5ef3af3ae2&chksm=f25859edc52fd0fb5009d75d1f054b5c4365cc9070c0975a56b7c2d2e3d4ea93cdf0640b3d3c&scene=58&subscene=0": "雷神众测漏洞周报2023.11.07-2023.11.12", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650973681&idx=1&sn=75dc72d0b4b1bbe2ed8d0f702091653b&chksm=8079e7c3b70e6ed5003c8c09521e4246cd96fd6c1f0914d06ca7024320f5260350314e2436de&scene=58&subscene=0": "原创Paper | Cisco IOS XE 系统 WebUI 未授权命令执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247509746&idx=1&sn=7b6100ba39ba3215c22750c8cb388d38&chksm=e89d8e2adfea073cd122af84de4e4fefeadfc20805c14da1b362042899b1952b81583925c582&scene=58&subscene=0": "SonicWall GMS 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494090&idx=1&sn=eccf836ca8e48d9d76f7abe229c22fc2&chksm=fd74d903ca0350153cbeaf8efa2d26f65ce7d75ab92c0a27990aa3b40d01b7435f301ae5db10&scene=58&subscene=0": "CNVD漏洞周报2023年第45期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494090&idx=2&sn=aea65937052946c4460efcbda67f0b63&chksm=fd74d903ca0350158448c542026317bc1c141bc9d983c9cfb3eebd5135c022bb96b59644f7a1&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231106-20231112)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458528496&idx=1&sn=980dcd2b79482d70a7a1c3452c481e97&chksm=b18d1a7a86fa936ccad74aed0cbadf35c6a84b09ea381e5f1f28b984e70093ae1ee4690c12b4&scene=58&subscene=0": "2023 SDC 议题回顾 | 从探索到利用：揭示安卓模拟器漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458528496&idx=3&sn=bc8d3cd0c55ab770344c4821da2aebee&chksm=b18d1a7a86fa936c334ac15ed3ae82c72617f23568e8f82c6c82c6af77c87505df3753ce4a25&scene=58&subscene=0": "本周更新：ioct fuzz原理分析 | 系统0day安全-Windows平台漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498815&idx=2&sn=39165ee49e72012c4b0c3b60176745a5&chksm=973acf5da04d464bf9290779656bf6072323dc6363870a125edd8ade874fb871bcf124e9209a&scene=58&subscene=0": "CNVD漏洞周报2023年第45期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498815&idx=3&sn=07554d673a7afe4543305d4a08e3ffca&chksm=973acf5da04d464bf23e3553b56a318d9192e7754132af130959859fa177298782e753bcdb60&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231106-20231112)", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650973687&idx=1&sn=ff313473debea3d08f4eb45325122156&chksm=8079e7c5b70e6ed3bc8f51c8f0c350ab835a4429f2dc0b70152f15d7e2573641188a92eed8ba&scene=58&subscene=0": "404星链计划 | HaE、GShark、afrog、JYso、vArmor、As-Exploits 项目版本更新", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521391&idx=1&sn=5d2841d92ecd267f0bb53fbc39d5e841&chksm=ce461f7ff931966962d62a69bee9d05e434ac4547d67c789f8818ea8b731e1725e472b2aec76&scene=58&subscene=0": "【漏洞通告】Apache Arrow PyArrow 任意代码执行漏洞CVE-2023-47248", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521391&idx=2&sn=e902b7b05afd84e98731e2bab49083ff&chksm=ce461f7ff931966921156771f37a16e1f16f38585e035e4149fb2cdde21775774bb4bd14965c&scene=58&subscene=0": "【漏洞通告】SolarWinds Network Configuration Manager 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247571115&idx=1&sn=9f15aa9db462a62f42d85ddfcc2a5925&chksm=e9140691de638f87c26351f5d20afa8ba131c348dda3f3e67032d7f17f7f33ed8ec39ce4c62a&scene=58&subscene=0": "Forrester预测：预计明年AI代码漏洞将造成新的攻击", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247571115&idx=3&sn=3ff347f143147e3608198bda2690c4b6&chksm=e9140691de638f87d215dbedfb9ff0b468596aa2eb7e856937fa92180592eecb992bab23f18e&scene=58&subscene=0": "2023年推出12个值得关注的漏洞悬赏项目", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488507&idx=1&sn=dfd59a672c787b3c595d90f2b4e8bffb&chksm=c2c644f0f5b1cde6b8d2b119ce37d21abbd0c771d59d93906f6f9e4a686d65966418d497faf9&scene=58&subscene=0": "【安全更新】微软11月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458528591&idx=4&sn=a8196bdd173bf203019270969a58bfc3&chksm=b18d1bc586fa92d37e16829607f0f62303c2ea387a12549bd1bba4ee1e5744ff21bd0e3dd7f2&scene=58&subscene=0": "初级篇已更新完毕！CVE复现漏洞精讲-从基础到入门", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247510279&idx=1&sn=a8a3f9d6a1d65fe1d5510aa228b40a16&chksm=ebfaee27dc8d67313624efba71126beab41ff911644d6f786e4730fc35c3666e0f3ef32eb00e&scene=58&subscene=0": "英特尔被诉故意销售漏洞处理器，企业不修漏洞和修复不力的界限在哪里？", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499984&idx=1&sn=b30a31591257c1f01b5b5dafd2f3f84d&chksm=fe79e448c90e6d5eeda3eab56ee03d470def552f9c6711bdba3b23945aedb3f39003d1fd6249&scene=58&subscene=0": "微软2023年11月补丁日多个产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503812&idx=1&sn=ce3fe0994d5ee5b240602e945b5a234b&chksm=cfcaacd0f8bd25c607b89b71cec57de0ea1f899d6290805e9f6771067a39752bcf7c6f2b6777&scene=58&subscene=0": "已复现Office RCE！微软11月补丁日重点漏洞解读", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518139&idx=1&sn=941a9da7093fb53ada0f874db9d3ef39&chksm=ea94b6d1dde33fc740734b8dc6fbbcd0d0ea7446e8a8bfa3c8bdb1423e2e2c01536e8adf2960&scene=58&subscene=0": "微软11月补丁星期二需要关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518139&idx=2&sn=4951a6280d077d8cd04309f6629182e3&chksm=ea94b6d1dde33fc71b53f7879454b257d922f83689acde6d310a195b1857f38098ca7685fcca&scene=58&subscene=0": "VMware 披露严重的VCD Appliance认证绕过漏洞，无补丁", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518139&idx=3&sn=201c8852d50131207cce3e7b5695fd44&chksm=ea94b6d1dde33fc7a7b70bcef38d8d9baf5198497a8802fa95ce2c50969d992c0a5990f81547&scene=58&subscene=0": "“奇怪的”高危Reptar CPU 漏洞影响 Intel 桌面和服务器系统", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247489994&idx=1&sn=0bfb41528b63c1ab1f0cf1f81d034da9&chksm=fe2ee641c9596f578d899e82a1c0d92cefc96d7862cde74435c50e24aad9b3c910e9d436d9c4&scene=58&subscene=0": "纽约大学 | 基于大语言模型的零样本漏洞修复研究", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247498677&idx=1&sn=5a7d87c53fd9fcd56e775b4ad672adfc&chksm=fe26feb4c95177a297c2772a06a34931651721f37bbc7c31f00d932aaaf32c49b8c4492691be&scene=58&subscene=0": "2023-11 补丁日: 微软多个漏洞安全更新通告", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247516344&idx=1&sn=744cae500e38b61cd9f9fba65782b498&chksm=eb705e87dc07d7915c6aa4d2266ffd8d095300cabd1efcd3e765e8f9057e770c110d73cf10e2&scene=58&subscene=0": "2023-11微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247571147&idx=1&sn=a91fdd0d7234b5386850a9db0e2dc6cd&chksm=e91406f1de638fe75705843bfdde4c6e2b3351a1369185bd61f84f6e8e0acc49100e96a6cd70&scene=58&subscene=0": "高流量即高漏洞：浏览标题党网站可能遭受攻击风险", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503825&idx=1&sn=35d17687e3fa9ff5c10bd39fa1f20a25&chksm=cfcaacc5f8bd25d32a40d976d21466c92869329b87efe2d0ddef07e0ee6d7c04b650d959593f&scene=58&subscene=0": "漏洞通告 | 金蝶云星空任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491952&idx=1&sn=73ccc45221ed6cd9ccd66c32812132be&chksm=96f7fe1da180770b893a6b438faf5716fbe5096366a6fafc01587ae73134e913009190ffe3bc&scene=58&subscene=0": "【已复现】金蝶云星空ScpSupRegHandler任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518149&idx=1&sn=915ff8302203c2d80f8010384fe1efd2&chksm=ea94b6afdde33fb9dc7416eef6e9266e5b18d129ef74f31ef2232c486b5dd672568fbec49fc5&scene=58&subscene=0": "ChatGPT 的新代码解释器存在重大漏洞，用户数据可被盗", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247541101&idx=1&sn=92bce236ba184537172b8dc932b57eaf&chksm=fa9397accde41ebaeaf757158b987e5283bd169a57a07b9dd7df91dec12a8a3416a33d44bd61&scene=58&subscene=0": "助攻黑客的严重漏洞？不符合GOOGLE的威胁模型，不予解决！", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247541101&idx=2&sn=b4dea9ba4b18b6aacc7252313ba5bae2&chksm=fa9397accde41eba5685151ff8c9395ce192afb4e3a4df75c0a2ba20cb26f2d6de0d7b51f50c&scene=58&subscene=0": "高流量即高漏洞：浏览标题党网站可能遭受攻击风险", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247536004&idx=1&sn=596409bf8b0963e06b45070ac97bc686&chksm=eb84a624dcf32f32bba6823b7400f88f593cf7c9a6aaca1c455ece8af984cbefa7069a74f149&scene=58&subscene=0": "漏洞调试的捷径：精简代码加速分析与利用", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247510291&idx=2&sn=497ba7072194febbcbc8e25851840364&chksm=ebfaee33dc8d6725dc701cdd5f39522fe9d286b476db1076daa3e618bcd9bf3ca5000f8aa8d5&scene=58&subscene=0": "支付平台漏洞遭利用！犯罪团伙通过AI换脸盗刷他人医保卡", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247571183&idx=1&sn=5cdd8c26dabaf6f8d702df151f3b2147&chksm=e91406d5de638fc3b8c1a557e369eec87306b8849f53112d3b794f77c0998e21134fb6b319ba&scene=58&subscene=0": "ChatGPT新代码解释器曝出重大安全漏洞——黑客可轻松窃取数据", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247500597&idx=3&sn=f6fc3e0e08813b2c264dfbc54413a1ba&chksm=eaf98b79dd8e026fe5cee2006052ac059493ea8dc82b93b76b2cc47106da7ea74a857a58efaa&scene=58&subscene=0": "2023年“公益SRC”漏洞年度证书奖励计划公布！", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458528715&idx=1&sn=627dc9f855b26a2b12023ae265d144bf&chksm=b18d1b4186fa9257155c4abdc5d6c214aaf1d7f02474075971493ddc63a7f153fddf3bfd63f0&scene=58&subscene=0": "2023 SDC 议题回顾 | 深入 Android 可信应用漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500003&idx=1&sn=070006ea4069557ba38ac6b934d604b6&chksm=fe79e47bc90e6d6d8d93f52b4b0ce6707854641fd3a0e37c1015ba5a7070944395a6bc656572&scene=58&subscene=0": "【已复现】Google Chrome 信息泄露漏洞(CVE-2023-4357)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247510298&idx=2&sn=8b3e130711c9d20bc807a48233cba2f2&chksm=ebfaee3adc8d672c5a3fda8b4cfa8a3e1aa719851955a323267cabbfcd766e051c4c81aaf676&scene=58&subscene=0": "金蝶云星空私有云任意文件上传漏洞安全通告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503840&idx=1&sn=6d4560f43589878e20910521bedcf0a9&chksm=cfcaacf4f8bd25e23e36ea2bba9879db39881e58987c6cc7367d4e173550c6accb44659275ca&scene=58&subscene=0": "速修！海康威视综合安防RCE已被用于勒索", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518159&idx=1&sn=44370db9677abd274914bebd182e5446&chksm=ea94b6a5dde33fb3b7fce9d16af88a593ad5cafb43671cb75c4eb3e9d6055b3812e8a12d2e68&scene=58&subscene=0": "Fortinet 提醒注意严重的FortiSIEM命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518159&idx=2&sn=b54ed16993cd6811139690c4a436767e&chksm=ea94b6a5dde33fb34588cb467b49254472988636e95f6687a2df98b2030a936b35b451b513f7&scene=58&subscene=0": "CISA必修清单新增三个漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247540708&idx=2&sn=d8ec520ad60bdc69b772dc7a29286852&chksm=c1e9d3b5f69e5aa3e5699b11e6ffc911ddadbd5c5838f8ed35321ce10f0f2e758d178a6a8bb4&scene=58&subscene=0": "还是Citrix Bleed漏洞！又一家金融服务公司遭勒索", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247502957&idx=1&sn=041df5d160addae19ff244df2595c3ea&chksm=fa5219d3cd2590c567112ba89794fbbfdb534986a07394369c96190c1ac845c88230b606a3e3&scene=58&subscene=0": "微软2023年11月补丁日重点漏洞安全预警", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664197659&idx=4&sn=b1b0c5252ee1dc098af28551b2b649f3&chksm=8b596ce2bc2ee5f44ccd02f9721f253adbb3bb6511231ebd6a40d7d65f5c802262687601e3de&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247541129&idx=1&sn=8c5e76e83847d82fde021f22afcb82d1&chksm=fa939748cde41e5e43959655cca35ad1a7a9708f5ffed620bf7fb505596665e639565c9791ca&scene=58&subscene=0": "ChatGPT新代码解释器曝出重大安全漏洞——黑客可轻松窃取数据", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492614&idx=1&sn=72de6169ff0d6313508631e42d0f5501&chksm=e8a5ee65dfd2677327a6df4ccd67be22019697d63f0e580883d8659a054f64c078fc379be75c&scene=58&subscene=0": "实战 | 记一次简单的漏洞挖掘过程", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492625&idx=1&sn=ad3648d202a3af0352e1527a2f3b0449&chksm=e8a5ee72dfd26764595c57802dd2d5e1967d2f67fb24983bf86faa3a39521ba313648503db96&scene=58&subscene=0": "一个支付逻辑漏洞和一些tips", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488317&idx=1&sn=5ef9fd277c1f354a7910b1413f075174&chksm=fb029e65cc751773d44bec5f0710340b1f72ea51ae74a14752fa9f5ac5e598a70105bffbea0e&scene=58&subscene=0": "还是狠炸裂的！Chromium libxslt XXE漏洞（CVE-2023-435）", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488317&idx=2&sn=7d9d87eb0cb5c5f8aceded9c79950dc3&chksm=fb029e65cc7517733b40b28c2542b91f14824dd3b58a83b6d48173a920ebfe4311d3b0045899&scene=58&subscene=0": "【已复现】金蝶云星空ScpSupRegHandler任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518171&idx=2&sn=0b735261ce924e7e2fb81864f59eaf32&chksm=ea94b6b1dde33fa747181216e79923bfce0fb821a0dc42cb4e1a61fd3f9366b1679db3a75710&scene=58&subscene=0": "人工智能∕机器学习工具中存在十几个可利用漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247498872&idx=1&sn=d49edaf1332012536974f24d29833bf2&chksm=fe26f979c951706f4fc404d039d49f75383f6720bcd0b58e4124dd0a216f246dcc4d60145fd6&scene=58&subscene=0": "CVE-2023-4357：Google Chrome 信息泄露漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521459&idx=1&sn=34d62516e5a64550aa1b27fa768264e4&chksm=ce461fa3f93196b5c18c1896c3bfcef4096f36019d4c6b842f5b0be9178fa5278ab580c9830f&scene=58&subscene=0": "【漏洞通告】Chromium libxslt XXE漏洞(CVE-2023-4357)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521459&idx=2&sn=713ce3ed6c4d965208e3b407c1f3fd21&chksm=ce461fa3f93196b5853deb1ca0b7e932c6a1e6091954d0e7fea9439bb2c2f01ca9c62bcde5f1&scene=58&subscene=0": "【漏洞通告】金蝶云星空ScpSupRegHandler任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492686&idx=1&sn=9cd06605e4bb97e1cb84287c80725c64&chksm=e8a5ee2ddfd2673b9eeefac239f088b8e4ba8a858b5bf0be3edfa8fd63362cc8002c31de8b26&scene=58&subscene=0": "通过分析JavaScript文件寻找漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494108&idx=1&sn=c9d63e31bafef25a82b2032f311a3f80&chksm=fd74d915ca035003672126e6f8761576018ed8943e0178c5c1e4d06231615d1b32d550afac43&scene=58&subscene=0": "CNVD漏洞周报2023年第46期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494108&idx=2&sn=2ef2628e40dd39c363d62d6e39775d37&chksm=fd74d915ca035003cb4513fd5cf0c249eab7a09408810818276395e26d229adcef9ad5bda289&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231113-20231119)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458528916&idx=3&sn=9c6d79154fce3e1e9b24472d9de01f18&chksm=b18d1c1e86fa95087828a42476daeed2f99a72e26a0444ea996032a60733b4647be62405ae27&scene=58&subscene=0": "本周更新：syscall fuzz原理分析 | 系统0day安全-Windows平台漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518185&idx=2&sn=684d4e65a59a982c1fccf9da85df30db&chksm=ea94b683dde33f9598344442a18bda5d0f06f4cadd5c123b32ee44fdb95d5a2b9dec302d1ca9&scene=58&subscene=0": "江森自控修复工业制冷产品中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503881&idx=1&sn=7fa3f08a5517cfd57b047e42538a8849&chksm=cfcab31df8bd3a0b780b282dab43b25278266c8b051a4ce136449f2d2f2fcf640d0a25b73950&scene=58&subscene=0": "漏洞通告 | I Doc View在线文档预览系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521482&idx=2&sn=62b6f912f6a98093dbb4a22bcd78e89b&chksm=ce461fdaf93196ccd8ebed3660d7125e1d691c873b98caedc2a95809768c276a7c0c1a31d5e5&scene=58&subscene=0": "【高级持续威胁追踪】蔓灵花组织投向国产办公软件的目光与winrar漏洞之触", "https://mp.weixin.qq.com/s?__biz=MzkwNzMyNjU0MQ==&mid=2247484214&idx=1&sn=bb2eb8ddb9a1ef223612eea0aa393bec&chksm=c0dba614f7ac2f02c0c7f48d9a28e9c4e5273ce70790b5939912db13eb7995dfab5b6a20e6a1&scene=58&subscene=0": "Joern In RealWorld (3) - 致远OA A8 SSRF2RCE", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498817&idx=1&sn=c37bc5fe04ab8157dec3042f725572eb&chksm=973acf23a04d463536f617c282f27e86f426e84df4e4898f589ed3de0e6bbdef1b1a0dc87923&scene=58&subscene=0": "CNVD漏洞周报2023年第46期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498817&idx=2&sn=64f04ef7c1c51d4e43b8eb2ed6a3cf8b&chksm=973acf23a04d4635ca2c8837742f351cee39bd074109516f35c8a7e157cf2aceb9bd26173944&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231113-20231119)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492704&idx=1&sn=784f78e696ba3ecebb3e4059e6edb3fd&chksm=e8a5ee03dfd2671547b75bddc6b3a38212c7e508461011ac2d3bcf4d7f9677fe91a870bf2f19&scene=58&subscene=0": "SQL注入+RCE|获取学校网站shell", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247494598&idx=1&sn=56c0c638fa8d90a6a45d871f8ad7b23c&chksm=96d8e01ca1af690a92137e54b272ead0555a6419c62094f5045c12958d7ec1740150863a38e5&scene=58&subscene=0": "Reactor Netty HTTP Server 目录遍历漏洞(CVE-2023-34062)", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247490026&idx=1&sn=9b525875d40baf90b49f7473f2be7e5b": "二进制漏洞分析-9.华为TrustZone TEE_Weaver漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247498472&idx=2&sn=eee05eccfadc5e63f2c4ed5f8f57fb7b": "Array VPN任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMDQ5MzM1NA==&mid=2247483952&idx=1&sn=5187477ddd01e30dd934e6805130d75d": "【0day】i Doc View 漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247155&idx=1&sn=d5e0b413e7fdf0c5aa85d78fb9e72bbe": "CFS三层靶场复现", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247512221&idx=2&sn=957370bd45808c4d3c3b7e6360cf72bc": "实战 | 某站点的SQL注入漏洞过程", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5Mzk2OQ==&mid=2247485582&idx=1&sn=ea5f1698e5764dca8f6480563f568686": "POC|SpringKill的IDOC_RCE利用POC", "https://mp.weixin.qq.com/s?__biz=MzU5MTc1NTE0Ng==&mid=2247485326&idx=1&sn=e6681c6e7d3de72246b49a9747bac520": "【漏洞复现】某客户资源管理系统machord_doc.jsp;.js接口任意文件上传 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247505641&idx=1&sn=cf7a98bd2f1c40c0f68af41ed8ff8984": "记一次代码审计中RCE挖掘及POC编写", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247490371&idx=1&sn=061900c0aeb89ff671284020c98f9e44": "红队攻防实战之钉钉RCE", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247487755&idx=1&sn=0493a4ca092558adf58cb02c3bd6f685": "创宇安全智脑 | 用友 U8 Cloud TaskTreeQuery SQL 注入等44个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492750&idx=1&sn=88728aa49441495c5e1546ed3779686a": "由本地文件包含所引起的RCE", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092491&idx=2&sn=61ef8198d70fcb4dc038f5c3907f12f5": "【漏洞通告】Apache Submarine SQL注入漏洞（CVE-2023-37924）", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651248672&idx=3&sn=f9db1d6f1525de3e97f108a1ff59d605": "新的指纹传感器漏洞可绕过 Windows Hello 登录", "https://mp.weixin.qq.com/s?__biz=MzkxNTU5NjM5MQ==&mid=2247484320&idx=1&sn=8ccc4e99272c62a5e22298a9f7acd1fb": "时空智友企业流程化管控系统文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458529077&idx=3&sn=c99ee453e12a9190e4fe370577f32028": "俄罗斯黑客利用WinRAR漏洞针对大使馆进行网络间谍行动", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458529077&idx=1&sn=98cb8a5611fc09197f554b75274e7db0": "DAS PWN出题思路&CVE-2023-40930的介绍", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503914&idx=1&sn=cdca7a94a9f58ac2e847c7e602e4f307&chksm=cfcab33ef8bd3a28d387ffa64498f607719ab1baf02b7a0ed3c82de90f4db9de709a266e0ad6&scene=58&subscene=0": "不要总想搞大新闻，这个漏洞不是核弹！", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458529077&idx=1&sn=98cb8a5611fc09197f554b75274e7db0&chksm=b18d1dbf86fa94a93537e9895c70833b29cf04da682caad1df673c9ff0e573d146174d059200&scene=58&subscene=0": "DAS PWN出题思路&CVE-2023-40930的介绍", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458529077&idx=3&sn=c99ee453e12a9190e4fe370577f32028&chksm=b18d1dbf86fa94a9edd700b2a7e3504128a628b43e40d203218c0e8960acbe58e202f4a7866d&scene=58&subscene=0": "俄罗斯黑客利用WinRAR漏洞针对大使馆进行网络间谍行动", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247540829&idx=2&sn=fdb02e160df47ed4c8e0271bc375d274&chksm=c1e9ac0cf69e251ae12b418c0fefd264d4475bb4a8c017f38f149e4d4ddb1a363859de4b1abf&scene=58&subscene=0": "颠覆指纹登录！指纹传感器的漏洞可让攻击者绕过Windows Hello登录", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247503022&idx=1&sn=48f62de07b301f3db4c88674c6fa76b7&chksm=fa521910cd25900606eb30b4f3c71a6a3f0c99a11b0e7b62c98047796c337f75a81d1091141e&scene=58&subscene=0": "MYSQL JDBC反序列化漏洞利用和分析", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488343&idx=1&sn=3a18980ec9c0003fb292d801ebc8560d&chksm=fb029e0fcc7517195d7f8279755ba759a5c6b02e65b301fa7ae793d6bdb13c2da503cf3f55b3&scene=58&subscene=0": "代码审计： I DOC VIEW 前台RCE 分析", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650179468&idx=1&sn=ffb1fba11aa90a117fec459de092b439&chksm=f4487c30c33ff52636a8fd5ff3913416f1dc11a6fad4269d1a9cb3af026e929ac3bcac07a282&scene=58&subscene=0": "抓狂！先修哪个漏洞？（阅后即焚）", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247516424&idx=1&sn=2ab35c25876a0140f49b749aa1d50f58&chksm=c2d1fdacf5a674ba0a4bf7d3b1babc218a5b8d7c2a7c9c2b3432b6c2b10daf684150c25cc166&scene=58&subscene=0": "高效开发：Java 反序列化漏洞 POC", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247571411&idx=1&sn=cb116543209bac1eb837e6607e099c40&chksm=e91407e9de638eff8f65edd5fcb10a2a21a9fc4bf68b1faef1d4a800d92048cf995b85e92e7b&scene=58&subscene=0": "如何有效避免7个常见的身份验证漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247571411&idx=2&sn=b6f5ba400b67298f35601904a3e591bc&chksm=e91407e9de638eff2f607eb93d3f9038330d7f7348c729a474d071f05ea9b9e8b14225973409&scene=58&subscene=0": "CVE-2023-46604 (Apache ActiveMQ)利用加密矿工和rootkit实施系统攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492750&idx=1&sn=88728aa49441495c5e1546ed3779686a&chksm=e8a5eeeddfd267fbc68b402fc19c6a9aa3f3524b72b9bf5e772b9c8f8a1a2a2d01d3bb2d5717&scene=58&subscene=0": "由本地文件包含所引起的RCE", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247490061&idx=1&sn=7d05728cc107b418453513eaeee259d6": "二进制漏洞分析-10.华为TrustZone TEE_SERVICE_VOICE_REC漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247156&idx=1&sn=5183b396d420fa4b1a066e058a4bdd60": "原创Paper | Cisco IOS XE 系统 WebUI 未授权命令执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652103140&idx=3&sn=caecd338ff54dea7189615799d8756d1": "英伟达RTX 6000 Ada中文展示，GeForce RTX 4090撤档", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045597&idx=1&sn=533443c7574e2605ca54c888fd0c7b85": "【漏洞预警】Splunk Enterprise远程代码执行漏洞威胁通告", "https://mp.weixin.qq.com/s?__biz=MzkyMTQwNjA4NA==&mid=2247484587&idx=1&sn=c95ae2e769a8638c642e34a4c96249c2": "xxl-jobExploitGUI", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247496765&idx=1&sn=100666169fe6bc4403e941f224e58c18": "G.O.S.S.I.P 阅读推荐 2023-11-24 挑哪个IoT漏洞呢？", "https://mp.weixin.qq.com/s?__biz=MzkwNDM4MjgzMA==&mid=2247494791&idx=1&sn=1ba403b4019f8b077803eafcc39df0ea": "安全通告｜I Doc View在线文档预览系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247500215&idx=1&sn=5954acb836e7278bc55fc8d619fd1360": "不要总想搞小新闻，这个漏洞千万不要看！", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247541243&idx=3&sn=79d41f7151b87f6c91fa59b336f1220c": "新的指纹传感器漏洞可绕过 Windows Hello 登录", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652049209&idx=4&sn=743b2de88e7ffa5d958fbd017078e6bd": "【安全圈】最新报告，数以千计的路由器和摄像头容易受到恶意僵尸网络的新 0day 攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652049209&idx=1&sn=0ba3fe604381df3eed79db421e45b825": "【安全圈】程序员利用公司漏洞篡改ETC数据，非法获利260万余元！", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247489770&idx=1&sn=c32fda6bc14ae6661ed3089ad0b98434": "S2-005 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MTY5NDQyMw==&mid=2247502591&idx=1&sn=d9286a42adf591926f1c72dfa7a6905c": "难以想象的芯片UAF漏洞，Zenbleed漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg5NDgzOTAxMQ==&mid=2247484867&idx=1&sn=ae6b5ab96a27d8703a66af97b159e46f": "Yonyou NC6.5 uapim文件上传漏洞分析复现", "https://mp.weixin.qq.com/s?__biz=MzI1MDk3NDc5Mg==&mid=2247485130&idx=1&sn=8d0ec4f00a8f57bce5770816f1b394c3": "华为Auth-Http Serve任意文件读取漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzg3Mjg4NTcyNg==&mid=2247488289&idx=1&sn=f68a09752a17be73c58171eff9cf1a84": "喜讯！云起无垠成为国家信息安全漏洞库（CNNVD）技术支撑单位", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487105&idx=1&sn=b72a55338881f22c92c50846334716f2": "【漏洞复现】华为Auth-Http服务存在任意文件读取", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518215&idx=2&sn=0cb6a4efc122aea60b37aa4e6844a905": "僵尸网络利用路由器和NVR中的0day 发动大规模DDoS攻击", "https://mp.weixin.qq.com/s?__biz=MzU5MTc1NTE0Ng==&mid=2247485333&idx=1&sn=d1974b4d9e8cff3ebfa8bca5ce60bbb8": "【漏洞复现】某客户资源管理系统CustomerAction接口任意文件上传漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651130244&idx=1&sn=41f3209e762ad966beda65ef0b07aed8": "全国 Top3！梆梆安全凭借移动APP漏洞挖掘实力荣升「CAPPVD四星级技术支撑单位」", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518215&idx=2&sn=0cb6a4efc122aea60b37aa4e6844a905&chksm=ea94b96ddde3307b862463c3e5a6894fd412bcf008537b966f28e1f2381489d19c1055bc4211&scene=58&subscene=0": "僵尸网络利用路由器和NVR中的0day 发动大规模DDoS攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247496765&idx=1&sn=100666169fe6bc4403e941f224e58c18&chksm=c063dae4f71453f279f6675b38981eaa770cbc1dcf9fb78a4f262a115d3277fc2de91ae4120f&scene=58&subscene=0": "G.O.S.S.I.P 阅读推荐 2023-11-24 挑哪个IoT漏洞呢？", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247503048&idx=1&sn=933dca25910a5c998bfa3cb01b415a64&chksm=fa521976cd2590602d280a9d6e4b6b97df867cd2d0df50ef9ce3a0d80594d2b97beafa04d6a0&scene=58&subscene=0": "如何利用SCA静态代码分析工具快速发现漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521535&idx=1&sn=d6c2acd7cb5778653cabec992a2cb59b&chksm=ce461feff93196f9df38a24c88080f32983fca35c06bcbc0449603bafad69619897f31a6b7b9&scene=58&subscene=0": "【勒索防护】Tellyouthepass利用国内知名视频监控厂商漏洞卷土重来", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247571434&idx=1&sn=e9c108d16f1e3de7784a43343cb5c74c&chksm=e91407d0de638ec619ab79c545f7faa636af63f5c05749da131ab036a7ecf06548bf9173adc5&scene=58&subscene=0": "指纹传感器漏洞可在戴尔、联想、微软上绕过Windows Hello登录", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247510860&idx=1&sn=647de2a12309c10a56d48f1057dbe7e3": "从FlexPaper 2.3.7 安全更新入手反推漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDU5OTg3Mw==&mid=2247484340&idx=1&sn=e9263e44b124f988731dae1f9707bb11": "【Web渗透】SQL注入漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247484647&idx=1&sn=ebb5271c84d60599929e37bb5ab8f939": "用友NC word.docx接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDExMg==&mid=2247484276&idx=1&sn=6bb53673c769095c8851b165cf9a2f27": "【漏洞复现】通达OA SQL注入漏洞（CVE-2023-6276）", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247500331&idx=1&sn=91f0f731e8793f0466e74e5b6e52f416": "【后门】PHP 8.1.0-dev 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MjcxMTAwMQ==&mid=2247487732&idx=1&sn=2d33dfbfe0175bd0e90559ec0d5758ab": "有手就能捡到的0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMDE5OTQyNQ==&mid=2247484283&idx=1&sn=6c04d846e173654d86ac295e4264c259": "CTF干货|babyserialize题目反序列化漏洞思路", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458529430&idx=1&sn=ca811cbbc75e4ef8d98569a58116ca70": "漏洞分析 CVE-2010-0249", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247484582&idx=1&sn=79027a448172e2385d4b35f2d7115474": "从0认识+识别+掌握nacos全漏洞(攻防常见洞)带指纹表和利用工具", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247598105&idx=1&sn=6a54a6cea7a03de7ca7d655ed1376233": "车辆漏洞管理 - 从设计开始有效保护软件定义车辆", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247489869&idx=1&sn=2895bf9342f19a44c7dcce36dd59cb86": "记一次实战逻辑漏洞挖掘-逻辑缺陷", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247486443&idx=1&sn=95a80045f81e76da6892da3bfacc5dbe": "第81篇：JSONP劫持漏洞获取敏感信息原理、复现与坑点总结", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247487432&idx=1&sn=68681e080a9f89ee2578921e0371e3f9": "【漏洞复现】（1day）泛微oa-mobilemode-任意文件上传复现", "https://mp.weixin.qq.com/s?__biz=MzU5Mjk3MDA5Ng==&mid=2247485704&idx=1&sn=8eba18a368e94343c73fe70f09b668e2": "全职挖漏洞达人采访整理", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485332&idx=2&sn=893a772f0e21c57ba424cc9bfa28b75b": "【漏洞未修复】TOTOLINK A3700R命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485332&idx=1&sn=eeedbff4a3816778ec7d3e8d011ab890": "启明星辰-互联网行为管控存在信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247483912&idx=1&sn=16b807bc9b9bcbd31b82c39ea76177a1": "泛微E-cology9 browserjsp SQL注入漏洞复现 [附POC]", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247512310&idx=1&sn=45a073d169729a28aa2ed488c0d5ec93": "掌握thinkphp全漏洞(超详细看完拿捏tp)文末带工具 | 干货", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247512310&idx=2&sn=f4dc48358ab0edf521b80e57b4523766": "渗透测试之RCE无回显利用方式", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247503028&idx=3&sn=ef7ec853a107d83ca71147c778934af4": "CVE-2023-34212：通过 Apache NiFi 中的 JNDI 组件进行 Java 反序列化", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247503028&idx=2&sn=eee78079438312fd4c69f48ae8b25e1f": "分析 - Microsoft Excel 远程代码执行漏洞 CVE-2023-36041", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247503028&idx=1&sn=a02d9b27ecfa3c04fc5933b5f012f01e": "Steam 中的三个 RCE 链", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247486844&idx=3&sn=a80753ddfe1c9f512e4a6eae85c37e89": "漏洞预警 | OwnCloud敏感信息泄漏漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247486844&idx=2&sn=1a0f557b03a29aba6bb8c8c3bc28f53d": "漏洞预警 | Apache Submarine SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247486844&idx=1&sn=ecd7d0a328fa09c3c25f397d504fa033": "漏洞预警 | 大华智能物联综合管理平台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTU4MDc5Mw==&mid=2247484992&idx=1&sn=1a45796bc4066f32203b861103c9ed4f": "「漏洞复现」华为Auth-Http服务存在任意文件读取", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247484745&idx=1&sn=98c5d18f55ff883a186ce0a5527c2c64": "致远M3-server反序列化RCE漏洞复现（附POC）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458529430&idx=1&sn=ca811cbbc75e4ef8d98569a58116ca70&chksm=b18d1e1c86fa970a884fc93ce97da51d83ffb6b1d0e2e8556e032aa51e72178b5ed18e8b03dc&scene=58&subscene=0": "漏洞分析 CVE-2010-0249", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDExMg==&mid=2247484302&idx=2&sn=35fd8adfb37fee85f2afd73ad68dab39": "【漏洞复现】通达OA SQL注入漏洞（CVE-2023-6053）", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDExMg==&mid=2247484302&idx=3&sn=481ff0a396c29ac5ff92485dbf33475f": "【漏洞复现】通达OA SQL注入漏洞（CVE-2023-6052）", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDExMg==&mid=2247484302&idx=4&sn=48071101e7f230709c1a907c43e999e2": "【漏洞复现】通达OA SQL注入漏洞（CVE-2023-5783）", "https://mp.weixin.qq.com/s?__biz=MzkyMzQ5NjYwMw==&mid=2247484099&idx=2&sn=6b8d9ed3d1ffcf21479bfcb5224821a2": "安全情报，DPTech VPN存在任意文件读取漏洞！！", "https://mp.weixin.qq.com/s?__biz=MzkyMzQ5NjYwMw==&mid=2247484099&idx=1&sn=a77ef84e7f1f7231898b13df84e45ec4": "安全情报，万户ezOFFICE协同管理平台SendFileCheckTemplateEdit-SQL注入漏洞！！", "https://mp.weixin.qq.com/s?__biz=Mzg5NjU3NzE3OQ==&mid=2247488765&idx=1&sn=a3580e56af4445f031f958195eb84eeb": "工具 ｜ 无回显变可回显rce", "https://mp.weixin.qq.com/s?__biz=MzU2MDkzMTk3Mg==&mid=2247484848&idx=1&sn=f3329603f40315699e7de02c8d0e946b": "[高危漏洞分享] 神奇的协议文件", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247484768&idx=4&sn=086bd1fdec113c86aae8ac03371a1c02": "漏洞推送｜金蝶云星空任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247484768&idx=3&sn=61cc50ed1707a48f7165e7cd23ba3d45": "CVE-2023-40054｜SolarWinds Network Configuration Manager 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247484768&idx=2&sn=52cb5c2065e450f57a3f3f66d3b9f979": "CVE-2023-43177｜CrushFTP 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247484768&idx=1&sn=9ee377e7c7b4d7d492f783b080479108": "CVE-2023-49103｜OwnCloud 敏感信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247503046&idx=2&sn=f97ea452bc9bc8b244513b84c5ba8fd7": "CVE-2023-48796：Apache dolphinscheduler 敏感信息泄露", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247503046&idx=1&sn=ad77ec2634e89a0005fc4ae06eb02103": "CVE-2022-41853 分析：通过 Java 反序列化和远程代码库攻击使用静态函数获取 RCE", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485335&idx=1&sn=e5cd4908caeaaef3c3d91093a050a021": "【高危漏洞】启明星辰-天玥网络安全审计系统存在命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247533699&idx=1&sn=3a56814d71a0fcfc035c362ab75b3f90": "漏洞分析 | 经典的Shiro反序列化", "https://mp.weixin.qq.com/s?__biz=MjM5NDcxMDQzNA==&mid=2247488034&idx=1&sn=da90d8c3d4b626cd26d5dc34c612da9a": "sqlmap的反制复现？求指点", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247490062&idx=1&sn=f5b234a3a0223dca7d990362dceff5fa": "二进制漏洞分析-11.华为TrustZone TEE_SERVICE_MULTIDRM漏洞(上)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247487445&idx=1&sn=b2110775d0bb0ca1048343a46fcec58f": "【漏洞复现】（nday）Ecshop两个注入复现", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247489882&idx=1&sn=45f98e8733939f5d5d0452fb4cafe710": "第80篇：Weblogic上传漏洞在不知绝对路径情况下拿shell方法", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649789961&idx=1&sn=20a2d489a7dcdaa3fcc2dde3bb7da806": "Lazarus 黑客组织利用 MagicLine4NX 软件中的0day漏洞对韩国目标进行供应链攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651249104&idx=3&sn=9122243d176853e90396896bef9587bf": "基于 Mirai 的僵尸网络利用路由器和 NVR 中的零日漏洞进行大规模 DDoS 攻击", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650582719&idx=3&sn=123271235fb5ff968b74711a35fd21ef": "记一次代码审计中RCE挖掘及POC编写", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247489044&idx=1&sn=ef750eaa44c7666ed1e6cc12726f0203": "JAVA 插件化漏洞扫描器，Gui基于javafx。POC 目前集成 Weblogic、Tomcat、Shiro、Spring等", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247490159&idx=1&sn=f2f4a60a80edd34f15426ccc5d864227": "二进制漏洞分析-12.华为TrustZone TEE_SERVICE_MULTIDRM漏洞(下)", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247498499&idx=1&sn=6850c3e9a3df795e48ba9a10c9772ddd": "华为Auth-HTTP服务器任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247510881&idx=1&sn=6f860b2cf913165c83ca1e43783f18c0": "Apache Jackrabbit RMI 远程代码执行漏洞分析(CVE-2023-37895)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492773&idx=1&sn=1ecf20872f34843e23adecb47aabca8f": "第81篇：JSONP劫持漏洞获取敏感信息原理、复现与坑点总结", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247512357&idx=2&sn=0363f7f7d32db9d2f843bb8b12c7820a": "漏洞分析 | 经典的Shiro反序列化", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247512357&idx=1&sn=533352410d4c48f73a8b6a8c24d63f08": "Web实战 | 一次空白页面的“妙手回春”嘎嘎出严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487116&idx=2&sn=f8355187a76b7fd96f4107210c0ded5d": "【漏洞预警】ownCloud graphapi信息泄露漏洞（CVE-2023-49103）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487116&idx=1&sn=a58962000b0051a7fc5a6ac40e73e20b": "【漏洞预警】Apache DolphinScheduler 敏感信息泄漏CVE-2023-48796", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247484665&idx=1&sn=b21dce8ba3db849560e2c295f31182ac": "易宝OA系统ExecuteSqlForSingle接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092497&idx=2&sn=5d1268a5a7601a6c7d5c1ff05c0e8701": "CNVD漏洞周报2023年第47期", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651249201&idx=2&sn=297f19b0ca857b35f32bac404ce89651": "开源软件又出大事件，ownCloud 曝出三个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247536149&idx=3&sn=74113920eaf2db003ec8095865e6050d": "EISS-2023上海站PPT | 王忠惠 ∕ 基础安全负责人 ∕ 千寻位置网络有限公司（漏洞管理的演进）", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785877&idx=1&sn=5507b73ab36c64eff027bf59949eda12": "解析RCE：原理、利用条件与受限环境下的探索", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500057&idx=1&sn=10983a457c375bb1438ee1b77e3ab3ea": "【已复现】Windows Cloud Files Mini Filter Driver权限提升漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489111&idx=1&sn=87f1d2f611486b781e6c42edbbdab7bd": "警惕！ownCloud 文件共享程序中曝出三个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458529508&idx=3&sn=5cf7494106c177ce290935570902b491": "实战CVE漏洞分析与防范（第一季）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458529508&idx=2&sn=a461491fb44702efeb0df730e3974817": "ownCloud披露三个严重安全漏洞，可能暴露管理员密码和邮件服务器凭据", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518225&idx=2&sn=0c496ddfdfec8c17e1344333f0c218f6": "英韩：Lazarus 黑客组织利用安全认证软件 0day 漏洞发动供应链攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518225&idx=1&sn=0012c60dceb2dbcc1beeb94a8a38d402": "开源文件共享软件 ownCloud 中存在3个严重漏洞，可导致信息泄露和文件修改", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502642&idx=1&sn=f170ac97513bee7d5e6dcb89b9273863&chksm=f25859c1c52fd0d754d63e43ce1cf0bb0c9e17b0be4bc32f9b7dbe71a0881dd18212c775d429&scene=58&subscene=0": "雷神众测漏洞周报2023.11.20-2023.11.26", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785877&idx=1&sn=5507b73ab36c64eff027bf59949eda12&chksm=8893b67abfe43f6cf872b2a03fb18c362b0b3cced4431c73c738f5f50945489221400fd07e96&scene=58&subscene=0": "解析RCE：原理、利用条件与受限环境下的探索", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458529508&idx=2&sn=a461491fb44702efeb0df730e3974817&chksm=b18d1e6e86fa97783b7c9826c2604e2d3d4c05d0465b9ef62db3ed54406b69cb6401bbcd42f9&scene=58&subscene=0": "ownCloud披露三个严重安全漏洞，可能暴露管理员密码和邮件服务器凭据", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458529508&idx=3&sn=5cf7494106c177ce290935570902b491&chksm=b18d1e6e86fa9778180fde8d0fd54e855203a73ee1f5ce1e15e425d76ef1a217ad820b971d3a&scene=58&subscene=0": "实战CVE漏洞分析与防范（第一季）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518225&idx=1&sn=0012c60dceb2dbcc1beeb94a8a38d402&chksm=ea94b97bdde3306d13ff1ee130bc1d5387971ace02890354fb0bcf9e7f6268f934440725ab63&scene=58&subscene=0": "开源文件共享软件 ownCloud 中存在3个严重漏洞，可导致信息泄露和文件修改", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518225&idx=2&sn=0c496ddfdfec8c17e1344333f0c218f6&chksm=ea94b97bdde3306d6bc1249b0087f09b8c0a192157a52d43e8f6b5b08e18465335d8518ce100&scene=58&subscene=0": "英韩：Lazarus 黑客组织利用安全认证软件 0day 漏洞发动供应链攻击", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500057&idx=1&sn=10983a457c375bb1438ee1b77e3ab3ea&chksm=fe79e581c90e6c97847c371547acad5446f74fe957a5c4b08f5375535f4674060050fa85d410&scene=58&subscene=0": "【已复现】Windows Cloud Files Mini Filter Driver权限提升漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494140&idx=1&sn=af2d9e1ec2901ee37c160b8582586fb2&chksm=fd74d935ca03502330dec2b441288fdb900bf8771e74fc569c6ca3dce5704a15368f8da7dc61&scene=58&subscene=0": "CNVD漏洞周报2023年第47期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494140&idx=2&sn=3aa70a734707d26eb952f9b9a6d11da0&chksm=fd74d935ca035023c23a9e726b1a72171d3c37bdfa461753c02dcd74e7f79705bc1aa2713eee&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231120-20231126)", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488355&idx=1&sn=f18e4e4e83a9c7a16f2a8f4042f03c5a&chksm=fb029e3bcc75172da32f661b5d9f80470b0edc6d04d6d81dd516df3970f310468b1994398ac0&scene=58&subscene=0": "1day：NginxWebUI admin认证绕过（全版本通杀）", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247571525&idx=2&sn=055addb3f29eca6c3a2458febca554d3&chksm=e914087fde638169bd819aaf3a464faedb8efa299e9111cf739e6d0f828f66242f7006b3d99f&scene=58&subscene=0": "为何扫描工具无法检测出失效的访问控制漏洞？", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247541275&idx=3&sn=2c720a04028f78af3aeebbd63fd44bf3&chksm=fa9394dacde41dcc4b9afd7f87dec6c4d794d22f3eb731684732c9efbae6bb83d424abdb97a2&scene=58&subscene=0": "基于 Mirai 的僵尸网络利用路由器和 NVR 中的零日漏洞进行大规模 DDoS 攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492773&idx=1&sn=1ecf20872f34843e23adecb47aabca8f&chksm=e8a5eec6dfd267d04f9cee1e89ddd8cfe8d9787793466d7d34ab6d8833b7f47f5e665ee1afe9&scene=58&subscene=0": "第81篇：JSONP劫持漏洞获取敏感信息原理、复现与坑点总结", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247490160&idx=1&sn=87338252994b4cb7c410efc68b7c5d64": "二进制漏洞分析-13.华为TrustZone TEE_SERVICE_FACE_REC漏洞(一)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247487531&idx=1&sn=83cfdbdfd76ce2ce34af534756f09f3b": "【漏洞复现】易宝OA ExecuteSqlForSingle SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247493139&idx=3&sn=1ea6b2c52ad2b86c3a63f53b60c327c3": "LockBit 勒索软件利用严重的 Citrix Bleed 漏洞进行入侵", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247510913&idx=1&sn=f330e527506ca15092cfed970c6cbfce": "Bludit cms漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzNDU5OTg3Mw==&mid=2247484383&idx=1&sn=be954a08038795af2eab8a23bf74f697": "[Web渗透】XSS漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247512400&idx=2&sn=3c65af2bfc5f620144fc7f75014eb726": "攻防 | 域渗透之Sunday", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247512400&idx=1&sn=dc4158d03d041964ce236e229768bfb7": "浅谈Apache Shiro FORM URL Redirect漏洞(CVE-2023-46750)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247484684&idx=2&sn=35b08ebe54e3f118eab93ea5b18fa009": "​万户协同办公平台ezoffice SendFileCheckTemplateEdit.jsp接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247484684&idx=1&sn=15e1e3dfe72c357fa141e6c55848fc42": "通达OA inc∕package∕down.php接口存在未授权访问漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521563&idx=2&sn=ca9167b51fff1a0887efa413fabd452c": "【漏洞通告】泛微 e-Office10 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487124&idx=2&sn=f941f885d85e17ca488bb104ba3d5c3d": "【漏洞预警】Apache Superset 默认示例数据库权限提升漏洞CVE-2023-40610", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487124&idx=1&sn=125b9b5d5fe1914a14cea8ea47c66561": "【漏洞预警】泛微 e-office10 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492779&idx=1&sn=cb4088b7032e885242006a5c994dab23": "SRC漏洞挖掘之评论区CSRF", "https://mp.weixin.qq.com/s?__biz=MzU1NTQ5MDEwNw==&mid=2247485033&idx=1&sn=3c0faf71988bd3e5509b00806b266912": "OwnCloud graphapi CVE-2023-49103 漏洞POC暴露", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458529810&idx=4&sn=854102192fd34faa912431d32065f7c9": "本周更新第四章：基于反馈的内核fuzz原理讲解 | 系统0day安全-Windows平台漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503932&idx=1&sn=4e0ed6f6d82f763a645bb6a78b39a6fc": "漏洞通告 | 泛微 e-office10 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTU5NjM5MQ==&mid=2247484353&idx=1&sn=5d2fd0e8287aed50ec8aa24d7ede28f6": "​【漏洞预警】SourceCodester免费开源库存管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzQ5NjYwMw==&mid=2247484108&idx=2&sn=6df4f48ec173f7533763c09a55fe6ea7": "安全情报，X友 U8cloud task.TaskTreeQuery SQL注入漏洞！！", "https://mp.weixin.qq.com/s?__biz=MzkyMzQ5NjYwMw==&mid=2247484108&idx=1&sn=7ac5225f61569ac5d9b4d9d8a76751bb": "安全情报，X友NC存在任意文件上传漏洞！！", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503932&idx=1&sn=4e0ed6f6d82f763a645bb6a78b39a6fc&chksm=cfcab328f8bd3a3eb333287ef4c1e75187266f399a0536cdca5eb253ba937ba067c27e39fea7&scene=58&subscene=0": "漏洞通告 | 泛微 e-office10 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247508856&idx=2&sn=386157e5a24b4080a7031dcd50cc2880&chksm=ea66540fdd11dd198cdfe7e81996024f607f53f5c5e6781f53bb6d983e15ff6c5eb602b2a782&scene=58&subscene=0": "【直播预告】漏洞情报运营研讨：走出漏洞处置的泥潭", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458529810&idx=4&sn=854102192fd34faa912431d32065f7c9&chksm=b18d009886fa898e8e8199886c515de10683ddff67a8dd5cdcb89bbfe2a91d1afac68853f460&scene=58&subscene=0": "本周更新第四章：基于反馈的内核fuzz原理讲解 | 系统0day安全-Windows平台漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498830&idx=1&sn=a9a199e6995f069896ae4ba9fec8aeca&chksm=973acf2ca04d463aa57bbd064afa4385a5bac12b40ff73c07c79b1b80c18af74e0810fa32fd9&scene=58&subscene=0": "CNVD漏洞周报2023年第47期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498830&idx=2&sn=212658fb4c84d16ae2d4d286ac6f4a34&chksm=973acf2ca04d463a6bea7444e4e8f9e41328f8e4951d9c2ad3850b11789af5db6a3eecd45a81&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231120-20231126)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492779&idx=1&sn=cb4088b7032e885242006a5c994dab23&chksm=e8a5eec8dfd267de1f31fbe45b70d118f89b662ba0e30a8faa1a6f122b2f4d04b24961bd5a68&scene=58&subscene=0": "SRC漏洞挖掘之评论区CSRF", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247484250&idx=1&sn=ed7666b02e9139ee627bf43f6279f8b9": "【漏洞复现】ActiveMQ-Jolokia-远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDU5OTg3Mw==&mid=2247484420&idx=1&sn=aab22aad9a3a38d7f54d5a12db99d283": "【Web渗透】SSRF漏洞原理", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247512492&idx=1&sn=d24650cbe743cfcc68851157a0f98b10": "掌握nacos全漏洞(攻防常见洞)带指纹表和利用工具 | 干货", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247485120&idx=1&sn=991add9e1d60909833c4f89922a47ec1": "JS信息泄露到后台未授权拿下CNVD证书", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487151&idx=2&sn=29c2a6ef08b74acbbc632fe83750d704": "【漏洞预警】MOVEit Transfer<2023.1.0 权限提升漏洞CVE-2023-6218", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487151&idx=1&sn=02913861774ffab66521f4063015758a": "【漏洞预警】Google Chrome Skia整数溢出漏洞CVE-2023-6345", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521574&idx=1&sn=ce6071dc8b69dbe0d4ed05eae5249ec0": "【漏洞通告】Apache ActiveMQ Jolokia 代码执行漏洞(CVE-2022-41678)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247505738&idx=1&sn=83b892c8f3c05e8dfb1e4c675c474d2f": "记一次曲折的exchange漏洞利用-ProxyMaybeShell", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247491731&idx=1&sn=d657412c7b00d52570b4c3b95521c826": "自动化 “信息收集+漏洞扫描” 系统开发", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651249457&idx=1&sn=537fe3915057fcee3b63ca6ac32a332b": "蓝牙曝底层安全漏洞，数十亿设备受影响", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458529889&idx=3&sn=182f805fa76d5cb2d6d1743eb4d9fd5a": "数十亿台设备都可能被劫持，研究人员披露蓝牙架构存在漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247489808&idx=1&sn=7e6ea7b6d875b210b435c1b6e1c4cb36": "S2-007远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488557&idx=1&sn=c5e496466139458251342a074371d11e&chksm=c2c64326f5b1ca30118d9fa93f0a4ca854ea6db4e2c37776b9c02be937fd09597c72a2b45778&scene=58&subscene=0": "【漏洞通告】Apache ActiveMQ Jolokia远程代码执行漏洞（CVE-2022-41678）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458529889&idx=3&sn=182f805fa76d5cb2d6d1743eb4d9fd5a&chksm=b18d00eb86fa89fdf1d6f5b2bfbce54f06a960ba7bb2690844c03a4fdfa2360656133a5d1207&scene=58&subscene=0": "数十亿台设备都可能被劫持，研究人员披露蓝牙架构存在漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247503120&idx=1&sn=5aa17eda0dc71dbcdbc8ade810528578&chksm=fa5218aecd2591b81a4ba847a648c43d9da5d89c43c6d427e84ee41a72f012bdeee7871cf884&scene=58&subscene=0": "【卫星安全系列一】HAS-beckley赛题复现", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247510984&idx=1&sn=a175acf7b5291428e94e3cf53a3f7a86": "某综合安防系统-任意文件上传漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247505844&idx=1&sn=ce7ee2cee1d6da9ea86f07de1697ac2a": "一次曲折的JDK反序列化到JNDI注入绕过（no forceString）", "https://mp.weixin.qq.com/s?__biz=MzIyMDAwMjkzNg==&mid=2247512523&idx=1&sn=3a23ef761316f7d111fe7b22babb10c5": "我与逻辑漏洞的爱恨情仇", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652049783&idx=1&sn=09114bf5f22125861cfaacb036395202": "【安全圈】谷歌紧急更新Chrome浏览器，修复Skia引擎零日漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458530039&idx=1&sn=90a4c14b2f9377c5533544c9df0659dc": "Windows NTFS本地提权漏洞 CVE-2021-31956", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247495130&idx=1&sn=e4c1aa65fc07a825954c33fdfe0a0b84": "POC管理和漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485363&idx=1&sn=010bcba99b36f79ebda158fcab3739d3": "【高危漏洞】用友GRP-U8内控管理软件存在任意文件（∕servlet∕FileUpload）上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247489956&idx=1&sn=5486683bd2c9a2ac672a4c8e9dc82060": "记一次Oracle注入漏洞提权的艰难过程", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247533917&idx=1&sn=d4e67887715e3b80e2966708c51340dc": "内网环境-actuator漏洞排查与利用", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247490183&idx=1&sn=8f48e27973674803d3d4bb926fdfcd05": "二进制漏洞分析-15.华为TrustZone TEE_SERVICE_FACE_REC漏洞(三)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651249750&idx=2&sn=afcfb44c767d2f6c82ec9e90ec5e912c": "FreeBuf 周报 | 蓝牙曝底层安全漏洞；美国水务局遭遇黑客攻击", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650583088&idx=2&sn=627a4a5cbc04f5505ddb0866df669189": "蓝牙曝底层安全漏洞，数十亿设备受影响", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247486930&idx=3&sn=7cb6ae2ceac58d3a03c5e1e5402960c8": "漏洞预警 | EventON未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247486930&idx=4&sn=35d76fdb2d9dc9171293b1ebf95961f9": "工具 | API-Explorer", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247486930&idx=2&sn=a72cf7471c05daf70583b814e67cd392": "漏洞预警 | Apache Superset跨站脚本攻击漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247486930&idx=1&sn=6860737cc4028ac0722706940ee6c99a": "漏洞预警 | JumpServer未正确校验输入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458530039&idx=1&sn=90a4c14b2f9377c5533544c9df0659dc&chksm=b18d007d86fa896b5ff2bd874b2d569d25a5f2f27cd1b354b0d61bc421947093320dd3ff2ab6&scene=58&subscene=0": "Windows NTFS本地提权漏洞 CVE-2021-31956", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458530040&idx=2&sn=e3d0ebbb7ad05e2e630c65918c17f09e&chksm=b18d007286fa89641c59f2d072566b8eec9f6b29d54b58dee015de47d8f2f910cc362aa8f57c&scene=58&subscene=0": "实战CVE漏洞分析与防范（第一季）", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488387&idx=1&sn=32b400ebc06e86a5aff1934b6a1a8d38&chksm=fb029edbcc7517cd41bba92028f4152f6652e69a7a0555e09d99473173e692f87d2292e9092a&scene=58&subscene=0": "代码审计:jar-analyzer 分析漏洞 Apache Commons Text RCE", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500107&idx=1&sn=83d62cd6fadf343e52d74656e4d43ba4&chksm=fe79e5d3c90e6cc5928ec787613a9e60151f42106ea88a8fce0cb71bd18dee68bcb001ece4aa&scene=58&subscene=0": "Atlassian Confluence Data Center及Confluence Server远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486284&idx=1&sn=e9d1cafe1ec9fcdcda17e1ba73fe2f70&chksm=ec6fec4cdb18655a3fd63a9c9354e4754fc73b6a53c95e6c336c46db5aeaacdad04aac962fb0&scene=58&subscene=0": "【风险通告】Atlassian Confluence 模板注入代码执行漏洞（CVE-2023-22522）", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247541043&idx=4&sn=4a6ddd3718b4a8ecf051bafc22635ae8&chksm=c1e9ad62f69e24740bffd0ea885c3a73312cafa3a95b10e13b9d37469bac0c6394a61b632927&scene=58&subscene=0": "主流大语言模型集体曝出训练数据泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518290&idx=1&sn=d91434693668c84124da84b0230dcdcf&chksm=ea94b938dde3302eba9ad9dbf6dfa2cd41ee37b5b10d804561f24ef3fab1f52829dbb07d398a&scene=58&subscene=0": "开源库漏洞导致多个NFT集合面临风险", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247501011&idx=1&sn=49820b009507005824649b852aefca80&chksm=eaf98c9fdd8e058971209ed2734d3731e6274bac63dcded4e792a4a392a088118f6741682867&scene=58&subscene=0": "【补天平台助力】漏洞挖掘与实战 | 第12期安全范儿沙龙开启", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488393&idx=1&sn=b79df737302cc75d1c4f40b5714bf694&chksm=fb029ed1cc7517c728cb61819a09c6109f646c5a3a149a923c37bba42d50668398088942eab9&scene=58&subscene=0": "【首发复现】Apache Ofbiz XML-RPC 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492848&idx=1&sn=4fb0eb16740dcfaa309edfc1efc30091&chksm=e8a5ee93dfd267850e74b4debf3ee503b99b6baa7298b26cc3bfc1836c3f01294f0648474666&scene=58&subscene=0": "实战 | 一次敏感信息到接口fuzz-RCE", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247541511&idx=2&sn=5dcf4c4725b2be4d27a005cf264b6bb1&chksm=fa9395c6cde41cd0411de8fdaa522a7196c2852611b23b6f76b56052cbbc5f7acf1452484922&scene=58&subscene=0": "欧盟就《网络弹性法案》达成一致，数字产品该如何落实漏洞报告机制？", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247541511&idx=3&sn=a2c1c1d0ac35c8f7bf94e051f239fc8e&chksm=fa9395c6cde41cd02664f92be87957fc2283bcd136038515e308e9ec2b8a9a66d41b1148ff80&scene=58&subscene=0": "微软警告！黑客大肆利用 Outlook 漏洞劫持 Exchange 账户", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521605&idx=1&sn=d69ad328c91648b4037c48199341a24a&chksm=ce461e55f9319743e3987b17ac0d91b1758ccdbcde674ae5ca80c17eaa3669471b24ae775e23&scene=58&subscene=0": "【漏洞通告】Apache OFBiz XML-RPC 远程代码执行漏洞 CVE-2023-49070", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521605&idx=2&sn=3ec7923176828acbc8ed184c9f42a1ef&chksm=ce461e55f93197435bda371e008ced4b4644c3db69c225f34fe1704aad8a9e56c4dbdef899fd&scene=58&subscene=0": "【漏洞通告】Atlassian Confluence Data Center and Server远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500112&idx=1&sn=3d09660676b3b35476a8ff429da2866d&chksm=fe79e5c8c90e6cde74073a6f553029076df69d4af9118ce5459461d358f5e157855fd39b79c7&scene=58&subscene=0": "【已复现】Apache OFBiz 远程代码执行漏洞(CVE-2023-49070)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518302&idx=1&sn=9ede9c29a5c7c063571222672e754926&chksm=ea94b934dde330222c90b770d277247b3ad535c2b85b8082228c17630922ff9ea123ab19691f&scene=58&subscene=0": "Atlassian 修复多款产品中的多个严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518302&idx=2&sn=cdf6b4ed956472e8f544b57d5e1ea074&chksm=ea94b934dde33022986046f72cc06f57a56d288c1d50adebad5308a072310a717ba8358c1480&scene=58&subscene=0": "Sierra:21 漏洞影响关键基础设施路由器", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247517728&idx=1&sn=b7d083805fa168f1f9a6f4a1437286c4&chksm=c2d1fa84f5a67392dac579806841961c376066321c137597776585dfa715cc6f42b09d294d48&scene=58&subscene=0": "高质量POC编写指南", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492927&idx=1&sn=003adb5aa31c74697a42113312b5cfbe&chksm=e8a5ef5cdfd2664a0b74949583d42362768446f385592607ff59530ebbbbfa1b828eaa322b02&scene=58&subscene=0": "漏洞实战 | 数据泄露", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492021&idx=1&sn=2a2b18a0eb673d32ed54d8fa472871eb&chksm=96f7fed8a18077ce4eb8833d5632275f8736d7cb6462bb3952afae761b973f22b2e81fc1a405&scene=58&subscene=0": "【已复现】关于新的Struts2漏洞，你应该知道的", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247489706&idx=1&sn=9a56169023c8a62a73aa193b772e0e09&chksm=fa5ab647cd2d3f5188a4e76e38649d31a553ed54231dc180edfbcb6803f8c4b4b4090de8d5d9&scene=58&subscene=0": "微软推出Defender漏洞奖励计划", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247572013&idx=1&sn=0840617dc38310d2609ce85138ae3877&chksm=e9140a17de63830102cd0944e0754a6e5fadc4557acc44df60ae47cf6542bd2bc0930f24d941&scene=58&subscene=0": "威胁团伙利用TeamCity CVE-2023-42793漏洞展开攻击", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652103528&idx=4&sn=b427fc580e1b855ea8106e5af1664816": "Chrome 120 修补了 10 个漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652103528&idx=2&sn=1e06d2f8ee3ffa12e03499189c16068b": "LogoFAIL 漏洞绕过硬件和软件安全措施，几乎不可能检测或删除", "https://mp.weixin.qq.com/s?__biz=Mzg5MDg3OTc0OA==&mid=2247485111&idx=1&sn=90f858369fbf62b3e153ac6772741a18": "复现RPC中继NTLM身份验证", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247490978&idx=1&sn=55efec99a765c8f369336fca40e09e51": "红队攻防实战之phpmyadmin-RCE集锦", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247487417&idx=1&sn=5f7da5262f421e0557085fcd0f41ff7f": "一款适用于以APP病毒分析、APP漏洞挖掘、APP开发、HW行动∕红队∕渗透测试团队为场景的移动端辅助分析工具", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247484407&idx=1&sn=43dd39386dda94df9f90612c0b5efd89": "没有什么用的任意上传漏洞-Web漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247489845&idx=1&sn=fe9e1973435934c24b5ef8425ed78116": "S2-013远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247511168&idx=1&sn=3ca8ac31e95a194ef65741c7d296a483": "CVE-2020-9496漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247603758&idx=1&sn=286b81ebbe1230f3576f2b14ba8919d8": "高质量POC编写指北", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247490509&idx=2&sn=4fa2c4bfd20be89e53a76410de0410d6": "​二进制漏洞分析-20.TrustZone Task_Phone_Novelchd漏洞(下)", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247490509&idx=1&sn=a6977ea232543521661cd65ccebf6dea": "二进制漏洞分析-20.TrustZone Task_Phone_Novelchd漏洞(上)", "https://mp.weixin.qq.com/s?__biz=Mzg3Mzg3OTU4OQ==&mid=2247489690&idx=1&sn=7cca28dcad6b5a39d3c27a794d1436c5": "JTopCMS审计之目录穿越漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247487668&idx=1&sn=e991634cbf1847a8178ce71c459f5fb3": "(1day)iDocView在线文档预览系统某接口存在任意文件读取", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247490164&idx=1&sn=c8451fbc39667ba9bc58f4d15a45dd12": "SRC漏洞挖掘技巧之抓包-封包、协议、APP、小程序、PC应用、WEB应用", "https://mp.weixin.qq.com/s?__biz=MzU4MjYxNTYwNA==&mid=2247486965&idx=1&sn=757121c599b0f4f17e1a9d4638dbd9da": "Apache APISIX 默认密钥漏洞（CVE-2020-13945）", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650936387&idx=1&sn=b408c97f6445f950f522ef550a82c36e": "【资讯】WordPress 曝出严重漏洞、特别重大、重大、较大网络安全事件，怎么分？", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651126824&idx=2&sn=e075dc8b632573a1a34015c5a715fe49&chksm=bd144cfb8a63c5ed25f65478226c13227bdd771fd43463791d11f21198fc99ec0a0fd9a8cc10&scene=58&subscene=0": "安全头条 |CNNVD通报Apache Struts2 安全漏洞；国内首个数据资产确认指南施行", "https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486289&idx=1&sn=2a1ca045522f4a624989ae44310bb7f5&chksm=ec6fec51db1865473113195ab03c96e2f633346543b6b712415b0ea502047d61405a93b19bd6&scene=58&subscene=0": "【风险通告】Apache Struts2 目录遍历漏洞（CVE-2023-50164）", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247504042&idx=1&sn=87d121e89fec383a1d850f5417da7bdb&chksm=cfcab3bef8bd3aa842cfcc4da69440e7ece128b92dd9b7ef58f9b788f01a8e0d81e18699b568&scene=58&subscene=0": "漏洞通告 | Apache Struts2文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247496532&idx=1&sn=db7a87093e946f53b30591b01b8b283b&chksm=e9bfe7eadec86efca1cc3e4eceacb8f509fc6c22352edb0b1e754cacc1f278921afc90ae3988&scene=58&subscene=0": "学术前沿 | 基于深度学习的漏洞检测研究综述", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247541600&idx=4&sn=055e1b6ac4e2182f5c3992e975c8842b&chksm=fa9395a1cde41cb79dd93cae14d0f9518dddfcb782587cded9537807be624a92f757039fccba&scene=58&subscene=0": "威胁团伙利用TeamCity CVE-2023-42793漏洞展开攻击", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664199583&idx=5&sn=f64ac6d0d0afa3738d7699298b69cf64&chksm=8b597766bc2efe707e0b49f505bd77f877d325803f5625c01b02b3ae9e029c9d9541b0ea39c3&scene=58&subscene=0": "CNNVD | 关于 Apache Struts2 安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494168&idx=1&sn=4a7906923cb93fde83d5a5142b7cbc56&chksm=fd74dad1ca0353c7c63197c30a82e16210102e7cedea001e6157388a924ec3f0726a6b3a93cf&scene=58&subscene=0": "CNVD漏洞周报2023年第49期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494168&idx=2&sn=c3358cee930ba48cc43dd58eb0b4ee51&chksm=fd74dad1ca0353c78bbc719765d99ed1d95dec6baa066fd1158037b3a25d2dd598d3fe297808&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231204-20231210)", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247501040&idx=1&sn=0df5681b256638711e2b2ffaa7a44f25&chksm=eaf98cbcdd8e05aa9d74aca3810a555597eefcb712d4cbc5615ef8c81f4651fd05b2860fb4b7&scene=58&subscene=0": "打响人生第一“有效漏洞”！抛开限制，12月继续全面助力！", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247501040&idx=2&sn=955df6a9e2dd972ed2614ee024f01da4&chksm=eaf98cbcdd8e05aa1c07f5f567f337c90a611b55281ceca434239e565c7896bdcdaafc332a5c&scene=58&subscene=0": "2023年“公益SRC”漏洞年度证书奖励计划公布！", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247501040&idx=3&sn=9f31f72d71ad8b8a2c2314a50903fdf8&chksm=eaf98cbcdd8e05aab3860c8191ec286a85a63525eeecfaaba4f1407c2acfec37fdc3e2a4c72f&scene=58&subscene=0": "2023年“专属SRC”漏洞年度证书奖励计划公布！", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247501040&idx=4&sn=6bf7f9153915cbf647178899bf7edf1d&chksm=eaf98cbcdd8e05aa55598792bbb2e895284222a7b003f2e4329147f368c28a80e0c282c9e054&scene=58&subscene=0": "2023年通用型漏洞年度证书奖励计划公布！", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518319&idx=1&sn=5714524d6170f4fef9f36a2a9801b556&chksm=ea94b905dde3301385c1f828c130d4e404acb8a7addf6ed7ea4155f5063d9b70b0d539ec90eb&scene=58&subscene=0": "严重的蓝牙漏洞已存在多年，可用于接管安卓、iOS 和 Linux 设备", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518319&idx=2&sn=bf9d3385f82dcb0430391fbbcdc33479&chksm=ea94b905dde3301371201718a96241ce265211d9fad27ce8635a05f96393e941fcd01d62b4f2&scene=58&subscene=0": "超过56%的内部攻击利用的是提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500154&idx=1&sn=ec92c92688997ba8f8f8ffa6ce082025&chksm=fe79e5e2c90e6cf4ea8036a90bc474dd350918093ab8176682b5d757f8a330b32fd8d51735df&scene=58&subscene=0": "【已复现】Apache Struts 文件上传漏洞(CVE-2023-50164)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247504060&idx=1&sn=88f932c02608fd7326d831ab15c48ae8&chksm=cfcab3a8f8bd3abe6be09ab26c3085a72be25134fbed5a1083d902ad730bdae04b73a039e66d&scene=58&subscene=0": "漏洞通告 | 亿赛通新一代电子文档安全管理系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492041&idx=1&sn=d5001248cf982f34a2ea15ed41503f36&chksm=96f7fea4a18077b23c1db8cdb51f4839feca4a3fe751f991c2c277eaaaf727c18813052808fb&scene=58&subscene=0": "这453个勒索风险漏洞，不会有人还没修复吧！！！！", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518338&idx=1&sn=689982ebdcb501d2d9f18440472dfa24&chksm=ea94b9e8dde330fe6d2c5cfd834fb076101c90adb766f55b6d2e4934ea3733a0860595c6b235&scene=58&subscene=0": "【已复现】Apache Struts 文件上传漏洞(CVE-2023-50164)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518338&idx=2&sn=96312d2c4afe9d3b538e5b31737ea131&chksm=ea94b9e8dde330fee2ec38ff56eed8254d07670d10f42e6cf1d605399389a5eaf7cea7c437e4&scene=58&subscene=0": "苹果发布 iOS 17.2 紧急修复多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518338&idx=3&sn=f65c78fb4b08158ecb16fe9bf29bdced&chksm=ea94b9e8dde330fee9837926f772f990574078cc704aa52b93307778f4868abada3375fae3c6&scene=58&subscene=0": "Bitcoin Core 客户端出现漏洞 CVE-2023-50428", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498855&idx=1&sn=feb84123985bafafc6071fa1d6915545&chksm=973acf05a04d46138e9aa4fe1a73c773c5a8d4d30d4df366903df6d9698d4972878058740cb2&scene=58&subscene=0": "CNVD漏洞周报2023年第49期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498855&idx=2&sn=e82135fd9d228901e549477822c9f5f1&chksm=973acf05a04d46139fe8b652bbe7fdd16f5c6628dfdcd508acbfbe6a9bc108dff540e0d4d58b&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231204-20231210)", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247503212&idx=1&sn=fd75ffcb8e95e106c02b0467741e783a&chksm=fa5218d2cd2591c489106be3c76f505a88168357e5807df4e5b2a4d73d8eaef111583d828edb&scene=58&subscene=0": "【卫星安全系列三】Leaky Crypto赛题复现", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492983&idx=1&sn=94ebc640fde3c4b0a956c66e290f16ff&chksm=e8a5ef14dfd26602daed77295645d26d068e98e2f20b693a97fac2f893245c524b14aeddf75e&scene=58&subscene=0": "全自动白帽漏洞扫描器", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500159&idx=1&sn=7fbc7dcc01fefaa513c65202d020b8fd&chksm=fe79e5e7c90e6cf1b69398b7a3c5b935086eed207921f57f745c572bcb7a70f46a363143789d&scene=58&subscene=0": "微软2023年12月补丁日多个产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492120&idx=1&sn=43e475831fd3c516a6450580b29d43f6&chksm=96f7fd75a1807463f7dad705bf38083d48b9f45f3c090ce55d3022427fbffe502053db0c2332&scene=58&subscene=0": "【已复现】亿赛通电子文档安全管理系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502680&idx=2&sn=3a0441a35fa9450eb1f2c27ba118451c&chksm=f258592bc52fd03d58e689b128912c607151deecf083c1b495acd73d5565a9de21289334495c&scene=58&subscene=0": "雷神众测漏洞周报2023.12.04-2023.12.10", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488589&idx=1&sn=3a67279ac2b79f66c5ee1fa1189fc00b&chksm=c2c64346f5b1ca5053c14f40015a97c490c805ed5224d9063ee229d991ca84536e29aff34651&scene=58&subscene=0": "【安全更新】微软12月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247499949&idx=1&sn=8c7f621cfbd8804ab77c2c2c51eb4913&chksm=fe26c5acc9514cbac3a63e3683d9f94ce0f8bb100da643899a1d3cd7c848e2a893a4c0223e6b&scene=58&subscene=0": "2023-12 补丁日: 微软多个漏洞安全更新通告", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247505930&idx=2&sn=124c829f8d41619ee4aac8efdf79dbac&chksm=c144aab7f63323a152c2bee7361cdac264e1991a4e8b6f66d25ab4821f088020e1a0814899d9&scene=58&subscene=0": "通过Fuzzing技术挖掘Free5GC中PFCP协议的安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518349&idx=2&sn=da5a15622c08723ed8cacf81f9a2dd55&chksm=ea94b9e7dde330f1ebb50e99491cbc925e6e932730363f189179878a4dc2b3a4ccb480badb86&scene=58&subscene=0": "备份插件存在严重RCE漏洞，可导致WordPress网站遭接管", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247516731&idx=1&sn=b1bc84582f9e3fb33a57cf477d168b07&chksm=eb705c04dc07d512b8ea1eeebd0bb7856371df4b05263936bb3570d819951b810f70f136e0f9&scene=58&subscene=0": "2023-12微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247541186&idx=5&sn=d6668d24685b0cb7025db94894c057f5&chksm=c1e9ad93f69e2485c81dbb2d4df4c325cfe09fc57b856dc4fd44cd9cf9357e26af53c6ded6fa&scene=58&subscene=0": "WordPress 插件曝出关键漏洞，导致 5 万个网站遭受 RCE 攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247501071&idx=2&sn=844ddf727754a2b25a0dbc23442a6bfc&chksm=eaf98d43dd8e0455f0b9dc3511a09f82fc78f0f8e0f023459544eecec72adc8e1954aaf189c5&scene=58&subscene=0": "打响人生第一“有效漏洞”！抛开限制，12月继续全面助力！", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247220&idx=1&sn=65ebf9d3ddd083416e71118bbfc58587": "Shiro从入门到权限绕过漏洞1(保姆笔记)", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247534409&idx=1&sn=7796f853a43ddaf6413b029dba2b5d43": "实战| 任意用户密码重置漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMTE0MDQ0OA==&mid=2247492934&idx=2&sn=dc498dcf037391ca9870591d09b48f0e": "打响人生第一“有效漏洞”！抛开限制，12月继续全面助力！", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652050722&idx=2&sn=5d24ce039ab3faa04e3ee2290d2d2f6b": "【安全圈】戴尔紧急通报PowerProtect产品中的多个高风险漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247503305&idx=2&sn=255e5ca99d2f15e83c120430f3462211": "Apache Struts2全漏洞扫描利用工具", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247503305&idx=1&sn=8a801b422046350831400b8a5bcc9694": "Apache ofbiz -CVE-2023-49070-RCE-POC", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247603928&idx=1&sn=27d7b28fb59ef7d86ad61d699528014c": "通达 v11.8前台文件上传&命令执行漏洞利用分析", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247490626&idx=1&sn=8257610f0a8ed33e0723423c768e30bd": "二进制漏洞分析-24.华为TrustZone TA_HuaweiWallet漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NjU3NzE3OQ==&mid=2247488780&idx=2&sn=611553a78dbba31b9c1cf495428fcc0b": "实战 ｜ 记一次金融项目的高危漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650583976&idx=4&sn=85c0b909bc968725a94a1dc7bc191b2f": "JumpServer 堡垒机未授权综合漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzI0NDYxMzk1Mg==&mid=2247499763&idx=1&sn=987504b4375e30da2f53f763b37be80c": "小白快速上手 SRC漏洞挖掘科普攻略！", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247484458&idx=1&sn=820fe9f3bce4599303ba2dcf763d9a9a": "最新Nessus2023.12.15.1版本漏洞扫描∕探测工具下载Windows", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487111&idx=3&sn=52ee77294e8031bb1709d4cc8fe76074": "漏洞预警 | MLFlow远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487111&idx=2&sn=def98ee8d270cf6936fb7aa7c56d3c03": "漏洞预警 | 亿赛通电子文档安全管理系统任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487111&idx=1&sn=88f7f980d0a8975f21dd540c9fa77918": "漏洞预警 | Microsoft ODBC Driver远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650936940&idx=1&sn=a875fe7875cb8f3fd0edd55090ee97d1": "Juniper新洞CVE-2023-36845浅析", "https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653026883&idx=1&sn=cbdc45c4e806c53aaa7e44715db4d586&chksm=7e5487f549230ee35a21de3c1cdf075de9899aafcc40881b9fc7bc1b9bab40964d52e305090a&scene=58&subscene=0": "极客公园 2023 年度「中国创新力量 50 榜单（InnoForce 50）」发布", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247511312&idx=1&sn=b67c3819d00d5c70f4695a0414a9207d": "CVE-2023-6063分析|WordPress WP Fastest Cache 插件导致的SQL注入", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247490645&idx=1&sn=d6f0432bed7c9f59972144d89354a6f1": "二进制漏洞分析-25.华为TrustZone TA_SignTool OOB Read", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092504&idx=2&sn=5198610698897085f48b44804f9a05ce": "2023年，Log4j仍是黑客主要攻击的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652050789&idx=4&sn=9a3c30110a606869df4d96fcb204e0a9": "【安全圈】QNAP VioStor NVR 漏洞被恶意软件利用", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247489906&idx=1&sn=dc7660782baa67a0b867631e7ea45ce5": "S2-032远程代码执行漏洞（CVE-2016-3081）", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651251113&idx=1&sn=cc87b9792d006beb7aa4c2c48fb3c230": "Apache告警， Struts 2 开源框架存在严重安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247603962&idx=1&sn=6e61f65d6d34a1040116563d222b36c0": "Android App半自动化静态漏洞挖掘技术分析", "https://mp.weixin.qq.com/s?__biz=MzI1MDk3NDc5Mg==&mid=2247485157&idx=1&sn=f86d2fccd3928536eb5237408783cc1f": "Nuclei脚本：专注于检测WordPress漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247487716&idx=1&sn=4cecdf34deb6e4e276e92c579ec69788": "Logbase思迪福堡垒机漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU3OTA4Ng==&mid=2247483948&idx=1&sn=05040156ccaacdec769e231d9c3299cd": "【1day】万户OA check_onlyfield.jsp sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650583988&idx=1&sn=134e11017f745f6c49eb613414a79031": "查头:通过姓名、身份证号获取人脸信息；|2023年，Log4j仍是黑客主要攻击的漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247222&idx=1&sn=6e66364a11904d4142d6491776c9fa26": "Xstream反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDU5OTg3Mw==&mid=2247484792&idx=1&sn=cb367f8a6890f0086054761f0689710f": "【Web渗透】暴力破解漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247484841&idx=2&sn=1681f784a4bb9e338dcee1853332f0b0": "思福迪Logbase运维安全管理系统test_qrcode_b接口存在远程命令执行漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247484841&idx=1&sn=570d38fa14051d305e9983c89ee2edb4": "​I Doc View在线文档预览系统存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247513015&idx=2&sn=4b3d04efd5193a39630e219622385f97": "Windows客户端漏洞挖掘(红队角度)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521703&idx=1&sn=f4c0f591f75ce84f22139d03bed9d04b": "【漏洞通告】Apache Dubbo多个漏洞安全通告", "https://mp.weixin.qq.com/s?__biz=Mzg5NDY4NTc4NQ==&mid=2247485699&idx=1&sn=27db883c33613ec20c19b1790423ad1b": "[CTF复现计划]2023强网杯初赛 thinkshop[ping]", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650974659&idx=1&sn=d0acc465bcb9d1fbef791c6676148c97": "原创 Paper | glibc 提权漏洞（CVE-2023-4911）分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518402&idx=3&sn=2287f259ca95d49fdb713843ffc8a1b6": "速修复！开源防火墙软件pfSense 中存在多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247493195&idx=1&sn=e1edee59378f9af7fe255486e84f0ca7": "CVE-2023-25157：GeoServer OGC Filter SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494200&idx=2&sn=e7a7acc73774ebc7bbd56dc31e4d6630": "上周关注度较高的产品安全漏洞(20231211-20231217)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494200&idx=1&sn=504ddd160a643535b2b75ef9e9a1f882": "CNVD漏洞周报2023年第50期", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500191&idx=1&sn=0369f149a043c80852ccf488b9d887f0&chksm=fe79e507c90e6c1184dfa3cfef669d1beccca25b9dfe7648ac89b659a54e24d67cd4d6d8d560&scene=58&subscene=0": "Apache Dubbo多个反序列化漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650974659&idx=1&sn=d0acc465bcb9d1fbef791c6676148c97&chksm=8079ebf1b70e62e7840537fd8fd46e010426f05dab486021de44e1a15793eb110462ea20d24e&scene=58&subscene=0": "原创 Paper | glibc 提权漏洞（CVE-2023-4911）分析", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247495995&idx=1&sn=e9039d791611b9005e6f36152f953443&chksm=fd790dbdca0e84ab8123e077738c716116ea212430a24a5682d3cad610a7296845e7a702f8da&scene=58&subscene=0": "安全验证 | Dubbo CVE-2023-29234 反序列化漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494200&idx=1&sn=504ddd160a643535b2b75ef9e9a1f882&chksm=fd74daf1ca0353e7dd64698675aadef998f5405eab79d1dd71d735b5a942a80c7730bacc1f8b&scene=58&subscene=0": "CNVD漏洞周报2023年第50期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494200&idx=2&sn=e7a7acc73774ebc7bbd56dc31e4d6630&chksm=fd74daf1ca0353e796be37640c60ec5785dfe69e56a70800a163bb251de60418cc833aca6541&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231211-20231217)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521703&idx=1&sn=f4c0f591f75ce84f22139d03bed9d04b&chksm=ce461eb7f93197a1dc03cc0cca48184583760e98410470835933231779f467f49a73ab78a50d&scene=58&subscene=0": "【漏洞通告】Apache Dubbo多个漏洞安全通告", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492383&idx=1&sn=8114454fed6fbeecf2d1fcdee9c21563": "漏洞复现 || 奥威亚视屏云平台VideoCover任意文件上传", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247498766&idx=1&sn=6140b9e884b927fb06ed10e4b08783ed": "用友U8 CRM系统help2 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247484582&idx=1&sn=c321ae470108f62e60267b00ff1943b0": "记录一次某SRC的SSRF挖掘-top10漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247223&idx=1&sn=5a08616cb41192c23563cfa9beadda10": "FileUpload1反序列化漏洞(学习笔记)", "https://mp.weixin.qq.com/s?__biz=MzkxNTU5NjM5MQ==&mid=2247484463&idx=1&sn=a049b8895609757f7eefdcbc32209952": "【漏洞复现】红帆OA iorepsavexml 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247484853&idx=1&sn=9fbcf2294031937794e392190439d8be": "jeecg-boot∕积木报表系统testConnection接口存在远程命令执行漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489219&idx=1&sn=1ac11a2409444b6be45ed570383b757c": "微软在 Perforce Helix 核心服务器中发现4个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487251&idx=1&sn=5c111d13d6e2e39d582a1e4e128a876f": "【漏洞预警】Zabbix代码执行漏洞CVE-2023-32727", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484489&idx=1&sn=bba1be0af957203e6eb02c8ea82646e3": "【复现】 金蝶天燕未授权远程代码执行漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247495666&idx=2&sn=799a4b988e36a601642b57d31c32930f": "任意文件下载漏洞的利用思考", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247498757&idx=1&sn=31b9f476d419b111ebff50c2088d8cae": "云时空社会化商业ERP系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247490036&idx=1&sn=1c7e2282dee4dfbdc272dbf5c5998ca7": "新南威尔士大学 | DeepWukong-基于图神经网络的软件漏洞静态检测方法", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652050844&idx=2&sn=6759ad37b4d1c1f86857d832ecc75635": "【安全圈】微软审查发现Perforce Helix Core Server四个漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247492026&idx=1&sn=a9f04cef8307d05ebdd7adfa9d3b7b04": "「漏洞挖掘实战」PPT来了| 一键领取", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247489915&idx=1&sn=ec5ccb4951ca0b494b49e08e0d4b31f7": "S2-045远程代码执行漏洞（CVE-2017-5638）", "https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247502620&idx=1&sn=6a76375691b7e065cad33aec239b7bac": "未然通讯社：WordPress 插件漏洞影响5万余个网站；80%的泄露数据源自云端", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518431&idx=3&sn=a722a374f04431d859bfff55c29c4e71": "微软：热门源代码管理平台 Perforce Helix Core Server 中存在RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518431&idx=1&sn=66c397add674e554ee4125ccac3a3c7f": "新3年旧3年又3年，堪比 Spring4Shell 的 GWT RCE 漏洞仍无补丁", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247504112&idx=1&sn=c56b580ee76ceba18e178931a5841161&chksm=cfcab3e4f8bd3af2137d9591179838b55ad8f589e6861907cce1039ec82b1155d198ebb7bb50&scene=58&subscene=0": "漏洞通告 | 金蝶Apusic应用服务器远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518431&idx=1&sn=66c397add674e554ee4125ccac3a3c7f&chksm=ea94b9b5dde330a3b137c5109c585708267d9441b4816a8c99112addda41d2bec1f4689d410a&scene=58&subscene=0": "新3年旧3年又3年，堪比 Spring4Shell 的 GWT RCE 漏洞仍无补丁", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518431&idx=3&sn=a722a374f04431d859bfff55c29c4e71&chksm=ea94b9b5dde330a30636b774cd382ecba8eb1060d9204e43c227d653b48041844a17a60c8bea&scene=58&subscene=0": "微软：热门源代码管理平台 Perforce Helix Core Server 中存在RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247490036&idx=1&sn=1c7e2282dee4dfbdc272dbf5c5998ca7&chksm=fe2ee67fc9596f69de07d1156cbac8254bfaf0c06c76b5669ec20327c98eb926dc78ce8ae2d5&scene=58&subscene=0": "新南威尔士大学 | DeepWukong-基于图神经网络的软件漏洞静态检测方法", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498866&idx=1&sn=03a70d27006307ed37a7444f8b9df879&chksm=973acf10a04d4606d1158f870915a62a01b8b8f5be39a96d38e75ea1acedfd7970d2ca16c047&scene=58&subscene=0": "CNVD漏洞周报2023年第50期", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652050844&idx=2&sn=6759ad37b4d1c1f86857d832ecc75635&chksm=f36e39dcc419b0ca355072eb256a7e5b4122dcb2c9a79414bcf8443ec4fe2fea188cfa787811&scene=58&subscene=0": "【安全圈】微软审查发现Perforce Helix Core Server四个漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247492026&idx=1&sn=a9f04cef8307d05ebdd7adfa9d3b7b04&chksm=fa9d1aeccdea93fa394238070ec9754c28f3e6bfe411ccf93d235b7402b87f386b209a65a263&scene=58&subscene=0": "「漏洞挖掘实战」PPT来了| 一键领取", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500197&idx=1&sn=8272717eb61fd478b19549ebe0f3e0ab&chksm=fe79e53dc90e6c2bbe26583a6b7297a23e673208182d34e46fbf39dc3859bd19d519070f2a15&scene=58&subscene=0": "【已复现】金蝶天燕远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247510624&idx=2&sn=80df212b0bb696b9ee9ad0cc8898caeb&chksm=ebfaed40dc8d6456007d5352307a64669391da655d7c8a27d65ba3398d1c39d1d51858d9352d&scene=58&subscene=0": "CNCERT：关于蓝牙协议存在中间人攻击漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492206&idx=2&sn=ae7fe100201eeb409645ff45a9eb2709&chksm=96f7fd03a180741517d36fcc4978e06049ed8f18440f9304cc8b09f9ecef9bb0a00bd6718c8a&scene=58&subscene=0": "【已复现】金蝶Apusic应用服务器JNDI注入致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247541802&idx=1&sn=0904f96e3531d223f1b02b80d0bd3d20&chksm=fa9392ebcde41bfd5c3ff1a30d534539c27c251263f4e1df1ba1e4a5e4a93f4ad03d39e2a6fa&scene=58&subscene=0": "不靠谱的补丁！补丁再次被绕过-声音文件触发的Microsoft Outlook零点击漏洞链", "https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247492997&idx=1&sn=d16fd8919207a5b38d5cf2f069786c3c&chksm=c1842594f6f3ac8250ed7ddb002b524c4bb18dbf28fe32d609d53df22d9f49d42e40fa81de53&scene=58&subscene=0": "CVE-2023-36025 Windows SmartScreen安全功能绕过漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664200365&idx=3&sn=22665542fe29d32cc20c11da38a28608&chksm=8b597a54bc2ef342474a057267d4306896e4cf1de630ba57bade17586ee3d764ec26b7df20c5&scene=58&subscene=0": "CNNVD | 关于Apache Dubbo 代码问题漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664200365&idx=5&sn=6b65e584299f6dde10fe021e5447aa71&chksm=8b597a54bc2ef34232ccafb0badc048156cdaedc62331722b9544f3ed5bb79d4a135184e7941&scene=58&subscene=0": "观点 | 堵住个人信息泄露的漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494202&idx=1&sn=2e2677116981ae7c18a94570a5597dcb&chksm=fd74daf3ca0353e5d1fb714903819ddbb36d7b8a414f98eebab512487b7f3dda2d1076b97b49&scene=58&subscene=0": "关于蓝牙协议存在中间人攻击漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247490887&idx=1&sn=0078594a1236b28769dc8711660bb97b": "二进制漏洞分析-29.Huawei TrustZone HuaweiNfcActiveCard 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247498845&idx=1&sn=fca31c385e9d4bf9a11d637fa742fd7b": "海康威视安全接入网关任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650937830&idx=1&sn=e3ea94dcba59b0372cbd3d0e011d4c32": "域渗透历史漏洞汇总", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247484911&idx=1&sn=361fee31526379e410abb324ff4a66ac": "【漏洞复现】CVE-2023-6895（附nuclei poc）", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247250&idx=1&sn=0ce9947cd2d2c25da8a71da6401af1a5": "原创 Paper | glibc 提权漏洞（CVE-2023-4911）分析", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247484648&idx=1&sn=a03f4775b7674af9600f54d27a807e02": "一个*份证后四位的验证思路-逻辑漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247500347&idx=1&sn=be54aa3fa9d627bf6b1e1f0975949028": "【成功复现】Ivanti MobileIron Sentry 身份验证绕过漏洞(CVE-2023-38035)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247484941&idx=1&sn=ffcf7ae3a0a5636fcf34edac35063001": "用友NC Cloud soapFormat.ajax接口存在XXE 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzkzODQzNTU2NA==&mid=2247485598&idx=1&sn=6e9337c2169669dc27142cb93524a353": "Log4j2-CVE-2021-44228", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492222&idx=1&sn=0f788810f5b2e25f761719add573f0a0": "【工具发布】2023年100个勒索风险漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487306&idx=2&sn=582db8228ebae2920e8398d7c2fe1290": "【漏洞预警】Sudo ipa_hostname 权限提升漏洞CVE-2023-7090", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487306&idx=1&sn=6589b4176032ec619a50b28100549c87": "【漏洞预警】OpenSSH ProxyCommand命令注入漏洞CVE-2023-51385", "https://mp.weixin.qq.com/s?__biz=MzIyNDkwNjQ5Ng==&mid=2247485921&idx=1&sn=9038c2ad016e56e696a37cf667f4fbeb": "反序列化漏洞之Python篇", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652051068&idx=4&sn=177ed8b82676f0083b87cc8440e3eedb": "【安全圈】多个Windows CLFS 驱动程序0 day漏洞正在被攻击者利用", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247493264&idx=1&sn=c0d418aa919964a07b70cb5d8cb751c5": "QVD-2023-45061：I Doc View在线文档预览系统RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458532610&idx=2&sn=ac74a8cfb3bd29cc84db6379b7005f34": "CVE-2013-0750详细分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458532610&idx=1&sn=6efefdddbbbfb4835b26f87a46925285": "早鸟价限时75折！系统0day安全-二进制漏洞攻防（第二季）火热开课啦", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247504165&idx=1&sn=f8be949ca04473d5cf5b49c9889461e9&chksm=cfcab231f8bd3b27b8fa0118be523d5dbec56e26f1d72c317661463e267795dcce86d1fbe450&scene=58&subscene=0": "漏洞通告 | OpenSSH ProxyCommand命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492222&idx=1&sn=0f788810f5b2e25f761719add573f0a0&chksm=96f7fd13a180740519a4eecac4b332dd742e405422a2e1a93025e2ecb0135887478849c0747a&scene=58&subscene=0": "【工具发布】2023年100个勒索风险漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518495&idx=1&sn=c9f248c5f3f6c32802c76b6b1ed8e247&chksm=ea94b875dde33163ad619a2669636190d521db9292d6b488cb2d39f88259ee0cc20e49d86431&scene=58&subscene=0": "速修复！开源通信框架 FreeSWITCH 受严重漏洞影响", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247510674&idx=1&sn=c6ebd402c03b4018f833325ad5f16761&chksm=ebfaedb2dc8d64a4dbe007dc9cda3ccd17e154f1b86d074c5c391ffb0a05a408617c862951a7&scene=58&subscene=0": "从供水系统被黑看美国关基网络安全保护体系的漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458532610&idx=1&sn=6efefdddbbbfb4835b26f87a46925285&chksm=b18d0b8886fa829ee44cb42d3c461cb961317378a576d7b343ca7b30b4e1ad9e26dc8938a6ed&scene=58&subscene=0": "早鸟价限时75折！系统0day安全-二进制漏洞攻防（第二季）火热开课啦", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458532610&idx=2&sn=ac74a8cfb3bd29cc84db6379b7005f34&chksm=b18d0b8886fa829e48fe430ebca92abe816db55f0561004001ef77b54759e341d09cc54ffc86&scene=58&subscene=0": "CVE-2013-0750详细分析", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498878&idx=1&sn=058dc84d1ba82a88350c5c9fb1345b79&chksm=973acf1ca04d460a77e5374affd3172d3e23b2c8e15350b31db50d5c532ee7c63a26e99cf457&scene=58&subscene=0": "CNVD漏洞周报2023年第51期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498878&idx=2&sn=2fa156398806c6ea89bee62f71ce06e0&chksm=973acf1ca04d460ada26a5b7646db4ae01671c6d430d054d99fae164fe39b0d7c515d013b4c6&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231218-20231224)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521825&idx=1&sn=c788092c8e9a487b511991a1cebf0b61&chksm=ce461d31f9319427ed1520cdf43feea209d1d190768e0a64ee977e121c77fcdcdd9c0dc70907&scene=58&subscene=0": "【漏洞通告】OpenSSH命令注入漏洞CVE-2023-51385", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485030&idx=1&sn=15369d4070c36d0781b19172a26bc593": "【漏洞复现】CVE-2023-49070", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247513512&idx=2&sn=e8acbb88e965db2e2a206f838ff2db54": "实战 | 前端加密的用户名枚举漏洞怎么从低危变为中高危？", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493186&idx=1&sn=229273f92424993671a59a48243fc507": "实战：一次Src越权漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247486106&idx=1&sn=3a26cf544b565557b3d32824de21be7d": "漏洞预警 | 网康NS-ASG应用安全网关源代码泄露漏洞【附POC】", "https://mp.weixin.qq.com/s?__biz=MzI1NTM4ODIxMw==&mid=2247500365&idx=1&sn=33f7d1cf216b18cb8292b83d7a35a1dd": "CVE-2023-51467RCE漏洞(附EXP)", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5Mzk2OQ==&mid=2247485623&idx=1&sn=aec533a2530d34a5eef2a5f79c4de6f0": "CVE-2023-51467|SpringKill的Apache OFBiz RCE代审分析", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247484127&idx=1&sn=fffa5375baf41332c2047c404075a344": "【实战SRC】前端加密的用户名枚举漏洞怎么从低危变为中高危？", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247487810&idx=1&sn=5e5ab59c52a3b951cebea07cab8205f5": "【漏洞复现】（1day）铭飞mcms-shiro反序列化漏洞复现", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651253288&idx=4&sn=22a994c69716add355bba855fdacee9d": "如何使用CVE-Collector快速收集最新的CVE漏洞信息", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487286&idx=2&sn=e9ebe0254925cef30dbe71f60472b33f": "漏洞预警 | Apache Ofbiz远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487286&idx=3&sn=a6ccce90f3748263a05a57319df43c06": "漏洞预警 | 四创科技有限公司综合管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487286&idx=1&sn=3ac716778510dae67b9ad175988f4491": "漏洞预警 | 网康NS-ASG应用安全网关源代码泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493186&idx=1&sn=229273f92424993671a59a48243fc507&chksm=e8a5ec21dfd2653751cd7f466e81da710672b6b534448f916614f0d402ba4dbad21b429c4450&scene=58&subscene=0": "实战：一次Src越权漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652051284&idx=3&sn=06f666a486bd70466649bb3ec7689273&chksm=f36e3b14c419b202cd0fb000b25fef59ac489eedf1462c0d3a22529a85d09eb842d9e5b854da&scene=58&subscene=0": "【安全圈】微软发布补丁，修复 Win10、Win11 关键漏洞：可安装恶意软件", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652051284&idx=4&sn=3bc77baea89be3365a702d06f4f4a8e7&chksm=f36e3b14c419b202c8fd52c607615189aecfd43d527fac7dd187037fa528d5e600a7b5cf96c9&scene=58&subscene=0": "【安全圈】英伟达：生成式 AI 可有效协助网络安全，寻找漏洞预测黑客攻击", "https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247488362&idx=1&sn=8341637b195712f0321860a677fae6e6&chksm=fdeb9714ca9c1e0265d3d3f100e2933bc5d5754e33d006953021340143284ddc02ef111b3516&scene=58&subscene=0": "成果分享｜Java反序列化漏洞自动化挖掘和可利用性验证", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458532891&idx=2&sn=c931879ff8deaf3cb5a35ce1915b0e4e&chksm=b18d0c9186fa85876b429cf901d11a30f8e7ae7a4039b3b1b17440647761c519936aa3b5ddf5&scene=58&subscene=0": "限时75折！系统0day安全-二进制漏洞攻防（第二季）", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493194&idx=1&sn=547802c2786f3c905e56e0b598b27d84&chksm=e8a5ec29dfd2653f238244880f48032f4647e2503bd73b709dfebd3daf1c5704faa7ff59d826&scene=58&subscene=0": "一次简单的五千赏金漏洞挖掘记录", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652051390&idx=1&sn=de4f687321930d917d620ddf2652434e&chksm=f36e3bfec419b2e8bb6d065c97917c973190f85ece577e1ba9955c8e3a5445b96753f63dc633&scene=58&subscene=0": "【安全圈】谷歌OAuth端点漏洞暴露用户账户，多个黑客团伙滥用漏洞窃取信息", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247503523&idx=1&sn=efd7ca5f1261c67840842c9f2eed3996&chksm=fa521b1dcd25920b82f38d3b0f21311fc02f2c2dd9b96172b311f48f019a4a05619ce74fac6b&scene=58&subscene=0": "CVE-2023-2598 io_uring内核提权分析", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494250&idx=1&sn=67ee171fd21cf92e72de4701c0ef0c3b&chksm=fd74daa3ca0353b5ff2c2fc0ed5b459590c7dc6d166db7235d982bb7403f1881e436b55bbcab&scene=58&subscene=0": "CNVD漏洞周报2023年第52期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494250&idx=2&sn=58783d9b97da65d8bd7a31fd0e21e9e7&chksm=fd74daa3ca0353b5fe5b3262c6f435981f42be1a980d282c8ae62bd1802a70f302287251b69a&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231225-20231231)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247572702&idx=1&sn=5f28d592d178761b6bcc6006b2313839&chksm=e9140ce4de6385f2cf3fb665a7c76b111a4c691fdf0259aa2c99cb38a34268f94d67a41c50a2&scene=58&subscene=0": "Terrapin安全漏洞影响SSH的安全性", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493205&idx=1&sn=e8d481fa0c81c1bd5b7c63ba75944de3&chksm=e8a5ec36dfd265208498319394170c3997759f76499a51f475d3e7851806bafc23ba7a608279&scene=58&subscene=0": "一个支付漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTU4MDc5Mw==&mid=2247485111&idx=2&sn=0c59940d48635c05102e50bb28d68e4d": "【漏洞复现】天融信TOPSEC static_convert 远程命令执行", "https://mp.weixin.qq.com/s?__biz=MzkyNTU4MDc5Mw==&mid=2247485111&idx=1&sn=744f15208fadd99590bc6b664054ff2d": "【漏洞复现】天融信TOPSEC Cookie 远程命令执行", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485603&idx=1&sn=685a482237701483e5a217bd494fe14c": "自动化挖掘未授权访问漏洞工具 - IDT", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247484099&idx=1&sn=d5cf1624411754bc668cfbe3a6e31994": "SSCTF-pwn450 win kernel 漏洞分析 （三）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518558&idx=1&sn=f0c9d4e2fed90fb991a8eb33bf83c83d": "【已复现】Apache OFBiz 远程代码执行漏洞(CVE-2023-51467)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247513647&idx=1&sn=1febddda4f76d24d593516f105ec73bf": "代码审计 | 某CMS系统后台通杀0day-SQL注入", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487349&idx=1&sn=aa5cfe9e29d313523af1723045933a22": "【漏洞预警】Perl for Windows 任意代码执行漏洞 CVE-2023-47039", "https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650446957&idx=1&sn=7b48f1a75f86cac9f602b0e42085a125": "绿盟科技入选IDC MarketScape漏洞管理评估报告“主要参与者”类别", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485204&idx=1&sn=3ae6a084905eabbc631eec79d0de5af8": "【漏洞通告】Apache OFBiz 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247503642&idx=1&sn=94ea1cfc7421e906e56a48692b1fd4be": "手把手玩转路由器漏洞挖掘系列 - UPNP协议安全风险", "https://mp.weixin.qq.com/s?__biz=Mzg4MTUwODQxMw==&mid=2247483989&idx=1&sn=54e5bf83224ef59fcd9c99a740b38bbf": "web测试用例逻辑漏洞瞎扯系列", "https://mp.weixin.qq.com/s?__biz=MzU4MjYxNTYwNA==&mid=2247486992&idx=1&sn=2520f7489c1243d7feb144181ab1180b": "（0day）某友CRM系统存在逻辑漏洞（大量资产存在）", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247542277&idx=4&sn=88e7ae91aa0429be4419e518d0640768": "Terrapin安全漏洞影响SSH的安全性", "https://mp.weixin.qq.com/s?__biz=MzA3MzI5NzY0OA==&mid=2247495444&idx=1&sn=a32f47e739de4ecfd227943d6d961511": "漏洞通告|Apache OFBiz远程代码执行漏洞（CVE-2023-51467）", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498890&idx=2&sn=1bf1646471d4b2eca248ed42ad47f84b": "上周关注度较高的产品安全漏洞(20231225-20231231)", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498890&idx=1&sn=ee0c512193f727432c8213b73ac64821": "CNVD漏洞周报2023年第52期", "https://mp.weixin.qq.com/s?__biz=Mzg2MjkwMDY3OA==&mid=2247484575&idx=1&sn=3c2eeb6eab8e25e9a2e7ed2d2c83582a": "【漏洞复现】海康威视IP网络对讲广播系统远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY1MDc2Mg==&mid=2247504393&idx=1&sn=9a2125f1d8d34a40bf613c478c65b4a3": "文件上传漏洞知识总结", "https://mp.weixin.qq.com/s?__biz=MzIwODc2NjgxNA==&mid=2247483942&idx=1&sn=16a70c2b4e7ce04fc4031ce5aef1544e": "CVE-2023-50164 Apache Struts RCE 分析", "https://mp.weixin.qq.com/s?__biz=MzkyNDI2NjQzNg==&mid=2247485210&idx=1&sn=4b41b2ac302eda8c53a3b4d820f38f03": "cnvd通用型漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498890&idx=1&sn=ee0c512193f727432c8213b73ac64821&chksm=973acfe8a04d46fe4861bc690e7e95fb951f9f836b6f2a9b469b3b26e84d289c87dbb71f484b&scene=58&subscene=0": "CNVD漏洞周报2023年第52期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498890&idx=2&sn=1bf1646471d4b2eca248ed42ad47f84b&chksm=973acfe8a04d46fe575b0024976158efa118096621b3e459045442fec165701cf7a17397291b&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231225-20231231)", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247542277&idx=4&sn=88e7ae91aa0429be4419e518d0640768&chksm=fa9390c4cde419d2a0d74a40556027a53e06542bf1845ec90b38b6ea244d9139e18d11c83527&scene=58&subscene=0": "Terrapin安全漏洞影响SSH的安全性", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518594&idx=1&sn=42344cd84f041e0bd0049ef5c7bbdf84&chksm=ea94b8e8dde331fe2a1df497c6a9068b0b510c2924d9229f7c28997fee0d5b1c8a1d81cd78aa&scene=58&subscene=0": "严重的Ivanti EPM 漏洞可导致黑客劫持已注册设备", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493264&idx=1&sn=678026cc9d028a1f0e39ec923d1c2758": "如何测试Cache相关的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247496421&idx=1&sn=f6268708334440cba7b8aa10a71a3b30": "【0day】全^程^云*OA之未授权访问+SQL注入", "https://mp.weixin.qq.com/s?__biz=MzU0MzgzNTU0Mw==&mid=2247485184&idx=1&sn=ca21cf67f658ab63b117f09088a81127": "《漏洞战争》修订版说明", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484124&idx=1&sn=7fffed1594092c092d26c0ce99e36cf7": "全程云OA userIdList存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652051622&idx=3&sn=005614118ed253c0439099c981ed616c": "【安全圈】Apache ERP 零日漏洞补丁存在被绕过危险", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652051622&idx=2&sn=a83d6eb91fc4633a343c65e4a2000b4c": "【安全圈】​Chrome 2024 开年首更修复 6 个漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458534230&idx=2&sn=ee6ed8900f4f9ab3fc53b56ee351acd6": "限时75折！系统0day安全-二进制漏洞攻防（第二季）", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247485361&idx=1&sn=7cc40fc17aaeb009504108b997bc1dd4": "某网盘逻辑缺陷GetShell0day", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247503632&idx=1&sn=56f2ca3e993d4bf7ca76a124848e355a": "CVE-2024-21633 - \" Apktool 中的任意文件写入漏洞\"", "https://mp.weixin.qq.com/s?__biz=MzI2NTc1ODY0Mw==&mid=2247485777&idx=1&sn=566b578449ed08e3370c308347c77a63": "实战之常规漏洞快速挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg5NzcyNTk3OQ==&mid=2247484061&idx=1&sn=168a14c5ce0e7004e8deea4debd2e0ec": "Apache Ofbiz CVE-2023-51467 图形化利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485452&idx=1&sn=a1fce6925516b98e4135c1afa0b00c07": "U8cloud系统PrintTemplateFileServlet接口泄露敏感信息漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247484860&idx=1&sn=73e5f653747178d26c0d05e05bfa8735": "网康应用安全网关(NS-ASG) SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTQyOTk3Mg==&mid=2247484737&idx=1&sn=666e84a15afa2ef8b21f456bc1fc9b44": "某蝶多接口任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247486456&idx=2&sn=fe2c70f0bdcd38d0d86750be8324261a": "随手挖洞|一次捡的逻辑漏洞 cnvd", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651253930&idx=3&sn=2079e24516d0d61506bfb70238d6e7b9": "Terrapin 漏洞严重影响 SSH 协议的安全性", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650585264&idx=4&sn=7710d69a7fb6bda30457077a241c003d": "POC管理和漏洞扫描集成化工具", "https://mp.weixin.qq.com/s?__biz=MzkyNTU4MDc5Mw==&mid=2247485128&idx=1&sn=f5aac80f3732be96a2b4db7d88d4de94": "【漏洞复现】睿因科技-wavlink-路由器-多处前台RCE", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487362&idx=3&sn=a5588f71bd7594b31d522a7d670c896c": "漏洞预警 | Perl for Windows代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487362&idx=2&sn=69300abb5b39a86e6c26634c73703ae2": "漏洞预警 | DataX-Web命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487362&idx=1&sn=3a9769423b2b16a43a309eb10a1b3e1e": "漏洞预警 | Apache DolphinScheduler远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247484415&idx=1&sn=1615b04927829e42c71b1e488521b415": "禅道”多版本”通用前台RCE利用分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458534230&idx=2&sn=ee6ed8900f4f9ab3fc53b56ee351acd6&chksm=b18d71dc86faf8ca931109368a05e94727e98cb7873d5159cb1db0376dbea9b778e9a8eb4331&scene=58&subscene=0": "限时75折！系统0day安全-二进制漏洞攻防（第二季）", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493264&idx=1&sn=678026cc9d028a1f0e39ec923d1c2758&chksm=e8a5ecf3dfd265e556df7f6fc952d2a576f3d06f36e78e08de5d25a182f606e6d370be467ad7&scene=58&subscene=0": "如何测试Cache相关的漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650938936&idx=1&sn=c3bdc96b9b41ba91f2577c4e94d8809a": "网站漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=Mzg3MTY4NjUyOQ==&mid=2247485580&idx=1&sn=3700fc4eb7038d6ed97df9038c5347c0": "Win11 RCE漏洞复现CVE-2023-38146", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247507364&idx=1&sn=9ed96c83f35b36f01929425098d4d737": "宝塔渗透手法总结，从常见漏洞 聊到 宝塔维权 再到 bypass disable_functions原理", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247499161&idx=1&sn=da190b71ed15dba790089241c4692149": "【0 day】全程云OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484130&idx=1&sn=0ce0f6b06ed6b6319e8d14d5bacaa93f": "OwnCloud敏感信息泄漏漏洞复现-CVE-2023-49103", "https://mp.weixin.qq.com/s?__biz=MzkwNjUwNTg0MA==&mid=2247491080&idx=1&sn=70314d36d97789f674c9e7ba88895e35": "从Reids漏洞聊到getshell手法，再到计划任务和主从复制原理", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQ0MTI2MQ==&mid=2247484464&idx=1&sn=90756c3a09dc2d4c75839ff510d9940a": "揭秘垂直越权漏洞：某企业后台管理网站的安全隐患", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485605&idx=1&sn=5d71047e92a8ccc2749440cb6bc618ae": "综合性的资产收集和漏洞扫描工具 - Komo", "https://mp.weixin.qq.com/s?__biz=MzU4MjYxNTYwNA==&mid=2247487007&idx=1&sn=c4ab813c21858b856286313c54a7d90f": "美国国防部注入漏洞报告分析", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247489674&idx=1&sn=5dcb9c543fb7d0efecacb59431a8186a": "JS接口提取,漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzkyOTQyOTk3Mg==&mid=2247484749&idx=1&sn=6c6ac776d3239af93e0008a98f522a96": "某捷未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODQ0MDc2Mg==&mid=2247484770&idx=1&sn=1fbdbec38b003f3edb61ba4290cc76e7": "JAVA代码审计-SQL注入漏洞一(配套视频)", "https://mp.weixin.qq.com/s?__biz=MzkwODUxMDUwMg==&mid=2247483775&idx=1&sn=33e195e59fd5d9d2e5c851e93d220022": "深xx日志审计rce", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247484870&idx=1&sn=c8704f12278cdbee0c8baef1c4d4e8cb": "用友CRM存在日志信息泄露-附上POC", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247484418&idx=1&sn=8ea443f75bb15616ecbb0b35499ee892": "天X信TOPSEC Cookie 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NzAwNzA4NA==&mid=2247484398&idx=1&sn=8ce500468ce52c32a55571c07844a8f2": "原创-逻辑漏洞之用两种方法在微信登陆openid验证情况下成功刷票", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247491091&idx=2&sn=92a18683c56c85d2399a946ebe902a7d": "二进制漏洞分析-35.Samsung NPU的Reversing与 Exploiting (第一部分下)", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247491091&idx=1&sn=9331aa80e6ffdef99a260f7c8acec73b": "二进制漏洞分析-35.Samsung NPU的Reversing与 Exploiting (第一部分上)", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247486479&idx=2&sn=255d8fda12e58fc5720785047d15da4d": "一款自动化挖掘未授权访问漏洞的信息收集工具", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247490178&idx=2&sn=aa1c9098329f9501f8f91574b0134919": ".NET 分享两个任意文件下载的漏洞场景", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247490178&idx=2&sn=aa1c9098329f9501f8f91574b0134919&chksm=fa5ab46fcd2d3d79075acc9f09b7096240054ceb017e584c6a141ed24f97f7cd5dbc9edb92a8&scene=58&subscene=0": ".NET 分享两个任意文件下载的漏洞场景", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650939558&idx=1&sn=a0f96c345dd5495c66ec7d110e1d1078": "afrog漏洞检测工具的官方PoCs库（1月6日更新）", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485177&idx=1&sn=6bc01d375f45fadbd431bc784eb83169": "[漏洞复现]CVE-2024-21645", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247511829&idx=1&sn=3ff4689f4b45aaa7eebe7b9c3b2b2e60": "Eyoucms的sql注入复现(2019Bversion)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODQ1NzU4MA==&mid=2247484380&idx=1&sn=08f639e90344678441a9d83382a12dd6": "RCE bypass的一些小技巧##", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652052114&idx=1&sn=861d34cc832090425f9e0d6406d18e02": "【安全圈】微软 SharePoint 被曝严重漏洞，黑客可远程执行任意命令", "https://mp.weixin.qq.com/s?__biz=MzkxOTUyNTg2MA==&mid=2247483773&idx=1&sn=597b234c9823cd14adef76d5e5fc436f": "一款常用的API漏洞扫描工具|渗透|简单实用", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489079&idx=1&sn=13e547db4df7a3fb7f602d2c64ded85f": "【二次更新】Gitlab 任意用户密码重置漏洞（CVE-2023-51467）风险通告", "https://mp.weixin.qq.com/s?__biz=MzI5NDg0ODkwMQ==&mid=2247485742&idx=1&sn=30b8e858fd596163cd1ec3dfae11481f": "GitLab 任意用户密码重置漏洞复现（CVE-2023-7028）", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247485058&idx=1&sn=b1ab3f9382e4c137521d30a7226579a5": "恶意软件家族：国家行为者武器化Ivanti VPN零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247604931&idx=1&sn=0f472837caafcb89b659ec82bde4946d": "漏洞复现 | CVE-2023-7028 GitLab 任意用户密码重置", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247490669&idx=2&sn=d8ee079e7b63c4f0903cb8efa25d31c0": "研究人员为Apache OFBiz漏洞CVE-2023-51467创建了一个POC", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247490669&idx=1&sn=a5b38a922a887ff362c6951ab2df28ac": "JUNIPER NETWORKS修复了其防火墙和交换机中的一个关键远程代码执行(RCE)漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4MjYxNTYwNA==&mid=2247487047&idx=1&sn=598bd6f51f8d764181b4650e1875ea99": "ssrf漏洞简单学习解析", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649790249&idx=1&sn=da97bd44b1200398721fa6fba27fe3d0": "CISA：Microsoft SharePoint 的关键漏洞已被积极利用", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247490521&idx=1&sn=716777680dde08253775c27f7054c449": "记一次利用wx绑定漏洞的渗透过程", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487441&idx=3&sn=97ae689590f7e484d5663635b52bc512": "漏洞预警 | GitPython代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487441&idx=2&sn=1ad806bbc860c5ed018931c344f8039b": "漏洞预警 | pyLoad远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487441&idx=1&sn=38244c484c5521085d49b15f696ad1c3": "漏洞预警 | 百卓网络Smart多业务安全网关智能管理平台文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247490283&idx=2&sn=de0310b48443b46550819428098a1571&chksm=fa5ab406cd2d3d1007f52bc19ab9938921010b4a3861bb854cad79e00a088ad91506e5b6c01f&scene=58&subscene=0": "使用AspDotNetWrapper复现反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247511863&idx=1&sn=7b66a1a7bceb5c97f3ef1e0ae966f5ec": "ByteCodeDL能找到log4shell(CVE-2021-44228)漏洞吗", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247493719&idx=2&sn=229d4ab72b0f2f074476d9a3b80de162": "漏洞扫描VS渗透测试", "https://mp.weixin.qq.com/s?__biz=MzkxNzQwNDc2OA==&mid=2247484193&idx=1&sn=aa53d085f386ee8f5ea5b76528585509": "某OA系统快速代码审计（0day）", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247513968&idx=2&sn=51a4c7fa70ce0f5e607fbb4831592393": "实战 | 奇怪的万能密码登录漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNjkxMDM4Mg==&mid=2247484480&idx=1&sn=b2d97351fe47b99fdb20e44f418128ab": "【漏洞复现】Gitlab任意用户密码重置", "https://mp.weixin.qq.com/s?__biz=Mzk0NDUxMjAzNw==&mid=2247485231&idx=1&sn=f8e3acc4c823e5419a9420433dae18c8": "【漏洞情报 | 新】用友GRP-U8 ufgovbank XXE漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652052133&idx=3&sn=2bb79dea2d64d92c5a5670cfc17fe1f3": "【安全圈】男子利用网络漏洞刷取游戏金币，非法获利413万", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652052133&idx=2&sn=17dd221e06ead486b0202c346fa2370e": "【安全圈】辽宁一男子与公司发生矛盾利用漏洞致公司200台电脑瘫痪", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247489706&idx=1&sn=4ac7e109cb0f45a036b13eb714cdffad": "统计路由器CVE，便于漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247484964&idx=1&sn=57005357640cc6531ffc21c58ea3c5d7": "最新Invicti Professional v24.12漏洞扫描器下载", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247490677&idx=2&sn=6dd1d20cd90f62cc32ed4fd2d37abfb9": "GitLab修复了一个严重的零点击账户劫持漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwODc2NjgxNA==&mid=2247483963&idx=1&sn=8ca5d1fd9e5b437ec7bbed8db474e791": "CVE-2023-7028 GitLab Account Takeover漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247484259&idx=1&sn=07ab08a8d8344f903112230ec4fd7fe9": "【python专题】poc编写过程万能正则获取字符串", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651254677&idx=1&sn=0b1bce185c0dfe8af942b7c955b227fc": "思科又曝高危漏洞，黑客利用可获取 root 权限", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650585644&idx=4&sn=fa97dfd8cec7570ffa1168f9360e36b2": "Nacos漏洞综合利用GUI工具", "https://mp.weixin.qq.com/s?__biz=Mzg3ODkzNjU4NA==&mid=2247485307&idx=1&sn=6ab01704ba47cefea8a8506a7fe473f8": "GitLab任意用户密码重置漏洞验证脚本 CVE-2023-7028", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458535564&idx=2&sn=3b95c8dbe5ab853b62511aef7cc6eca9&chksm=b18d760686faff10b19ab34019a9418e10044fe93b9a2040412d8f82d9bacf24a7e33ca3b4d2&scene=58&subscene=0": "立即更新！GitLab曝满分零点击账户劫持漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518669&idx=1&sn=e9e78678e6c35cd6c0c37b638d5a988c&chksm=ea94b8a7dde331b16bdf8306a2700a04ea240bc5baa204b72ab3c9664a58b77c6fc92b1841f4&scene=58&subscene=0": "GitLab 提醒注意严重的零点击账户劫持漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518669&idx=2&sn=0cbdae2b9be2d7406ffaea5ba7dc47d1&chksm=ea94b8a7dde331b1ffbd02134c098d7117b1af631461588e39a663cd6ee5834bc93977380167&scene=58&subscene=0": "Juniper 提醒注意防火墙和交换机中的严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494322&idx=1&sn=95f95527d0d6a4c26efaf40c8db7e22a&chksm=fd74da7bca03536d79ffa0ac0e4f107f2459c9593070ebd679839e502de06f3e7270aa637dfd&scene=58&subscene=0": "CNVD漏洞周报2024年第2期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494322&idx=2&sn=91db3d4d3e7008110d0256136ff89d42&chksm=fd74da7bca03536db67fe860e498c07d3ce9d90d7249ff9b8d006cf06b0d4d17cff2e3a9f98a&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240108-20240114)", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247542501&idx=3&sn=d545579a7c31094ce37d7cd5df7bf000&chksm=fa939024cde4193292e882131fa6b28f7d375be866355e706e10736acceef4c3a622c0b7c842&scene=58&subscene=0": "思科又曝高危漏洞，黑客利用可获取 root 权限", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651127391&idx=2&sn=3993191b5ac9da9028f641757bf25bee&chksm=bd144e8c8a63c79aeadf9e898c53abecd36bed19d67a86cbc76e8549671c0a62baa30f545887&scene=58&subscene=0": "CNNVD通报GitLab安全漏洞情况", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500378&idx=1&sn=693abcb97a4f26419a806a6acde76d1a&chksm=fe79e6c2c90e6fd400dbe66c582352ed778297c610ab813e8da020152342974a40e8bb56575d&scene=58&subscene=0": "Google Chrome V8越界访问漏洞(CVE-2024-0519)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500378&idx=2&sn=c1de4bf7ee4b5e028aca97ce5afa3bb0&chksm=fe79e6c2c90e6fd4ec733f500f2ef0157086ca1ae9400540d34f336f48cfbc8f5eb2a527c51b&scene=58&subscene=0": "NetScaler ADC 和 NetScaler Gateway 多个在野漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500378&idx=3&sn=8107c897672c810d8e15a530abae7e28&chksm=fe79e6c2c90e6fd48831b879d1f4047cee23a4a9f041cecf9c62cea185daed1da001dab45c90&scene=58&subscene=0": "Oracle 2024年1月补丁日多产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518689&idx=1&sn=0c28377e9cd188322fb8de2c9b984d4f&chksm=ea94b88bdde3319d66fb2901eac70e83e8071ee933f5b8bdb067917e92e94c9d23efc23f4ea8&scene=58&subscene=0": "Citrix 提醒注意已遭利用的两个 NetScaler 0day 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518689&idx=2&sn=f6a9ea96b68970bcf3bac320b9b70aeb&chksm=ea94b88bdde3319d56d7ec033b60e8a4c709203172307dc7eb3aafefc99a51291f6403a28549&scene=58&subscene=0": "Opera 文件共享特性中存在RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247504448&idx=1&sn=2e787622b30dbc6b56009ea820f9f7c8&chksm=cfcab154f8bd38422577416e12c34733faabc259affa02eaba20c796c1d740987093a9261f51&scene=58&subscene=0": "漏洞公告 | Ivanti VPN远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247501421&idx=1&sn=94df57d1f3a9e59fe5c96338bc3e5e52&chksm=fe26c36cc9514a7a55d07097556ac3108682d7601f14e98f71b847b3aff92b43bfa48164dc8c&scene=58&subscene=0": "CVE-2024-0519：Google Chrome V8越界访问漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521990&idx=1&sn=1bd6f0dfed73ed069ee986d8e92382c5&chksm=ce461dd6f93194c0b383f736e652a52f6abb398ad2295ef5e54b543b7f13ac9f933fcd08618b&scene=58&subscene=0": "【漏洞通告】VMware Aria Automation 访问控制错误漏洞CVE-2023-34063", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247496621&idx=2&sn=065a16a233444256e0d44969744ca292": "CVE-2023-46226 Apache iotdb远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MjgxNjk2NQ==&mid=2247485978&idx=1&sn=7848b370ea79a04ab439ccc88076e454": "叮～你有新的速递！CVE-2024-0305 RCE漏洞（附EXP）", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484513&idx=1&sn=7347c6f5e544e86059272113c40443a5": "【复现】Confluence Data Center & Server 远程代码执行漏洞（CVE-2023-22527）风险通告", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485125&idx=1&sn=c0543de5c0bfc19175d45ca519c77190": "CloudPanel makefile接口存在远程命令执行漏洞CVE-2023-35885 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652052543&idx=1&sn=2b6c3d6ad8e3aea79dfd1ca08d736bcb": "【安全圈】开源TensorFlow机器学习框架存在漏洞，黑客可借此发起供应链攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652052543&idx=3&sn=248cf1a0d5c0ee4c14491f00733fe159": "【安全圈】国家漏洞库CNNVD：关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652052543&idx=2&sn=a148405857433afeaa116eb80ffd4953": "【安全圈】UEFI启动固件曝出大量漏洞，数百万台计算机面临数据泄漏风险", "https://mp.weixin.qq.com/s?__biz=MzkzNzQwNTg3NA==&mid=2247483933&idx=1&sn=5efe694a2e666796055b33ab861d54ea": "因 API 的错误配置导致 PII 泄漏漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247484685&idx=1&sn=fe0b16c77f9ac736c7cf6bca134aadff": "如何拿抓取互联网上的0day???", "https://mp.weixin.qq.com/s?__biz=MzkwNjYzMjc3OQ==&mid=2247483904&idx=1&sn=4294845950b0b7fbda384c679d1698eb": "[1day]泛微系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489102&idx=1&sn=6f4f1799d9d32f7f694e285d8ddc1094": "【二次更新】Atlassian Confluence Data Center and Server存在远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMjg0MjM5OQ==&mid=2247486944&idx=1&sn=62d08cdd25c018c1ce78f643aa62bb0b": "你还不会批量刷漏洞交CNVD？我来教你！", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650586037&idx=4&sn=a37d74510ae8bd4e7ccd78bfd976399f": "统计路由器CVE，便于漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650586037&idx=3&sn=e173323b9b9da130e5ef46989c9afa62": "【Web实战】某头部直辖市攻防演练纪实-如何不用0day打下n个点", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649790291&idx=1&sn=fb67c0a642a483346273e266e4214569": "Mandiant报告：APT黑客利用VMware漏洞作为0day漏洞攻击长达两年", "https://mp.weixin.qq.com/s?__biz=MzUyNjk2MDU4MQ==&mid=2247486045&idx=1&sn=cc49e476f7b66ea1e3d1aa7aa68ed0d5": "GB-T 34946-2017 C#语言源代码漏洞测试规范", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485309&idx=1&sn=2395a9f4984536cc3ae8c34dcf1a83db": "CVE-2024-0738漏洞挖掘过程学习", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247485098&idx=1&sn=4eef9be91214dc52f4619a4324bd2dea": "用友portal接口存在任意文件读取漏洞(新)-漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247611421&idx=1&sn=62a533b125e0fbd0ede8344698d8eef9": "知识星球 | 安在新榜· 2024企业网安CSO发展调查报告；新增资料：数安平台神兽方阵、网安漏洞态势、云计算安全等", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484168&idx=1&sn=f40a5290be430019f2d6df27c7b16b74": "华夏ERP getAllList账号密码泄露-CVE-2024-0490", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650586050&idx=1&sn=9041dc3dd535fc7165eab3b6dec8e09f": "新骗术，警惕！|国家漏洞库CNNVD：关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg4NTczMTMyMQ==&mid=2247483889&idx=1&sn=6ab8a6a0d5c555b49a44e46354cd45e4": "【赏金猎人】利用盲ssrf漏洞扫描内部端口", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247485108&idx=1&sn=392c9e58463fdc2b4e87b9b0f763d797": "CISA发布紧急指令：Ivanti产品零日漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODk2OTcxMw==&mid=2247484605&idx=1&sn=06e70b41bc802dde785d5277adae4c6b": "漏洞复现-cellinx 摄像机 uac.cgi 未授权添加用户漏洞（附exp）", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247605216&idx=1&sn=9e1ed450e6d4ee9ffd5cabe323151bbd": "从webpack开始发现的漏洞大礼包", "https://mp.weixin.qq.com/s?__biz=MzI3MzUwMTQwNg==&mid=2247485847&idx=1&sn=d48e9542bea32076760fed6cf06c3da8": "重生第五篇之弱网环境下业务逻辑漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485287&idx=1&sn=a39cfe9bf0a9507b6684a54f332e14d2": "SpringBlade export-user SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247486717&idx=2&sn=26a6ecc9fd4c4a105f2be467413dc9d8": "漏洞扫描神器AWVS又更新了，全新界面，快来下载体验吧！", "https://mp.weixin.qq.com/s?__biz=Mzk0NDQwMDY1Nw==&mid=2247484141&idx=1&sn=752a7dbde19da790f1f5545d4fa90c14": "Burpsuite 与 Chatgpt 联动，AI自动化漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247485087&idx=1&sn=84b6d67167e8270ffeb1c49dff1f1808": "2024最新AWVS∕Acunetix Premium v24.1.24高级版漏洞扫描器Windows∕Linux下载", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247490436&idx=2&sn=2fe805bb24737b18065072b8317d1a2b": ".NET 分享ViewState反序列化漏洞个人总结", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247490436&idx=2&sn=2fe805bb24737b18065072b8317d1a2b&chksm=fa5ab569cd2d3c7fceb031f1754faa2518a2daa2dcbb66bda953df27662fdbfe15825ea52c71&scene=58&subscene=0": ".NET 分享ViewState反序列化漏洞个人总结", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485359&idx=1&sn=6c7fe6f71dde615a6b624a7b9b19510b": "CVE-2024-21642", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247485161&idx=1&sn=ed4a219ecd6fcb7e5ab4205fbf2bb5e8": "广联达企业管理系统DataFile.aspx存在外部实体注入漏洞(新day)-漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487452&idx=2&sn=48a4c68cd8d3dedb142ba8c9b80f464a": "【漏洞预警】GoAnywhere MFT 存在未授权创建管理员风险CVE-2024-0204", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487452&idx=1&sn=5ef3c649a65b858d1377525049c30f87": "【漏洞预警】Spring Framework拒绝服务漏洞CVE-2024-22233", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493360&idx=1&sn=c92275cf5dfd00d278fd9123ad6b8f6a": "实战 | 记一次授权令牌中SQL注入漏洞挖掘​", "https://mp.weixin.qq.com/s?__biz=MzkyNTU3MjA3OQ==&mid=2247484545&idx=1&sn=27464473d82a213d8a11d46812ba2013": "【漏洞复现】Confluence 远程代码执行漏洞(CVE-2023-22527)", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247487883&idx=1&sn=8a007a74708c4c43a9474b1bdde9de2e": "SRC实战 | 任意用户相关漏洞的多个姿势实战", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485172&idx=1&sn=72323ab469c0af887665b042b33b29cf": "Atlassian Confluence存在远程代码执行漏洞（CVE-2023-22527） 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485629&idx=1&sn=96f6651226feb0a1e9c824d90a09b16f": "资产梳理漏洞检测工具 - SiftScan", "https://mp.weixin.qq.com/s?__biz=MzkzMDE5OTQyNQ==&mid=2247484551&idx=1&sn=b87dcec48b8614d74d77e1fdb3b97b8e": "赏金猎人|兜兜转转拿下平台充值漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650274947&idx=1&sn=924465610d5aab79b1ed8c046371cf93": "荣耀加冕丨盛邦安全连续三年入选工信部CAPPVD漏洞库技术支撑单位", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518729&idx=1&sn=022dec20b1d19ed71466fd78c5c9b7c1": "苹果修复2024年遭利用的第1个0day漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MDI0OTQwNw==&mid=2247484370&idx=1&sn=733e31295113c89afa9fe3d2de3574e5": "每日奇葩逻辑漏洞分享之虚假的验证码", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664203823&idx=8&sn=7e6e0a6251080fdf29c2db676a91f28d": "关注｜第四期移动互联网APP产品安全漏洞技术沙龙在京成功举办", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458537232&idx=3&sn=f3969f9938f4d236fd9dd63d22a403e1": "本周更新：命令∕代码执行（一）原理和基础知识 | CTF训练营之Web篇", "https://mp.weixin.qq.com/s?__biz=MzkwNjYzMjc3OQ==&mid=2247483914&idx=1&sn=807ae0fad2a5ddd66aa90e165a8118f8": "[1day]用友NC某接口存在任意文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247509370&idx=1&sn=b11aeebf5de3949a3210c64063d1c1c2": "揭秘LIVE勒索软件利用IP-Guard漏洞的技战术", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500401&idx=1&sn=a4388df0dde63a24c730be991c3f462c": "Apple WebKit 代码执行漏洞(CVE-2024-23222)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500401&idx=1&sn=a4388df0dde63a24c730be991c3f462c&chksm=fe79e6e9c90e6fff6b7deb795048d61c2eea9ed417a1fbde63ec3bc56763c6eb3ac5ea599849&scene=58&subscene=0": "Apple WebKit 代码执行漏洞(CVE-2024-23222)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247504566&idx=1&sn=b4cffae1d9549f2b6ce8f17e1f310455&chksm=cfcab1a2f8bd38b453dc998e758aac94c128b996be361c68966578e081b72bb5bb89bd9983ef&scene=58&subscene=0": "漏洞通告|亿赛通 新一代电子文档安全管理系统 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664203823&idx=8&sn=7e6e0a6251080fdf29c2db676a91f28d&chksm=8b5984d6bc2e0dc0a395009a725a38d4ef64178b91fc625dd48e9ae9e3070f27d0a49c7fe4e9&scene=58&subscene=0": "关注｜第四期移动互联网APP产品安全漏洞技术沙龙在京成功举办", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518729&idx=1&sn=022dec20b1d19ed71466fd78c5c9b7c1&chksm=ea94bb63dde33275e80731ce7aa70dbb77566e3599abe9f927ae24a32dc66aff5a1acd09f3d5&scene=58&subscene=0": "苹果修复2024年遭利用的第1个0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493360&idx=1&sn=c92275cf5dfd00d278fd9123ad6b8f6a&chksm=e8a5ec93dfd26585d38de15f747aa97224e16c11aaa5e6a6c4b97ba7128ad6445d93ece99ba7&scene=58&subscene=0": "实战 | 记一次授权令牌中SQL注入漏洞挖掘​", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485388&idx=1&sn=e2e4ba98d73eaa8d9c490b6b40146600": "CVE-2024-0713", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247485167&idx=1&sn=5f820a812808d46d5d82adc429e327a3": "金和OA-C6JHSoft-WebSQL延时注入漏洞(新接口)-漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487460&idx=2&sn=c02c722bc18d588bd4fb38d1cc5e6229": "【漏洞预警】亿赛通电子文档安全管理系统 文件上传&命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487460&idx=1&sn=11a2f911329871ccc77c39944f39688f": "【漏洞预警】SOFARPC反序列化漏洞CVE-2024-23636", "https://mp.weixin.qq.com/s?__biz=MzIyMjkzMzY4Ng==&mid=2247503305&idx=1&sn=6f84a68af7139a90fa9bd6a0d5a7fe70": "landNFT - Mint权限控制错误漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247535821&idx=1&sn=19db585a619f261069956ba1ee17558d": "JAVA常用组件未授权漏洞解析", "https://mp.weixin.qq.com/s?__biz=Mzk0MzQzNzMxOA==&mid=2247485963&idx=1&sn=280ce428fca96dd216e3ca60abb0f0d8": "爆多个漏洞 | Pwn2Own Automotive 2024 第一天结果", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484191&idx=1&sn=0b87288a6c011f7728235bb7de0c5cf0": "Monitorr 任意文件上传-CVE-2024-0713", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247606564&idx=4&sn=ea07b1244f523036c551194030b8411b": "奇安信应急响应报告：漏洞利用持续上升，主动威胁发现能力亟待加强", "https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657165325&idx=1&sn=702348e7a7014ec9780644d1c35dfefa": "记一次敏感信息泄露引发的逻辑漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657165325&idx=1&sn=702348e7a7014ec9780644d1c35dfefa&chksm=f1d4d2e8c6a35bfe405bb21a5fa2f2b0322e86479f65db11864f88612d17d59a739afa71808d&scene=58&subscene=0": "记一次敏感信息泄露引发的逻辑漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518740&idx=1&sn=f97575a3c85c3e1d61c6ede1e31c0f1d&chksm=ea94bb7edde33268c42b5b9a74eb3ee30ceb5c34a906ff95500378175e985f1b8e0554fbcf3d&scene=58&subscene=0": "速修复！Fortra GoAnywhere MFT 中存在严重的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247490470&idx=1&sn=a38fa2af969ac8dbd8d2d357794fc70b&chksm=fa5ab54bcd2d3c5dcac1f3af6b00d7b0c14db6c545d8a44aeeb72c13341330e440a41d068e84&scene=58&subscene=0": ".NET 分享一款用于命令执行的免杀WebShell", "https://mp.weixin.qq.com/s?__biz=Mzg4NTY0MDg1Mg==&mid=2247485230&idx=1&sn=03b8d0163327afd00b879fc7b89daec9&chksm=cfa49cd5f8d315c3cac20e198f8bdb4f93ce737c411c8104fb2b1e7c75cff57646a8da13b934&scene=58&subscene=0": "人工智能供应链安全专题--ChatGPT 中的高级 API 攻击以及AI供应链漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522014&idx=1&sn=0472b9c3e9ff67022262a656ff84fbde&chksm=ce461dcef93194d8f2b2adf5f0c0713e5c9f997ca689ba93fe1075205674e240ee71d85f5fa7&scene=58&subscene=0": "【漏洞通告】GoAnywhere MFT身份认证绕过漏洞CVE-2024-0204", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493375&idx=1&sn=3a85017cca3186595b241a31c6e32cf3&chksm=e8a5ec9cdfd2658a2f5b34e514f2187b54879c86384c11abc5c0eb4387073514119ea2c70684&scene=58&subscene=0": "实战|记录对某网站漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500406&idx=1&sn=e8afb8d60ccf2620798bbb5c0a68e6fc&chksm=fe79e6eec90e6ff8bc4af9b4da1bd592dc2d67675f08af73fcd880cb14ece31efd86c35d6ded&scene=58&subscene=0": "GoAnywhere MFT 身份认证绕过漏洞(CVE-2024-0204)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247501797&idx=1&sn=dde0b853c4020d5c55e9d341e6ae332a&chksm=fe26c2e4c9514bf2d9336c733f3129d875ede4e17197fc69278386d13e069e12d312c6eb9237&scene=58&subscene=0": "CVE-2024-0204：GoAnywhere MFT 身份认证绕过漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247493107&idx=1&sn=ebd4144a1a8adea3d08a23a62855025c&chksm=fa78e4bfcd0f6da9d8aa4733894105f12a7caae167574ee1e8667b621e8092be5b53ac3272fa&scene=58&subscene=0": "OPPO正式入驻YES WE HACK漏洞平台", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493382&idx=1&sn=025e6263ffc42bae045be0ed2d37b0f5&chksm=e8a5ed65dfd264739c27260e7f00917910e3cb01fbbf5ff05b87cb335b2978e704afc8ec205f&scene=58&subscene=0": "漏洞挖掘|一次某站点的任意用户密码更改漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247504598&idx=1&sn=fcd3afb47246b1127bb6a7958ad1b98b&chksm=cfcab1c2f8bd38d401712af3a38052994f43758e07a9afa73a296ddcd0666101fd35f5073750&scene=58&subscene=0": "漏洞通告 | Jenkins CLI 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486310&idx=1&sn=a479b9e123d0563c1f280119fb731b2d&chksm=ec6fec66db186570216c5a985ced2ca5becdbfd820a74348c29f832d8c968735f0ee9de370b5&scene=58&subscene=0": "【风险通告】Jenkins CLI 任意文件读取漏洞（CVE-2024-23897）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518760&idx=2&sn=d82d599134c7b2a410f4ccfe05d73d96&chksm=ea94bb42dde33254d6f854bc5b194c69fc4038bdbac099637195d80d4e0b19bd6ede6758ace6&scene=58&subscene=0": "思科提醒注意通信软件中的严重 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500417&idx=1&sn=44bcfd615029cc3d14562f02341f2908&chksm=fe79e619c90e6f0f609c74642a33101eb4177e77f2e0a49b876c133512a437b1bf1e35d5f355&scene=58&subscene=0": "【已复现】Jenkins任意文件读取漏洞(CVE-2024-23897)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652053020&idx=4&sn=21d6238df39ed9cd318723d4cf685a2d&chksm=f36e325cc419bb4ad2a1b1108b7d53e41ce752743dfb172657e104eea3263816ff3bb8e2a6a6&scene=58&subscene=0": "【安全圈】利用特斯拉、电动汽车充电器、信息娱乐漏洞，黑客从中获利130万美金", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488560&idx=1&sn=a62d63df093f1476423b6d012d742db2&chksm=fb029968cc75107ef3b765039cb6eaf1495b3f0d6b1ffdb2a304df3fbaafae4b83d69c3cfd34&scene=58&subscene=0": "【已复现】Jenkins 任意文件读取漏洞（CVE-2024-23897）", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488560&idx=2&sn=6a44ff8ddb477a021b2d3517771bdd25&chksm=fb029968cc75107e248fc49bf24781126e17d974d16970bce6675576c0bf00019e82456ccfab&scene=58&subscene=0": "【原创0day】用友YonBIP ServiceDispatcher远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247498655&idx=1&sn=2d8466decdde612d4588efc1fe004649&chksm=cfc55cc0f8b2d5d644e01132d993deafda46bc085854728343d7bc4a048cf89963e316529eed&scene=58&subscene=0": "平台放假公告|360漏洞云祝大家龙行龘龘，前程朤朤！", "https://mp.weixin.qq.com/s?__biz=MzI2NzI2OTExNA==&mid=2247516377&idx=1&sn=982fc4b418975b1f7889feb2a200b530&chksm=ea83a64cddf42f5a99194ca5e849d05f1cf9cca3746dde2f607197c3f8bedbde3bc6048cbfc5&scene=58&subscene=0": "小米入选2023年移动互联网APP产品安全漏洞治理十大优秀案例", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522025&idx=1&sn=4d3403f704dc5fec1b6e58ff41e425f5&chksm=ce461df9f93194ef46c0cd8afd244b6551f8ccd79057e2677c4b755b84d7b60d3051dd7d44c0&scene=58&subscene=0": "【漏洞通告】用友YonBIP ServiceDispatcher远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247496680&idx=2&sn=fb1a6b611bd304f74d90b859773b84ed": "【1day】EduSoho配置文件泄露，获取数据库账号密码", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247484303&idx=1&sn=22eaa2d3cc532167fbd816a81407217b": "分享挖洞中遇到有趣的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652053041&idx=3&sn=3112678f6a550ee6bba7457a1c591ef4": "【安全圈】因报告漏洞，一德国程序员被判“黑客罪行”罚款 3000 欧元", "https://mp.weixin.qq.com/s?__biz=MzI3NzcxMDQwMg==&mid=2247486996&idx=1&sn=fc3fc8130cd27eb368cdf5118ebd3a1f": "记某项目漏洞挖掘之任意用户登录", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650586450&idx=4&sn=2117b291c50a6ecee04adcb1820d01e1": "CVS v1.1.3！万象通用漏洞扫描器", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247601425&idx=3&sn=18f161e40f3aa1a8a43ec8b4bf78f66e": "对民用飞行控制系统固件的逆向与漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247601425&idx=1&sn=75fa4c1bbb48eaf5666ccd22a6e7ba96": "基于模拟仿真的蓝牙协议栈漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247484778&idx=1&sn=2aca042a6f0654a76d6dbac74a8475e4": "万户OA text2Html 任意文件读取【漏洞复现】", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522036&idx=1&sn=8eb9708fb1c200d0d1c7de2a69798634": "【漏洞通告】Jenkins任意文件读取漏洞CVE-2024-23897", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247489436&idx=1&sn=4af6fb8e482bdcedb8ac5ca41951c35e": "SRC实战 | 任意用户相关漏洞的多个姿势实战", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651256805&idx=1&sn=d9c38661a372e9e28d705bfaba85e256": "苹果、VMware、Apache等科技巨头漏洞被大量应用", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247486161&idx=1&sn=5966988bc1239cf842e782b9554e8269": "afrog！快速稳定的漏洞扫描器", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247512637&idx=1&sn=6c487caf474f67097fbfb043ac45ce36": "【已复现】Jenkins 任意文件读取漏洞（CVE-2024-23897）附POC下载", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487611&idx=3&sn=3316f1c27c7ac1133bf94e9791a5b64b": "漏洞预警 | Apache Airflow pickle反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487611&idx=2&sn=af0df8083abc0e417b071175a0fa4ce6": "漏洞预警 | Jenkins任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487611&idx=1&sn=130fa1c69bb30791c53c15abeb4a65d5": "漏洞预警 | 万户ezOFFICE任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NDUxMjAzNw==&mid=2247485675&idx=1&sn=623cc19ff3de50c44486903726e28342": "【漏洞复现】CVE-2024-23897 Jenkins 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650940982&idx=1&sn=bbd999be38ce638c3f3254b344f68bb1": "HVV 溯源实例-从OA到某信源RCE全0day渗透", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458537518&idx=3&sn=d2f22ad186ab59c3d61d767901891dd5&chksm=b18d7ea486faf7b2272baba991754aa2012ec8da745b68668194cf177e6ccce5140326d356b3&scene=58&subscene=0": "3月1日开班！系统0day安全-二进制漏洞攻防（第3期）", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493401&idx=1&sn=71957a006a657b5085e465b12d840a66&chksm=e8a5ed7adfd2646c007aca3bbff473ca886ba3fa69d4d9f7b83b95035d70d88bf356e70daab1&scene=58&subscene=0": "赏金猎人|兜兜转转拿下平台充值漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500507&idx=1&sn=00c90111e269c3def86513ff650f38b6&chksm=fe79e643c90e6f55c62bda76d918db3b02f48a9a297a4d933b82e1d7f50e5b54bb995fe67c3b&scene=58&subscene=0": "runc容器逃逸漏洞(CVE-2024-21626)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518800&idx=1&sn=56582bbad34a3a622a7545dbcb33703a&chksm=ea94bb3adde3322cfc0b70bd4e12c7b4ac645128010b8eb2acac4868ef2ea5ba3081b1d09f48&scene=58&subscene=0": "RunC 多个漏洞使攻击者获得主机权限，可实现容器逃逸", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518800&idx=2&sn=81cdaabe53353075dd5badd918a3e0cd&chksm=ea94bb3adde3322ca6046c2aa9cb37dedf686efcdd6be90bd63248f23ad20dcc4015a3007149&scene=58&subscene=0": "Ivanti 披露两个新0day，其中一个已遭利用", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247502110&idx=1&sn=d29f11d8ccb155ae820e7e5e45a0f5f7&chksm=fe26cc1fc9514509343ec0c55bca3cc404398bbe24f972e3186af69412e60480fcd515f4d1fa&scene=58&subscene=0": "CVE-2024-21626：runc容器逃逸漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522072&idx=1&sn=7fb694255868126bb3386f3d2b8c3d64&chksm=ce461c08f931951e90f66b708b87243c19894d8da65ea7e7d995be3ce49f3f693f277e61ec06&scene=58&subscene=0": "【漏洞通告】Glibc syslog堆溢出漏洞CVE-2023-6246", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485486&idx=1&sn=c3e808e0385599d39fd63cd459235e12": "CVE-2024-1061", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247485350&idx=1&sn=c120891a7bf01ca282dd6258a00d7ca2": "某互联网厂商 Apisix绕阿里WAF拿下Rce-漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493433&idx=1&sn=b10945d391be217683a2fd40a3714fac": "赏金猎人|利用nday快速刷分挖洞篇", "https://mp.weixin.qq.com/s?__biz=Mzg3ODk2OTcxMw==&mid=2247484784&idx=1&sn=8053e24a0ea9a0bee08eee61d33ca9ef": "漏洞复现-亿赛通电子文档安全管理系统 uploadfiletocatalog sql注入(附poc)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652053544&idx=1&sn=4e8d9b14ca7a60e206f8517c2607b93c": "【安全圈】谷歌 Bazel 面临命令注入漏洞威胁", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652053544&idx=3&sn=2eca890ca3b32466b244b6697ab35b44": "【安全圈】黑客揭露空客EFB应用漏洞，飞行数据面临风险", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650586915&idx=3&sn=24796ca53e2ad88ca3b93de375d0a7d4": "某国产中间件文件上传漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650611633&idx=1&sn=ed8f116fe5726768f68532147da3c85f": "利用VPN设备漏洞入侵！新型勒索软件CACTUS攻击手法分析", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247486200&idx=1&sn=eab7bd8db934e481e85ac5700b6191d0": "弱口令爆破工具 -- weakpass_exploit", "https://mp.weixin.qq.com/s?__biz=MzkxNDU2ODc0Nw==&mid=2247484012&idx=1&sn=34d21e97a318bce49b3c9381dcbdb25b": "万户 ezoffice wf_printnum.jsp SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODQ0MDc2Mg==&mid=2247484797&idx=1&sn=d85fbf2503c89a7cd5f20061459f4a9e": "JAVA代码审计-任意文件上传漏洞(配套视频)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247484886&idx=4&sn=5504d805028add11c786dc51dcbf35ff": "CVE-2024-0402｜GitLab文件写入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247484886&idx=3&sn=ad64a62b3a688549829a9d71824f95b9": "CVE-2024-21893｜Ivanti Connect Secure服务器端请求伪造(SSRF)漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247484886&idx=1&sn=f1aa4342d9d0934c02214b9d018fd0c6": "CVE-2024-21626｜runc容器逃逸漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247484886&idx=2&sn=35809354aeea3d950a85758daf0b157a": "CVE-2024-24747｜MinIO权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247605777&idx=1&sn=5a6aa5480c8e15d80b0c7479690f6787": "详细剖析某erp漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MTc1MjY5OQ==&mid=2247485094&idx=1&sn=73719f2fb82ba3c1ed4af1151bce559d": "Shiro反序列化漏洞复现（文末领红包封面）", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485497&idx=1&sn=dcff72e74223345811a8136ee1e65ff0": "达梦启智⼤数据可视化系统（DMQZDV体验版）存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493433&idx=1&sn=b10945d391be217683a2fd40a3714fac&chksm=e8a5ed5adfd2644cae7134dd661d69a135fffa163aedf0f84b262c04b79f14355a57fb28d2b3&scene=58&subscene=0": "赏金猎人|利用nday快速刷分挖洞篇", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518821&idx=1&sn=8a1a67b87d1bbad6e1c80390fe7c1c61&chksm=ea94bb0fdde33219950ecb20753f8d0ab99b42fbe0e84141e12196184450ccbc041a602bc10b&scene=58&subscene=0": "谷歌修复代码测试工具Bazel 中的严重供应链漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518821&idx=2&sn=ab7b468c60d1a402498cb060f98514fd&chksm=ea94bb0fdde3321961dc3363a64d3659f5e38e1bc56bf5a4d3537def5da2508c1d31b49fb5f8&scene=58&subscene=0": "Mastodon 漏洞可导致攻击者接管任意账号", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458540955&idx=3&sn=98a9d53c173f2ebfbd7a4fc3151ecbd5&chksm=b18d6b1186fae207d5afc82119ae67f5c499eba97dee235ba9a19264202f4fde50be7d0e4227&scene=58&subscene=0": "实战CVE漏洞分析与防范（第一季）", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247496094&idx=1&sn=aba1e72c0a1c447ceea898625120f283&chksm=fd790d18ca0e840e57998c4be4c64b5825adf224f2300de44613ea887f28ff01042614a68f26&scene=58&subscene=0": "安全验证 | Runc CVE-2024-21626 容器逃逸漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247573489&idx=1&sn=049a763d7f007d5fedb7481c3f946734&chksm=e9140fcbde6386ddbb9937989840391de4ddd719227c7786d1d1692cc7d83d0e92fa70d148b8&scene=58&subscene=0": "黑客利用易受RCE攻击的Apache RocketMQ服务器", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247542872&idx=5&sn=87ea4cf94229feb92635f96ffc415ab7&chksm=fa939e99cde4178fefdb91452675d19cf9efbcdc4a19c6e35b5eaf3f4e2b041e2546f3ee49ad&scene=58&subscene=0": "影响多个OEM的Android本地漏洞公布", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500524&idx=1&sn=39590d2a0b902c52a6fdc98a3d1f04cb&chksm=fe79e674c90e6f6206e45c5bb00a8714ede95f2831a0561872180e04d1450cbb371c7649a221&scene=58&subscene=0": "【已复现】Oracle WebLogic Server JNDI注入漏洞(CVE-2024-20931)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786179&idx=1&sn=97b8f894d27c670a28cb59ba225c6208&chksm=8893b72cbfe43e3a73a3f27dbfdacbf66b55e6d8a34befe5f29b09977c774fea4e825fb9cb86&scene=58&subscene=0": "安全研究员发现漏洞群，允许黑客逃离 Docker 和 runc 容器", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498947&idx=1&sn=cd9614b87b41df912c2b15fcb84bc20c&chksm=973acfa1a04d46b7e3983545e8dc35e54c2166b8834c149310d5e63fba0b008758085a1ac473&scene=58&subscene=0": "CNVD漏洞周报2024年第5期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498947&idx=2&sn=7c321485dea70784264aee91f2c87fd9&chksm=973acfa1a04d46b7fa355e7f8fca4885359295dedc5e9444692c927122627fbac4676aee3d9e&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240129-20240204)", "https://mp.weixin.qq.com/s?__biz=MzkyMzE5ODExNQ==&mid=2247486872&idx=1&sn=ca795893e92554a7fe304a90b8875b6d&chksm=c1e9fa54f69e7342818dc7d72daa71cddba3beb055187079a0390c1101438901b961d2760c1c&scene=58&subscene=0": "2023 年 GreyNoise 在野大规模漏洞利用报告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458542028&idx=2&sn=90b393bbac990d249539718e0da982bb&chksm=b18d6f4686fae650259be58a57d384e02ba465efd924a4f6e8c8e5ff85fd8c0bb03f0fd72d5a&scene=58&subscene=0": "察天下之“大患”，而救之以方 | 2023年华为关注的10个最具“格调”的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247573557&idx=1&sn=f1d03444449cb04402a598f683b4dc99&chksm=e914700fde63f91995436350b45e3112028a3bd6fbc0c1f4535841a23c232fdcf0800f769e76&scene=58&subscene=0": "最新的 Ivanti SSRF 零日漏洞遭到大规模利用", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493496&idx=1&sn=825d358940d4969aef68323e2dfcddd9&chksm=e8a5ed1bdfd2640d98cb652147abd2f63a88e1b196d920666307a6e8a0361f78b7f7f3709d46&scene=58&subscene=0": "实战之常规漏洞快速挖掘", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247542932&idx=1&sn=557fa2997c1992306ee492755f0af0e1&chksm=fa939e55cde41743c9cdcf009379a585b28ff0bee80b4032721992dfd11de219e648a0c62046&scene=58&subscene=0": "最新的 Ivanti SSRF 零日漏洞正在被大规模利用", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485531&idx=1&sn=14024bdf1137cbf67189338b1c81b116": "CVE-2024-1253", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247484958&idx=1&sn=f6b785e72f0a05519726b2fe1cc3bfa4": "2024年最新重磅漏洞，Windows通杀漏洞！！！！！", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247499378&idx=1&sn=377cd6b408fda9eb3256e27ba0425546": "一个不是漏洞但又发不了的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652053917&idx=3&sn=6243d69b0d3eb929183137feff793b8b": "【安全圈】Shim发布安全补丁，以解决六个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652053917&idx=4&sn=83f2f5c98841bf30c9afcf72d91c7d29": "【安全圈】已修复！佳能的最新软件更新能修复部分机型的七个严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247485009&idx=1&sn=9118f87d6181dda43dd460154ae8bf89": "Apktool任意文件写入漏洞分析 CVE-2024-21633", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247484559&idx=1&sn=aff84d90c441906bac2ebc4d2554e91f": "runc 工作目录突破 (CVE-2024-21626)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651258683&idx=2&sn=2da5b21a7af6a12fb83d2762d8798d47": "察天下之“大患”，而救之以方 | 2023年华为关注的10个最具“格调”的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247512212&idx=1&sn=7624875ea345fa3b43e6e737c2a0f726": "Spring综合漏洞的利用工具 -- SpringExploitGUI（2月6日更新）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458542078&idx=2&sn=22aca750989aae8fbb450c1e1766314a&chksm=b18d6f7486fae66295e12b94038872a1bf2bf01daefd7bcbcd8d908724482e46cc23b554d1da&scene=58&subscene=0": "CVE-2022-0847 dirtypipe漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485532&idx=1&sn=aae7110c53c73503b7aa1671f669b9ff": "[漏洞复现]CVE-2023-22527", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649790421&idx=1&sn=2facd150e2426e3d1fef4c0e52e86e8b": "研究人员称攻击者正在大规模利用新的Ivanti VPN漏洞，Fortinet警告APT 组织在攻击中利用FortiOS漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650942488&idx=1&sn=2949b7460e36e1cfd91f51110c7ae8b3": "渗透测试突破口之常见打点及漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652104768&idx=2&sn=51454074bd878799705659f972e4c7bf": "空客应用程序漏洞引入飞机安全风险", "https://mp.weixin.qq.com/s?__biz=Mzg4MDkyMTE4OQ==&mid=2247484019&idx=1&sn=a64ad748d6a310afd60cf8d331d15a36": "漏洞挖掘JS逆向-Burp自动化加密", "https://mp.weixin.qq.com/s?__biz=MzU1NDg4MjY1Mg==&mid=2247487040&idx=1&sn=6be5a0e1500a2608b60081e8b79abf64": "Sploitus|Exploit 在线漏洞搜索引擎", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247602867&idx=1&sn=6e00c324ecbff1f731e195c6f50bef27": "逆向分析在漏洞挖掘中的应用", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247536520&idx=1&sn=aa289d05c1b2dc2acdde35c494c8adf2": "HTTP请求走私漏洞浅析", "https://mp.weixin.qq.com/s?__biz=MzkyMjYxMDM4MA==&mid=2247483998&idx=1&sn=e9bb0f7ddb39574a6248d80dc6662833": "【漏洞复现】用友NC-Cloud系统uploadChunk存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651258708&idx=2&sn=bbc4b2ff56d91b593b565b74d91af4db": "黑客揭露空客EFB应用漏洞，飞行数据面临风险", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493540&idx=1&sn=32900757e933887812b204940f8f3950": "实战|记录对某网站漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247503957&idx=2&sn=cc83414b41efaa566e4c8e5777060cc1": "谷歌浏览器零日PoC代码CVE-2022-4262发布", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247503957&idx=1&sn=b66468ecc50e935193cf203223055c01": "天府杯 2023”Chrome WebAudio 错误条目中的释放后使用漏洞 （CVE-2023-5996 [1497859]）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458542082&idx=1&sn=879f885047e0b5029bd717fc427b1096": "CVE-2023-38902的详细研究", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485533&idx=1&sn=9ee841997275feda8eeef6660d045de3": "CVE-2023-4450", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247606076&idx=1&sn=e52f55e241ffcbe60224d7ff7472c073": "记一次逻辑漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247536521&idx=1&sn=68aa0974d065f1168de981c77b2e602f": "漏洞挖掘 | 编辑器漏洞之kindeditor", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650587328&idx=3&sn=0d6066892228256b962928b34a836899": "某cms模板渲染导致rce漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247521215&idx=1&sn=2f44540c78c4118769d1ba9c73085b6e": "利用Android WebView漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458542082&idx=1&sn=879f885047e0b5029bd717fc427b1096&chksm=b18d508886fad99e971cdaf547f0b06ad6ceaa70657d0bdb7b9f8954234fe2752bf9a4d0fb58&scene=58&subscene=0": "CVE-2023-38902的详细研究", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493540&idx=1&sn=32900757e933887812b204940f8f3950&chksm=e8a5edc7dfd264d167524fcc2bac58183f2e58ca1528836311dbbc9940c5e759fe0ecc38f18c&scene=58&subscene=0": "实战|记录对某网站漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458542083&idx=1&sn=058feb17f5f0971243fd622d348a85af&chksm=b18d508986fad99f8d89d117b092c869536f30bbd6506e447e03ef0c2da8509597ef81fa0e3d&scene=58&subscene=0": "V8 hole 类型漏洞利用总结", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500531&idx=1&sn=2add6d24dc79496f1c84c78984ea02f0&chksm=fe79e66bc90e6f7d7e02e1d3d9e0d945e9378c7bd4d2d72a2113d0ab455756831ca265883f70&scene=58&subscene=0": "微软2024年2月补丁日多个产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247494035&idx=1&sn=2450eafd59dadb3642c781cd16107934": "为什么正确的指标对于漏洞管理很重要", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493550&idx=1&sn=77b2f0df2e969f564a941aa2440aab07": "第80篇：Weblogic上传漏洞在不知绝对路径情况下拿shell方法", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649790458&idx=1&sn=fe25df201817e43e412e65727f4d371a": "微软捕获APT组织使用大语言模型（LLM）进行漏洞研究和恶意软件脚本编写的证据", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247502642&idx=1&sn=cfad6570d00c21e8a4de1be6815975b2": "【漏洞预警】 Nginx 0day 漏洞来袭", "https://mp.weixin.qq.com/s?__biz=MzUxMzQ2NTM2Nw==&mid=2247492294&idx=1&sn=c0274415571d8792a11d752d1a1527a8": "记一次有趣的逻辑漏洞挖洞经历", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247503997&idx=1&sn=16b2112942b37aa7a46aa046628bac34": "CVE-2024-21412 APT(Water Hydra)-0 Day 攻击链分析", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247536523&idx=1&sn=31452faca3eafd1a04ca8f8a6dd29cce": "漏洞原理 | CORS跨域学习篇", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247490722&idx=2&sn=c9807daa5548e139a0c67303cb26882a": "精华回顾 | 剖析.NET Remoting远程处理反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247490722&idx=2&sn=c9807daa5548e139a0c67303cb26882a&chksm=fa5ab24fcd2d3b59a85be03e69c655ffd644e8458bc2ec3f572da4b40b43e5003fda756f35b4&scene=58&subscene=0": "精华回顾 | 剖析.NET Remoting远程处理反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493550&idx=1&sn=77b2f0df2e969f564a941aa2440aab07&chksm=e8a5edcddfd264db511a45020cae1e1459ff1ce199d61fdd149f8fb3faa039245f94ad493c2b&scene=58&subscene=0": "第80篇：Weblogic上传漏洞在不知绝对路径情况下拿shell方法", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650942860&idx=1&sn=e751f6cc518cec07e8403dee730698b0": "15000+POC漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487556&idx=4&sn=df130bc8de4bcd98f11facd13a8933c6": "【漏洞预警】Envoy PROXY协议身份验证绕过漏洞CVE-2024-23324", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487556&idx=3&sn=4d029e0d552896516c5de47d041fbea0": "【漏洞预警】Solr ∕admin∕info∕properties敏感信息泄漏漏洞CVE-2023-50291", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487556&idx=2&sn=d87e8edf67feeafc863d023ba733977b": "【漏洞预警】Solr ConfigSet远程代码执行漏洞CVE-2023-50386", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487556&idx=1&sn=d5c9cf1ca1b3c84cbdc2274a244ad45a": "【漏洞预警】Oracle WebLogic Server 存在JNDI注入漏洞CVE-2024-20931", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485229&idx=1&sn=25b32c046e96773293be14528f1f60df": "金盘移动图书馆系统存在任意文件上传漏洞 附POC软件", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458542085&idx=2&sn=92c9414fbd2b0e92d803ab949756bf29": "都4202年了，还有人没报名《系统0day安全-Windows平台漏洞挖掘（第2期）》吗？", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247487355&idx=2&sn=278e7a8d4a3acc7a3632d2b85741d2d1": "微信0day漏洞？恶意代码成功执行！附恶意代码构造", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247487355&idx=1&sn=984725ab5da3b33fe97d02931f7ece03": "接近真实世界的web漏洞靶场", "https://mp.weixin.qq.com/s?__biz=Mzg3NzIxMDYxMw==&mid=2247499505&idx=1&sn=aadf0de760a40e369c01b14e3fa45725": "弱网环境下业务逻辑漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzkyNDI2NjQzNg==&mid=2247490581&idx=1&sn=5b95bb723c2e94c4f24a60db8c111eb7": "教育edusrc-证书站挖掘-逻辑漏洞篇", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458542085&idx=2&sn=92c9414fbd2b0e92d803ab949756bf29&chksm=b18d508f86fad9990fbf039bb2d19c2bab853fdf0124dc4fa9e5ab371bf834e6fdd174f54664&scene=58&subscene=0": "都4202年了，还有人没报名《系统0day安全-Windows平台漏洞挖掘（第2期）》吗？", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485242&idx=1&sn=4144bba6c8f989ea3f2b3da8a29f0ea4": "Panalog大数据日志审计系统libres_syn_delete.php存在命令执行漏洞 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzkyMDUzMzY1MA==&mid=2247497778&idx=1&sn=07e11ff7b94de691c4361d80e0fff267": "关于网传宝塔漏洞说明", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493570&idx=1&sn=27c75a225a6b78e63274bf8c60c6698d": "API漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484235&idx=1&sn=73d42ab50caab37325d9ee908bce1a44": "smart管理平台多版本任意文件上传-CVE-2024-0939", "https://mp.weixin.qq.com/s?__biz=Mzk0OTM5MTk0OA==&mid=2247495699&idx=1&sn=327a32f9d0c675a56d796aa02bfb0cbc": "宝塔WAF 0day漏洞，可直接获取Root权限", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247512253&idx=1&sn=725756c522875920a53d40ad3a858a05": "漏洞扫描的工具 -- Golden-hooped Rod（2月15日更新）", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247497949&idx=1&sn=dd9856b9e5125f92ec9a3281b0f5fcc5": "【漏洞速递】宝塔最新未授权访问漏洞及sql注入", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247487910&idx=1&sn=2503efcd7b992f738d2a8b15ec9fa591": "宝塔最新未授权访问漏洞及SQL注入", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247484945&idx=1&sn=6f95a3baaed2ca66205fb0d38369b312": "实战案例：记一次利用SpringBoot相关RCE漏洞拿下某数字化平台系统", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247552164&idx=2&sn=140c01ad19fa1557e1ac7f850eeb6e3c": "万象漏洞扫描器", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485534&idx=1&sn=61ba5c6d95066c0e162b609db6fa1cfa": "CVE-2024-0918", "https://mp.weixin.qq.com/s?__biz=MzkwNjYzMjc3OQ==&mid=2247483972&idx=1&sn=a921d160e9ed94696ff21ca8fd15c987": "SPONIP广播系统某接口存在任意文件下载漏洞【源码公布在圈内】", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247486242&idx=1&sn=a5bd394d1d164396af0926a0e308c6f8": "Sirius：一款功能强大的通用漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493570&idx=1&sn=27c75a225a6b78e63274bf8c60c6698d&chksm=e8a5eda1dfd264b71163136c96cbdcfd8ed97d1d5b471f86149806c05811ce282b197b035df4&scene=58&subscene=0": "API漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI2NTc1ODY0Mw==&mid=2247485819&idx=1&sn=cbdfdf45bf5f16a0430cf6af7c867be3": "java代码审计之SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652104887&idx=2&sn=7536e3a2c459504196bbbbb44cf4cb84": "Android、佳能漏洞已修复，Fortinet警告零日漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTczMTMyMQ==&mid=2247484152&idx=1&sn=159ab69049a0237509f17c930b0d632a": "【赏金猎人】折扣政策绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247514821&idx=1&sn=3e9ca669101a09eb3caa4f264173eef9": "一款Jenkins的综合漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493575&idx=1&sn=ac7a051872adc5ed2be117565615a291": "漏洞挖掘|日常挖洞之渗透失败经历", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247485473&idx=1&sn=5a49234687dd0d4c9728762e144c5cd9": "Panalog日志代码审计（0Day）", "https://mp.weixin.qq.com/s?__biz=Mzg3ODk2OTcxMw==&mid=2247484803&idx=1&sn=63dbf845dd0b7f9dc58ee5d919a73381": "漏洞复现-WordPress HTML5 Video Player SQL注入漏洞(CVE-2024-1061)附POC", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092574&idx=1&sn=99d424ed50d547cedb04351de7b2850b": "13000多个Ivanti网关因严重漏洞遭受网络攻击", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484242&idx=1&sn=814cfe9ef1b7e122ec1f42d26b8c8064": "Panalog日志审计系统 libres_syn_delete.php命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651258739&idx=2&sn=5928bcff19e15c289e231ee10148239c": "13000 多个 Ivanti 终端易受安全漏洞的影响", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651258739&idx=1&sn=51a6ab2a77aa3e0605ebaa52273f4b31": "SolarWinds 曝出五个严重的 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458542106&idx=3&sn=9f4ba426fcbf98ae43796f3cf9f5c8b6": "今日更新：命令∕代码执行（一）原理和基础知识—CTF训练营之Web篇", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458542106&idx=2&sn=3ffb128de7e9df308ad8827ecc5fa58a": "一个叹号可导致任意代码执行，Windows生态系统也曝“log4j漏洞”", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247512265&idx=1&sn=918d4cb8e0d78bd980664045215dc2ba": "cve漏洞搜索工具 -- cvemap", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247513300&idx=1&sn=991d8296780af766fa56b631488ae43a": "记一次有趣的逻辑漏洞挖洞经历", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488719&idx=1&sn=20025d64a950621fd3a6d34e7ad04c9d&chksm=fb029997cc751081fd187d93e2e6aa05232fea7d602fbdeb88db5cb92b70de70c079bf4a5b40&scene=58&subscene=0": "JDBC漏洞利用之文件读取", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247573590&idx=2&sn=5e582bdd3c6a288408ade5b874ca881a&chksm=e914706cde63f97a2d2629ed75dbb118085b83785cd8e3dcfc9eeeec9017a036589e72220301&scene=58&subscene=0": "Jenkins RCE 漏洞目前已公布", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247485744&idx=1&sn=86f7579da6aa376775ef1ec22a9d953f": "记一次违法网站的渗透经历-漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg4NTczMTMyMQ==&mid=2247484201&idx=1&sn=5ddfb64d5ad67b8b7742c39e0a8d66e0": "【赏金猎人】商店留言板xss漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485270&idx=1&sn=f4cf6552f69f84f34bf5b0a4ca9105bd": "泛微e-office系统存在敏感信息泄露 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247514872&idx=1&sn=0e25f55d52708114d61279274f7bdd54": "工具 | JumpServer堡垒机综合漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518852&idx=1&sn=118503a8f9ad674c456c7a1beb026af7": "微软2月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092578&idx=2&sn=22a30548a62a5a47a2c943462195f74f": "微软Exchange服务器曝出高危漏洞，近10万台服务器面临风险", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247484906&idx=2&sn=5bb3b85ebc6056e03db104c6135d5a25": "CVE-2024-20931｜Oracle WebLogic Server JNDI注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247484906&idx=3&sn=078c39bc7eb2e754acc54a6722a5dbba": "CVE-2024-21413｜Microsoft Outlook 远程代码执行漏洞（需结合其他漏洞）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247484906&idx=1&sn=a022a4ad1a3a0f48f737fd0dedc2c33a": "CVE-2024-22234｜Spring Security访问控制错误漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247502909&idx=1&sn=f651a0f9af67ab70b2ddc793cd31d7d1": "子域名接管漏洞: 赚钱小技巧", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487578&idx=2&sn=2fb1ac93a1c6e4a837df6f9cf6404e16": "【漏洞预警】Apache Camel JDBCAggregationRepository反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487578&idx=3&sn=97924ea8f28a9a79ec1c87e26f026555": "【漏洞预警】pgjdbc 存在SQL注入漏洞CVE-2024-1597", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487578&idx=1&sn=e90607e7e2e3e63ad556a85f6e55ab1f": "【漏洞预警】Spring Security 访问控制错误漏洞CVE-2024-22234", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489168&idx=1&sn=62ec74275a62a5427d6251b9a8da872f": "【风险通告】Spring Security身份验证绕过漏洞（CVE-2024-22234）", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651443635&idx=1&sn=d87a8a4ee8eb27ec34bce76b3fd1e7e0": "信息安全漏洞周报（2024年第7期）", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651443635&idx=2&sn=ef13f4cea2eeaec556bed5e0435e74c1": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247502865&idx=1&sn=34303f20c9756abea189ce483c6a2847": "未然通讯社：SolarWinds曝出五个严重的RCE漏洞；黑客利用新型Dropper在Windows上传播恶意软件", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092578&idx=1&sn=dff7b76af44daecedd5d9682de41a775": "谷歌称其发现的大多数0 day漏洞背后都是间谍软件供应商", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499167&idx=1&sn=fbcfcb89b1b95d1c7b50eddf5a220efe": "华莱士领券活动漏洞，任意用户可领取免费套餐券，官方已报警", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651258928&idx=2&sn=e5860f75faf1ced0b6548188a53f8f9b": "Bricks WordPress网站生成器中存在RCE漏洞，黑客正在积极利用", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247499219&idx=1&sn=11f120ec24ec9c72a9827ab5e53b2385&chksm=cfc55a8cf8b2d39aa6fb00328440ce6948f47053c3d175ae4fef5f773cab8e3d26271cb5d13e&scene=58&subscene=0": "新年新征程！360漏洞云开工攒劲，百万奖金到账，真金白银等你来战！", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499167&idx=1&sn=fbcfcb89b1b95d1c7b50eddf5a220efe&chksm=ec1dcdb7db6a44a11b4d740f0faa4445b5d9d4bd4018b61db771898ecb8ea3b0649c2dfedff2&scene=58&subscene=0": "华莱士领券活动漏洞，任意用户可领取免费套餐券，官方已报警", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511007&idx=2&sn=e307870483024ee8205b3b9290e0e198&chksm=ebfaecffdc8d65e9c5d0d76def33413444b55fd7cb6c9eba987d336088fe395c81f446ae95e5&scene=58&subscene=0": "微软Exchange服务器曝出高危漏洞，近10万台服务器面临风险", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247504722&idx=1&sn=7579421d53c06f53983e5ea01fec5aaa&chksm=cfcab046f8bd3950c9250c79f073880df9f838cf8ed5ce58a5b04fcbdd67e555051b5be58af2&scene=58&subscene=0": "漏洞通告 | Apache Solr 代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522125&idx=1&sn=6026edacdef01f12c57a755d1f30370c&chksm=ce461c5df931954b346a8800e954d46592d409d46d2be4b17b72eda86aadd82e2f4601bf02e7&scene=58&subscene=0": "【漏洞通告】Apache Solr Backup∕Restore APIs 远程命令执行漏洞CVE-2023-50386", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247485125&idx=1&sn=5f259ebb9db66bf27573cde85128b337&chksm=c1f4420df683cb1bf25b7b728273dc1ecf524ad0ac2ee57b63d08ec6bff688829d0417627d25&scene=58&subscene=0": "「深蓝洞察」2023 年度最野的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MzkwNDU1Mw==&mid=2247484358&idx=1&sn=d5ee940bfbe066983335cb77801c3fb4": "pgjdbc 存在SQL注入漏洞（ CVE-2024-1597）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487583&idx=1&sn=6891f7a65e90e1b8b76ee39eb1a0a5dc": "【漏洞预警】Jira Assets Discovery 组件存在注入漏洞CVE-2024-21682", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485284&idx=1&sn=75ed72facac4b1519831e47ed30606a9": "YouDianCMS友点系统存在任意文件上传漏洞 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649790482&idx=1&sn=d1c5d04f70f8192a9c22e3df6621ad11": "俄罗斯黑客利用 Roundcube 缺陷（CVE-2023-5631）攻击欧洲政府", "https://mp.weixin.qq.com/s?__biz=Mzg4NzkwMDA5NQ==&mid=2247484374&idx=1&sn=5fa9948712e28bca979601fc691dbc9d": "PyPI供应链攻击之模块替换（含原理和复现）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652054201&idx=1&sn=d2f335b13fb4dd3f74550f35b1b9a979": "【安全圈】系统漏洞致储值套餐券免费领取，华莱士已报案！", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651259054&idx=3&sn=e0c3f907ffc9c26db742bb3a2bb0bf48": "Experian最新报告发布：70%的企业遭遇网络欺诈的频次有所增长", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518869&idx=1&sn=ceb7b148314a0873f976af5bd4f077e9": "速修复！ConnectWise ScreenConnect 中存在多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU1MjgwNA==&mid=2247486443&idx=1&sn=d4612250a7d648537dbda4097c0d8f66": "2024 想要 0day 多多？我这有份小秘籍！带你手把手挖掘 Java 系统漏洞。", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664205176&idx=3&sn=a13dc78e2c2e45842a31b924bd5f89a5": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484259&idx=1&sn=f2ed5cee173f0b9de810d7b82b421b21": "CrateDB数据库任意文件读取漏洞复现-CVE-2024-24565", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518869&idx=1&sn=ceb7b148314a0873f976af5bd4f077e9&chksm=ea94bbffdde332e9635f5540519176ed7964fc44feeb1e1f88d148b164ae7043d6d54f1fb886&scene=58&subscene=0": "速修复！ConnectWise ScreenConnect 中存在多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664205176&idx=3&sn=a13dc78e2c2e45842a31b924bd5f89a5&chksm=8b598981bc2e00979fb200e098c5474a5ea773a990c43bce91617e2f8661bff7a3c1ad73a197&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247543017&idx=3&sn=b6dfbd1da673fb01f2de82fc15e9edfa&chksm=fa939e28cde4173e7a4ce942a98942a4e38f7d11a1463799dbf3f81bc0d310153ddd479548d0&scene=58&subscene=0": "Bricks WordPress网站生成器中存在RCE漏洞，黑客正在积极利用", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247485223&idx=1&sn=aec69141f324192c5d6441c7d83e5349&chksm=c1f443eff683caf99f050457edaca75a77adc5d42f718a5f40f6fc1215d6c7f55c14d3d66ce0&scene=58&subscene=0": "2023 年度最𠓗的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247485303&idx=1&sn=1c306d587d334f57d5bac54020f4d276&chksm=c1f443bff683caa92702eea91cf9ae4491e6350da4460c1718b2ab45c83aa9071a926d62c836&scene=58&subscene=0": "「深蓝洞察」2023 年度最多面的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247485335&idx=1&sn=2f97660bf4d4042c2e8c2d351134772d&chksm=c1f4435ff683ca49c9a6c56dda149cd66272fd9b137166c4d97254fa2355a03f614f5c4008a4&scene=58&subscene=0": "「深蓝洞察」2023 年度最名不副实的高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522161&idx=1&sn=a972b86a73c67766c6fbdd8d20d523ee": "【漏洞通告】Microsoft Outlook 远程命令执行漏洞CVE-2024-21413", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493616&idx=1&sn=64370cfcc3e5436519f5ead1e91b0781&chksm=e8a5ed93dfd264851d23f7edb753be7d0a20ff2cbdb1bd738ccdef7f04f48474eb3cf440327d&scene=58&subscene=0": "漏洞挖掘|一次某站点的任意用户密码更改漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247485358&idx=1&sn=a78f49fc08e3654bc528a22c3fcd60d0&chksm=c1f44366f683ca7037d368a423f338cf1b691598bd37b1f07ad3ca83a105e0b3d01267a0e408&scene=58&subscene=0": "「深蓝洞察」2023 年度最死而不僵的漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247603565&idx=1&sn=07aebbd878394bb10ac75713d2c62375": "基于模拟仿真的蓝牙协议栈漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650943724&idx=1&sn=5d17350bc596b4c95bd5021e685825e2": "cve漏洞搜索工具 -- cvemap", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485600&idx=1&sn=edee39bc65baa740cac7d5c26e5f9663": "CVE-2024-22024", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247512769&idx=1&sn=23e8a8e663b18499b765a56f66de9e09": "致远OA rest接口重置密码漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg4NTczMTMyMQ==&mid=2247484241&idx=1&sn=9001ab8958bbc83a3f607ceb3f27c0fa": "全球首个面向 AI∕ML 的漏洞赏金平台", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247514954&idx=1&sn=d88c3110c5bab96bef9e915b174db605": "SQL注入漏洞引起的内网渗透 | 实战", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487613&idx=2&sn=6f02306fd040f0ba94b7cc74e92d2064": "【漏洞预警】ConnectWise ScreenConnect身份验证绕过漏洞（CVE-2024-1709）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487613&idx=1&sn=f906708c4b2a4b5448ec448aecee0dab": "【漏洞预警】Apache DolphinScheduler<3.2.1 任意代码执行漏洞CVE-2024-23320", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485417&idx=2&sn=f58ab180c0cd53f7e1c0ad063b62c37b": "鸿运(通天星CMSV6车载)主动安全监控云平台存在任意文件读取漏洞 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485417&idx=1&sn=f3384fa94c4e2e90a466a34564687be7": "鸿运(通天星CMSV6车载)主动安全监控云平台存在敏感信息泄露漏洞 附POC软件", "https://mp.weixin.qq.com/s?__biz=Mzg3ODg4MDEwMA==&mid=2247483894&idx=1&sn=d79f51bd4cca4bafaef388b286ea8be4": "不同端下的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493641&idx=1&sn=68f9abb2511ce601470f44d299c35092": "记一次逻辑漏洞挖洞经历", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247497376&idx=1&sn=5ad2c914b8458138acd61d8b29c7080f": "G.O.S.S.I.P 阅读推荐 2024-02-26 寻觅文件劫持漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652054638&idx=4&sn=cbc923d693bae84939d05031ec8bc252": "【安全圈】注意！ScreenConnect 漏洞正被广泛利用于恶意软件传播", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649290785&idx=1&sn=ff6839852de21b172bc1024c00069af4": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247497376&idx=1&sn=5ad2c914b8458138acd61d8b29c7080f&chksm=c063d879f714516fbff9520cdd357175e18057c8c9ed8692f12efeed88c6544c56d5cb652ffc&scene=58&subscene=0": "G.O.S.S.I.P 阅读推荐 2024-02-26 寻觅文件劫持漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502807&idx=1&sn=780714c6ab54fb3a6022abf04cc7a68c&chksm=f25858a4c52fd1b2db96d97bd99f054bc776b1483fd7c550b7b20d96177a1badff150f2cfcf1&scene=58&subscene=0": "雷神众测漏洞周报2024.2.19-2024.2.25", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247543098&idx=3&sn=29bdad8e8105d0550fd85561c62739f3&chksm=fa939ffbcde416ed0ad7c94bef562b81e4b9e073a35cf010af76db80541358571de2307004eb&scene=58&subscene=0": "新的 Linux glibc 漏洞可使网络攻击者获得主要发行版 root 权限", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522172&idx=1&sn=ceb01e7da3c6a49105bcfb1eb7830d80&chksm=ce461c6cf931957ad8016f585b1794a712f56fd05e69502204aedd908e7039a943655f0bb1fa&scene=58&subscene=0": "【漏洞通告】WordPress Bricks Builder远程命令执行漏洞CVE-2024-25600", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493641&idx=1&sn=68f9abb2511ce601470f44d299c35092&chksm=e8a5e26adfd26b7c63cedbb7292d0e6c82c7f58666b7a89847d335fb176c91037c36318eb228&scene=58&subscene=0": "记一次逻辑漏洞挖洞经历", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247485473&idx=1&sn=dac56a776c57366e00cf5b7217c74a4c&chksm=c1f44ce9f683c5ffb68f9b26d16d4ac769e732df0b4d473685d25e15343f40087dfff27749e4&scene=58&subscene=0": "「深蓝洞察」2023 年度最费钱的漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494454&idx=1&sn=75b4a10b224fe51a786b909ac6d6fba6&chksm=fd74dbffca0352e9b7416fb9e91e5e7514a4df75efc40d3be50e95796746324e5506dda28140&scene=58&subscene=0": "CNVD漏洞周报2024年第8期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494454&idx=2&sn=a4d3f067c3eb9c32a5da7f88aba9a286&chksm=fd74dbffca0352e958e8c020f9f59df5840aee4264d392cb5d110cc32a6d739fe1e6554af425&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240219-20240225)", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485638&idx=3&sn=2571a60b30be053c871d39c23c450253": "CVE-2024-21732", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485638&idx=1&sn=2b48860dcd6dbc794bc684c187d4ba46": "CVE-2024-1918", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485442&idx=1&sn=1dd5f1210b7a66a5852bde27aafdbc1e": "蓝凌OA wechatLoginHelper存在SQL注入漏洞 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487631&idx=3&sn=0fae78df401327af5b374dc3170477cc": "【漏洞预警】LangChain langchain-experimental 任意代码执行", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487631&idx=2&sn=7aeee11867aef09924b163a42a8001ee": "【漏洞预警】Apache James MIME4J HTTP头注入CVE-2024-21742", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487631&idx=1&sn=550af656e44479fb9e6f412efd7db330": "【漏洞预警】Apache Camel ExchangeCreatedEvent 信息泄漏CVE-2024-22371", "https://mp.weixin.qq.com/s?__biz=MzIzMjg0MjM5OQ==&mid=2247487029&idx=1&sn=7c03ed64d656477814b4a3e5b5c620ef": "赏金猎人|从前端JS逆向到发现后端越权漏洞的渗透测试之旅", "https://mp.weixin.qq.com/s?__biz=MzkzNDU5OTg3Mw==&mid=2247485641&idx=1&sn=8b9ae2c21d74cbe4366bfedbc73fb8e4": "【Web渗透】若依框架漏洞合集", "https://mp.weixin.qq.com/s?__biz=Mzk0MDQzNzY5NQ==&mid=2247489950&idx=1&sn=1b26cf9e5cc18c1968b5eadc3e92b391": "【tips】基于tar通配符漏洞的提权方法", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493709&idx=1&sn=f2362aaef667e61c6d81676ff5e0747e": "第79篇：记一次Oracle注入漏洞提权的艰难过程", "https://mp.weixin.qq.com/s?__biz=MzkwNjYzMjc3OQ==&mid=2247484072&idx=1&sn=14a834e08a4faa80c5a9bd9fe993850a": "[未公开]亿赛通某接口存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NzkwMDA5NQ==&mid=2247484401&idx=1&sn=f8b8d9e961e82549b68e8d8e7ef00794": "Windows SmartScreen安全功能绕过漏洞(含CVE-2024-21412复现)", "https://mp.weixin.qq.com/s?__biz=MzAxMzkzNDA1Mg==&mid=2247508946&idx=1&sn=0e89c866ba9ff5411acc44aac6a8bb57": "TangGo|逻辑漏洞测试系列-支付逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518947&idx=2&sn=8758a5f5ef83a075fb61fbed63159da1": "合勤科技修复防火墙产品中的远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518947&idx=3&sn=a79e0235f3e78c2f4980247b4e0a365d": "WordPress 插件 LiteSpeed 漏洞影响500万个站点", "https://mp.weixin.qq.com/s?__biz=MzkyMzQ5NjYwMw==&mid=2247484189&idx=1&sn=ecf40a5ec6ce947d909396892ecca872": "安全情报，aiohttp存在目录遍历漏洞（CVE-2024-23334）！！！", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247501293&idx=1&sn=5da7d1ae387c99b721a1254c2b8e2298&chksm=ec9f1c9edbe8958871db6232bed662715233933d7dc9617edf53a650029ca2f0b3dc1fc32cb4&scene=58&subscene=0": "24年1月必修安全漏洞清单｜腾讯安全威胁情报中心", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518947&idx=2&sn=8758a5f5ef83a075fb61fbed63159da1&chksm=ea94bb89dde3329f7456dbac7c02de7915e34069451108f060250d64c23c6f9145d80e39bcc4&scene=58&subscene=0": "合勤科技修复防火墙产品中的远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518947&idx=3&sn=a79e0235f3e78c2f4980247b4e0a365d&chksm=ea94bb89dde3329f127d8c01ddbfd59e454133a12f03962b70d34129434f08d38529852aa820&scene=58&subscene=0": "WordPress 插件 LiteSpeed 漏洞影响500万个站点", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247484910&idx=1&sn=d40e9b8ad7e5f67fd5ac1fc2b0b2548a&chksm=c2b10798f5c68e8ed5d26e6938ad30b8157db94bb71e3e0ccf69127e82251f3d02e173adb7fe&scene=58&subscene=0": "腾讯安全威胁情报中心推出2024年1月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247485551&idx=1&sn=f5a0c42e428b98949ede52267cf21f87&chksm=c1f44ca7f683c5b10b0c7151812e80cdf1d5e2ffb8b343840f10da795f6dd9f22a316795109f&scene=58&subscene=0": "「深蓝洞察」2023 年度最曲折的漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493709&idx=1&sn=f2362aaef667e61c6d81676ff5e0747e&chksm=e8a5e22edfd26b384567ccf867a8758a6b3683866fae6ccb9f359582d0520960dda1df3692eb&scene=58&subscene=0": "第79篇：记一次Oracle注入漏洞提权的艰难过程", "https://mp.weixin.qq.com/s?__biz=MzkyNDI2NjQzNg==&mid=2247491941&idx=1&sn=458bab4081abbb411503d39dea2d6e71": "浅谈js在挖掘CNVD通用漏洞中的思路，附实战案例", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487637&idx=1&sn=2d244e4948384de5466bac28f6ca0c15": "【漏洞预警】Apache OFBiz 路径遍历漏洞CVE-2024-25065", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786205&idx=1&sn=5dd9dc2f0a9d0db0e9d5fe799577d98f": "Hugging Face转换服务存在高风险漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518957&idx=1&sn=8d096042c0c0ab672b2763c4be529085": "热门 WordPress 插件 Ultimate Member 中存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652054869&idx=4&sn=e83c805666be44f52ab80d8d0dc86964": "【安全圈】WordPress 插件存在安全漏洞，500 万网站面临严重风险", "https://mp.weixin.qq.com/s?__biz=MzAxMzkzNDA1Mg==&mid=2247508985&idx=1&sn=b5dc202fd950e94c71e132ab1bcfee7c": "TangGo|逻辑漏洞测试系列-拒绝服务漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651130938&idx=2&sn=a2031d0db458e6e8c1724f1a109bcc9e": "漏洞快报 | ​Spring Framework解析不当漏洞、Node.js 权限提升漏洞......", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458542779&idx=3&sn=ca6d34e5d9af9acd1abd46ed43224744": "预售满10人开班！系统0day安全-二进制漏洞攻防（第3期）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458542779&idx=2&sn=a51950a2497778688e42d361d47513cc": "AI模型可被劫持，Hugging Face转换服务存在高风险漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247488457&idx=1&sn=efa7116ac3937098d3c9de82384cd3a7": "创宇安全智脑 | 金蝶云星空 ServiceGateway 反序列化远程代码执行等33个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485433&idx=3&sn=4ea67667b657025281bb39914994be23": "【漏洞通告】WordPress Bricks Builder远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485433&idx=2&sn=9eae1b0672deb645a55f3669b42217e1": "【漏洞通告】Microsoft Outlook 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485433&idx=1&sn=d40d1d86b792cda97e1c4a6614cb8a6f": "【漏洞通告】Spring Security 访问控制错误漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247484149&idx=1&sn=dc492b9fb6f20c2af70b2f8e2813d0bf": "Springblade JWT身份伪造漏洞与SQL注入解析", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247485492&idx=1&sn=f37dd0fe2b93e9f52bf7bd099169abd8": "还在学怎么挖通用漏洞吗？一天打10个~", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485455&idx=1&sn=17e77b101b7c0617f0cc9aa550747933": "华天动力OA8000办公系统ntkodownload.jsp存在任意文件读取漏洞 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247514998&idx=2&sn=d1c6d069f37dc4720ab7772941446bf3": "甲方让我复现SQL注入绕过复现....我懵了.......", "https://mp.weixin.qq.com/s?__biz=MzkwNjYzMjc3OQ==&mid=2247484080&idx=1&sn=cb62d734d18161d8d5004c16fde55f88": "[1day]用友-UFIDA-NC某接口存在存在任意文件上传", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487652&idx=3&sn=bea76d1b37afdbdfd92249329f07cccd": "【漏洞预警】Apache Ambari 命令注入漏洞（CVE-2023-50379）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487652&idx=1&sn=2b071cbc3bdb1bf15ff887780cf811d8": "【漏洞预警】Dataease jdbc 反序列化漏洞CVE-2024-23328", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487652&idx=2&sn=6b47990e70d2394aee42cb2284ae8cb9": "【漏洞预警】Apache Ambari < 2.7.8 XXE（CVE-2023-50380）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652054959&idx=2&sn=5a67f91dd978d2f2e57a450566bf2730": "【安全圈】Windows 零日漏洞正被黑客利用，以此获得内核权限", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247503138&idx=1&sn=e334a14fb04d75405cc0a1d4539e169f": "CVE-2024-25065：Apache OFBiz目录遍历漏洞通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458542842&idx=2&sn=e0b56e24805662155ef9525c0eef338e": "攻击者能够接管任何账户，安全研究员披露Facebook一个零点击漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518970&idx=2&sn=ea8bb2c114507ab3f98fa4427698219b": "Lazarus黑客利用Windows内核0day发动攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518970&idx=1&sn=6962ea177a62fac9410b186624a2cd9a": "思科修复 Data Center OS 中的多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTE4NDAyNA==&mid=2650396319&idx=1&sn=9205385ff32a9ff6509dd706cc6415a6": "Web安全之Nginx常见漏洞解析", "https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247526500&idx=2&sn=11076968af73dab503404da243b1bb31": "荐读丨企业安全态势的七大常见漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzYzODU5NQ==&mid=2247484523&idx=1&sn=14ab8377ce235265249b1249656a5679": "记一次绕过限制进行漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzIzMjg0MjM5OQ==&mid=2247487038&idx=1&sn=0a317f9cec378902ba72d8dbe55b5148": "相对来说还算比较全及时的漏洞库", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652054993&idx=1&sn=358d77ea022408f255e7aac59b39075a": "【安全圈】深圳制造商Eken智能门铃曝安全漏洞，黑客可直接获取摄像头画面", "https://mp.weixin.qq.com/s?__biz=MzUxMzQ2NTM2Nw==&mid=2247492399&idx=1&sn=19aaae05e06dcd966a812d9e6bc796d0": "WordPress 插件存在漏洞，500 万网站面临严重安全风险", "https://mp.weixin.qq.com/s?__biz=MzkwNjYzMjc3OQ==&mid=2247484088&idx=1&sn=e7be4cfccf60278ca3dc1804ccfb5680": "[未公开]用友NC系统某接口存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247498491&idx=1&sn=8464e1bf6541bd2423cb4822b9ab1bdd": "dedecms之汗流浃背的审计1day", "https://mp.weixin.qq.com/s?__biz=Mzg3NzIxMDYxMw==&mid=2247499543&idx=1&sn=d651a8b62674055e80135a51d4f43357": "漏洞没预测对，老板奖励我重新预测", "https://mp.weixin.qq.com/s?__biz=MzU3OTAyODk4MQ==&mid=2247488698&idx=1&sn=c4365aa1eae19c22294699ca68e9c0ce": "关于顺丰SRC暂停漏洞测试活动的公告", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247536997&idx=1&sn=8d68219b9eb686d5ef380a04674bfade": "记信息泄露到RCE", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247606451&idx=1&sn=265087aae5335565b10e8adc8ed1e46b": "我与逻辑漏洞的爱恨情仇", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247485621&idx=2&sn=54d070b88d4b31511d749efdac0b6241": "五眼联盟警告：Ivanti网关漏洞已被攻击", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247512802&idx=1&sn=70f0404b706864a5a6390ee103a3ed3f": "京东万家APP越权逻辑漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkyMzYwNTEyNg==&mid=2247485547&idx=1&sn=50abe494a9fb5ddf98843f2170a0c277": "2024 想要 0day 多多？我这有份小秘籍！带你手把手挖掘Java系统漏洞。", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651260327&idx=2&sn=89097fd738382d17bcf63884b8322f2a": "FreeBuf 周报 | 新WiFi漏洞或影响23亿用户；NIST发布网络安全框架2.0版本", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650588145&idx=3&sn=c156b1c7de8eb05fc30e9aceef95bf15": "Src挖掘-实战中遇到的一些莫名其妙的漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247490881&idx=1&sn=6fe3ac415be0d966b3d19b45245bf598": ".NET 某开源组件反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487854&idx=3&sn=babd094754a727f0f894ee8f6eb44b88": "漏洞预警 | 蓝凌OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487854&idx=2&sn=93c6d1767cc500302e3cee48434276ae": "漏洞预警 | 用友U8Cloud SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487854&idx=1&sn=7dc0239f6e72b6f78519adddd98ba340": "漏洞预警 | Apache Ambari外部实体注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485836&idx=1&sn=d97a098912253827c4fedf0cf58292de": "CVE-2024-25735漏洞复现（附POC）", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247485576&idx=1&sn=7ac4af5f165050f1df0432d4387ab9a9": "【刻刀】一款java漏洞集合工具-hyacinth", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247494286&idx=3&sn=67227022aed1009f049bd6ab84a2a33b": "海康威视修补安全管理系统中的高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247512933&idx=1&sn=a89fb7622167548aee9a37814657ada9": "SolarWinds Security Event Manager AMF 反序列化 RCE (CVE-2024-0692)", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247485210&idx=1&sn=38ab842021329c038b705504ae03dd51": "一次十分详细的漏洞挖掘记录,新思路+多个高危", "https://mp.weixin.qq.com/s?__biz=MzA4NjMwMzI3Mg==&mid=2247498768&idx=1&sn=301521e56dd970e683b20546f30a231e": "【漏洞通告】JetBrains TeamCity 身份验证绕过漏洞(CVE-2024-27198)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487671&idx=1&sn=1d8d71ac6527a733ba8a543d40236dd3": "【漏洞预警】JetBrains TeamCity身份验证绕过漏洞（CVE-2024-27198）", "https://mp.weixin.qq.com/s?__biz=Mzg3Mjc0MDQ2Nw==&mid=2247494359&idx=1&sn=6f2f982b9cfdf5bd1c41d52bc3438368": "浅析常见WEB安全漏洞及其防御措施", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652055215&idx=3&sn=f8ad8002df884eee0c23fa1468de8772": "【安全圈】JetBrains TeamCity On-Premises 软件出现新安全漏洞，可被利用控制系统", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652055215&idx=1&sn=e45ee18a9d09d2bc39b20c832f073435": "【安全圈】未定期检查网站安全，存在安全漏洞，新乡3家公司被罚！", "https://mp.weixin.qq.com/s?__biz=MzkzMDE5OTQyNQ==&mid=2247484835&idx=1&sn=0639bdc47e6d8efdee0dd947f0e0c5c1": "漏洞挖掘|轻松挖掘某企业某友系统的多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzODQ0ODkyNA==&mid=2247484948&idx=1&sn=739151150c7627264f61e02870f2f012": "【EXP公开】JetBrains TeamCity 身份验证绕过漏洞(CVE-2024-27198)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500571&idx=1&sn=93d2bf14c6eef1d712d4c08f9cad89e4&chksm=fe79e783c90e6e9545858c513efd8da48ed4d8b7bc712b2fadbac9085b14ba37f6993e945bdd&scene=58&subscene=0": "【EXP公开】JetBrains TeamCity 身份验证绕过漏洞(CVE-2024-27198)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458543989&idx=3&sn=ccf1a55ad02e8beee30b6abcd4385f6e&chksm=b18d57ff86fadee97f7955b2db994797714254d6485260df89836bb481ac86f9e776cd16e9c2&scene=58&subscene=0": "更新第六章：代码审计之实战查找微软内核模块漏洞-0day2期欢迎报名", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786224&idx=1&sn=6d3423264fc4b37f945f612460f14354&chksm=8893b71fbfe43e09a0270311f95a8da0671c935932195c68310a6cfc80c3edefd06f82fbc3f0&scene=58&subscene=0": "CI∕CD工具—TeamCity被曝出两个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499000&idx=1&sn=70b6a8501fe6a45115c8fe82a92cba35&chksm=973acf9aa04d468c0a27dc613197e2661895762ecf19461448873c6d72a24263d4a93c2fa037&scene=58&subscene=0": "CNVD漏洞周报2024年第9期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499000&idx=2&sn=4e18df1c9cf530cd4edb224c4e569985&chksm=973acf9aa04d468c9e9f939af916bfd2b2aee1b2a704c62a14c77ebd956a12fd6a595edf9de4&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240226-20240303)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652055215&idx=1&sn=e45ee18a9d09d2bc39b20c832f073435&chksm=f36e0aefc41983f9ce0bd8dbac74645cbe295b331dce22419fc5738ae43d80be592682e84127&scene=58&subscene=0": "【安全圈】未定期检查网站安全，存在安全漏洞，新乡3家公司被罚！", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652055215&idx=3&sn=f8ad8002df884eee0c23fa1468de8772&chksm=f36e0aefc41983f9d79065872bec2528e761f76c83f4b1228985b230ea8eaa5252ac4af2aef6&scene=58&subscene=0": "【安全圈】JetBrains TeamCity On-Premises 软件出现新安全漏洞，可被利用控制系统", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518992&idx=1&sn=7af87c035a996a3b64a0c389013aa003&chksm=ea94ba7adde3336cf762a515bae94e33d55782b3f4e24f46be397a1301e9f26404e7bc16985a&scene=58&subscene=0": "速修复！TeamCity中存在两个严重的漏洞，可触发供应链攻击", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485881&idx=3&sn=0d998a44ce5db8293faa0b83e118406b": "Laykefu客服系统任意文件上传漏洞复现(附POC)", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485881&idx=1&sn=86bd4a7de91e2609037a4512f44d02e2": "【漏洞复现】CVE-2024-2074", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247494290&idx=2&sn=dc4989c9a204dc1b2af97e9afa3f7356": "网络安全知识：漏洞管理五大原则（英国NCSC）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487682&idx=1&sn=7606313992da8fb504d5b6074c7c3dda": "【漏洞预警】VMware ESXi & Workstation & Fusion释放后使用漏洞（CVE-2024-22252）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487682&idx=2&sn=feff54b01e61188ffd725e7d0c5c52e7": "【漏洞预警】LangChain 远程代码执行漏洞（CVE-2024-28088）", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493789&idx=1&sn=cadf3c5c97133e2c0e40d48f0875bd4f": "一次十分详细的漏洞挖掘记录,新思路+多个高危", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247487880&idx=2&sn=1b9c377ba1399ae4a871a92d8960501c": "逻辑漏洞测试系列-水平越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwODc2NjgxNA==&mid=2247483998&idx=1&sn=458260eabdb4ebe9e3c9d30dfd288ee4": "CVE-2023-46805&CVE-2024-21887 Ivanti connect secure RCE分析", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092596&idx=2&sn=5c9cf4659a1e8e93b3c04038038028e1": "【漏洞通告】VMware ESXi & Workstation & Fusion释放后使用漏洞（CVE-2024-22252）", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092596&idx=1&sn=f3425bb19517d429363113b19d99e885": "信息安全漏洞周报（2024年第10期）", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651260623&idx=3&sn=bb0d833a9293a9a1744bb5e0c2bc5f19": "苹果曝出两个 iOS 系统 0-Day 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652055310&idx=1&sn=9cbeda175cf94757508a85ce0ba2024d": "【安全圈】未落实网络安全，存在安全漏洞，北京5家公司被罚！", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652055310&idx=4&sn=c8c7b9188be8638e89bb2d8f9a9c41db": "【安全圈】苹果推出紧急补丁，以修复iSO平台中的多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMzkzNDA1Mg==&mid=2247509087&idx=1&sn=fbc1e2a2d4c53c467d781fcd58b3996c": "TangGo测试平台|逻辑漏洞测试系列-水平越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247503694&idx=1&sn=940eec278a32df7ee61d69579b271c85": "CVE-2024-27198：JetBrains TeamCity 身份验证绕过漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247493477&idx=1&sn=e17c6ebffcea800822c3ccebc85f1107": "【论文速读】 | AI驱动修复：漏洞自动化修复的未来", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458544969&idx=1&sn=473822d99738dc8c20cf0c7df866adea": "winrar(CVE-2023-38831)漏洞原理", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664711138&idx=1&sn=f02f6ae8c8190627e5bc2499455b5220": "Tomcat系列漏洞之五——AJP协议文件读取漏洞（CVE-2020-1938）", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493826&idx=1&sn=947a5ac7d907901aba67f4e2e37b9365": "逻辑漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIyNzU2NDIwOA==&mid=2247489417&idx=3&sn=9abc2519c27e2610066eb316e67a729f": "WordPress插件Bricks Builder存在RCE漏洞(CVE-2024-25600)", "https://mp.weixin.qq.com/s?__biz=MzIyNzU2NDIwOA==&mid=2247489417&idx=1&sn=83daeb830777a2a77026cb320249db98": "金蝶EAS ∕easportal∕tools∕appUtil.jsp 任意文件上传∕下载漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485575&idx=1&sn=bc87a8407d23a47c26feea3d8bcb0e0e": "SpringBlade list接口存在SQL注入漏洞 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzIyMDAwMjkzNg==&mid=2247513094&idx=1&sn=ff09422e025d8e81a9918f9332b6a819": "WatchVuln 高价值漏洞采集与推送", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487714&idx=1&sn=d7c85faa0a10525e265208d206158dc9": "【漏洞预警】Progress OpenEdge身份验证绕过漏洞（CVE-2024-1403）", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485658&idx=1&sn=1c0f92a2bad57e09a329684641377a5b": "WEB漏洞扫描工具 - GHR", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652055686&idx=4&sn=20d85eb25d544dfa3a5563a4cd4efe8f": "【安全圈】因Ultimate Member Plugin出现安全漏洞，10 万个 WordPress 网站遭受攻击", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247498719&idx=1&sn=cadadf8b5bc832c1959933cc7ff0f071": "迅雷客户端被称存在多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499030&idx=1&sn=aa65a60ed1e74c3d290af2870f7514bf&chksm=973ace74a04d4762b964b2c8765d0096420b8e1d56ba3ba5d8811f54c518b66566058c66ab4d&scene=58&subscene=0": "CNVD漏洞周报2024年第10期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499030&idx=2&sn=50cb62e8622432459219e7de61380dbb&chksm=973ace74a04d4762208cdfcbab24355cd2001eb65f90d1fb18d336500357b01fa415313e3632&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240304-20240310)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652055686&idx=4&sn=20d85eb25d544dfa3a5563a4cd4efe8f&chksm=f36e04c6c4198dd0f2f358787225c754ccada097814d8fe22e35183f68f9da1c161f6ee73139&scene=58&subscene=0": "【安全圈】因Ultimate Member Plugin出现安全漏洞，10 万个 WordPress 网站遭受攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247502891&idx=1&sn=58414256162c2eae5a7d0add74ddfe54&chksm=eaf98467dd8e0d71265e6ddce4e0e2da32ffb93e9b59ccd827bd3ff9e059d86940c20c8d4c76&scene=58&subscene=0": "补天平台助力|龙年首场「漏洞攻防安全」第13期安全范儿沙龙开启！", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247502891&idx=2&sn=499431a28fcf3acb0dcd51a1f1415ec4&chksm=eaf98467dd8e0d719b30fdb21758d6747c37a95fa515e09a63aea5180be62bb1bdd2793f2c10&scene=58&subscene=0": "奖金翻倍| 2024补天通用型漏洞专项活动第一期上线！", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493826&idx=1&sn=947a5ac7d907901aba67f4e2e37b9365&chksm=e8a5e2a1dfd26bb7630f1777553b0e125368f7478934336a6ba844d9ed8aa1b201de4baeef50&scene=58&subscene=0": "逻辑漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522272&idx=2&sn=84da7fcddfdc5de1104b27a9d2d2a677&chksm=ce461cf0f93195e65bfec964da00c9c358eb2f97a316e0e33bef64076d53ddf6a530b5eb16f5&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240304-20240310)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458548735&idx=1&sn=72c81d8050451dd712ca53b73b7b63ba&chksm=b18d497586fac0631ba8e57b8b4043b92a8644d3f1dc7facccbbcc0160b58cbb0f5843e4d421&scene=58&subscene=0": "Chrome v8漏洞 CVE-2021-30632浅析", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247502423&idx=1&sn=b267e37126c3c1551584fb2918328564&chksm=ec9f1324dbe89a32d0b0eaf42cafc557c0df497f0eda36a11c6bb2cd84624b5120694402d195&scene=58&subscene=0": "24年2月必修安全漏洞清单｜腾讯安全威胁情报中心", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247484931&idx=1&sn=559cde17b20b2437e36eaaf56ef34c62&chksm=c2b10475f5c68d632698c341898ab94cf9ae0f661d0c7c9d155e6835bef47c1d34c2f376b3de&scene=58&subscene=0": "腾讯安全威胁情报中心推出2024年2月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247543605&idx=1&sn=4bed4564c2f6c8e49adce900bb4e7f5b&chksm=fa939df4cde414e2ceb8499874aee461a88532a71f556ac0e1fb9e85e02a41a532095d2790ad&scene=58&subscene=0": "GitHub推出全新AI功能，可自动修复代码漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4OTI0MDk5MQ==&mid=2247491127&idx=1&sn=dfad7037596dbd3add485aa345853935": "【漏洞复现】Ruby On Rails", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486219&idx=1&sn=0c0c81e5ead29522267c451e91977fc4": "CVE-2024-27954", "https://mp.weixin.qq.com/s?__biz=MzIzODE0NDc3OQ==&mid=2247492618&idx=1&sn=807f435f7dd6f5cce1dbd5a6ce15705d": "Bluetooth 0-click code execution CVE-2023-45866", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486286&idx=1&sn=8f480d0ba2f21dc406223e9ccb3b20a4": "商混ERP系统sys接口存在SQL注入漏洞|漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493980&idx=1&sn=dc40cfcd2b0821e72215a20eddc8d24b": "【HackerOne 精品】6000 美金的 XSS 漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651264404&idx=4&sn=3e72e0ecbc1e9c6a2a83e2fe7c379a32": "Bugsy：一款功能强大的代码安全漏洞自动化修复工具", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651264404&idx=1&sn=10dbfe89be9ec3f04d973808f5b7e5bb": "可能吗？CISA竟想“彻底终结”SQL漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487814&idx=1&sn=819a1c9e7f41fa8dc9fd7f9d254ff7ae": "【漏洞预警】Adobe ColdFusion任意文件读取漏洞CVE-2024-20767", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492449&idx=1&sn=48ba7e937138d503e8c0e2a488721689": "漏洞复现 || 某智能上网行为管理系统前台RCE", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzc3MTk3Mg==&mid=2247488598&idx=1&sn=cdf765f5c51977504733f815ae5dd64b": "TeamCity身份验证绕过漏洞分析（CVE-2024-23917、CVE-2024-27198、CVE-2024-27199）", "https://mp.weixin.qq.com/s?__biz=MzkxOTUyNTg2MA==&mid=2247483944&idx=1&sn=fd75a1aa06d7a456a690cc52fe951ddf": "【漏洞复现】[0day推送] 宏脉医美行业管理系统 存在中危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519162&idx=1&sn=3872fcc82018e2c561d9e4e7574f0c8e": "开源AI框架 Ray 的0day已用于攻陷服务器和劫持资源", "https://mp.weixin.qq.com/s?__biz=MzUzNTkyODI0OA==&mid=2247525890&idx=1&sn=5de11c033d9376dd8e262841f38814e8": "DSN Injection(CVE-2022-3023)", "https://mp.weixin.qq.com/s?__biz=Mzg5OTY2NjUxMw==&mid=2247511452&idx=1&sn=ee5f8a0178c04cd91338798f792fd9ce": "漏洞图形化GUI一键利用工具（Spring-Core-RCE漏洞）", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247494946&idx=2&sn=02d50f2b437664def333b2a80d7aac2c": "【漏洞通告】Deno socket会话数据污染漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247494946&idx=1&sn=5a3114933a12f61a8d2e21d69b9424db": "【漏洞通告】Adobe ColdFusion任意文件读取漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA3MzI5NzY0OA==&mid=2247495581&idx=1&sn=c4d0144166aa907f162ffcecda20cbbd": "漏洞预警 | 用友UFIDA-NC任意文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwODc2NjgxNA==&mid=2247484004&idx=1&sn=072a102fa5f979693faaa03d19421aa1": "【更新】Ivanti connect secure RCE 补丁分析", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247543740&idx=3&sn=6097bb49d99b6376cdbba37144870931": "超过 28500 台 Exchange 服务器易遭受漏洞攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247505189&idx=1&sn=9fe394a427df211cccf1c6390ce9da51&chksm=cfcab631f8bd3f279dd396be170671433c941a471def299e640590ac31f215a6b4b28dcda809&scene=58&subscene=0": "漏洞通告 | 泛微E-Office10远程代码漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519162&idx=1&sn=3872fcc82018e2c561d9e4e7574f0c8e&chksm=ea94bad0dde333c6d504e2c7680caabb4badc973dd03223bab93d5b62e5469c4db22d966adf9&scene=58&subscene=0": "开源AI框架 Ray 的0day已用于攻陷服务器和劫持资源", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458548995&idx=2&sn=eea5aeafd6e1bb9fb005b7bf21837a38&chksm=b18d4b8986fac29f3176d7a883999b36db65f53416c5640e5e948ffc49298c494ea8fcbe31cc&scene=58&subscene=0": "安全研究员披露AWS Apache Airflow漏洞细节，可导致账户接管", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247543740&idx=3&sn=6097bb49d99b6376cdbba37144870931&chksm=fa939d7dcde4146b176cc01de3e4b62c320373e60a48dc7607f0dd0830ee2a1a20ea7eefe68b&scene=58&subscene=0": "超过 28500 台 Exchange 服务器易遭受漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493980&idx=1&sn=dc40cfcd2b0821e72215a20eddc8d24b&chksm=e8a5e33fdfd26a29d960b72f4edd7da5b671b00dc8ea4628425582211041ed5b7138ecc9aa82&scene=58&subscene=0": "【HackerOne 精品】6000 美金的 XSS 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486230&idx=1&sn=cb33ac0ca58855cb11b9620578142bda": "CVE-2024-29666", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486302&idx=1&sn=e4dbe7cdfe961cb1d5c98146de4de563": "SSRF自动化漏洞检测利用工具|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487820&idx=1&sn=da76d8bfce8c7e9afd1f489221f65146": "【漏洞预警】泛微E-Office10 < 10.0_20240222 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489215&idx=1&sn=562c955dcd4ffdb53aaa530100609392": "泛微E-Office10存在phar反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493985&idx=1&sn=516d038796221267d699f72ae3ca8338": "SRC漏洞挖掘--并发", "https://mp.weixin.qq.com/s?__biz=MzI2MjcwMTgwOQ==&mid=2247490625&idx=1&sn=5a47ad28e5f4b1f93af3073a3ea406be": "荔枝课堂 | 在 iPad 上用 PDF Expert 3 看书学习是一种什么体验？", "https://mp.weixin.qq.com/s?__biz=MzkxNTU5NjM5MQ==&mid=2247485345&idx=1&sn=3fe33166e30cea5be21ce84626debd5c": "【漏洞复现】通天星CMS安全监控云平台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247488616&idx=1&sn=e8fed40eb8ff25099321e93e40b2c15b": "创宇安全智脑 | Adobe Coldfusion pms 任意文件读取（CVE-2024-20767）等19个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzkyNjMzMTcwOQ==&mid=2247495104&idx=1&sn=56d4debae4349ceadd3510cc50a9c436": "0328-新型僵尸网络感染全球88个国家∕地区-主流AI算力框架漏洞威胁全球数千大模型-印度国防部等机构被黑客打穿", "https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247517622&idx=2&sn=47efee5348d9b9f2085e21ca240808d2": "要闻 | 主流 AI 算力框架漏洞威胁全球数千大模型", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247543768&idx=1&sn=a853ae8ac46fbf500233d3f101949f32": "主流AI算力框架漏洞威胁全球数千大模型", "https://mp.weixin.qq.com/s?__biz=MzkyNjU3NDQ1MA==&mid=2247487883&idx=1&sn=bfef00a76750c743eebe0d8207405d9a": "【漏洞复现】CVE-2023-51385：OpenSSH命令注入", "https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651131325&idx=2&sn=8459d54436b80fa2fc498b040dcf767f": "3月漏洞快报 | GeoServer 文件上传漏洞、Atlassian Confluence 路径遍历漏洞......", "https://mp.weixin.qq.com/s?__biz=Mzk0MTMzMDUyOA==&mid=2247496453&idx=1&sn=20c7bc4b2233a9b58c5a5aa7c30cee44": "黑客利用 Aiohttp 漏洞寻找脆弱的网络", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485558&idx=4&sn=743bd885a1ce1470ba8d1bde660fecff": "【漏洞通告】章管家-印章智慧管理平台文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485558&idx=3&sn=0af61fddc145a5a1ce5d73d29b9411b7": "【漏洞通告】Adobe ColdFusion 访问控制错误漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485558&idx=2&sn=826669b0b0f740d3651b381d0242a88a": "【漏洞通告】用友NC Cloud runScript SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485558&idx=1&sn=37a0418c8edf9203555603773d3752c6": "【漏洞通告】用友OA IPortalSpecService目录穿越漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247505539&idx=1&sn=ccc26f685a9dc6062dbc10b117d1285c": "小米WiFi路由器漏洞挖掘-WAN 命令注入、LAN 认证后堆栈缓冲区溢出、LAN 身份验证命令注入、WAN 堆栈缓冲区溢出", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247505539&idx=3&sn=62c3a000b7bef18ea4036c8cf9165503": "CVE-2024-2398：HTTP∕2 推送标头内存泄漏", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247505539&idx=2&sn=72a4e1ab4f360bb7cd2f337f9cc54799": "剖析复杂漏洞并在 Ichitaro Word 中实现任意代码执行", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247554593&idx=1&sn=3d4a275472688f91ef388d6c8f9fbb18": "10 大 Web 应用程序漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247538459&idx=1&sn=e374e97e65473d8856accc0efd8b5e67": "漏洞挖掘 | SRC中信息收集姿势分享", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247607300&idx=1&sn=7f70d17047e0819dc42890cc505bebaa": "支付类漏洞挖掘技巧总结", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522400&idx=1&sn=8af575b3c82a15d8a57822191d69c208": "【漏洞通告】Adobe ColdFusion任意文件读取漏洞CVE-2024-20767", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247491131&idx=1&sn=4a184451e517b120f4504fe73c03c19d": "谷歌针对PWN2OWN 2024演示的两个Chrome零日漏洞进行了处理", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511311&idx=2&sn=8b9d344600b36db40c81d164df732d03": "2023年零日漏洞在野利用激增，商业间谍软件是主要使用者", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458549131&idx=2&sn=9c4555bf5a8d04009f6bab88e564c52c&chksm=b18d4b0186fac217e252dde4f3c3d7f9d44c2cfcb1497f9e5e4d49f1afe020772601235568da&scene=58&subscene=0": "不取消上百次弹窗就无法正常使用，苹果密码重置功能疑似存在漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519170&idx=1&sn=31612ff9461ff59184a818b76f04c198&chksm=ea94baa8dde333be86a1b2054ea40407dfa5a45d469b948ac55085e5f64e7872f7e2007c90ad&scene=58&subscene=0": "谷歌修复 Pwn2Own 2024大赛发现的两个 Chrome 0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519170&idx=2&sn=bbf2c37f65d8ab7122da6825cea54ef3&chksm=ea94baa8dde333bed9f1c3fa01b9fe5132e2e6d1eaf38be56ab90a1500647629f3819d43f19c&scene=58&subscene=0": "CISA称微软 SharePoint RCE 漏洞已遭在野利用", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500654&idx=1&sn=0e9efd6338a68c4c46c4f6f2af38cc04&chksm=fe79e7f6c90e6ee0d161aaa94ec7e06bae37418bd357356715429d4bd59751f128e6fc8a7f7e&scene=58&subscene=0": "【已复现】泛微E-Office10远程代码执行漏洞(QVD-2024-11354)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511311&idx=2&sn=8b9d344600b36db40c81d164df732d03&chksm=ebfaea2fdc8d633941f357acc2e5ca5d0738e34557a3fd3dd609c88f9d646cabfc3ddbcad746&scene=58&subscene=0": "2023年零日漏洞在野利用激增，商业间谍软件是主要使用者", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493985&idx=1&sn=516d038796221267d699f72ae3ca8338&chksm=e8a5e302dfd26a14f57266affe3f8c47fd71c2db6c5c85a30b7686132f9d9de730b7a61eb823&scene=58&subscene=0": "SRC漏洞挖掘--并发", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247543768&idx=1&sn=a853ae8ac46fbf500233d3f101949f32&chksm=fa939d19cde4140fa247d44b0a3fa556e9cd6bfe4d73723fcef90848b2afcf70474eb836e36c&scene=58&subscene=0": "主流AI算力框架漏洞威胁全球数千大模型", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522400&idx=1&sn=8af575b3c82a15d8a57822191d69c208&chksm=ce461370f9319a66be8bf81a8a72e3d1f573857772e69819261e1d74a67fc642ff565930091f&scene=58&subscene=0": "【漏洞通告】Adobe ColdFusion任意文件读取漏洞CVE-2024-20767", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488965&idx=1&sn=556eb049bdac71a03f7d670be613816e&chksm=fb02989dcc75118be00917391c9080afa4cc49c1d5ce676f2132ecedd618ec0fe218dd74a3c9&scene=58&subscene=0": "【已复现】泛微E-Office10远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519178&idx=1&sn=e03416d8382a0192cc080f67a6f30691&chksm=ea94baa0dde333b655edb3b47d9505cf59acf160659e24e10eff72a4943f2033fac0444c0c3d&scene=58&subscene=0": "Linux “wall” 漏洞已存在十年之久，可制造虚假的SUDO 提示并窃取密码", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786425&idx=1&sn=5830cf62482d6bfc335629be5b0f6606&chksm=8893b856bfe43140f136c1985635028c31250323de6af0a05cef8d515dd816e0ea51b157bb28&scene=58&subscene=0": "NIST 成立新联盟来运营美国家漏洞数据库（NVD）", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247574444&idx=2&sn=c7e6ff780300c9434d58561540b5e499&chksm=e9147396de63fa80203f595755d777c9286b4aec11324aa35a4f21d92474139dfb21873beb5b&scene=58&subscene=0": "ScreenConnect 管理员应尽快修补关键的 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247543799&idx=4&sn=9655168f486af863a11547b32a0b2409&chksm=fa939d36cde414202df8d918c7b5de9dbe961c92936825abb8a28780c9b38b11f91b883ca245&scene=58&subscene=0": "黑客披露“万能房卡”漏洞，可秒开全球数百万酒店房间", "https://mp.weixin.qq.com/s?__biz=MzUyOTkwNTQ5Mg==&mid=2247488989&idx=1&sn=ee3491ee73099e611baa204ede650ccc&chksm=fa58b7e6cd2f3ef02a46251a49b176df9de4e0664a1e245dc53e1b69044704e1183096b92857&scene=58&subscene=0": "Exchange攻防系列之CVE-2019-1040分析", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500698&idx=1&sn=55b287a54a2234e171ae65f1330ef1b7": "【事件描述修正】XZ Utilѕ 工具库恶意后门植入漏洞(CVE-2024-3094)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486316&idx=1&sn=ce076b31fcc0dd3bf274829e05ed7795": "记一次非法网站资金盘股票基金的渗透-漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247513196&idx=1&sn=89a7a46bd92ca27ac0f0a677cf34f43f": "【核弹漏洞？】XZ Utils供应链投毒事件分析", "https://mp.weixin.qq.com/s?__biz=MzkwNDUxNjg4MA==&mid=2247483861&idx=1&sn=7982bbb4c018d90df91cb344b01ab2f1": "(互联网未公开)海康威视综合安防存在文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494000&idx=1&sn=dba6edab2fd2c650fc34cd11978c2867": "子域名接管漏洞: 赚钱小技巧", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519193&idx=1&sn=14b16d44e50babd5dd2fa00c4bd1bffd": "XZ Utilѕ 工具库恶意后门植入漏洞(CVE-2024-3094)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652056942&idx=4&sn=eaa8333399a2ce5e9600f453b7943168": "【安全圈】微软重发 Edge 浏览器 123 稳定版：修复兼容性问题和 4 个零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486271&idx=1&sn=9f4aae9666bb716d22442f6bad7b4b51": "CVE-2024-20767", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247485897&idx=1&sn=518fbf058d20c47407c26ccf2db279ab": "大华智慧园区综合管理平台poi任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485971&idx=2&sn=1eb9e5a46400b4cc7397129578694b26": "联达OA UpLoadFile.aspx接口存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485971&idx=1&sn=1ff418faefa7d29d963287d2dcc9484f": "用友U8-Cloud FileServlet接口存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494007&idx=1&sn=3f9011bbf0046f9d7102ff0daddd29fc": "命令注入漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247493909&idx=1&sn=b3a8b70dcdfa0f216fd30431abf562f8": "xz-utils后门漏洞 CVE-2024-3094 分析", "https://mp.weixin.qq.com/s?__biz=MzU3OTMxNjkzMQ==&mid=2247483986&idx=1&sn=234c883831335ae0330c26fba860d8c8": "Weblogic CVE-2021-2394漏洞复现分析原创", "https://mp.weixin.qq.com/s?__biz=MzkxNTEzMTA0Mw==&mid=2247495018&idx=1&sn=9cb79ea7183c80a36b5f9792911c2baf": "【漏洞预警】JumpServer 多漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247505719&idx=3&sn=5d0fd35d8874bd4fd084291ba94d1fc3": "CVE-2024-3094 一个带有XZ后门的SSH蜜罐", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247505719&idx=1&sn=1f4d6ce8cb103b37b335c82f92b1340b": "深入研究 CVE-2023–46298: Next.js 中的拒绝服务漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649290882&idx=1&sn=baf1bfbcb1b39f3e2cbfe1ad5d12f218": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664209397&idx=6&sn=be9efc82bc65c10ad880920bca6539ca": "评论 | “免密支付”的漏洞亟待填补", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487853&idx=3&sn=2d1fa8fd9300ad894a1f41c71b2b3854": "【漏洞预警】Jumpserver<3.10.7 Ansible Playbook远程代码执行漏洞CVE-2024-29201", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487853&idx=2&sn=35732e7164c81938a5f7d204cde918d5": "【漏洞预警】Jumpserver<3.10.7 Jinja2注入远程代码执行漏洞CVE-2024-29202", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487853&idx=1&sn=dd50d3e37c4d416809685a09f4c58752": "【漏洞预警】XZ-Utils 5.6.0-5.6.1版本存在后门风险CVE-2024-3094", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519204&idx=2&sn=6fc646b9575f6837ef0f55d569c11709": "思科IOS 漏洞可导致未认证的远程DoS 攻击", "https://mp.weixin.qq.com/s?__biz=MzkwOTQ4NDMzOQ==&mid=2247484052&idx=1&sn=f1db0401adfcbf86526acb55808a0dc7": "CVE-2023-38203", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486000&idx=2&sn=12e45cf3af24ebcdc81ccc30d3a8dbf3": "鸿运(通天星CMSV6车载)主动安全监控云平台LoggerManagement∕logIndex.html存在未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486000&idx=1&sn=5d24679dac266958d742b78f30b98de9": "鸿运(通天星CMSV6车载)主动安全监控云平台inspect_file∕upload存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487866&idx=1&sn=f998f19b60ebf8d11943b4411d955266": "【漏洞预警】WordPress LayerSlider插件SQL注入漏洞(CVE-2024-2879)", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488660&idx=1&sn=96a5c25bc8f280014e0e70e0ec13cff4": "【分析复现】XZ供应链后门漏洞（CVE-2024-3094）处置手册", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247496627&idx=1&sn=0f65a56d67de2ead7f9ee32ff1441632": "XZ Utils（CVE-2024-3094）供应链投毒深度分析", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489024&idx=1&sn=e35e250d13bd0a6c8fdb9625f0554221": "Nginxwebui后台命令执行审计", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519223&idx=2&sn=a927e2b6bd81218102ea07e2de3133d7&chksm=ea94ba9ddde3338bf760ba11cb2fb665b8ad6e728bcc5b21ea7c1c1bf46968a037b5e55499a3&scene=58&subscene=0": "热门Wordpress 插件 LayerSlider 中存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489024&idx=1&sn=e35e250d13bd0a6c8fdb9625f0554221&chksm=fb029b58cc75124e9f82c6536b5775e8873f88443e71380b9b25962c047bfc18ff34fdaff3f3&scene=58&subscene=0": "Nginxwebui后台命令执行审计", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247496627&idx=1&sn=0f65a56d67de2ead7f9ee32ff1441632&chksm=ce96be8df9e1379be4f1dd48c664973dec99c2efad72fd87b39ada0f5ade13e11e9478c9ccac&scene=58&subscene=0": "XZ Utils（CVE-2024-3094）供应链投毒深度分析", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651128989&idx=1&sn=b1ae740d4e11619094d5cf8cc9a55698&chksm=bd15b44e8a623d58acfa9e49102a301d884cf65374356b078a2b911e6fd623157337450c8073&scene=58&subscene=0": "6款较流行的开源漏洞扫描工具推荐及特点分析", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500763&idx=1&sn=36a25dd1e37297d53f703886c53936d8&chksm=fe79e743c90e6e557207868cb9253e5706af7b6524e5578bea2afa581c7669304011d69779e1&scene=58&subscene=0": "Ivanti Connect Secure IPSec组件堆越界写漏洞(CVE-2024-21894)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519250&idx=1&sn=a9eb759176bc25d080dd038567016edc&chksm=ea94bd78dde3346e8571088ffb3e1104df63785be22cebfc4b338fab213de9a5a83aec96d089&scene=58&subscene=0": "Crowdfense 出价3000万美元收购安卓、iOS和浏览器0day利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519250&idx=2&sn=9683638aaf21b4d1d794837ff20dd0ab&chksm=ea94bd78dde3346e88bfadb96c14584c0b4fe336e7c708699ee52db68640ead992388acf139e&scene=58&subscene=0": "Hugging Face 等AI即服务平台易受严重漏洞影响，遭AI供应链攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550068&idx=3&sn=b0b82cb9cf39f1a3443ebf12c2f507f3&chksm=b18d4fbe86fac6a8fe7e5f94f7757b8f756a265271f77305a95e0008a61645c529bbde5c44ec&scene=58&subscene=0": "直播回放更新！《系统0day安全-Windows平台漏洞挖掘（第2期）》", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247543958&idx=4&sn=3c0264c3e19c2bfae69e45f21470e8f1&chksm=fa939a57cde4134105726d648d0e3d8f619fc6878801ea60da7036a36589adb5f54bcc3140fc&scene=58&subscene=0": "五角大楼如何修复军方软件的漏洞？", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247494090&idx=1&sn=6ef2ecf03ef493a5a3737cea4a3983ba": "CVE-2024-24747：MINIO权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486329&idx=1&sn=dc072b8a3dc27a3026f0d52573895bc2": "CVE-2024-25850", "https://mp.weixin.qq.com/s?__biz=Mzg3OTE2MzM3OA==&mid=2247486367&idx=1&sn=5881535399d45d92fb742a0006cce4e5": "从exp反推CVE-2022-0847dirtypipe原理", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486424&idx=1&sn=03255073f7b42f0e9be73b574faf41bb": "一款FastJson反序列化漏洞利用和扫描探测工具|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzkzNjM4OTM1Ng==&mid=2247483937&idx=1&sn=c7d9672aa29113677f5568c2fd754db8": "自定义BurpSuite漏洞扫描——BChecks", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487906&idx=2&sn=3b663cd78d143b6d7025d136c7875d51": "【漏洞预警】微软4月多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487906&idx=1&sn=31d3975488ea70eaa313a33392d56ed6": "【漏洞预警】Rust命令注入漏洞（CVE-2024-24576）", "https://mp.weixin.qq.com/s?__biz=Mzk0NzM4NzI1MA==&mid=2247486080&idx=1&sn=683d1626ce23f2c41030bd1d7476165a": "RCE 遇到受限 shell 的突破", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486137&idx=1&sn=0458efb9a23f7e3a9d497bd77a4d3c7a": "科荣AIO ReadFile存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494135&idx=1&sn=44c33bdd7690fe2ea031245298bdd126": "一次从子域名接管到RCE的经历", "https://mp.weixin.qq.com/s?__biz=Mzg3NDk1MDczOQ==&mid=2247484796&idx=1&sn=e73164cc96f9e27da353ab7f6908bf01": "[已复现]新视窗新一代物业管理系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247518176&idx=1&sn=90cfa09dbf84357f6a1c4300cffd6c72": "2024-04微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzA5OTk2OTY5MA==&mid=2247485625&idx=1&sn=380b56cb7473293d20228f702cb8cb6e": "Microsoft 4 月 CVE 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511378&idx=1&sn=cfca32cff1fd0c9419c314d202d200f3": "预算超2亿元，这家经纪公司扩大零日漏洞收购规模", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506149&idx=3&sn=a94dd6d79f3ea2442ace4fd288bc287c": "Jasmin勒索软件Web面板路径遍历PoC", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550115&idx=2&sn=d2aed2de5ebd3bc02bec72a88ef2f7ef": "Rust一个满分漏洞可能允许Windows命令注入攻击", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651443822&idx=2&sn=6f89e00b73cc0ad9aae5c2625e1871cc": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651443822&idx=1&sn=4006b8f450294fe6781b95b25782851e": "信息安全漏洞周报（2024年第15期）", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247490987&idx=1&sn=7ba3a5bc3a14039326a4aa92a6e2869b": "漏洞预警 龙卷风科技 cms 存在文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786486&idx=1&sn=0b1fe310f847fda664a13e169c44bdaf&chksm=8893b819bfe4310f844dc42f1fb37387854af647c231c2cc99d040138efcc589c256dfb8e2a5&scene=58&subscene=0": "注意 | 声称最安全的编程语言Rust存在严重漏洞，可导致 Windows 命令注入攻击", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511378&idx=1&sn=cfca32cff1fd0c9419c314d202d200f3&chksm=ebfaea72dc8d63646f504ac8415e7167bd7320dcd3a8da1b2565c0a37a66b1fbd3803c246090&scene=58&subscene=0": "预算超2亿元，这家经纪公司扩大零日漏洞收购规模", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519261&idx=1&sn=1f669e17acccbb5f3a974c466686d164&chksm=ea94bd77dde334619c916fa753497a102ad012bb069cba0cc174d147abf2488f2e649f7953f7&scene=58&subscene=0": "微软4月补丁星期二值得关注的漏洞：4个0day及更多", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519261&idx=2&sn=0dedc7825e43786bfe415b3a48661fbe&chksm=ea94bd77dde3346150266a53a373ba5200b6159f9ce9c7df03c128362f69bcfe9acad316e3a6&scene=58&subscene=0": "Rust 严重漏洞可导致 Windows 命令注入攻击", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247505349&idx=1&sn=bc76600ed4fedc1136e7b458d01f16b0&chksm=fa52007bcd25896d4240214ec76a6f9c0908cfa3787f40fcf15612f1cc179c9a0c78d8952558&scene=58&subscene=0": "Windows DWM 核心库信息泄露漏洞 (CVE-2024-26172) 复现分析", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499080&idx=1&sn=8613db53c72860bf4522895b44c696bf&chksm=973ace2aa04d473c112a608c469f020910b862231d26a49c7c7bf1dff1cba44332c233efe9fb&scene=58&subscene=0": "CNVD漏洞周报2024年第14期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499080&idx=2&sn=7400ea9d589f19c9a6f00a45fb17a2a1&chksm=973ace2aa04d473c7a97867e20df0beb308bdeb35639a62a3444c0272d953b8127f7771c5fdf&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240401-20240407)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494135&idx=1&sn=44c33bdd7690fe2ea031245298bdd126&chksm=e8a5e394dfd26a82331b8c8606a755dbe577f8c31b2e1d713f4e638d033dc1467f22de5d6bae&scene=58&subscene=0": "一次从子域名接管到RCE的经历", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500774&idx=1&sn=84281239bf961b4365aa776129d2e847&chksm=fe79e77ec90e6e686d176ffe08d2e74cd7aa270544794f82b0dd2d7d638329cb644094a18263&scene=58&subscene=0": "微软2024年4月补丁日多个产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247513284&idx=1&sn=2cb391d068c745c8a93a717c283ef2af": "CVE-2024-23897 Jenkins 未授权任意文件读取漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486150&idx=1&sn=9b0138cc0cb06187b6dc752daa33774a": "泛微e-cology ProcessOverRequestByXml接口存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487911&idx=1&sn=c871371a4ba8a8e655c462660a8ef0a4": "【漏洞预警】Fortinet FortiClientLinux远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489252&idx=1&sn=ee1701dbb0ce1a632c358edc2c0de88a": "【风险通告】Rust存在命令注入漏洞（CVE-2024-24576）", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247484400&idx=1&sn=911457d40c9367d65873c93dd19f2c6f": "用友NC saveImageServlet 文件上传漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651268393&idx=2&sn=43a03b00233393e578ae3d272da26acd": "幽灵漏洞进阶版来了，影响 Intel、Linux、AMD......", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652057774&idx=3&sn=a77597c1440f539a9f5a13ff0da2a117": "【安全圈】“幽灵漏洞”阴魂不散，v2 衍生版被发现：影响英特尔 CPU + Linux 组合设备", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664210309&idx=4&sn=b0bb2aca1b0c8db8ba91010ab77ec3e9": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg2MjYxODQ4Mw==&mid=2247484972&idx=1&sn=cfa9f7e367425e2ecd111de8573dfb6e": "CVE-2024-28255 RCE漏洞（附EXP）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550184&idx=3&sn=460ecdad566d58a41244507c95605b30": "二进制系列之Pwn篇-逐步掌握二进制漏洞挖掘的技巧和操作系统底层知识", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506182&idx=2&sn=c527988846019638d3899358e92fab22": "针对 6.4 - 6.5 内核的漏洞利用以及针对 5.15 - 6.5 内核的另一个漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506182&idx=1&sn=cada28147393750a176a8bf29bc2bb36": "Telegram 网传RCE - 官方回应", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506182&idx=3&sn=4dd39f50fd099eb5f7bf07485d9e25b6": "CVE-2024-27980：关键 Node.js 更新修补 Windows 命令注入缺陷", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500805&idx=1&sn=144ae8281feb31c590c9613eaa0bdbed": "Rust 命令注入漏洞(CVE-2024-24576)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486368&idx=2&sn=99df254bffc14e7369ddd4448ff928ee": "CVE-2024-3273", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486185&idx=1&sn=1e454d13e5415d343d126acc74b85954": "魔方网表mailupdate.jsp接口存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247497807&idx=1&sn=34b93137c6b9407cd8803c15eed57b13": "G.O.S.S.I.P 阅读推荐 2024-04-15 爱因斯坦的Exploit之梦", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494257&idx=1&sn=750407a3bb0fb18f096441cb20b2c4f3": "赏金猎人|SRC拿下某后台系统多个高危漏洞思路及试探通用型漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzOTY1MzcyOQ==&mid=2247487056&idx=1&sn=cbfa09b1d08148544bb089999120b43d": "一款对于web站点进行漏洞扫描的打点利器", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487938&idx=2&sn=ccb3a5fd20b1f2e4bd0252e896c30fc5": "【漏洞预警】Telegram Windows客户端可执行文件限制不当RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487938&idx=1&sn=7edfc201ddbb636bb7611bcb81ffba55": "【漏洞预警】MySQL2远程代码执行漏洞（CVE-2024-21508）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487938&idx=3&sn=9325502dd73dd75f5f843823dbaa4182": "【漏洞预警】Apache Solr Operator身份验证凭据泄漏漏洞 CVE-2024-31391", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487938&idx=4&sn=ae9a00e481c1bc444a4e4893065ed782": "【漏洞预警】Apache Zeppelin shell 代码注入漏洞（CVE-2024-31861）", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651269825&idx=1&sn=709fcda1e3a1fd566263d13d91b63716": "通过这个0Day漏洞，黑客对Palo Alto防火墙发起后门攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652058066&idx=4&sn=9d8c2d87b8078f7082a560de61e0f86a": "【安全圈】黑客成功利用0day漏洞对Palo Alto Networks的防火墙进行后面攻击", "https://mp.weixin.qq.com/s?__biz=MzkzMDE5OTQyNQ==&mid=2247485208&idx=1&sn=4b5cdb3715bc9f0e21f17e335f07f3cc": "漏洞挖掘|记一次对某杀猪盘的漏洞挖掘(反诈)", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649290944&idx=1&sn=a317a261aecec799b738270b5967137e": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489052&idx=1&sn=905220836ff310a044727cead3c55952": "SnakeYaml 中不安全的反序列化漏洞 (CVE-2022-1471) 有感", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550386&idx=2&sn=aeab9c8b463c21d5814fee418d11d660": "知名防火墙厂商曝满分RCE漏洞，Palo Alto Networks警告漏洞正被利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519289&idx=2&sn=4c3fb5e7519056c3adfbd18c7a6561d3": "Telegram 修复Windows 版中的0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519289&idx=1&sn=86e226003b5da9dd0d6867f4b45fcb1a": "Palo Alto：注意！PAN-OS 防火墙 0day 漏洞已遭利用", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500842&idx=1&sn=74014f4c839835122d2fcd5c4b907597&chksm=fe79e0b2c90e69a41eda8e9264cb69bd11571200f6c94b24a7d589f1b458cb4a0d2065dc4128&scene=58&subscene=0": "【在野利用】Palo Alto Networks PAN-OS 命令注入漏洞(CVE-2024-3400)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486326&idx=1&sn=8c1ae944f8944dd4d5df1d7f3805805e&chksm=ec6fec76db18656019a8a522d91c414c9c49790d2e64f14d442071a0381f16d7bfca62a9d9b3&scene=58&subscene=0": "Palo Alto Networks PAN-OS GlobalProtect 命令注入漏洞（CVE-2024-3400）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550386&idx=2&sn=aeab9c8b463c21d5814fee418d11d660&chksm=b18db0f886fa39eed637d2366f40807332ee8581224bac3367901341778103525288a61d9abe&scene=58&subscene=0": "知名防火墙厂商曝满分RCE漏洞，Palo Alto Networks警告漏洞正被利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519289&idx=1&sn=86e226003b5da9dd0d6867f4b45fcb1a&chksm=ea94bd53dde33445851c3ec7ca670a0d3c51235d027e8d130593cdc9eabd3a33d9758580655a&scene=58&subscene=0": "Palo Alto：注意！PAN-OS 防火墙 0day 漏洞已遭利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519289&idx=2&sn=4c3fb5e7519056c3adfbd18c7a6561d3&chksm=ea94bd53dde3344539968f93bb42b9cdb70baafffb79a18115ec887be44e431cd86921fbf01b&scene=58&subscene=0": "Telegram 修复Windows 版中的0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544052&idx=2&sn=7e48c5506ae1e7532f386274141b94ed&chksm=fa939a35cde41323ae5907b0136b24ec7aa9100d1083987619093a72ec61e904cf737213a216&scene=58&subscene=0": "英特尔、联想等服务器曝出难以修复的漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489052&idx=1&sn=905220836ff310a044727cead3c55952&chksm=fb029b44cc751252fb3bb94057c96a7988fb6c01cf70cf1a190ac9024addf1d34341044584e0&scene=58&subscene=0": "SnakeYaml 中不安全的反序列化漏洞 (CVE-2022-1471) 有感", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522475&idx=1&sn=2a02d9b75e8a4b4a91ddd7093ac55368&chksm=ce4613bbf9319aad0cea1a5738f51a9675aabbcc2cc900d5093e108ab229beb1c10aecaef448&scene=58&subscene=0": "【漏洞通告】Palo Alto Networks PAN-OS 命令注入漏洞CVE-2024-3400", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494257&idx=1&sn=750407a3bb0fb18f096441cb20b2c4f3&chksm=e8a5e012dfd26904eb37549432e0e923f814556148c3661a7254eeed132f3bd83cf672b1f8d0&scene=58&subscene=0": "赏金猎人|SRC拿下某后台系统多个高危漏洞思路及试探通用型漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494650&idx=1&sn=bc20d2fda592bce902ff328419c1bd66&chksm=fd74db33ca035225f90c3c008d6b0c56118d8d22b40136905cdc749486580d3bd3704ead78c8&scene=58&subscene=0": "CNVD漏洞周报2024年第15期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494650&idx=2&sn=7b0f9b8ede31b1d52636f9127c953d8d&chksm=fd74db33ca035225c12446a4a7e6babd60693712dd10066b9f20c1f7c619bb7d1be994f1554a&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240408-20240414)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506392&idx=2&sn=7e269213d1a2f4e406f4047f316af91f": "漏洞解释：针对 Google Chrome 扩展程序的 ZIP 嵌入攻击", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247496&idx=1&sn=0b9f36983b22580c8375187a818728a4": "Palo Alto Networks PAN-OS 命令注入漏洞分析（CVE-2024-3400）", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486270&idx=1&sn=42c4ed99574402368042d8c559a9ee64": "SpringBlade dict-biz∕list接口存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4OTkwMDc1Mg==&mid=2247484667&idx=1&sn=e9e8c1d64e0c5ecebbb8e2c8f8ecf119": "DataCube3 getting_index_data.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODY1NzEwMA==&mid=2247483872&idx=1&sn=2c1f582bbff6fa9723f9588a09ac3762": "1day分享 ｜ Geoserver命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487975&idx=1&sn=f9026f59ec859c6f1872bc065ddfb610": "【漏洞预警】SEMCMS安全漏洞(CVE-2024-30938)", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247484425&idx=1&sn=cf4f01ccf15bf85784b04d7b1948f033": "kkFileView远程代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092710&idx=1&sn=c11d456be94b7a688a67aa50f4d66eef": "CNNVD关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664211278&idx=4&sn=e4de21613365aeacdaf08d5da06b5203": "CNNVD | 关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247485249&idx=1&sn=73521e11f5efa433b5d1fd4b47071c05": "NodeJS操作符空格漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550737&idx=2&sn=6c80e67db097d8326fdc8389b970f672": "西湖论剑2024 IOT赛后复盘及mqtt rce详解", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247536829&idx=2&sn=e58db9d1f93165cc04c561e9ce9124ca": "英特尔和联想存在永久的安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519321&idx=1&sn=598d5437db9f0b64d4fa21e3acdace51": "一眼已攻陷：GPT-4仅凭阅读威胁公告即可利用多数漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MDE0MzQzMw==&mid=2247487282&idx=1&sn=acf5661894b587fc89ca493f99d611ff": "2024年，还没有 CNVD 证书的朋友赶紧点开看看！", "https://mp.weixin.qq.com/s?__biz=Mzg4MzY2NjEyMQ==&mid=2247485931&idx=1&sn=6abcf5dfe3ce41f62d3fc66bed802a92": "Microsoft Edge 漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550849&idx=1&sn=b8850e0b29af4bdd94cce4572aac98a6&chksm=b18db2cb86fa3bdd43e7b9ce4e292a618bcf70797dc813c8bb3426f6693ec32bc174eaca0b74&scene=58&subscene=0": "以栈的视角来认识格式化字符串漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486565&idx=1&sn=7448a7792682155820ffcdbe4b0e178c": "AppMsg一款适用于以APP病毒分析 APP漏洞挖掘 辅助分析工具|漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486348&idx=1&sn=d432918c3ca047ca2d86b05d23cbe883": "泛微e-office系统UserSelect接口存在未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247515970&idx=2&sn=1b694c92d92ac7ebaf1f63dade463580": "黑客利用 OpenMetadata 漏洞在 Kubernetes 上挖掘加密货币", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506711&idx=1&sn=e31319146e72455d708aa1f71cdc6233": "CVE-2024-21111 Oracle VirtualBox 权限提升（本地权限提升）漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652058573&idx=3&sn=f816d148cccd097b7142bc93e79eb352": "【安全圈】黑客利用 Windows SmartScreen 漏洞投放 DarkGate 恶意软件", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652058573&idx=2&sn=5f3912b3a736fb50ffb5bf29418df333": "【安全圈】GPT-4 会自己发起漏洞攻击，成功率高达87%", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247484150&idx=1&sn=b3a31717b711df154bec08d47d88c9eb": "Oracle VirtualBox 权限提升漏洞 (CVE-2024-21111)：PoC 已发布", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651271350&idx=2&sn=dfbabe374f2ba05c3350e1fd1f5fe613": "Palo Alto Networks披露PAN-OS防火墙「满分」漏洞细节", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651271350&idx=1&sn=2c284ab4d95bae42b39325a6c6d3f06b": "GPT-4 竟然会自动实施漏洞攻击，成功率高达87%", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502884&idx=1&sn=d2dab0909dbc08fe8f759a3bbbe482d8": "雷神众测漏洞周报2024.4.15-2024.4.21", "https://mp.weixin.qq.com/s?__biz=Mzg2MTAwNzg1Ng==&mid=2247493362&idx=1&sn=39c9b1c4d709e5ad0babb44995b0e412": "大语言模型（LLM）漏洞爆发，AI模型无一幸免", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485659&idx=2&sn=79d267e7a37b2e78b084060d13a74f6a": "【漏洞通告】Jumpserver Jinja2 模板注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485659&idx=5&sn=924450d5db9ca98fb21fb33de1ffa1bd": "【漏洞通告】IP-guard WebServer权限绕过漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485659&idx=4&sn=c8f4c6419cd568975cf9b99dcb078887": "【漏洞通告】大华智慧园区 ∕portal∕services∕clientServer SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485659&idx=1&sn=3bbcc137b0ba1eb715c1582ff93409a6": "【漏洞通告】Jumpserver Ansible Playbook远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494688&idx=2&sn=501caaa2aa8922b2e5d4c250f1a4a3e8": "上周关注度较高的产品安全漏洞(20240415-20240421)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494688&idx=1&sn=2c8e62d2dd2c7b0c1aaa7fa9b4ab2dd5": "CNVD漏洞周报2024年第16期", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544184&idx=3&sn=58ebfa81bbbf55fa4d526c3859f8d5ca&chksm=fa939bb9cde412af2df7d6fc049625ccdf98f83a2a0c1721d891d7ab7ed7b21130a7f48c6a1e&scene=58&subscene=0": "多个僵尸网络利用一年前的 TP-Link 漏洞进行路由器攻击", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494688&idx=1&sn=2c8e62d2dd2c7b0c1aaa7fa9b4ab2dd5&chksm=fd74dce9ca0355ffa112e9b3bd59371ca9b60e0d3c3e84646b1f43629a3993c94ce4505cad04&scene=58&subscene=0": "CNVD漏洞周报2024年第16期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494688&idx=2&sn=501caaa2aa8922b2e5d4c250f1a4a3e8&chksm=fd74dce9ca0355ffeec03917664cfacfb49c47882ae551b76ac5e6c27d657104dd2c86eb6490&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240415-20240421)", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649790976&idx=2&sn=6efd3922f17c003c6fe84975dc8ba4b0": "思科针对“ArcaneDoor”0day攻击 ASA 防火墙平台发出警报", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649790976&idx=1&sn=f54ac35e75e7799b5e65e20e7a61b50e": "重大安全漏洞暴露超过 10 亿中文输入法用户的击键行为", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488003&idx=3&sn=98e268ed0e63e9a37e1bb39bb7cc843b": "【漏洞预警】Apache HugeGraph-Server<1.3.0 Gremlin命令执行漏洞CVE-2024-27348", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488003&idx=2&sn=24b871b27d1d681eb451eeaf79263e40": "【漏洞预警】mysql2<3.9.7 代码注入漏洞【CVE-2024-21511】", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488003&idx=1&sn=b2fd29b66f00e98755386b971fba47f7": "【漏洞预警】OpenMetadata 身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247493759&idx=1&sn=0aed37ae210bde25a6b16a745301b71d": "【论文速读】|大语言模型（LLM）智能体可以自主利用1-day漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511478&idx=2&sn=f343fed3f28e4bdfa0e471c2798fa586": "美国国防工业企业有了统一漏洞奖励计划", "https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651131946&idx=2&sn=b36fa26bacadfd65ab866b87562e84aa": "4月漏洞快报 | kkFileView任意文件上传导致远程执行漏洞、Apache Zeppelin 命令执行漏洞...", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247503783&idx=1&sn=e2ee9e5deef4500ebe00923511a02f96": "24年3月必修安全漏洞清单｜腾讯安全威胁情报中心", "https://mp.weixin.qq.com/s?__biz=MzA3MzI5NzY0OA==&mid=2247495621&idx=1&sn=b84c2ebda979dcca1a78849215c36aa2": "漏洞预警 | PuTTY密钥恢复漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544237&idx=1&sn=1fed7846be19428a184ec5613db82c38": "原创 | 首个国内自主挖掘的RISC-V处理器设计中危漏洞研究", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247484976&idx=1&sn=7871c73733720064ba66d3875ee7a0df": "腾讯安全威胁情报中心推出2024年3月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247505597&idx=1&sn=93fa04b43df8ae82cfac664f15622b82": "漏洞通告 | Primeton EOS Platform远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247488920&idx=2&sn=d68de2c4fdef8f150b172d5ecfdc9b63": "学习干货|玄机应急响应-网站被黑客0day攻击如何溯源应急(文末邀请码)", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247492555&idx=1&sn=f5d09c9ac4e0a1f943e620e440e578fe": "kkFileView远程代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzk0NTI2ODE1Nw==&mid=2247486045&idx=1&sn=7c055cc502e2633b2615772673a3b721": "某世界500强企业|存在通杀漏洞(0day)", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247484868&idx=1&sn=75a1a268f541c19b44c0cc02b71f258f": "CVE-2024-21111 Oracle VirtualBox 权限提升（本地权限提升）漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247486659&idx=1&sn=bc713e6b3b68b0249fc6c08abd67cbc2": "第91篇：shiro反序列化漏洞绕waf防护的方法总结（上篇）", "https://mp.weixin.qq.com/s?__biz=Mzg4OTkwMDc1Mg==&mid=2247484702&idx=1&sn=640525e999262abdbd738315953791cc": "致远互联 OA fileUpload.do 文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MDU5NjI0Mw==&mid=2247489645&idx=1&sn=2a0847aec0003c366cb842147ab3bbac": "沙龙议题揭秘 | 年度TOP白帽高危漏洞挖掘技巧分享", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247505597&idx=1&sn=93fa04b43df8ae82cfac664f15622b82&chksm=cfcab5a9f8bd3cbfb77d19a0953ac32ebf8302a4112b931ab265c1f4de132c4877bf9135ec49&scene=58&subscene=0": "漏洞通告 | Primeton EOS Platform远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519350&idx=1&sn=44cdd16335bfd4e16c8f57397e448771&chksm=ea94bd1cdde3340a03401c5d3c557a9d7ed61164d414c3cf30a1707f0002703fe0d7559b1840&scene=58&subscene=0": "WordPress 插件 Forminator 中存在严重漏洞，影响30多万站点", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519350&idx=2&sn=c98c01499f531e3ceed8f1597c30c578&chksm=ea94bd1cdde3340a7c757c539d7f708d85af2ff07df6f7ceeb2c4755fea809a41f36f2e1ab53&scene=58&subscene=0": "微软：APT28 利用由NSA报送的 Windows 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247499776&idx=1&sn=0a911fa45901a5932972e14270858451&chksm=cfc5675ff8b2ee495d846a9b662e33be44a3e19a634da8324603914721bf529c942959628a26&scene=58&subscene=0": "五一漏洞赏金狂欢！假期放肆嗨，出游更痛快，快来领取你的游玩经费！", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511478&idx=2&sn=f343fed3f28e4bdfa0e471c2798fa586&chksm=ebfaea96dc8d6380e878a00fe1264892f7686c5257e00dbf7bacb87d86265dd32b4ff953e4dd&scene=58&subscene=0": "美国国防工业企业有了统一漏洞奖励计划", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247543454&idx=1&sn=1e3e513726127ea179025260a0fba3fc&chksm=c1e9a6cff69e2fd9a94153a4bc4bf5b13ae544619572d63a32b4e01a4f77a12bdb5360349896&scene=58&subscene=0": "原创 | 首个国内自主挖掘的RISC-V处理器设计中危漏洞研究", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544237&idx=1&sn=1fed7846be19428a184ec5613db82c38&chksm=fa939b6ccde4127a5bada5bcada6624497bcb8a39c757f8857d925ddea7f97b1c3970081d35b&scene=58&subscene=0": "原创 | 首个国内自主挖掘的RISC-V处理器设计中危漏洞研究", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247505883&idx=1&sn=bad9d8ba4fab8ab9d675053cea5a82dd&chksm=fa520265cd258b7352f95924e83dd75474ae4714de7258bcb8bf6af41da268cf034bba1c3d7b&scene=58&subscene=0": "浅谈API漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247503783&idx=1&sn=e2ee9e5deef4500ebe00923511a02f96&chksm=ec9f16d4dbe89fc2856cd535957f273023a01c7fd3579a19951348e36600f08b2aad3227fb69&scene=58&subscene=0": "24年3月必修安全漏洞清单｜腾讯安全威胁情报中心", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247484976&idx=1&sn=7871c73733720064ba66d3875ee7a0df&chksm=c2b10446f5c68d5044eed0c05ddcbb8ef6ae9b25f1f964a545b2ed7d700c538b4ae51d725b73&scene=58&subscene=0": "腾讯安全威胁情报中心推出2024年3月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458551587&idx=2&sn=ad2e7ca13d3c5f5590d9e51191f1357d&chksm=b18db5a986fa3cbf4e6bfd3c1c06ae327498f64ee737216f7708c8ea3569e11bd9605f097712&scene=58&subscene=0": "文件传输服务器软件CrushFTP曝0day漏洞，且已被利用", "https://mp.weixin.qq.com/s?__biz=Mzg3Mzg3OTU4OQ==&mid=2247489804&idx=1&sn=1cceae072cda0e60b3d6afab26db516c": "盘点PHP中的变量覆盖漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247505621&idx=1&sn=4009baa900f475b0c2c1e5dbf56c01be": "漏洞通告 | 禅道项目管理系统权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651272965&idx=1&sn=1c44ccdf652fad0a6b7ac0407c1557a8": "经验分享 | 记一次通过子域模糊测试识别漏洞并获取高额赏金的经历", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652058956&idx=4&sn=aa4e177beee6b92b43429441df14cbdd": "【安全圈】PuTTY SSH 工具发布紧急更新修复高危漏洞：私钥可被窃取", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247507519&idx=2&sn=6f9e4f56042cbd38da042e13b4b547aa": "漏洞通告｜禅道项目管理系统 身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247507519&idx=1&sn=c68eda4b6bc3f008e817782b875b47b7": "漏洞通告｜CrushFTP 服务器端模板注入漏洞(CVE-2024-4040)", "https://mp.weixin.qq.com/s?__biz=MzUxNTQxMzUxMw==&mid=2247522012&idx=1&sn=8fd924c0e607e8c955fc083f5279cea2": "安全通告丨网络安全漏洞通告（2024年4月）", "https://mp.weixin.qq.com/s?__biz=MzU0MjEwNTM5Ng==&mid=2247517929&idx=1&sn=948d8b3ae0bb47be9b228e3d59335d55": "GitHub 被曝安全漏洞！", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519366&idx=2&sn=ba58720219d831205c58a95b86511516": "19个月之后，博通终于修复了这些 SANnav漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519366&idx=1&sn=10637fa1de24be7f83f126a733409827": "iMessage 零点击RCE利用被曝现身黑客论坛", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488033&idx=4&sn=c4b77244caf7a57b6d7621ffd1f0b09c": "【漏洞预警】metersphere信息泄露漏洞(CVE-2024-32467)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488033&idx=3&sn=9b341b1dec54cfbdbc3ae8ce3aa09333": "【漏洞预警】ThinkCMF安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488033&idx=2&sn=f04d75cad4bc0f1fee02b2c25126adec": "【漏洞复现】禅道项目管理系统身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488033&idx=1&sn=7971ce0cd1d6bba93d3af3c4932bb902": "【漏洞预警】微软最新版RCE，感觉像是钓鱼或者蜜罐", "https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650451310&idx=3&sn=51f8213d34fa1711ff8ae671f2be93f8": "RSAC 2024创新沙盒｜VulnCheck：漏洞优先级挑战的解决方案", "https://mp.weixin.qq.com/s?__biz=MzkyNjMzMTcwOQ==&mid=2247495316&idx=1&sn=2bc8b8c66ba1adeac7f36da3241fc530": "0426-蠕虫爆发，PlugX新变种感染250万主机-思科针对“ArcaneDoor”0day 攻击 ASA 防火墙平台发出警报", "https://mp.weixin.qq.com/s?__biz=MzU3MTU3NTY2NA==&mid=2247488541&idx=1&sn=017145d2339f900d70e349ca0bdc9eb7": "CVE-2024-2389 命令执行漏洞(附EXP)", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651129308&idx=2&sn=ab7b28ebfdb85cff7cbc2a0ed943a4a0": "CISA将在今年底前全面部署应用自动化漏洞预警系统", "https://mp.weixin.qq.com/s?__biz=Mzg4OTkwMDc1Mg==&mid=2247484721&idx=1&sn=15ede62d52aca6408d5e643b3b4e432b": "泛微E-Mobile 6.0 client.do 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3MDY0NjA5MQ==&mid=2247484244&idx=1&sn=a883334dfa0626ee7cef8e9af29d44b5": "微软最新版RCE？别被钓鱼了！！！", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652249870&idx=1&sn=2582fe3f1d512684356b9161fa640ef0": "八大主流中文手机输入法曝出泄密漏洞，仅华为幸免​​", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506962&idx=1&sn=00159dac8c8b98b7945e0089304685d6": "CVE-2024-4040 CrushFTP 中的身份验证绕过和任意文件读取", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506962&idx=3&sn=ab39e93c9e15b3deb21dda4d8ffa6f83": "利用 PUT 方法导致三星远程代码执行 (RCE)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506962&idx=2&sn=d363f879d49bef207aa747c1905de397": "注意补丁间隙：利用 Ubuntu 中的 io_uring 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247491156&idx=1&sn=167417ce96ccabab7ac09da3db1dcac7": "漏洞预警 hi-bridge 网关 download文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651129308&idx=2&sn=ab7b28ebfdb85cff7cbc2a0ed943a4a0&chksm=bd15b50f8a623c1915c463ba3e984f0282e3db662807a82dc284af796ffe81ad6dd1f0234251&scene=58&subscene=0": "CISA将在今年底前全面部署应用自动化漏洞预警系统", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500966&idx=1&sn=b2381db40cdcfaf82c940940a972b5ad&chksm=fe79e03ec90e6928d188b1786a992f9b14466aac0e739ea372a3d25f4750800b550f9cf189bc&scene=58&subscene=0": "【已复现】禅道项目管理系统身份认证绕过漏洞(QVD-2024-15263)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458551831&idx=3&sn=26870fc59c9acfec110d63021f65be01&chksm=b18db69d86fa3f8b4c234c77f9bcf8a276e7dda896f962ecddfbd0ce4bdaeb541f21f0b714bc&scene=58&subscene=0": "网络性能监控工具Progress Flowmon曝满分漏洞，已公开PoC", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519366&idx=1&sn=10637fa1de24be7f83f126a733409827&chksm=ea94bdecdde334fa3be253f26bb21dfaa6665f121248c8985cc8d78608015d1b3ac3c7b063d6&scene=58&subscene=0": "iMessage 零点击RCE利用被曝现身黑客论坛", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519366&idx=2&sn=ba58720219d831205c58a95b86511516&chksm=ea94bdecdde334fadd87c38f83677396326f23c8a339e12b7da06ff638e85ba8d0835a23274b&scene=58&subscene=0": "19个月之后，博通终于修复了这些 SANnav漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522659&idx=1&sn=d2c921ea1f9ec4eca86cd71d9a04b7f8&chksm=ce461273f9319b65443d3fb596581d35f69aa7a488a3df3bd6cf0dfb9e65e60ef9da7d5f66f8&scene=58&subscene=0": "【漏洞通告】禅道项目管理系统权限绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489096&idx=2&sn=dd6fe65e9394f9e0af1b8808fb5c762d&chksm=fb029b10cc7512061091079f89eb1f5d4a35dbaa46c28dc9008ef2e61be2928185995cc7add5&scene=58&subscene=0": "【已复现】禅道项目管理系统身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247507224&idx=2&sn=72acee11af948b25644325eb7a96baf4": "Moriarty 旨在枚举缺失的 KB、检测各种漏洞并建议 Windows 环境中的权限升级的潜在漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502907&idx=1&sn=fea01b8dfc3f1b952dd084b6a0555372&chksm=f25858c8c52fd1de1a1863e4c1a86c6ad7bab9a3eac19e3b3a5f0685ff6ec423d35df94f6cf1&scene=58&subscene=0": "雷神众测漏洞周报2024.04.29-2024.05.05", "https://mp.weixin.qq.com/s?__biz=Mzg5NDg4MzYzNQ==&mid=2247486478&idx=1&sn=e4093cf1f0027aea7d6048dca1dcfbfe": "代码审计-thinkphp历史漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522724&idx=2&sn=7b1966c054a8a688833907d24c9cbf4f&chksm=ce4612b4f9319ba22013fdbffe0912076cd3736c0d72ec5de7eb49a7a8c02bdb97e665c23f0a&scene=58&subscene=0": "【漏洞通告】Apache Kafka访问控制漏洞CVE-2024-27309", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247505705&idx=1&sn=4a0c9a5d7dad3fd53d028b91058d27fa&chksm=cfcab43df8bd3d2b1130f48e5bfcd373c4a7a2abf4d8e96ef3603938fc3af00944eb219a0a37&scene=58&subscene=0": "漏洞通告 | 瑞友天翼应用虚拟化系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzODQ0ODkyNA==&mid=2247485054&idx=1&sn=bd9d245ae2d3a3b6089d774264b091b4": "H3C-CAS虚拟化管理系统文件上传漏洞(QVD-2024-13294)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzODY2ODA0OA==&mid=2247484493&idx=2&sn=9e74172262ea4954a9b49638ade83885": "【漏洞复现】国标GB28181摄像头管理平台存在all信息泄露", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488789&idx=2&sn=a098c64f11fba70e34e74e347c1628b1": "漏洞预警 | 畅捷通T+ SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488789&idx=1&sn=0b94571417211f00b0019e88e26f02db": "漏洞预警 | 瑞友天翼应用虚拟化系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488789&idx=3&sn=4713853e30dfde128d1f6825f873b957": "漏洞预警 | 蓝网科技临床浏览系统 SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486823&idx=1&sn=b98dcf65887ec8cf7d49bb9852542048": "那些被遗漏的逻辑漏洞|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=MzIxOTQ1OTY4OQ==&mid=2247484751&idx=1&sn=3456506083c1476b71024604e926d4bf": "Chrome又现在野0day漏洞，需要升级浏览器", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247497615&idx=1&sn=fe66be6ee521adf29a7f02ea20b22f90": "优卡特脸爱云管理系统存在文件上传漏洞（5月9日更新）", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247485951&idx=1&sn=25db94e669609756f44dd02ff6ed896d": "H3C两个漏洞的划水", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652059654&idx=2&sn=40d0988058143c002ade1d0a40e96b6c": "【安全圈】修复今年第 5 个被黑客利用的零日漏洞，谷歌发布 Chrome 浏览器更新", "https://mp.weixin.qq.com/s?__biz=MzIwMjE2NTM5Mg==&mid=2247484834&idx=1&sn=f5c5d3ca80704c6fcc466f7c24bd71d5": "钓鱼佬永不空军！！看我如何社g搞定学姐继而接管站点全部权限，“严重”漏洞横空出世", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247507637&idx=1&sn=672a2e10502a0798e2d045b6feda6add": "Android Deep Link 问题和 WebView 漏洞利用", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486836&idx=1&sn=cbca9b7bcee796cdeb72d27a7870f6e9": "联软安全数据摆渡系统任意文件读取漏洞|漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzIxOTQ1OTY4OQ==&mid=2247484773&idx=1&sn=e820ff076aaa80d061e5bd07395d8b44": "从跨省级弱口令到CNVD证书", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488145&idx=1&sn=2f9363ecbd99a73278c916f66c53b9f2": "【漏洞预警】dataease身份认证绕过漏洞(CVE-2024-31441)", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247622628&idx=4&sn=db92c78216a3ff878f9b10d90c8920bf": "TunnelVision漏洞曝光，几乎可监听所有VPN", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291051&idx=1&sn=f5c9b5e8f0a843754c7926582e67a559": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzU4MjYxNTYwNA==&mid=2247487232&idx=1&sn=196e2ea312781c581f3884502e47f724": "通过JavaScript进行漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=Mzg2MTAwNzg1Ng==&mid=2247493743&idx=1&sn=2a3f519da5fa72beb3c1146867476b51": "卡巴斯基：2024年Q1漏洞和利用报告", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494740&idx=2&sn=7e4d64b452c43af861d4845fe6268daf": "上周关注度较高的产品安全漏洞(20240429-20240512)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494740&idx=1&sn=1a40e7e45f9deeb5e4262e50bf0e0b74": "CNVD漏洞周报2024年第18、19期", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502914&idx=1&sn=c7b8d610785521f700a7f26929575d31&chksm=f2585831c52fd1271fbe0f0ef611550df41d5a0c6579ac0d411f403eae1ccedf52b67aa21e30&scene=58&subscene=0": "雷神众测漏洞周报2024.05.06-2024.05.12", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544558&idx=2&sn=a5cb08a6ef84b0057b2b9edff65748b9&chksm=fa93982fcde41139e2140ea8492eb59dcec26028ffffebd1447b590a365f89aa3dbde82da963&scene=58&subscene=0": "50000多个小型代理服务器容易受到关键的RCE缺陷的影响", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494740&idx=1&sn=1a40e7e45f9deeb5e4262e50bf0e0b74&chksm=fd74dc9dca03558b25ed818febf058e79da19eadad2858c8ce84ab8323492ba22d775c381bb4&scene=58&subscene=0": "CNVD漏洞周报2024年第18、19期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494740&idx=2&sn=7e4d64b452c43af861d4845fe6268daf&chksm=fd74dc9dca03558b6fa95635bf6e2f36bad0b846e1e99a5c43c0caa8316259cb990bf056340d&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240429-20240512)", "https://mp.weixin.qq.com/s?__biz=MzkzOTY1MzcyOQ==&mid=2247488109&idx=1&sn=8861db4430d3c4d0129a5e56d8381caa": "【重磅更新】Struts2全版本漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247484561&idx=1&sn=ef7f769f144d04b09c8c1505c6b700b5": "CVE-2024-0582 Ubuntu 内核 UAF 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488265&idx=1&sn=0ec576dbad902cff5734eee5a69db5aa": "【漏洞预警】Spring Cloud Data Flow任意文件写入漏洞（CVE-2024-22263）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488265&idx=2&sn=3c0d56bebe3d41abc1ab483d2fbdf6e8": "【漏洞预警】Fortinet FortiSIEM命令注入漏洞（CVE-2024-23108）", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484419&idx=1&sn=3e2349b6c5bd64a5086afa8c85abc924": "「漏洞复现」用友U8 CRM uploadfile 文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247512454&idx=1&sn=6bd25b339ccdbed6cc470c13cdfee6b7": "src-歪门邪道分享+支付漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489287&idx=1&sn=123e28f5c901df0c17447d4893f4e48f": "TP-Link 游戏路由器漏洞使用户面临远程代码攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652060737&idx=2&sn=46fe85b6166c5bda4eb62e527782404a": "【安全圈】影响之前所有版本，TP-Link 路由器曝出满分漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652060737&idx=3&sn=bcb1e61b20c0aaf8bf3dd485b50dacaa": "【安全圈】AI 平台 Replicate 曝“跨租户攻击”安全隔离漏洞，用户自训练人工智能模型可被黑客入侵", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247486298&idx=1&sn=1d20f46e634bc608b40878ada0c716f2": "CVE-2024-33559", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484363&idx=1&sn=2a63d904b45620c03402db455c1c7c86": "【新】万户协同办公平台 ezEIP success存在反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458555732&idx=3&sn=91263191e590aaec63a2c35401bafd3c": "0day Windows更新7.2：理解符号链接", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247494002&idx=1&sn=34a53e56a063bc9749770e8bfbd14177": "精彩回顾！大模型安全边界：揭秘提示注入攻击、会话共享漏洞与AI幻觉毒化策略分享", "https://mp.weixin.qq.com/s?__biz=MzU0MjEwNTM5Ng==&mid=2247518235&idx=1&sn=f9015c9dd5f2f12a594116038ade6b82": "无限充值、免费使用洗衣机，两名大学生披露洗衣服务中的安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501202&idx=1&sn=9552dcc73d874dad2fa88f02d2abdb60": "【已复现】Atlassian Confluence 远程代码执行漏洞(CVE-2024-21683)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519614&idx=1&sn=9e0519627dc928e416d3ba3de0a1941c": "Citrix 督促 Mac 用户修复 Workspace App 中的提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODU3MzA5OQ==&mid=2247484346&idx=1&sn=363e3dc943352fa10d2fe917f8b48aca": "ICONV，将字符集设置为 RCE：利用 GLIBC 攻击 PHP 引擎", "https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650453090&idx=1&sn=f3c404d540b855257f918728f6591011": "您还在苦恼先修哪个漏洞吗？", "https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650453090&idx=5&sn=45902806e99a835b83f89d32018109c6": "【公益译文】设计安全警报：消灭软件中的SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486539&idx=1&sn=5df6d631ad4cc7dc990e35b46f89fc84": "万户ezEIP企业管理系统success.aspx接口存在远程命令执行漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247486816&idx=1&sn=5cc940d33e605f9c7f954c275bf6ca7b": "招募精英猎手，“矩阵杯”国产软硬件安全检测赛、原创漏洞挖掘赛等你来秀！", "https://mp.weixin.qq.com/s?__biz=MzI4NTE4NDAyNA==&mid=2650396686&idx=1&sn=0dd5b780834b2b0439fb03b48acc3907": "【安全科普】一文读懂文件上传漏洞（附实战详解）", "https://mp.weixin.qq.com/s?__biz=MzkwNzY4MzE3OQ==&mid=2247483976&idx=1&sn=d9c3495c5209b32cdf443035e9d04b8c": "【攻防实战】某行业hw-如何利用nday拿下n个靶标", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523009&idx=1&sn=b4e6de0624248ba1ac82ee45a70cab5d": "【漏洞通告】Showdoc远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MjI4ODU4Nw==&mid=2247489581&idx=2&sn=915ebfa836f0f29a5331e8b1fce96c36": "使用 Google Dorks 的实例（漏洞、文件、IoTs 等）", "https://mp.weixin.qq.com/s?__biz=MzkyNDUyNzU1MQ==&mid=2247484772&idx=1&sn=1d01eb76b026dee09acd36e1893380c4": "张一峰：重点关注新应用场景衍生的新漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458555732&idx=3&sn=91263191e590aaec63a2c35401bafd3c&chksm=b18da5de86fa2cc817ed02f321fadfe0a032323334963464d55299d47d3efda95099ae635380&scene=58&subscene=0": "0day Windows更新7.2：理解符号链接", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519614&idx=1&sn=9e0519627dc928e416d3ba3de0a1941c&chksm=ea94bc14dde335021d4938ffb1183077024f5d791b881b81d21bd3861444796d43d393e33db9&scene=58&subscene=0": "Citrix 督促 Mac 用户修复 Workspace App 中的提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501202&idx=1&sn=9552dcc73d874dad2fa88f02d2abdb60&chksm=fe79e10ac90e681c8d5f7a24127d7d7e8a8ac6a45f4c8e4cf505c952a48d54ca4aed89bf628c&scene=58&subscene=0": "【已复现】Atlassian Confluence 远程代码执行漏洞(CVE-2024-21683)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523009&idx=1&sn=b4e6de0624248ba1ac82ee45a70cab5d&chksm=ce4611d1f93198c72559e4d139df1a5346e3e3d41af756f5da6eb506ff408f793b988f2913cf&scene=58&subscene=0": "【漏洞通告】Showdoc远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494847&idx=1&sn=eea65f1956f62693b9cde248a88ead2e": "如何快速找到 RCE", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247485333&idx=1&sn=4525cd1cbebe5e6be2ace25250ebcbdb": "众测项目实战--有趣的xss漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY3OTc5Mw==&mid=2247484223&idx=1&sn=fd507e16329cc99c2c7fc42deff6135c": "【漏洞复现】JEPaaS 低代码平台 accessToTeanantInfo SQL注入漏洞 | 附poc", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652060950&idx=1&sn=5dde8bb0f66f3c492ade995b2ef6914c": "【安全圈】请尽快更新，Linux 内核更新修复高危漏洞：可本地提权至 root 权限", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458557570&idx=2&sn=f48e504bc91da149eebefaf7a20b795d": "0day 2期-最近更新：Windows服务漏洞原理讲解", "https://mp.weixin.qq.com/s?__biz=MzI5NTA0MTY2Mw==&mid=2247485204&idx=1&sn=6a14ff7e2289b72dc943941ccfb5b0ab": "主动利用WordPress插件中未经认证的存储XSS漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484444&idx=1&sn=ecb0b41989d8f16d41e891d2bf45d6e7": "「冷漠安全」五月份0day∕1day∕nday漏洞汇总", "https://mp.weixin.qq.com/s?__biz=MzkxMzIwNTY1OA==&mid=2247504702&idx=1&sn=758ea48e9b1af4c39fd7fde4f128c367": "Web漏洞扫描神器-Arachni安装及使用", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247485846&idx=1&sn=eec92e52c0164f470a71314ec6c5e57e": "漏洞预警 | 用友NC linkVoucher SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247508698&idx=1&sn=0df74b3562f67b9fec4b35e17105d2cb": "Apache ActiveMQ 漏洞导致隐秘 哥斯拉 Webshel​​l", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247508698&idx=3&sn=3abe5891ab38d0e8f1607d065c765427": "反转 Windows RPC 以查找 CVE（CVE-2024-36036、CVE-2024-36037）", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247484610&idx=1&sn=f2f45bda80a245348ecfe38b476e6e19": "CVE-2024-5035 TP-Link Archer C5400X RCE 漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247484389&idx=1&sn=bf1a36a4d0f2c66ce3a355c634f4889e": "俄罗斯APT TAG-70利用Roundcube Webmail服务器中的XSS漏洞攻击超80家组织", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247503798&idx=1&sn=9176cf67b8e958f661c575c393001634": "补天校园GROW计划升级了，新增“线上导师分享+漏洞挖掘实战”两大板块！", "https://mp.weixin.qq.com/s?__biz=MzkyNDYwNTcyNA==&mid=2247485136&idx=1&sn=3965f2e035360788d3890ac54086e684": "【漏洞情报】万户OA-text2html-存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650593878&idx=4&sn=db53653b7a3ede5d80154ee7b38b85c5": "Hyacinth！一款Java漏洞集合工具", "https://mp.weixin.qq.com/s?__biz=MzU5Mjg0NzA5Mw==&mid=2247492417&idx=1&sn=4299aef6664b56e9b38195c9a11609be": "高危漏洞预警｜Check Point Security Gateways 发现漏洞（CVE-2024-24919）", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247485358&idx=2&sn=4e3a13b6798e7b1fe6dc1aeaa3759476": "挖漏洞束手无策？不知道网站是什么OA? 自动探测多方便！", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247510250&idx=1&sn=b041fcc980705fb265b3c27a9067835e": "漏洞通告｜SolarWinds Serv-U FTP 目录遍历文件读取漏洞(CVE-2024-28995)", "https://mp.weixin.qq.com/s?__biz=MzU0MjEwNTM5Ng==&mid=2247518513&idx=1&sn=6c2ceb4667460fb290afb76706061704": "无法修复立即删除！谷歌 EmailGPT 曝零日漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448663816&idx=2&sn=c2fa9872f605a749a9ec552a6098a62e": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448663816&idx=3&sn=4f7022124f17c87e45b9179bc193c409": "CNNVD关于PHP 操作系统命令注入漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247506053&idx=1&sn=4141854e881c05e2e3a2db88c567e247": "发现在野利用！SolarWinds Serv-U 路径遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247558351&idx=1&sn=8a3ffe90910388a853ad87f29cb46456": "一个漏洞库", "https://mp.weixin.qq.com/s?__biz=Mzg3MjY1NzI0NA==&mid=2247555202&idx=1&sn=a9228a0db6c8ef3a0d68f4522c1427db": "【漏洞预警】SolarWinds Serv-U FTP 目录遍历文件漏洞(CVE-2024-28995)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499489&idx=1&sn=33286c536824c739d7dbbbca01c9bcb1": "【漏洞通告】SolarWinds Serv-U路径遍历漏洞（CVE-2024-28995）", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499489&idx=2&sn=93d4dced861370620848b6f1af1d1baa": "【漏洞通告】Magento Open Source XXE漏洞（CVE-2024-34102）", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544408&idx=3&sn=6e4b374369f279667360a0f32ea9ebb4": "美国削减国家漏洞库预算，或造成全球网络防御基础数据缺失", "https://mp.weixin.qq.com/s?__biz=Mzg5OTU1NTEwMg==&mid=2247484118&idx=1&sn=8a303d41e8af9d83a53fdee42c31d592": "【知道创宇404实验室】CVE-2024-4577从漏洞广告到勒索攻击只用了2天", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523192&idx=1&sn=6ca1791527fa4182497473aa6b49fe78": "【漏洞通告】SolarWinds Serv-U FTP 目录遍历文件读取漏洞(CVE-2024-28995)", "https://mp.weixin.qq.com/s?__biz=MzI0NDgxMzgxNA==&mid=2247495907&idx=1&sn=156c85967b2cb3b97588df70d28ecc3f": "每周安全速递²⁹⁷|TellYouThePass勒索软件利用最新PHP RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MjkwMDY3OA==&mid=2247485066&idx=1&sn=f3ee0ffd2ac97fce1620c8a63484c3c0": "【漏洞复现】用友分析云存在druid未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MDM2NzkwNg==&mid=2247486427&idx=1&sn=880590a809b3a3030e739f9dd3f49d24": "漏洞预警-CVE-2024-30080", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501312&idx=1&sn=ed5fac2b7c395d524cdfc90d879c5f4c": "【已复现】SolarWinds Serv-U 目录遍历漏洞(CVE-2024-28995)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247539018&idx=2&sn=fb61dfc29dca0727f30739d557a83ad4": "2024HW，必备漏洞库", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247495672&idx=1&sn=8939f5f175f2c7941fcb3c1904c7d273": "【漏洞通告】Composer PHP依赖项管理器命令注入漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247495672&idx=2&sn=4b9adf5639cf8b0622eeabde7aff3355": "【漏洞通告】JetBrains IntelliJ IDE信息泄露漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651130460&idx=2&sn=d446d45d7b01b9ff93a9105910ceb33c": "警惕隐藏在网络社交媒体中的“猎密者”；CNNVD通报PHP 操作系统命令注入漏洞 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247509312&idx=1&sn=aba6932a88e9e0b5b9d0147411a91c45": "没有秘密 || 利用 Veeam CVE-2024-29855", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247509312&idx=2&sn=78e35ecd6707597164c8ce052f31e8ff": "CVE-2024-28995（SolarWinds Serv-U 中的路径遍历 - 概念验证", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247509312&idx=4&sn=1918ef534c9a1668331729941af7fd14": "Wikimedia∕svgtranslate 2.0.1 远程代码执行", "https://mp.weixin.qq.com/s?__biz=MjM5NDMwMjEwMg==&mid=2451851743&idx=1&sn=cba2032a7b1538e09f5fdc933b0d31ee": "什么是基于风险的漏洞管理RBVM及其优势", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247522449&idx=1&sn=6f0627e0b24e4397f6b11dc3bf38c46f": "建议立即删除！谷歌 EmailGPT 曝零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODY2ODA0OA==&mid=2247484937&idx=1&sn=3af38f9ce095f455e6e5a0a5bbe468c9": "【未公开】悦库企业网盘存在.html SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486968&idx=2&sn=cab0c79970c27247263649e15ce6ea0f": "CVE-2024-37393 漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzk0MTY5NzYyOA==&mid=2247484814&idx=2&sn=1287dacd604acb9925ad0897019c7de4": "【漏洞复现】电信网关del_file.php存在命令执行", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247484693&idx=3&sn=2d14ce63e5be5c91061a79f887d7a88d": "CVE-2024-21893影响Ivanti产品", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485677&idx=1&sn=ce6e0dab7a0c760f520f97fd1eb354b8": "【高危漏洞】k8sGPT存在多个漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247491708&idx=1&sn=416191a03a7d0bf1c7c56ec3ddbe42de": "Google修复了Pixel固件中一个正在被积极利用的零日漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247491708&idx=2&sn=444a58ecc49ac1f3987b3da2eb5a3c7b": "修复了Fortinet FortiOS中的多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247610122&idx=2&sn=07d4565165579a9c64ffbee8fa837e5b": "车机控车流程分析和漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650609663&idx=1&sn=e166b09ed7bbdd4655b0b44157fe962c": "再度蝉联！安恒信息荣获四个CNNVD接报漏洞奖", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484570&idx=1&sn=b6d9276024fcb5cbc578c0b5a9d38201": "「漏洞复现」海洋CMS ∕js∕player∕dmplayer∕dmku∕ SQL注入漏洞(CVE-2024-29275)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485428&idx=1&sn=e168a5c05c00d3b3468b6eb316a029ae": "CVE-2024-28995｜SolarWinds Serv-U任意文件下载漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485428&idx=2&sn=62f294d16dfe1e70e0c39139416e633e": "CVE-2024-23692｜Rejetto HFS 2.x 远程代码执行漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651130460&idx=2&sn=d446d45d7b01b9ff93a9105910ceb33c&chksm=bd15ba8f8a6233995dc227e21ac4f91e47870a3aa6ffb744cd3c934e68bcb191d6a1dbf87f09&scene=58&subscene=0": "警惕隐藏在网络社交媒体中的“猎密者”；CNNVD通报PHP 操作系统命令注入漏洞 | 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458558929&idx=2&sn=6c08e8fb0faf292cd7ac3fe9ae5c9307&chksm=b18d915b86fa184d125f97a0f3fac1b3e9e18e6a1da88ce11941e4f0270bac69d6826b58c743&scene=58&subscene=0": "卡巴斯基披露中国生物识别门禁系统存在24个漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5OTU1NTEwMg==&mid=2247484118&idx=1&sn=8a303d41e8af9d83a53fdee42c31d592&chksm=c050c8a7f72741b111566892b00567dd0fa38a0cc94a287503d427dc5ea1faf711843f9f5e03&scene=58&subscene=0": "【知道创宇404实验室】CVE-2024-4577从漏洞广告到勒索攻击只用了2天", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501312&idx=1&sn=ed5fac2b7c395d524cdfc90d879c5f4c&chksm=fe79e298c90e6b8edd408b4dc9deb0d69379f73e68c58bbb2522ba7017851a6c1ba1ddef1503&scene=58&subscene=0": "【已复现】SolarWinds Serv-U 目录遍历漏洞(CVE-2024-28995)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523192&idx=1&sn=6ca1791527fa4182497473aa6b49fe78&chksm=ce461068f931997e523d544520963b7b6625108ba25f6c296521d4f4e10b1b6594cdbd4b0e00&scene=58&subscene=0": "【漏洞通告】SolarWinds Serv-U FTP 目录遍历文件读取漏洞(CVE-2024-28995)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247506053&idx=1&sn=4141854e881c05e2e3a2db88c567e247&chksm=cfcabb91f8bd32874e3f0af6d189b788ec395ee2c33612b968134ccdb323a9490385f190f217&scene=58&subscene=0": "发现在野利用！SolarWinds Serv-U 路径遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489205&idx=1&sn=9ece8e646d1f64dfd5d16a16fd940f22&chksm=fb029bedcc7512fb9daaa31f1e0285a58b17a68fa0b01f5277a60303f93fd11ccaf1dd3b8ea3&scene=58&subscene=0": "【已复现】SolarWinds Serv-U FTP 目录遍历致文件读取漏洞（CVE-2024-28995）", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544408&idx=3&sn=6e4b374369f279667360a0f32ea9ebb4&chksm=c1e9a209f69e2b1faac67b56762f71ab483b04650da10a79ccf20952f26cc5faa3073f8cb4b7&scene=58&subscene=0": "美国削减国家漏洞库预算，或造成全球网络防御基础数据缺失", "https://mp.weixin.qq.com/s?__biz=MzkzMjIxNjExNg==&mid=2247485358&idx=2&sn=00c27f582d407d8a6ec23a443a83c9ac": "[翻译][AI安全]Probllama：Ollama 远程代码执行漏洞 (CVE-2024-37032)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247510047&idx=2&sn=5f7b8ef16d1d2db7c778e256c67009d4": "使用 MS Windows 打印机通过互联网打印进行持久性∕命令和控制的 PoC", "https://mp.weixin.qq.com/s?__biz=MzkzMzI3OTczNA==&mid=2247487225&idx=1&sn=862f2dff6163c48c9a0db51a1ba1c4bb": "验证码漏洞利用技巧总结", "https://mp.weixin.qq.com/s?__biz=Mzg5MjY0MzU0Nw==&mid=2247484641&idx=1&sn=e3d39f7724b796bf425299c2faddfe34": "【车联网】车载可用摄像头漏洞研究(转载)", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247486755&idx=2&sn=b3f25e26de417ca56b78fa5a27c821b2": "CVE-2024-36522 Apache Wicket 存在远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247511512&idx=1&sn=ce84f24cda62f925ee539d9b29b10517": "Apache CloudStack 中标识为 CVE-2024-41107 的严重漏洞的 PoC", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484325&idx=6&sn=91a46b3e826925eafd95d7523f02ccac": "​H3C路由器 userLogin.asp 信息泄漏漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484325&idx=7&sn=017d961b15e2c28dfece9aa8cec1be11": "Nexus Reposity3目录穿越漏洞CVE-2024-4956", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484325&idx=8&sn=e4ab37c9e6f1fa69e74651a92089d649": "同享人力资源管理系统-TXEHR V15 DownloadTemplate 文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489818&idx=1&sn=6785dff5331b909101c1bba9ede90f69": "【8∕2特辑】今日热点漏洞速速自查！", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247626271&idx=1&sn=e762674a074598fba66b9ee703c5d12f": "对“黑客”而言，合适的漏洞奖励和安全披露", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485038&idx=1&sn=117090c1ceae1ff183980c822908b374": "「漏洞复现」华天动力OA downloadWpsFile.jsp 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484796&idx=1&sn=fd0800bdb984d5e7b0f58ba8c88a6162": "【HW漏洞】致远互联FE协作办公平台apprvaddNew存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486477&idx=1&sn=54a83c97974e7fb5e457266b62643103": "【漏洞预警】用友NC Cloud SQL注入漏洞（CNVD-2024-34169）", "https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650206491&idx=1&sn=59caa4b1dbf256cb10b4fa147d24d145": "安天智甲EDR紧急响应输入法高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247494893&idx=1&sn=c275f1a6092cdabcea407dc6d643602a": "CVE-2024-36401：GeoServer未授权RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247514495&idx=1&sn=427b5b5245aa90ac084055d9371edeb6&chksm=c144cbc2f63342d40c09f9aa55a920fe16a8b32410c601063bb9692809bf53ce63fb1ff7cd24&scene=58&subscene=0": "39个关键硬件漏洞隐患盘点", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247577365&idx=1&sn=5506f540726693de6fca80b15a291e0f&chksm=e9147f2fde63f639f793f28f9c7845956e6dee6f82880dd9c64814ba715dd6f43c594205c5ac&scene=58&subscene=0": "XCon2024议题||挖掘Windows系统组件中的认证前远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247541433&idx=2&sn=d4dc4322a484857f1bbf7f792e5d445e": "攻击 Android Binder：对 CVE-2023-20938 的分析和利用", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492559&idx=1&sn=618b195507e1f05f9bd5dfc0b244220c": "某网关存在漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650276300&idx=1&sn=24894c9b462adc478a0d1a7f300dd093": "警惕！工业企业生产网核心系统接口发现漏洞，生产设备可被操控", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651299267&idx=2&sn=36a62b4f8e3863d1cf623a13e31b4e53": "WPS Office两个严重漏洞曝光，已被武器化且在野利用", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291517&idx=1&sn=a7c55641594c252438968a098a5dedf5": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzU0MDcyMTMxOQ==&mid=2247487718&idx=1&sn=621ea5c2e0d12c57bf23b830a0e0a842": "「推安早报」0819 | Chrome、Zabbix等漏洞、红队工具更新", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520517&idx=1&sn=33f6242a7bd079eb73527d2099be7fc1": "SolarWinds Web Help Desk是 0day时或已遭利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520517&idx=2&sn=3f8deb775a5743e1c32954859fa214e4": "Copy2Pwn 0day 被用于绕过 Windows 防护措施", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495185&idx=1&sn=8c176c045374b918076c2febb879acf3": "CNVD漏洞周报2024年第33期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495185&idx=2&sn=d354ae8cef98bedf7086e7d037fea2c3": "上周关注度较高的产品安全漏洞(20240812-20240818)", "https://mp.weixin.qq.com/s?__biz=MzkzOTY1MzcyOQ==&mid=2247489005&idx=1&sn=d5e532b16d44b52960d317738e71e7d0": "【0day】DouPHP 1.7 Release 20220822 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247491415&idx=1&sn=cc1950b3c5ac269c6a749c1ba9fbbf5c": "关于防爬虫及服务器漏洞扫描相关问题的探讨| 总第258周", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485199&idx=1&sn=debea9cdd57778a7491be02f4452c324": "「漏洞复现」用友NC psnImage∕download SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5ODQzNTE3NA==&mid=2247485460&idx=1&sn=9017d9ad1c6181b7a5d1090689da3944": "【hw】2024护网漏洞情报-第十七弹", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484174&idx=1&sn=a14ae7fbb80e442fb8c810cb25622352": "用友U8-CRM的exportdictionary.php接口处存在SQL注入漏洞【漏洞复现|附nuclei-POC】", "https://mp.weixin.qq.com/s?__biz=MzkzODU3MzA5OQ==&mid=2247484795&idx=1&sn=8fa241e5068765c35803cd01db170241": "通过系统调用 (POC) 绕过 AV∕EDR 挂钩", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247577580&idx=1&sn=8dcef7721a5c4c75a0c070945a6b580d": "新的 Webkit 漏洞可让攻击者利用 PS4 和 PS5 游戏机发起攻击", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247500245&idx=1&sn=f2bb116c475af0525a4151bfb87c8377": "最高15万美元！盘点2024年11大漏洞赏金计划", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247486110&idx=1&sn=6327aee7d91a6424192b455311fe6150": "【漏洞复现】某蓝企业管理系统 GetFieldJson SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjU2Nzc1Mg==&mid=2247484377&idx=1&sn=fe1ff52bc97a2ad2cc949bc1a3f68b80": "24HVV漏洞威胁最新情报(全)", "https://mp.weixin.qq.com/s?__biz=MzkyNDUyNzU1MQ==&mid=2247485419&idx=1&sn=991cd93a2cea5cd9820f7b9fd5360022": "长亭科技成为国家信息安全漏洞库漏洞技术研究联盟创始成员单位", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247484873&idx=2&sn=9420b41a15bc3ef264f21bc5aafbbd10": "Windows TCP∕IP 远程执行代码漏洞 CVE-2024-38063", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503043&idx=1&sn=b9b1593023d441304f8686f4a13e29b6&chksm=f2585fb0c52fd6a6912e5aac5e8005aec49a3779bb78c669bd427004ea3aed0ecd8b9eb8b45c&scene=58&subscene=0": "雷神众测漏洞周报2024.08.12-2024.08.18", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501943&idx=2&sn=1ec9ac2abad8584c8efff6a62fe43010&chksm=fe79ecefc90e65f9aeefc1efcc71100ea27711bba70d5c0200319ceae32c618c575f97564ada&scene=58&subscene=0": "安全热点周报：SolarWinds 和 Microsoft 漏洞被在野利用，立即应用补丁", "https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247491415&idx=1&sn=cc1950b3c5ac269c6a749c1ba9fbbf5c&chksm=ea4bb510dd3c3c06176c89f7d4c7bf17c260f4c964b99c1138cf90e3426f4ba55043f51b25e7&scene=58&subscene=0": "关于防爬虫及服务器漏洞扫描相关问题的探讨| 总第258周", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520517&idx=1&sn=33f6242a7bd079eb73527d2099be7fc1&chksm=ea94a06fdde32979ffcecb68d48201afaf85aec654453d14925cdb1395b63cafb1e96dd2dc2a&scene=58&subscene=0": "SolarWinds Web Help Desk是 0day时或已遭利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520517&idx=2&sn=3f8deb775a5743e1c32954859fa214e4&chksm=ea94a06fdde32979edfb5ed561f62e1bc0dbc6f03692917eea70e0e8d1f0d9584579d8d21572&scene=58&subscene=0": "Copy2Pwn 0day 被用于绕过 Windows 防护措施", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247577580&idx=1&sn=8dcef7721a5c4c75a0c070945a6b580d&chksm=e9147fd6de63f6c07d3d33aa4a0187b546c999c7e993d6445a13537bc92102753b10cc307a45&scene=58&subscene=0": "新的 Webkit 漏洞可让攻击者利用 PS4 和 PS5 游戏机发起攻击", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495185&idx=1&sn=8c176c045374b918076c2febb879acf3&chksm=fd74ded8ca0357cee2f07f1ab37d12dff710209607211e8ccf934d3c2cc9ad05183da0deb3e3&scene=58&subscene=0": "CNVD漏洞周报2024年第33期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495185&idx=2&sn=d354ae8cef98bedf7086e7d037fea2c3&chksm=fd74ded8ca0357ce2c01ef2cbb54b433f49cbc038d8bbedf581551b63e6ab59df4ce68b55564&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240812-20240818)", "https://mp.weixin.qq.com/s?__biz=MzUyOTkwNTQ5Mg==&mid=2247489274&idx=1&sn=adf559fccfabbf3476de23dcc4aae866&chksm=fa58b4c1cd2f3dd72ed1fa7c7d8f619f13699414b29cd1e15c635e57a725dc37a35930b1804d&scene=58&subscene=0": "抓不完，根本抓不完的0day，青藤RASP已经接连抓了3个0day", "https://mp.weixin.qq.com/s?__biz=MzU0MDcyMTMxOQ==&mid=2247487718&idx=1&sn=621ea5c2e0d12c57bf23b830a0e0a842&chksm=fb35b92ecc4230381d3994879c015a8b2cf54d0b07d3daf749103f23ec43c5afdc1c08a8e5cb&scene=58&subscene=0": "「推安早报」0819 | Chrome、Zabbix等漏洞、红队工具更新", "https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661293107&idx=1&sn=6e2ab0265f496974ed53754baa283eac": "山石网科：关于网传WAF漏洞说明", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488755&idx=2&sn=7ddcd18af4931333cec31b8a9d5d3bfb": "【漏洞预警】山石网科应用防火墙WAF未授权命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488755&idx=3&sn=3b6dd7826189b300fc0168087b2b4495": "【漏洞预警】泛微网络E-cology BlogService 未授权SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488755&idx=4&sn=f626ef0b801fce922a5e2f71a0fd02c3": "【漏洞预警】Alibaba Nacos Jraft未授权任意文件写入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489659&idx=1&sn=a56c7dc54f6a5eefa58ea3898e1f0948": "Google 修复了在野外积极利用的高严重性 Chrome 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492578&idx=1&sn=d68d3a888c959b2e6374c9f7f0b27082": "某系统任意命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485228&idx=1&sn=b2f516d17addda6cb287e67c514b848a": "「漏洞复现」同享人力资源管理系统-TXEHR V15 SFZService.asmx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651299590&idx=3&sn=39cd6a7a3a2a8abc73e2b3d020b90d83": "Litespeed曝高速缓存漏洞，威胁数百万WordPress网站", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486605&idx=1&sn=f03003b8ef87b5e7f7d1bb450523af08": "【漏洞预警】Google Chrome V8 类型混淆漏洞（CVE-2024-7971）", "https://mp.weixin.qq.com/s?__biz=MzI2NTc1ODY0Mw==&mid=2247485988&idx=1&sn=2a05bc333dc6afdfdda19810bc012c5a": "某户oa sql注入漏洞后续利用（部分）", "https://mp.weixin.qq.com/s?__biz=MzI0NzY1MDgyMw==&mid=2247512143&idx=1&sn=c5e8fbfcf10f81d6a206cbd6c2a6ef56": "SourceCheck V3.5焕新登场 | 恶意代码检测与组件版本兼容分析能力全面升级", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247542160&idx=2&sn=21dab586dd8ee5e8b7d293ec128d053e": "车载可用摄像头漏洞研究", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546551&idx=3&sn=79ee74866eb4a23b91fe85d92e91c789": "苹果macOS版微软应用发现8个漏洞，警惕黑客恶意操作", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501953&idx=1&sn=132f57d74ad27b44fc64a22b6f3c081b": "【在野利用】Google Chrome V8 类型混淆漏洞(CVE-2024-7971)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650618428&idx=2&sn=24e88e85c231728435325778d2e53a14": "Spring Security@AuthorizeReturnObject权限绕过漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY1MDc2Mg==&mid=2247505550&idx=1&sn=42f7a1fef3697bbde11fc64d377bc6b5": "微软高危漏洞 CVE-2024-38077 EXP", "https://mp.weixin.qq.com/s?__biz=Mzg5OTY2NjUxMw==&mid=2247512830&idx=2&sn=c7fb1361b3d6a229a56af1b45f642049": "漏洞扫描工具 -- SBScan", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651131656&idx=1&sn=c3762dc021361dffbee4680fcbd1b841": "错误展示《黑神话悟空》客服电话，必应被曝AI信息抓取与处理存在缺陷；F5官方通告可导致会话固定与资源耗尽的高危安全漏洞 | 牛览", "https://mp.weixin.qq.com/s?__biz=Mzk0MzU5NTg1Ng==&mid=2247484764&idx=1&sn=d2452739361600d0d9c4b4c7c2d30b57": "帆软报表 channel 反序列化漏洞分析与利用", "https://mp.weixin.qq.com/s?__biz=MzIzOTE1ODczMg==&mid=2247499191&idx=1&sn=704186f41975063e2acf236473a4dbc5": "【中秋团圆，安全相伴】Xray社区PoC悬赏活动邀您共赏月圆之夜！", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247488456&idx=2&sn=5a9b8ad1980b4e8cffa2eff72ed7223d": "iOS 文本字符串错误：几个字符可能会导致 iPhone 崩溃（可以复现成功）", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247488456&idx=7&sn=98e52b1d79c1175eb55b04812d03390a": "（CVE-2024-7971） Chrome为0day紧急更新", "https://mp.weixin.qq.com/s?__biz=MzU1Mzk0MjU1OQ==&mid=2247492947&idx=1&sn=f18f0fc7d9410dad99d7abd24ae0fac6": "漏洞预警|浙江大华城市安防监控DSS系统存在信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492234&idx=1&sn=8a13492d9298249e5142c6c748519874": "微软Copilot Studio存在严重的信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651131656&idx=1&sn=c3762dc021361dffbee4680fcbd1b841&chksm=bd15bfdb8a6236cd3e0a981211670ace56e61be75f35a116faeae1bbff93677487733e85011f&scene=58&subscene=0": "错误展示《黑神话悟空》客服电话，必应被曝AI信息抓取与处理存在缺陷；F5官方通告可导致会话固定与资源耗尽的高危安全漏洞 | 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458569208&idx=4&sn=2e073d782cd9e7f1cc24f56be0c76148&chksm=b18df97286fa7064e68cc34f3d13e1d3afce063f9431544ec6a02c4c1c1f1aef81fae722e9e3&scene=58&subscene=0": "零基础入门Android漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzOTE1ODczMg==&mid=2247499191&idx=1&sn=704186f41975063e2acf236473a4dbc5&chksm=e92ce914de5b60020cda4fd9b7a86b6d23090261dd59e997d99860a43d945e59a8b7107a6487&scene=58&subscene=0": "【中秋团圆，安全相伴】Xray社区PoC悬赏活动邀您共赏月圆之夜！", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501953&idx=1&sn=132f57d74ad27b44fc64a22b6f3c081b&chksm=fe79ec19c90e650f6fc4cdbadd1d11b32abe1cebf4128b9c74a56acbe9bbdabb4039e5c11b91&scene=58&subscene=0": "【在野利用】Google Chrome V8 类型混淆漏洞(CVE-2024-7971)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520551&idx=1&sn=72b22e7b3bfacecfe01fb433f02f1aae&chksm=ea94a04ddde3295b9d49a547fc454b8c6ab1e8cf9cd30e413dbe66bb25f427d73270f438b9cb&scene=58&subscene=0": "谷歌紧急修复今年第9个已遭利用0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520551&idx=2&sn=c7d2ba1175a4c946fe47679b75e3c64e&chksm=ea94a04ddde3295bb0ef7a0d6531fee1957d5a1ffa8ba19cd572a05c40449b1f4706da88b90a&scene=58&subscene=0": "GitHub Enterprise Server 中存在严重的认证漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3ODI4NDM2MA==&mid=2247483961&idx=1&sn=202491658762e108d9ec8cd04cfb3150&chksm=eb58131edc2f9a0825a3d4302a980c2d834911b4028c10b273f142f400d90ca68add338dc563&scene=58&subscene=0": "魔形女再袭？最新Android通杀漏洞CVE-2024-31317分析与利用研究", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650182030&idx=1&sn=c63a5aa631c4fde83d9c2c2ec5f45b02&chksm=f4486a32c33fe324e1ccf7a7e40c92dfc4eba19fad7e625332509eda78a2dc0ecda277803a39&scene=58&subscene=0": "攻防过半：最能打的竟然不是0day？", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495563&idx=1&sn=29a306d2ecca6aa42f7819e516e7dab7&chksm=e8a5e5e8dfd26cfeece89833c8f07ab4c5e0192af0d64016c278aaf988c2fcf94bfdcdfa6dd8&scene=58&subscene=0": "重定向跳转 -> XSS漏洞 -> 升级高危", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650985033&idx=1&sn=eb8264e9eb4f3dec90c22ecb464e5e9e&chksm=8079907bb70e196d58b310e5733e4c9cb0f7a6d4c4d51c3afeca35f73b14cbfc828e2d2afb95&scene=58&subscene=0": "原创 Paper | GL-iNet 路由器 CVE-2024-39226 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485017&idx=1&sn=0d82afe39465840f6dbca7bda7970d56": "漏洞推送|某智能网关 list_service_manage存在命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MTAzNjYyMA==&mid=2650591992&idx=1&sn=c864d399de568d96bb861535da98b84e": "工信部五所与深信服联合发布《2024上半年网络安全漏洞态势报告》", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650619088&idx=1&sn=aba037115b8cf195b5ece2193bfdce46": "战果公布 | 2024攻防演练0Day难防？亚信安全新一代Web应用防火墙拿捏~", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247491814&idx=1&sn=e9a5c3f0eaac153a710b0841d44ef4d0": "漏洞预警 孚盟云oa ajaxsenddingdingmessage sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3NDIwNTY5Mw==&mid=2247506286&idx=1&sn=7cc617f2f25061b3e76584f635b291a1": "风险突出的100个高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484253&idx=1&sn=73918ad1c49e134c55d9235142d19c07": "警惕！100个突出的高危必修漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247485968&idx=1&sn=76bbc04fdeb26c233408086205be3cde": "某CMS源码RCE审计思路", "https://mp.weixin.qq.com/s?__biz=MzU5OTMxNjkxMA==&mid=2247487094&idx=1&sn=afd1f27f059fe721edb6a2a9b632d42a": "通过源码文件差异对比审计未公开1day，让你1day拿到手软！", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485567&idx=1&sn=ec186a5e96ced1bd2cecb615ec9fd0bc": "「漏洞复现」誉龙视音频综合管理平台 RelMedia∕FindById SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247505028&idx=1&sn=ef180373655a118916dcd5c643917b71": "【补天训练“赢”】月神：一节课学会游戏漏洞挖掘+手游漏洞挖掘实战！", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247485055&idx=1&sn=ef608575f461f2c519fb89abf20bd9c7": "美国NSA、FBI和DHS联手曝光俄罗斯情报黑客手法：企业需警惕五大漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247543751&idx=1&sn=64df87cf6d7a0a894b82c0f23cebe8ea": "漏洞挖掘 | edusrc挖掘的骚技巧", "https://mp.weixin.qq.com/s?__biz=Mzk0MTUxNzAxMg==&mid=2247484091&idx=1&sn=394f57fdf5234e77d42a990dd9ebb2e0": "苹果IOS端IPA签名工具任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496480&idx=1&sn=066b371fab24bc38622a564b1d44b209": "【漏洞通告】pgAdmin信息泄露漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496480&idx=2&sn=300df768000858d3045a805459ef7011": "【漏洞通告】Apache HertzBeat SnakeYaml反序列化漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247487693&idx=1&sn=46d3ea0842029029de0369576e75ea82": "【漏洞复现】地大信息-基础信息平台 GetImg 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247500960&idx=2&sn=d7e5dd11a73b45185f533f0e963be1ee": "谷歌：安卓内存安全漏洞大幅下降68%", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247490012&idx=1&sn=c10980ca6a8e965149a85011309281b2": "【Exp】Ivanti 22.2R1∕22.7R2 管理面板身份验证绕过CVE-2024-7593", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247490012&idx=2&sn=671d5f72c7770a814e9c2eb0b1d05ede": "【PoC】SolarWinds Web Help Desk (CVE-2024-28987)严重漏洞的 PoC 已发布", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247490012&idx=6&sn=ba56918b7b91041e18bd7ceadb5ec1f3": "TeamViewer for Windows CVE-2024-7479(8.8)存在提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247490933&idx=2&sn=3c9dd4a35995cc82d69cc61a91303427": "MSF使用教程永恒之蓝漏洞扫描与利用【黑客渗透测试零基础入门必知必会】", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651246399&idx=1&sn=31fea469d77e7f50d12f2db9607e0a05": "你的接口漏洞该补上了……", "https://mp.weixin.qq.com/s?__biz=Mzg2NTg3Njc0Nw==&mid=2247484682&idx=1&sn=fb4b24b3fa8d55246e4ad498301368cc": "Thinkphp5.1.0-Thinkphp5.1. 文件包含漏洞（CNVD-2024-29981）", "https://mp.weixin.qq.com/s?__biz=Mzg5MjgxNTQ1MA==&mid=2247487799&idx=1&sn=3195e599bd0c78132c01b105754033f5": "高危风险突出的100个漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490759&idx=3&sn=7d08183750cd66c2da57267778dfd440": "漏洞预警 | 直播点播系统未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491217&idx=1&sn=d505976be4891ef903310a3cf8f51277": "CISA 警告 Apache HugeGraph-Server 漏洞遭积极利用", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247516369&idx=1&sn=4dbb4102229f713c411c70ce0dd7a8bf": "记一次有趣的XSS漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247505028&idx=1&sn=ef180373655a118916dcd5c643917b71&chksm=eaf99cc8dd8e15deca20776d7c748527596914188149c354783ba7d15f68629284714bc34122&scene=58&subscene=0": "【补天训练“赢”】月神：一节课学会游戏漏洞挖掘+手游漏洞挖掘实战！", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247505153&idx=1&sn=1fc2ad5e7d03f26b308b686bdc6878e8&chksm=eaf99d4ddd8e145b4cf0c913f7a9c4c5427525f658cfd12c4fd464a205dcf496953ba17ff237&scene=58&subscene=0": "第四期 | 补天校园GROW计划漏洞挖掘挑战赛，赢白帽大会门票！", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650602174&idx=4&sn=f8e1e08fdbc95ba215a0defd9b538de4": "一款强大的burpsuite漏洞扫描插件", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065418&idx=2&sn=787d8f4417c21d5b963ec8d4bd7652a2&chksm=f36e62cac419ebdce5c5fb15c31ed03a2a4c4a421cc0ab443aa05512d549e8b65a1b05ea4d48&scene=58&subscene=0": "【安全圈】多款云存储平台存在安全漏洞，影响超2200万用户", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489107&idx=1&sn=003e85239c88f1b7b1e06a7f93c4df5d": "【漏洞预警】Ollama-大语言模型和机器学习框架多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTY3MTE5MA==&mid=2247485496&idx=1&sn=930c7b4ed564f11ca8e30e60dc04f92b": "Opera 浏览器中的 CrossBarking 漏洞允许恶意扩展程序劫持用户帐户", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247488824&idx=1&sn=c15c613169e507f1bed038f4a567c5e9": "智联云采 SRM2.0 testService SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521381&idx=1&sn=dda99ba77206503fe0e0b1c0e5a0a35b": "从Naptime到Big Sleep：通过大语言模型捕获真实代码中的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487670&idx=1&sn=b20d4df66d776c16ddbeee3ba222d987": "金华迪加现场大屏互动系统mobile.do.php接口存在任意文件上传漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487670&idx=2&sn=67f1dd6c4672c1c9c27a0d9a8fcb773f": "英飞达医学影像存档与通信系统WebUserLogin.asmx接口存在信息泄露漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489925&idx=1&sn=41351ab34def7a147ca00ac52a4c0f65": "近100万台存在高危漏洞的 Fortinet、SonicWall设备正暴露在公开网络中", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485937&idx=1&sn=692ab730702b43ef8b9e93900e17b698": "「漏洞复现」万户 ezOFFICE SignatureEditFrm.jsp SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503170&idx=1&sn=91e265599dfb626f8044cf8e272c9db5&chksm=f2585f31c52fd627c80afc48b51c30253d784ebd836a7219240b9eeedcd8b72503daa9ce2fee&scene=58&subscene=0": "雷神众测漏洞周报2024.10.28-2024.11.03", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521381&idx=1&sn=dda99ba77206503fe0e0b1c0e5a0a35b&chksm=ea94a50fdde32c1962a406f9ce6e4f93f34ce95f0f4a77c0ceb6e383f9a6284d442c57816e28&scene=58&subscene=0": "从Naptime到Big Sleep：通过大语言模型捕获真实代码中的漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458580255&idx=2&sn=38be5331e10533fe598ed6c4e0017552&chksm=b18dc59586fa4c83dd9a60dcad13f7e31e4a157563a1bc422b7ae40c80e5aa275edfd719c243&scene=58&subscene=0": "近100万台存在高危漏洞的 Fortinet、SonicWall 设备正暴露在公开网络中", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495439&idx=1&sn=3d4b0d8539489e6517ab1ba9b868bc78&chksm=fd74dfc6ca0356d04f8e6b3b45766c206188be44edeb2b4c91b5a859274d24cd9b7315a80cd7&scene=58&subscene=0": "CNVD漏洞周报2024年第44期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495439&idx=2&sn=a9586d0dcb23602c937ef5fc763fdd5a&chksm=fd74dfc6ca0356d01fe800e64135999297ab610799b08c5e13308ac411819136ab774ba92881&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241028-20241103)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065716&idx=3&sn=4ec937a68fa76b1dd2f7886b3dd43d0d&chksm=f36e63f4c419eae26346e5c246903fa5cc2a9c17201ee9dd85aeef72b7c9d75b82527433ca2e&scene=58&subscene=0": "【安全圈】近100万台存在高危漏洞的 Fortinet、SonicWall设备正暴露在公开网络中", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487762&idx=1&sn=a25eeab4481350dc19897a38bb313f5e": "D-Link多款产品account_mgr.cgi接口存在远程命令执行漏洞CVE-2024-10914 附POC", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489147&idx=1&sn=f01f7bac40cd83b54f36d0d3c145a663": "【漏洞预警】kanboard代码执行漏洞(CVE-2024-51747)", "https://mp.weixin.qq.com/s?__biz=MzkwODUxMDUwMg==&mid=2247483802&idx=1&sn=bcda4c000871e19b64bce3bb3edd25aa": "Thinkphp3文件包含(CNVD-2024-39045)", "https://mp.weixin.qq.com/s?__biz=Mzg3MTc0MDYwMg==&mid=2247483857&idx=1&sn=aff0dbf3a61af3559608afafa41f87fa": "Thinkphp5.1.0-Thinkphp5.1. 文件包含漏洞（CNVD-2024-29981）", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY1NTI5Mw==&mid=2247489731&idx=1&sn=97f683773808570599119942d8eb6842": "月神SRC漏洞挖掘第三期新增大招", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651306849&idx=4&sn=9d788c79af176fa94e4c520128f7c219": "GBounty：一款快速可靠高度可定制的Web安全漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247496753&idx=1&sn=9acbb15f399c5e3f678c2519da2e2f73": "CVE-2024-4956：Nexus Repository 3目录穿越漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MzI2NzQ5MA==&mid=2247486582&idx=1&sn=5de8b50ecd1cabb9f744b9e57d6110d9": "nginx-0.7.65_漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485121&idx=1&sn=3d35c41795786b33c9b2eea7c62f385f": "漏洞推送|【未公开】东胜物流软件GetDataListCA存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513052&idx=2&sn=c0406f40963ecb4c3a9288faee368495": "25家跨国企业数据泄露，MOVEit漏洞引发重大安全危机", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502586&idx=1&sn=0128b8d78adfaf4169f5c1b2a56acceb": "【成功复现】D-Link NAS远程命令执行漏洞(CVE-2024-10914)", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247540646&idx=1&sn=bf698143a44119887ec5b5d887d4cdbd": "马自达 CMU 车机系统曝多项高危漏洞，可导致黑客远程执行代码", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458582134&idx=1&sn=95f5c978ef48c6520c56603e4ddbcdd3": "SDC2024 议题回顾 | 大模型软件生态系统的安全隐患：从传统漏洞到新型威胁", "https://mp.weixin.qq.com/s?__biz=Mzg4MDY1MzUzNw==&mid=2247497878&idx=1&sn=e8ce1d240242653ce95d75420af31b21": "Openssh漏洞修复升级加固", "https://mp.weixin.qq.com/s?__biz=MzAxMjE1MDY0NA==&mid=2247508539&idx=1&sn=5ea965a9da9251282e46633deaa24fb9": "中孚信息入选国家信息安全漏洞库（CNVD）用户组支撑单位！", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247545976&idx=1&sn=05c4213b9879a2b38aa0ac9b54e67c5f": "马自达汽车系统漏洞引发安全危机：黑客可执行任意代码", "https://mp.weixin.qq.com/s?__biz=Mzk0MzQzNzMxOA==&mid=2247487551&idx=1&sn=ac70ab02c53603efeffc9019a9f32702": "Autel MaxiCharger（CVE-2024-23967 ∕CVE-2024-23957解析）", "https://mp.weixin.qq.com/s?__biz=Mzg2MTg2NzI5OA==&mid=2247484703&idx=1&sn=29463d14ba55d7518b19b784ede3957b": "DataGear resolveSql 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247495083&idx=1&sn=a3d2e7cbff665f2502052bc6420a09a5": "【论文速读】| 注意力是实现基于大语言模型的代码漏洞定位的关键", "https://mp.weixin.qq.com/s?__biz=MzkxNTY4NTQwMg==&mid=2247483989&idx=1&sn=7985faa3d473a22b45989a8e877c3bd4": "工具 | 红队武器库VulToolsKit漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247522613&idx=1&sn=670d350c6894aab9ff3c8f336380528a": "CISA 警告：Palo Alto 重大漏洞已被攻击者利用", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503195&idx=1&sn=faa8d273d6f4a2ef59465190aab36c71&chksm=f2585f28c52fd63e46ac5b0a1bf90c3c68822c350824128b0903e916b35a5b213ee5193692be&scene=58&subscene=0": "雷神众测漏洞周报2024.11.04-2024.11.10", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513052&idx=2&sn=c0406f40963ecb4c3a9288faee368495&chksm=ebfaf4fcdc8d7dea8090a8e282f2ee22e39c09e3b8c079c22168e5f7c2195478cf71f56497ba&scene=58&subscene=0": "25家跨国企业数据泄露，MOVEit漏洞引发重大安全危机", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458582134&idx=1&sn=95f5c978ef48c6520c56603e4ddbcdd3&chksm=b18dccfc86fa45ea1716fc3610b69ef1a61c84eeadd791cde7f846e61c3e78282285652c8fa1&scene=58&subscene=0": "SDC2024 议题回顾 | 大模型软件生态系统的安全隐患：从传统漏洞到新型威胁", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247522613&idx=1&sn=670d350c6894aab9ff3c8f336380528a&chksm=c144eb88f633629eae261099f2866ab2ab3be4865b63699263f1e4600445730d66960612627c&scene=58&subscene=0": "CISA 警告：Palo Alto 重大漏洞已被攻击者利用", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247579536&idx=2&sn=1030b47bea804c76ef73b7024c115f6c&chksm=e91467aade63eebc7b4573ede6e556bf64ae4d163cb9b7f96241b124b0d0c33fa08861188efc&scene=58&subscene=0": "Synology 紧急发布 Pwn2Own 零日漏洞补丁", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495473&idx=1&sn=287892884ff8399c491816c642847db4&chksm=fd74dff8ca0356ee169b2a6946dcc1009e4f6469d88cf4befc246ab4f49fa5326e730487729b&scene=58&subscene=0": "关于新增快页信息技术有限公司等八家单位为CNVD支撑单位的公告", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486044&idx=1&sn=a388724f830e410cf1647a67efee8f84": "「漏洞复现」全新优客API接口管理系统 index∕doc SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489182&idx=1&sn=43153077f1b12d816a475a87439b5cf7": "用友U8 Cloud service∕approveservlet SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490176&idx=1&sn=f7bc575d9177f5af734456d68f9964ee": "GFI KerioControl 中的严重 RCE 缺陷允许通过 CRLF 注入远程执行代码", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490202&idx=1&sn=916223edf6aa4d18850e2f6f51605d27": "关键的 SimpleHelp 缺陷允许文件盗窃、权限提升和 RCE 攻击", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247541404&idx=1&sn=956038fbe9403f2278c40c6f6bf54e64": "海外版本三星 Galaxy S23∕24 手机曝内存越界写入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488909&idx=1&sn=e2a7822d04927ac12cdb72aaab9a3af2": "【已支持暴露面风险排查】Rsync缓冲区溢出与信息泄露漏洞（CVE-2024-12084∕CVE-2024-12085）", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247489993&idx=2&sn=301f142063bd5d8e3cd80673a0be71e8": "记某OA系统Ajax旧服务的0day漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492706&idx=1&sn=764017be0e60cd7249e822c5c3170995&chksm=96f7fb0fa180721915854dff09c2c1dae9b06c957496daa255ab984fedeeea63f951be6dbf23&scene=58&subscene=0": "【风险提示】Rsync 缓冲区溢出与信息泄露漏洞（CVE-2024-12084 ∕ CVE-2024-12085）", "https://mp.weixin.qq.com/s?__biz=Mzk0NDcyMjU2OQ==&mid=2247484541&idx=1&sn=c834b9f4ff672abc3b456507acb31eeb": "T1059.009 命令执行：云API异常调用", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490013&idx=3&sn=87f07e5635337b5920c4f83eaad5eb55": "中间件安全|Tomcat漏洞汇总", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067526&idx=4&sn=b3d1ba063b429d95b1315af7a9713b77": "【安全圈】OWASP 2025 年十大漏洞 – 被利用∕发现的最严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490479&idx=1&sn=b76d1181cd18599522db4a7428b3590b": "停车场后台管理系统 LaneMonitor∕GetVideo SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518632&idx=1&sn=e07dbed7c0c52952663773515cadee9b": "【赏金15000美元】通过监控调试模式实现 RCE", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499766&idx=1&sn=af8f15571a41cf2939dade4adef55a1d": "G.O.S.S.I.P 安全漏洞分析 2025-0220 OpenSSH CVE-2025-26465∕26466", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247496599&idx=1&sn=2b0720e1140e57ea382d3f5756399ed0": "从deepseek未授权探索clickhouse命令执行", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499766&idx=1&sn=af8f15571a41cf2939dade4adef55a1d&chksm=c063d12ff7145839c2dc019ad5b6a164f14078780f5d3465f17fb62fe5d64529a4c5ce251faa&scene=58&subscene=0": "G.O.S.S.I.P 安全漏洞分析 2025-0220 OpenSSH CVE-2025-26465∕26466", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528379&idx=1&sn=039d179220ec2af803a81af72b4a19f9": "Microsoft Windows KDC 代理中的 RCE", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489050&idx=1&sn=b8a3c83bd1226e6846cf900b6521eb3e&chksm=c2c64111f5b1c8073c8272d5a6a272095297af0cd68edb9cd84c6b972f9c1960d0d457e44ef5&scene=58&subscene=0": "【安全更新】微软3月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488226&idx=1&sn=b8f41c9137270f8c46f58ce34818dcc6": "用友crm客户关系管理ajax∕getufvouchdata.php接口存在SQL注入漏洞 漏洞预警", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485894&idx=1&sn=10f8c9191b8edc1fdad2526bc52fab68": "CVE-2025-30208｜Vite任意文件读取漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511578&idx=1&sn=80adefe4c6bed0eab29ed40008ac3bf2&chksm=fa527ba4cd25f2b287568d01ae1dc7d10626cbdb46c34c5547c1c5361b5b5d3b2b376b779c2a&scene=58&subscene=0": "Solr服务器上的“花式”远程代码执行（RCE）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068822&idx=4&sn=77b1848c9bb8693ceed4d6eb03368eb5": "【安全圈】威胁通告：黑客组织利用WordPress MU插件目录隐匿恶意软件实现远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068822&idx=4&sn=77b1848c9bb8693ceed4d6eb03368eb5&chksm=f36e7796c419fe80beaf543f22842ebe25dd4feb1237c81e91258cadea4292a5b3079a7acbed&scene=58&subscene=0": "【安全圈】威胁通告：黑客组织利用WordPress MU插件目录隐匿恶意软件实现远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzIwODc2NjgxNA==&mid=2247485025&idx=1&sn=1299230c1473f418b488bad301d34711": "LLM+MCP=RCE?", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499327&idx=1&sn=9f2ddc6ca9659e3ce1645d9e1cecd7f1&chksm=fb8133978e79bf1f2855cb96fa90c5358ab2ea64469dc947677cdf2b944234d93ffe00bc07c9&scene=58&subscene=0": "突破 .NET 身份认证，上传定制化 web.config 实现RCE", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499341&idx=1&sn=cb761033b98f3a4edd7c5d9e9fbbe305&chksm=fb5698878db56b4c2ad90f9cfcf093af2eb254da7a7ac9428fce23697663798eeecbd4c02998&scene=58&subscene=0": ".NET 四种方法上传 web.config 绕过限制实现RCE", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499353&idx=3&sn=0f223a2b145fa6abb4402be63b82825e": "突破 .NET 身份认证，上传定制化 web.config 实现RCE", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499353&idx=3&sn=0f223a2b145fa6abb4402be63b82825e&subscene=0": "突破 .NET 身份认证，上传定制化 web.config 实现RCE", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581991&idx=1&sn=43fdad838ff62d425324be170478ed24&subscene=0": "EncryptHub的双重生活：网络罪犯与Windows漏洞赏金研究人员", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458592514&idx=3&sn=41397a15bfe5768e54fd38d4dd2c2ae9&subscene=0": "更新第五章：ASAN原理解析 | 系统0day安全-二进制漏洞攻防（第4期）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069091&idx=4&sn=920ad5ef9331387d612bdb92d6b11baa&subscene=0": "【安全圈】Google Chrome 136 更新，修复 20 年前访问过的链接隐私漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247503070&idx=1&sn=f53d03400c6041496926b42651d6cdeb&subscene=0": "360漏洞情报月报2025年03期 | 漏洞总量持续高位运行，核心系统威胁加剧", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489946&idx=1&sn=4c4527a3fd7117a77e5b3a1b5c3f6568": "【漏洞预警】Microsoft Edge信息泄露漏洞(CVE-2025-29834)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458592514&idx=2&sn=9cab10c0a161806a0f3a987edd460ec5&subscene=0": "从披露到被利用仅4小时！WordPress插件漏洞使黑客肆意创建管理员账户", "https://mp.weixin.qq.com/s?__biz=Mzg2MjU2MjY4Mw==&mid=2247484944&idx=1&sn=99b40f9d6766299c4900cae38e359f93": "轻松拿捏的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg5NTMxMjQ4OA==&mid=2247485842&idx=1&sn=d3627088320399b0f00a85064a261c9f": "MCP漏洞利用实例：窃取WhatsAPP历史消息", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503128&idx=1&sn=b4e99839821b08523feb2dedb7430744": "【成功复现】Palo Alto Networks PAN-OS 身份验证绕过漏洞(CVE-2025-0108)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493610&idx=2&sn=9fc5b9a1e2f45ed286478a9009018d7e": "Gladinet漏洞CVE-2025-30406遭在野利用", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489519&idx=1&sn=1b31da256316c28876ecc8e436fefcad": "【Python代码审计】佰阅发卡存在前台RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484852&idx=1&sn=1f9546ac368fdd099bcc61f256b45467": "【复现】Oracle E-Business Suite远程代码执行漏洞(CVE-2025-30727)风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247485280&idx=1&sn=d318aa6058f5fea6d14fbf38f5d78bad": "Oracle E-Business Suite远程代码执行漏洞(CVE-2025-30727)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458515490&idx=1&sn=c87fbf060d1a6a26d411d0caf887c086&chksm=b18ec8a886f941be24e79c3405b74ec5777a2e0bc3281713f8bc3456f496c7d59d800a694135&scene=58&subscene=0": "30小时教你玩转CTF-SQL注入漏洞实战分析入门", "https://mp.weixin.qq.com/s?__biz=MzkwNzMyNjU0MQ==&mid=2247484153&idx=1&sn=baa37dbc98c5671d19a1fdf7e435bc6b&chksm=c0dba7dbf7ac2ecdaf926a8ca8cb08f84bef4b366bb5613ffe7cb069374c4bcd3334c113065b&scene=58&subscene=0": "Joern In RealWorld (1) - Acutators + CVE-2022-21724", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045568&idx=1&sn=19f81fbfc7d82a95e4d822c277db6bf9": "【漏洞预警】libcue内存损坏漏洞威胁通告", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488256&idx=2&sn=86231b20373d8ea8e145f14e576a1fea&chksm=fb029e58cc75174e1ad551027819bbbb1ba14c986e67eb2034f49d7f2b51bfcf106db43e9fe8&scene=58&subscene=0": "在野利用｜Apache ActiveMQ远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247510148&idx=2&sn=272312ec6bbbc9b0710b81afa276510b&chksm=ebfaefa4dc8d66b25f89ff1f5c66f2bb932765d28151952f46d385d0130979b446797bc192e5&scene=58&subscene=0": "开源软件作者要不要为安全漏洞负责？欧盟官方提出监管新方法", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDExMg==&mid=2247484302&idx=1&sn=530ab3a9de98a57821158e5039ed835b": "【漏洞复现】通达OA SQL注入漏洞（CVE-2023-6054）", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503947&idx=1&sn=d946513fd802cf326210117b7c673921&chksm=cfcab35ff8bd3a490f85a4a6383cbdc0d04842a183b213b7a7956cfee0b42d2eb0857499b6ac&scene=58&subscene=0": "漏洞通告 | Apache ActiveMQ 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458531260&idx=2&sn=bf8e40c319909f297d325056426a47e0&chksm=b18d053686fa8c2037dffdc65831564cfc6ccced450f074a2ab28daf6e0f529815d4bed91072&scene=58&subscene=0": "欢迎咨询！系统0day安全-Windows平台漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518349&idx=1&sn=7d0a830340114bfe063e58557ea01613&chksm=ea94b9e7dde330f1808becf6b96f023942a253bc69753c951113741277557c3cc163d081b25d&scene=58&subscene=0": "微软12月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247599274&idx=2&sn=895ac2c48ef27d4fba8691bfda31df48": "车辆漏洞管理 - 从设计开始有效保护软件定义车辆", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487246&idx=1&sn=2457b74cc94243f1adb963a1a159e10d": "【高危漏洞预警】Apache Dubbo 反序列化漏洞CVE-2023-29234", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498866&idx=2&sn=8eb66407058ef886ae62b125b5d849e5&chksm=973acf10a04d46065399aa80a6873759029aff006f8ad8bc4648a97a667fecf8dcc5d6597fce&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231211-20231217)", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492206&idx=1&sn=e4062e654512a89f6cae13f6c619005b&chksm=96f7fd03a180741535d4b7757722023f3a3b4269186d2868fbe7f8c977a8605cbda8ef00769c&scene=58&subscene=0": "【已复现】金蝶Apusic应用服务器文件上传致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650587328&idx=1&sn=1918013af6b98dbf10d6959b7212df15": "春节所到之处的流量，别乱“蹭”;|黑客揭露空客EFB应用漏洞，飞行数据面临风险", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458549719&idx=2&sn=fd1549d81da158ca5ba3f18ed8b4f5a4": "熊猫购物API漏洞被利用，黑客泄露130万用户个人信息", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247497807&idx=1&sn=34b93137c6b9407cd8803c15eed57b13&chksm=c063d696f7145f8022f1df1bdc1a9b53b344652460e9872abaffd752ac9a09faec995a7dccfe&scene=58&subscene=0": "G.O.S.S.I.P 阅读推荐 2024-04-15 爱因斯坦的Exploit之梦", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649290954&idx=1&sn=52e9df9273996331926ad73fe428188f": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489801&idx=1&sn=407ef4f78aff25fe04422085ddc2d9cf": "大华DSS数字监控系统attachment_downloadAtt.action任意文件读取(XVE-2024-34436)", "https://mp.weixin.qq.com/s?__biz=MzAxMzkzNDA1Mg==&mid=2247509107&idx=1&sn=73af37a4ec9626723fcebcd29706830b": "TangGo测试平台|逻辑漏洞测试系列-垂直越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494631&idx=2&sn=2c5e695296640c48c784e367332e14ec": "上周关注度较高的产品安全漏洞(20240401-20240407)", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484691&idx=1&sn=bbf1c173c704e8057c473fa5b2da0aa3&chksm=c12af892f65d718480fa64f9d19deed60a38d564cb37bfafcdad7ee4eff62535393b4f69deb1&scene=58&subscene=0": "【复现】 WebLogic T3∕IIOP 反序列化漏洞（CVE-2024-21216）风险通告", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484736&idx=1&sn=174f2fddd9500e3b10c1bd5141227669&chksm=c12af8c1f65d71d7732773062e3837b07ac17fe2a30a3f21196a10c8077d0a5dfb3c7919a895&scene=58&subscene=0": "【复现】Tomcat DefaultServlet远程代码执行漏洞(CVE-2024-50379)风险通告", "https://mp.weixin.qq.com/s?__biz=MzU0MDI1MjUxMg==&mid=2247533359&idx=1&sn=22b5ced3e8df9f8552f02bc17ae314d7": "集结社区之力，助力客户应急不明1day漏洞的PoC验证", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491156&idx=1&sn=2a852a8396fb7d7ed4720a5f4e925968": "安美酒店管理系统∕get_user_enrollment.php接口 sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524374&idx=2&sn=24d48e2ee3b173f5643f49a0fee7c75b": "Windows 11曝权限提升漏洞，攻击者300毫秒内可获取管理员权限", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651318673&idx=2&sn=6c308a78e315c863b95c3517747bb933": "CVSS 10.0！Apache Roller 曝高危漏洞：密码修改后会话仍持续有效", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247615870&idx=1&sn=80fc7395ff2955f66c4d863f5422cea4": "赏金故事 | 多个漏洞组合拳拿下PayPal高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247489138&idx=1&sn=58546270a15e70e35b0df53dd0523134": "AI挖洞 | 利用无问AI帮助甲方修复漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485067&idx=1&sn=27a151be6342be4a06dbc12d64ca5bc9": "腾讯云安全中心推出2025年3月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=Mzk1NzY1NzMwOA==&mid=2247483823&idx=1&sn=c98665bc09740e7c506487f6c335205c": "【CNVD漏洞挖掘实战训练营】从零到一，拿到属于自己的第一本证书！", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247484650&idx=1&sn=07d53cfc0391b2ab96b51ee5cb61bed3": "一文吃透文件上传漏洞！路径遍历、后缀绕过、ZIP炸弹全解析", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651318673&idx=1&sn=fc4885839a5fa2d029e0e95474e9432b": "美国国土安全部终止资助，CVE漏洞数据库面临停摆危机", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490721&idx=1&sn=f88cc3bddceac9661f32eff8703532d6": "Chrome 曝高危漏洞：攻击者可窃取数据并获取未授权访问权限", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247486298&idx=1&sn=50d5927179f3e71a3153de10e9148058": "某天OA-workFlowService-多处SQL注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788468&idx=1&sn=641942e08bf340932a9292fe6f2fd450": "CVE停摆？全球通用漏洞数据库项目面临资金危机", "https://mp.weixin.qq.com/s?__biz=Mzk1NzMwNTM5NQ==&mid=2247484886&idx=1&sn=55764c035c6101bc2eb944212d447f86": "SRC漏洞挖掘经验+技巧篇", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610287&idx=4&sn=f11fecf214744714bb6f8f2db7890005": "一款全方位扫描工具，具备高效的机器探活，端口探活，协议识别，指纹识别，漏洞扫描等功能", "https://mp.weixin.qq.com/s?__biz=Mzk0ODc1MjYyNA==&mid=2247483877&idx=1&sn=96af6f8a194f5e264a49286ed8c6353b": "【CNVD漏洞挖掘实战训练营】从零到一，拿到属于自己的第一本证书！", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247486033&idx=1&sn=8f6ffee6ca1811e4c96dd68c5668f505": "CISA警告：CrushFTP漏洞正遭利用，风险严峻！", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462763&idx=1&sn=7592d085b14be3d4ae63304eec467c14": "信息安全漏洞周报（2025年第15期）", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQ0MTI2MQ==&mid=2247484842&idx=2&sn=afef86708d6cd0d337e80dc62d8d6f7e": "小白黑客成长日记：漏洞勋章与道德电流", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493610&idx=4&sn=3197b14e93c1a19515fade4452c6a7fb": "赫兹租车公司披露数据泄露事件 起因系2024年Cleo系统零日漏洞攻击", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ2NzQ0Ng==&mid=2247485091&idx=1&sn=0f3c783887e861fd52700a5f0ee94d1c": "【CNVD漏洞挖掘实战训练营】从零到一，拿到属于自己的第一本证书！", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503319&idx=1&sn=c50ec2d0659d1177bf4a7569ff7920f6": "Oracle 2025年4月补丁日多产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247492188&idx=1&sn=139092231262bccf7250085b05c5402c": "漏洞预警 杭州三X SMG网关管理软件 changelogo.php 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493610&idx=1&sn=25e6396cc5325582f21981eaab54a8ac": "关键Apache Roller漏洞允许在密码更改后仍保留未授权访问权限", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524374&idx=3&sn=17fdb201a629d64e8a1da57513bc7e44": "Chrome曝高危漏洞，攻击者可窃取数据并越权访问", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524374&idx=1&sn=50cfeaad4836761d01355e66a6c3d573": "Apache Roller 漏洞让攻击者获得未经授权的访问", "https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247485200&idx=1&sn=3ad5a402ff7f574eb9f2acc698a60553": "美国CVE漏洞数据库面临资金枯竭危机", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247488969&idx=1&sn=1c5e9f267446a1663b736442711902cc": "记一次前端js加解密泄露引发的漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNjg3MjczOA==&mid=2247486633&idx=1&sn=256dbdb580c954cfe2700e41a0642144": "攻击者正通过 sourceforge 平台传播一款挖矿程序和 ClipBanker 木马病毒", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484779&idx=2&sn=6bc8aa0d49692d02e6bc00c4d4bf1a94": "【漏洞处置SOP】FasterXML jackson-databind 信息泄露漏洞（CVE-2019-14439）", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247484660&idx=1&sn=a1b3e936aca842abd6567cf38e04b6ff": "一次 OAuth 登录背后的隐患：被忽略的 URL 跳转漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096146&idx=2&sn=bf4cb1d0414ed84f43a8a35465bfb419": "Apache Roller 未经授权的访问漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458592525&idx=3&sn=0bd3b97b684a64e90ef77a043f82e023": "更新第四章：漏洞分析与利用 | 系统0day安全-IOT设备漏洞挖掘（第6期）", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486682&idx=1&sn=787f6342e330f1a7f7603fb2719a7748": "【漏洞预警】Oracle E-Business Suite远程代码执行漏洞（CVE-2025-30727）", "https://mp.weixin.qq.com/s?__biz=MzkwMzUyMjk2MQ==&mid=2247484318&idx=1&sn=bd193da8dc2151a13202265e75ad2641": "WordPress前台管理员账户创建漏洞（CVE-2025-3102）POC及一键部署环境", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489955&idx=2&sn=304ce7e7ee5e2f47d63bfe0744b35044": "【漏洞预警】Oracle 2025年4月补丁日多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522748&idx=1&sn=743ec5c32d3881143ee9922bbd2be8ef": "Apache Roller CVSS 满分漏洞可用于获取持久性访问权限", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484779&idx=3&sn=310b7297e3017aa319a69b1e7545706d": "入选作品公布｜安钥®「漏洞处置标准作业程序（SOP）」征文第三十一期", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500984&idx=1&sn=7a8ba0120ca35ee2de5db79e636b12d5": "【漏洞通告】Oracle Scripting iSurvey模块远程代码执行漏洞(CVE-2025-30727)", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247484682&idx=1&sn=a884ddbce998c0cf73f91f28b94b5045": "深入解析 URL 跳转漏洞：审计方法与渗透实战全攻略", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247484668&idx=1&sn=8013ce12f108e76a3ed07407e72569b6": "URL 跳转漏洞利用方式详解：不仅仅是钓鱼这么简单！", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489955&idx=1&sn=666cbafe9333001db4200c1df62fb939": "【漏洞预警】Argo Events权限管理不当漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524287&idx=1&sn=484cbe1d38a7bf4fca44fa91b0807798": "【漏洞通告】Oracle E-Business Suite远程代码执行漏洞(CVE-2025-30727)", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484779&idx=1&sn=e17604d10382682ebc5fa5a314c4ab15": "安钥®「漏洞防治标准作业程序（SOP）」征文启示 [2025年第15期，总第33期]", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247491200&idx=1&sn=69ead0eed0446e993d381d454a24a724": "网站安全\"扫描利器\"：掌握Gobuster，一键发现隐藏漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503137&idx=1&sn=6d689f441d4a43584fdf2cc7f052c3fc": "【成功复现】Ingress NGINX Controller远程代码执行漏洞(CVE-2025-1974)", "https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247485037&idx=1&sn=ba29027e943fadc9c1b1e07b8168d04b": "啥情况？！想让CVE董事会成员意识到一个重要的潜在问题？！震惊全球最大漏洞库出现危机？！", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652115249&idx=1&sn=35e8d7b146e8632ec58079bf918cee61": "以后是不是0day更多了？由于美国资金不确定性CVE项目面临中断", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247484695&idx=1&sn=d143eca68da60a0f23f8dd92fde3710d": "Nashorn：潜伏在Java中的JavaScript命令执行后门", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247490961&idx=1&sn=370b326cd8809c431d7a1e1e29ae2d1a": "综合后渗透工具e0e1-config|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492885&idx=3&sn=c61b18065b875af12e531287136b9cbe": "漏洞预警 | 家装ERP管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492885&idx=2&sn=917ee5335324169b6a29f5bd67179013": "漏洞预警 | 安科瑞环保用电监管云平台任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794860&idx=3&sn=e9e3c6ad09976ada6686f6de7652b00f": "专家发现 Windows 任务计划程序中存在四个新的权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NzUzNzk1Mw==&mid=2247497936&idx=2&sn=43e60952c4590bf3aa4092c3969857e8": "一张图拆解：CVE漏洞的旅程", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794860&idx=2&sn=816788514b71bb9e5c442ab1e2eb9f7d": "苹果称新发现的0day漏洞针对使用 iOS 的“特定目标个人”", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247484714&idx=1&sn=15f840bd4928ac609b037661ef2a00d4": "一文看懂 Java 命令执行的源码审计与防御", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247518664&idx=1&sn=db466d878e78f3c689a3ff976be23842": "CVE编号在招手！23个JS漏洞挖掘技巧！", "https://mp.weixin.qq.com/s?__biz=MzkyMDY1MDI3OA==&mid=2247483954&idx=1&sn=5c783f320db089e1c21d8b3bca0d4b7a": "【CNVD漏洞挖掘实战训练营】从零到一，拿到属于自己的第一本证书！", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247526079&idx=1&sn=a0a784d2c6830c4affdd163ae46563d6": "美国国土安全部终止资助，CVE漏洞数据库面临停摆危机", "https://mp.weixin.qq.com/s?__biz=Mzg5NTMxMjQ4OA==&mid=2247485875&idx=1&sn=c64c6db109cc2b60b1653f67b1ced2a5": "MCP TPA漏洞复现，及Deepseek的诡异表现", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492885&idx=1&sn=e153ceb04a965266859dcb0e1570e121": "漏洞预警 | UNA CMS PHP对象注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499467&idx=3&sn=7e48a21432445c03d6096bf6771c4778": ".NET 高级代码审计：一种尚未公开绕过 GZip 实现反序列化漏洞的方法", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487693&idx=1&sn=269f471b38e44b55d405ab959b61c9c3": "全球网络安全警报！CVE漏洞数据库停摆危机，美国为何自毁长城？", "https://mp.weixin.qq.com/s?__biz=MzUyNTUyNTA5OQ==&mid=2247485213&idx=1&sn=0a0df376bfca8f5bbb80fd333850890a": "【云安全】云原生- K8S IngressNightmare CVE-2025-1974（漏洞复现完整教程）", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503319&idx=1&sn=c50ec2d0659d1177bf4a7569ff7920f6&subscene=0": "Oracle 2025年4月补丁日多产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524412&idx=1&sn=4436ae2957ce929a3136dd12f41bd450": "2个苹果iPhone零日漏洞在高度复杂的攻击中被积极利用", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458592525&idx=3&sn=0bd3b97b684a64e90ef77a043f82e023&subscene=0": "更新第四章：漏洞分析与利用 | 系统0day安全-IOT设备漏洞挖掘（第6期）", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610292&idx=1&sn=f1898921a6f1b63b3218debbc236497a": "美国国土安全部终止资助，CVE漏洞数据库面临停摆危机；|有部分群众反映收到了领取“五险一金补贴”的通知；", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788468&idx=1&sn=641942e08bf340932a9292fe6f2fd450&subscene=0": "CVE停摆？全球通用漏洞数据库项目面临资金危机", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247497752&idx=3&sn=fc37db46dfed9ffdbfae43780480ce3d": "Erlang∕OTP CVE-2025-32433 (CVSS 10)：严重 SSH 漏洞导致未经身份验证的 RCE", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485067&idx=1&sn=27a151be6342be4a06dbc12d64ca5bc9&subscene=0": "腾讯云安全中心推出2025年3月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522748&idx=1&sn=743ec5c32d3881143ee9922bbd2be8ef&subscene=0": "Apache Roller CVSS 满分漏洞可用于获取持久性访问权限", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247489078&idx=1&sn=db8a510a6d1129cbde04fd11af8f14bf": "漏洞预警| Windows任务计划程序漏洞可避开UAC执行高权限命令", "https://mp.weixin.qq.com/s?__biz=MzkxOTUyNTg2MA==&mid=2247483972&idx=1&sn=6360f9c266fa41fb14ca0d4131bfdf20": "开发者注意！Vite框架曝高危漏洞，你的项目受影响了吗？（含poc和批量脚本）", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484852&idx=1&sn=1f9546ac368fdd099bcc61f256b45467&subscene=0": "【复现】Oracle E-Business Suite远程代码执行漏洞(CVE-2025-30727)风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzMDE5OTQyNQ==&mid=2247488497&idx=1&sn=1bcaf000a8f3cdd9b219d99594204eee": "渗透测试|柳暗花明(记一次有趣的高危漏洞以及思考修复方案)", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462767&idx=1&sn=9836a1530e7a136b6b846d94dd13df1b": "CNNVD关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524287&idx=1&sn=484cbe1d38a7bf4fca44fa91b0807798&subscene=0": "【漏洞通告】Oracle E-Business Suite远程代码执行漏洞(CVE-2025-30727)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486719&idx=4&sn=f8ff16a30c493f6d4635bc6644329de7": "【漏洞通告】D-Link DI-8100 JHTTPD 基于堆叠的溢出(CVE-2025-3538)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491165&idx=1&sn=d57b085af7d7378ba55e6eba7e8e2799": "速达软件 多款产品 doSavePrintTpl.action SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486719&idx=2&sn=6ca139f3e362f10d30dad9af90adce4f": "【漏洞通告】Adianti Framework 安全漏洞(CVE-2025-3590)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486719&idx=3&sn=053b8e4f597e4e325d106e9df51f3dde": "【漏洞通告】AutoGPT 代码问题漏洞(CVE-2025-31490)", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247484726&idx=1&sn=c62157f37833ed50540775908f93e406": "Java命令执行审计怎么查？关键词清单来了！（附类型汇总）", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247490950&idx=1&sn=a91633c936b48e68f2e18db9f0348d01": "创宇安全智脑 | Optilink upgrade.php 远程命令执行等61个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503328&idx=1&sn=5b2547c083206cfdcc72084fb45a3894": "【已发现在野利用】Apple iOS 与 iPadOS 多个在野高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247502921&idx=1&sn=88f56da5057f4d6e1686895b4223b08b": "CVE要黄？特朗普认为漏洞数据库与国家安全无关", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499443&idx=2&sn=a6be39e7d6dadaadd087bfe05fb9a29a&subscene=0": ".NET 高级代码审计：一种绕过 GZip 叠加 BinaryFormatter 实现反序列化漏洞的技术", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538513&idx=1&sn=2f03dab7cbc7139e09be0d33a4ddefde": "CVE 漏洞项目及时\"续命\",11个月后生死难料", "https://mp.weixin.qq.com/s?__biz=MzkyOTQ0MjE1NQ==&mid=2247498861&idx=1&sn=04cd3572c613fdf4a9515777d4e5d3bd": "【漏洞与预防】畅捷通文件上传漏洞预防", "https://mp.weixin.qq.com/s?__biz=MzkxOTUyOTc0NQ==&mid=2247493320&idx=1&sn=d492128df6d30d2fadcfe488391b3706": "漏洞CVE项目合同今天到期,最后时刻续上,欧盟差点截胡", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664240728&idx=1&sn=2f8f1a14345e6ab93b60b861879d1f7d": "CNNVD | 关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486719&idx=1&sn=1c5a2efc23e829988cfc99335e68f0ad": "【漏洞通告】Oracle E-Business Suite远程代码执行漏洞(CVE-2025-30727)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486719&idx=5&sn=1bc50d3cf6d8af81f6d22833e88d4897": "【漏洞通告】基于 Chromium 的 Microsoft Edge 远程执行代码漏洞(CVE-2025-29834)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651318777&idx=1&sn=1c9c7f2561b2b3ce09438b7f1ff25807": "Windows 11高危漏洞：300毫秒即可提权至管理员", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492645&idx=1&sn=02febcbbf196aab9a0d84b37bcf3f332": "漏洞复现 || Vite import存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247491215&idx=1&sn=c60068d2796fcd7361a287e832d27bf5": "服务器被控的幕后黑手：远程文件包含漏洞深度揭秘", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458592604&idx=4&sn=0e7b8ddb4e256cb3f0a166d8b724ffe6": "今日更新 | 系统0day安全-Windows平台漏洞挖掘（第5期）", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247488032&idx=1&sn=3033c7b30b6421435668bc58482924d6": "300 毫秒获取管理员权限：掌握 DLL 劫持和 Hook 技术（CVE-2025-24076∕CVE-2025-24994）", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247497389&idx=1&sn=111f630241eeeaa8ed781fcb4d8cd17e": "福利课 | 2025首场SRC漏洞挖掘两日训练营", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489963&idx=1&sn=b8212c62208309044516aebdbc1f8cc5": "【漏洞预警】CrushFTP目录遍历漏洞(CVE-2025-32103)", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247554512&idx=2&sn=2be22f4363413e1bd622083345cf0082": "【免费领】网安从业必备：Web漏洞检测及修复方案大全", "https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649172570&idx=2&sn=17d3e982b261c007b7157d3e2a96e7ed": "CNNVD通报Oracle多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484005&idx=1&sn=392a43c98adcf9e5f7757138058263b1": "【漏洞预警】Erlang∕OTP 严重 SSH 漏洞允许未认证的远程代码执行（CVE-2025-32433）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069139&idx=2&sn=5fcd14bd8672d24bf7654cecc92d1518": "【安全圈】苹果紧急修复两枚被用于定向攻击iPhone的零日漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4Njc0Mjc3NQ==&mid=2247486682&idx=1&sn=626c19bac989fd3c25e5828d905639c9": "预算展期，CVE 暂免关门，但国内漏洞信息库发展契机仍存", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096157&idx=1&sn=5a01eac9ac111e56ff71ce95fe5b582d": "2 个 Apple Iphone 零日漏洞被利用", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096157&idx=2&sn=41b8c2f79b0bc5bb6f833594bd3d69e9": "Oracle 安全更新 – 针对 378 漏洞（包括远程漏洞利用）的补丁", "https://mp.weixin.qq.com/s?__biz=MzU5Njc4NjM3NA==&mid=2247496507&idx=1&sn=4cdf72a4acbd3b6637ff967a88e2d060": "中科天齐团队发现Apache Roller近年来首个高危漏洞，密码修改后会话仍持续有效", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522769&idx=1&sn=665091a9de4302af67ecf646d9c5bb79": "苹果紧急修复已遭利用的两个0day", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529147&idx=1&sn=37e3df37ceb35cf5a49d2ecff6f3d748": "CVE-2025-0411：因 7-Zip 的 Mark-of-the-Web (MotW) 绕过而导致的恶意软件感染 _", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247499162&idx=2&sn=607bb9252d39d68ae5d8746324310047": "英国政府发布网络安全漏洞调查", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503150&idx=1&sn=603b4c2f2df62b5c6abf6f719b5f4f36": "【成功复现】NUUO Camera远程命令执行漏洞(CVE-2025-1338)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489963&idx=2&sn=a9cfbcf86310f0df04893fe514b19216": "【漏洞预警】Oracle Scripting iSurvey模块远程代码执行漏洞(CVE-2025-30727)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247490965&idx=1&sn=5bb002e942221bc14f55433acdb37cd3": "WEB漏洞扫描器Invicti-Professional-V25.4（自动化爬虫扫描）更新", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247545017&idx=1&sn=b513c15f91d5de7a8fa33c4b3725706a": "【高危漏洞】Windows 11：300毫秒即可提权至管理员", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYxMjk0Mw==&mid=2247490093&idx=1&sn=1ae57da449512ecbcde1d4f4e8acc808": "【代码审计】某友云平台远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247489172&idx=1&sn=c2fc83def008af0091c1e4f51616defb": "某云盘系统 API 端点无限制上传漏洞解析", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794873&idx=3&sn=9cdecd15fd9f4dd91299ff83d9c1fcd9": "Erlang∕OTP SSH 中的满分RCE漏洞广泛影响电信设备、工控系统", "https://mp.weixin.qq.com/s?__biz=MzA4NzU1Mjk4Mw==&mid=2247492582&idx=1&sn=33a3919850b5cbbd1f435f23a4cf2f89": "若依Vue漏洞检测工具v4更新", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492892&idx=1&sn=8512347baba3264fa31bda77c9c6f6c8": "漏洞预警 | NetMizer日志管理系统远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492045&idx=1&sn=7c2c6f2965fe73be4f2046b0ef28ea92": "某事业单位多处越权漏洞测试", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492892&idx=3&sn=82a4d8973d972459d50d3176a7013777": "漏洞预警 | 科拓全智能停车收费系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247490525&idx=1&sn=bc425a085f59434108bc07b542e02398": "源代码审计常见漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492892&idx=2&sn=c7f073395b25c4f53b24ae3191f5accc": "漏洞预警 | 用友NC SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487925&idx=3&sn=d8a240f7a2f68a49989d34415a3e3ab7": "三千行代码，扫出三万多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503328&idx=1&sn=5b2547c083206cfdcc72084fb45a3894&subscene=0": "【已发现在野利用】Apple iOS 与 iPadOS 多个在野高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069139&idx=2&sn=5fcd14bd8672d24bf7654cecc92d1518&subscene=0": "【安全圈】苹果紧急修复两枚被用于定向攻击iPhone的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522769&idx=1&sn=665091a9de4302af67ecf646d9c5bb79&subscene=0": "苹果紧急修复已遭利用的两个0day", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458592604&idx=4&sn=0e7b8ddb4e256cb3f0a166d8b724ffe6&subscene=0": "今日更新 | 系统0day安全-Windows平台漏洞挖掘（第5期）", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499467&idx=3&sn=7e48a21432445c03d6096bf6771c4778&subscene=0": ".NET 高级代码审计：一种尚未公开绕过 GZip 实现反序列化漏洞的方法", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610301&idx=1&sn=ed1b5ac664c0595394f5f2186f32bd85": "Windows 11高危漏洞：300毫秒即可提权至管理员；|快递公司负责人导出公民个人信息129000多条 非法获利获刑", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064111&idx=1&sn=c94895f1427df70e394ef8bcaa9f8ae0": "信息安全漏洞周报【第018期】", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484010&idx=1&sn=119764216e6461673a795ffb0733e871": "【已复现】CrushFTP SSRF和目录遍历漏洞（CVE-2025-32102，CVE-2025-32103 ）", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247497911&idx=7&sn=777f246e017e1f8d115194492c01a29b": "苹果发布紧急更新，修复被积极利用的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247523670&idx=1&sn=2e26c700923ff59023211d31c80d6ca2": "【全网最全】Struts2终极漏洞合集靶机发布！一次通关，掌握所有高危漏洞利用！", "https://mp.weixin.qq.com/s?__biz=Mzg3NTY0MjIwNg==&mid=2247485980&idx=1&sn=3a4bcd0b5a1a2bba7e7c73399034cedf": "如果没了CVE，我们还有哪些漏洞库可以选择", "https://mp.weixin.qq.com/s?__biz=MzkxMTMyOTg4NQ==&mid=2247484456&idx=1&sn=151af37be75db9ecc780188294a1a831": "OneBlog最新模板注入漏洞（CNVD-2025-06047、CVE-2024-54954）", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247497911&idx=5&sn=16f9dc234d68c7b581ac76809236e96f": "再发一次Erlang∕OTP SSH 中被发现 CVSS 10.0 严重性 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3NDM4NTk4NA==&mid=2452946681&idx=1&sn=bd24a85040eb14af4f5f7abbc6b52b9d": "网安人的咯噔文学|CVE-2025-404NotFound？", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247497911&idx=1&sn=43e519f0856018487702bc5d5a3d80ab": "计划任务程序schtasks.exe 的0day漏洞被微软忽略", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247492201&idx=1&sn=670b6c5b020543956769ca9df9cc47e0": "漏洞预警 博华X龙防火墙系统 arp_scan文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524436&idx=3&sn=b348515395f006e54dc60ff4fe7aa96e": "Erlang∕OTP SSH远程代码执行漏洞的概念验证（PoC）利用代码已公开", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247903&idx=1&sn=ba2031a750a2783de5150580b5291496": "MCP安全检查清单：AI⼯具⽣态系统安全指南 | Windows 11高危漏洞：300毫秒即可提权至管理员", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524436&idx=2&sn=c0d4fac0c3fc8f1847f9fb73492e9935": "PHP的extract()函数存在严重漏洞，可导致任意代码执行", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493626&idx=1&sn=c7f84e7ee0335b5a660dd84ae8b3528b": "苹果发布紧急更新修复正被利用的安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247491060&idx=1&sn=dfb3eb88ba58e2116925e1f74dc048bc": "能信安：漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkxMzY0MzAxMw==&mid=2247487531&idx=1&sn=5d96de4bb41f7fbad277e0a4276def4d": "【代码审计】记某次项目前台反序列化RCE漏洞研究", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490128&idx=2&sn=85687dfc8f574b67690a0a9e4b6e87b9": "如果没了CVE，我们还有哪些漏洞库可以选择", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247488037&idx=1&sn=cb13be04967b8e02868d4825a06cd220": "CVE-2025-21204: Windows Update Stack 中的不当链接跟随导致的权限提升", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538513&idx=1&sn=2f03dab7cbc7139e09be0d33a4ddefde&subscene=0": "CVE 漏洞项目及时\"续命\",11个月后生死难料", "https://mp.weixin.qq.com/s?__biz=MzU0MjE2Mjk3Ng==&mid=2247488966&idx=2&sn=c5e33b3deea80e7f01d72f473c927b78": "美国CISA紧急续约CVE项目，确保漏洞披露机制不中断", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247497916&idx=1&sn=54583240e4825a904c7c7538095edc23": "【真0day未修复】Bubble.io平台 0day安全分析：揭露Elasticsearch漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503338&idx=1&sn=156adf75bc9f1344112970fb946cc863": "CVE计划停摆：全球漏洞治理体系面临协同危机", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489544&idx=1&sn=9c91da0de7a094e6745684a3032f1f72": "【代码审计】记某次项目前台反序列化RCE漏洞研究", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490732&idx=1&sn=511a6335e2ba8dc4d2e726bf3213f86a": "Erlang∕OTP SSH 高危漏洞 CVE-2025-32433：无需认证即可远程执行代码", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522791&idx=1&sn=b726626262a08aef9a0f09bf3d3332e0": "速修复！Erlang∕OTP SSH 中存在严重的预认证 RCE", "https://mp.weixin.qq.com/s?__biz=MzA5NzQ0Mjc5NA==&mid=2649767610&idx=1&sn=2168feb32477aee7179465fb0683d0fa": "全球首款「原生AI」漏洞挖掘应用——蛙池AI即将上线！", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069156&idx=4&sn=b108806bca06e4e6ea54839526d21ed7": "【安全圈】Erlang∕OTP SSH 远程代码执行漏洞 PoC 漏洞利用发布", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522791&idx=2&sn=841f61a29df71610844f2e021c5c9bab": "Atlassian 和思科修复多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529163&idx=3&sn=1b1ed6dc376abc605a00a905096c0469": "CVE-2025-21204：通过 Windows 更新堆栈中的不当链接跟踪进行权限提升", "https://mp.weixin.qq.com/s?__biz=MzkwMzYyNzQ1NA==&mid=2247484950&idx=1&sn=e26cad51797b8e2af84c7383a62c3db8": "Windows 提权漏洞速报：CVE-2025-21204", "https://mp.weixin.qq.com/s?__biz=MzA3NTIyNzgwNA==&mid=2650260085&idx=1&sn=20363c6174d0204eb17ac6ad870fc4ba": "微软产品的漏洞：哪些已得到改进，哪些仍面临风险", "https://mp.weixin.qq.com/s?__biz=MzU0MjExNDkyMQ==&mid=2247485996&idx=1&sn=e442ff61b75275485bf1fbf7552d77a9": "Sapido RB- 1732 路由器命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489974&idx=1&sn=0d23aafb6b01d3d5cd1171a1c48b16bf": "【漏洞预警】F5 BIG-IP命令注入漏洞CVE-2025-23239", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492651&idx=1&sn=1738522915c9bfc54110996360b55ae5": "漏洞复现 || Langflow 远程命令执行", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485300&idx=2&sn=fb51e3139570d30c82c8d85256c6518e": "一文玩转验证码漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651318977&idx=3&sn=0cb3b70f3f20cd13cc269a5eb1500fe0": "Windows漏洞CVE-2025-24054被利用，文件下载可致NTLM凭据被盗", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489974&idx=2&sn=94cc62913f26f413080bf10c5f6de7f2": "【漏洞预警】Jupyter Remote Desktop未授权访问漏洞CVE-2025-32428", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651318977&idx=4&sn=e6b728a815b7412e47ec8aab3709ebb4": "iOS 设备遭定向攻击，苹果紧急修复两枚零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511701&idx=1&sn=7f2360040b4d75447acab62b52e3db78": "IngressNightmare：揭秘CVE-2025-1974 Kubernetes RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503338&idx=1&sn=156adf75bc9f1344112970fb946cc863&subscene=0": "CVE计划停摆：全球漏洞治理体系面临协同危机", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492903&idx=3&sn=b6a11269640f9896ffbdbae50442c169": "漏洞预警 | JieLink+智能终端操作平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzcyMjgwNA==&mid=2247483985&idx=1&sn=cfbade59a9a0c0c5625511c1b1198691": "Wordpress SureTriggers插件漏洞（CVE-2025-3102）创建未经身份验证的管理用户", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492903&idx=2&sn=10cb3a18dd564b6efebfd9d03fda7d73": "漏洞预警 | 家装ERP管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522791&idx=2&sn=841f61a29df71610844f2e021c5c9bab&subscene=0": "Atlassian 和思科修复多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247484779&idx=1&sn=ddbfd9581640b2b1c1396bcbdf4e892b": "一文掌握 Java XXE 漏洞原理、利用与防御姿势", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652115297&idx=2&sn=95e3cc9767aa8c0029dfc6a990ad53b7": "安全提醒：Apple 零日漏洞正被利用于攻击", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492903&idx=1&sn=9cb1c25744b59c3b3af147fa26a73101": "漏洞预警 | Oracle Scripting iSurvey模块远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMDQwMjg5NA==&mid=2247507002&idx=1&sn=b7f176648f100e6a9efc7fe41f981d92": "【一周安全资讯0419】九部门印发《关于加快推进教育数字化的意见》；Windows11高危漏洞：300毫秒即可提权至管理员", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522791&idx=1&sn=b726626262a08aef9a0f09bf3d3332e0&subscene=0": "速修复！Erlang∕OTP SSH 中存在严重的预认证 RCE", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247484761&idx=1&sn=b7d7b5ce940c87fb62bf7552fe8635c5": "Java XXE 防护实战：常见漏洞场景与防御代码全收录", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484881&idx=1&sn=805864c5b7786a3c546c113c19f29daf": "【漏洞复现】Zyxel NAS设备 setCookie 未授权命令注入漏洞(CVE-2024-29973)", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247494140&idx=1&sn=23280ef663e551ad564d018f7653375a": "AscensionPath一个基于Docker容器化技术的漏洞环境管理系统", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487931&idx=1&sn=9dc4229ef36fc424a9598bbc0e51ae2c": "deepseek分析代码变动推测漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652115297&idx=1&sn=eadad9a8a652142a6075fc06f295b2ca": "2024年微软漏洞数量创新高，超1,300个", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247501378&idx=1&sn=d13931a97f131dc1f6743fc16677ab65": "AD域内网渗透-三种漏洞利用方式", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489564&idx=1&sn=1a0cc6975d8a6582ee297ed357b6cebe": "某短视频矩阵营销系统前台RCE漏洞审计", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247484476&idx=1&sn=32893d59baa275b6b4524535eeef1857": "JS中的漏洞信息", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069156&idx=4&sn=b108806bca06e4e6ea54839526d21ed7&subscene=0": "【安全圈】Erlang∕OTP SSH 远程代码执行漏洞 PoC 漏洞利用发布", "https://mp.weixin.qq.com/s?__biz=MjM5MDA3MzI0MA==&mid=2650091532&idx=1&sn=279b4351d16c792425d749f26de6f628": "【大佬赋能】1000万漏洞赏金获得者，带你走向SRC漏洞挖掘大师之路！", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069169&idx=1&sn=23dcd3fe9618ef29ef7a414b9da625d6": "【安全圈】Windows NTLM 漏洞肆虐，低交互高风险、可提权窃取敏感数据", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498029&idx=2&sn=b4e9a24aeec5af3f5fa95929642d3f1e": "华硕警告称，启用 AiCloud 的路由器存在身份验证绕过漏洞CVE-2025-2492（9.2）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485941&idx=2&sn=246d2f1e20ec25f28e48e4d34c7191e5": "【漏洞复现】CVE-2025-24071｜Windows 文件资源管理器欺骗漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529175&idx=2&sn=1346b0d0a341741e51d35bcdea870ba1": "渗透测试，从初学者到专家！这是一份有关 Web 应用程序渗透测试和漏洞赏金搜索的综合指南，涵盖了识别和利用漏洞的方法、工具和资源", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651319008&idx=1&sn=41ada316f8b802f5b2ad77d5893fc636": "FreeBuf周报 | CVE漏洞数据库项目面临停摆危机；Apache Roller 高危漏洞改密后会话仍有效", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247572421&idx=1&sn=7fe88022698b4490232ced946fa85265": "某电力公司web.config的RCE之旅", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519064&idx=1&sn=43bde635aaa63ff6034368f8babaa8bc": "Parameter is null引发的一次五千漏洞赏金记录", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485941&idx=1&sn=e18a5c024992733bdae0cff9a00e66f0": "CVE-2025-27218｜Sitecore CMS远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247485374&idx=1&sn=ebf0dee4095732e720022d7cf8d4a5f5": "“改密码就能防住？”全网疯传的Meta夺号案，撕开2FA致命漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484893&idx=2&sn=827944d3948a304d05705d851957c406": "rConfig-ajaxEditTemplate.php-后台远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODUzMjA1MQ==&mid=2247485014&idx=1&sn=1dd0782f1c6e77e88e56b004c111e1b6": "汉堡白吃？某连锁餐饮 App 竟藏\"0元购\"漏洞！", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490206&idx=1&sn=5adb6b6ee20a97d0afeac3f4668822ad": "【漏洞复现】CVE-2025-24071｜Windows 文件资源管理器欺骗漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492589&idx=1&sn=20a2a65628b7e4552ad7642c3073e9fe": "英国因 2022 年勒索软件漏洞对软件提供商罚款 307 万英镑", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520152&idx=1&sn=68e4a26ee2ab2f0de6a3630ccb40bf7e": "CVE-2024-22243 Spring Web UriComponentsBuilder URL 解析不当漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529175&idx=4&sn=f51dea8cd1acf20d966d1af2aaebad88": "使用 Joern 查找用于利用 Java 中 Unsafe Reflection 漏洞的类", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610311&idx=4&sn=84bfa2b6f0b91c2b693822e8a2821285": "CTF PWN新手的终极利器！一键搞定栈溢出与格式化字符串漏洞！", "https://mp.weixin.qq.com/s?__biz=Mzk0ODc1MjYyNA==&mid=2247483879&idx=1&sn=7a43f60f8c3b35cee5948b6cc2547e06": "代码审计|SpringKill如何用CodeAuditAssistant挖掘0day教程公布", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484893&idx=1&sn=1f12152bb39b871e6f23d4431c3092e0": "rConfig-ajaxArchiveFiles.php-后台远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247484512&idx=1&sn=d08ab2d26d7277a8016c3bd32aafcbda": "SQL注入漏洞实战", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069169&idx=1&sn=23dcd3fe9618ef29ef7a414b9da625d6&subscene=0": "【安全圈】Windows NTLM 漏洞肆虐，低交互高风险、可提权窃取敏感数据", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511701&idx=1&sn=7f2360040b4d75447acab62b52e3db78&subscene=0": "IngressNightmare：揭秘CVE-2025-1974 Kubernetes RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651319009&idx=3&sn=ed903a68d0d333dc192cc004c3e78565": "Erlang∕OTP SSH存在CVSS 10.0级高危远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487724&idx=1&sn=fedc52bbbc3985c6945a60718485a072": "Windows 11高危漏洞CVE-2025-24076：300毫秒即可夺取系统权限！速修！", "https://mp.weixin.qq.com/s?__biz=MzIzMDM2MjY5NA==&mid=2247484204&idx=1&sn=f94ec89158fc0db2ba7ed483d2b98bf1": "“脚本小子”-之恶意poc投毒事件", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529216&idx=1&sn=3710dd4b0db6181830980a1eab5843d1": "Windows 任务计划程序漏洞允许提升权限和篡改日志", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247520234&idx=1&sn=dc56bc6ed0dda880d7078934447b943a": "揭秘千万漏洞赏金密码！跟着漏洞挖掘大神解锁 SRC 变现新赛道", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247526081&idx=1&sn=40a0f9209566ec11abf8cb7821ff45e8": "某单位软件供应商黑盒下的0day挖掘", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511702&idx=1&sn=cf6f539d15581b23e00b54cfb765c33c": "利用 API 和硬件漏洞控制数百万台智能称重机", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247496934&idx=1&sn=38b27d1ed7f81318ad25e529f75a48b1": "从Nacos derby RCE学习derby数据库的利用", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247623624&idx=1&sn=957f1e0e22fc7c312e1361285fce2b43": "人工智能自动化模糊测试：如何自主发现汽车软件中的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTMxMjQ4OA==&mid=2247485890&idx=1&sn=47aad52ff56d823d2ec605a0819d22c9": "MCP协议的漏洞扫描器MCP-Scan，半开源", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487711&idx=1&sn=3ec5d1474ad37b929507112101d0e4ef": "紧急预警！CVE-2025-24054漏洞遭主动攻击，文件下载竟成“钓鱼陷阱”！", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247493292&idx=2&sn=0d706a4064111b3e131f24460b2f2c56": "同学，你试过交edu漏洞交两天两夜嘛", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492590&idx=1&sn=a93a3c5c0a237eeb3c7d8a0f72a59ae1": "OpenAI 现向安全研究人员支付了 10 万美元以修补关键漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247491776&idx=1&sn=8fe7433aaae447fe8dc9569ef0f44bc3": "CVE-2024-0012&CVE-2025-0108 PAN-OS 从配置文件中寻找认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247489096&idx=1&sn=ec76200e8fa47661bef0a962982d9cf2": "通杀系统分析 | 某系统前台文件上传漏洞(可Getshell)", "https://mp.weixin.qq.com/s?__biz=MzIxOTM2MDYwNg==&mid=2247513140&idx=1&sn=1ae20e0d9918c0c58a871e2fe81a0bf7": "[网络侦查] 一款使用简单的批量信息收集与供应链漏洞探测工具", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096165&idx=2&sn=e5337ec2a987637a559d007ca79f879e": "Windows NTLM 哈希泄露欺骗漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484902&idx=1&sn=4b9161f654fed2aca8c07f1548882333": "三星-WLAN-AP-WEA453e路由器-远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610318&idx=4&sn=e0a7424d900b911eef8edce6ef27edcf": "SeeMore！一个漏洞挖掘小工具", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529216&idx=2&sn=bcdaf0a759032c1804abfd38699f3555": "严重 Windows 漏洞可窃取 NTLM 哈希值", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484902&idx=2&sn=86d9a7f8175196b65bf773a6ab16a9f7": "三星路由器WLAN-AP-WEA453e-未授权RCE等多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMDUzMzY1MA==&mid=2247499733&idx=1&sn=2472721727e61daa33f0e6f8794a88c2": "Bottle 框架漏洞攻防实录：从原型链污染到 Flag 获取的完整渗透路径", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491184&idx=1&sn=141b3a7d5aa9cc292c8d18ac7f9fce26": "UNACMS PHP对象注入漏洞(CVE-2025-32101)", "https://mp.weixin.qq.com/s?__biz=MzkzMTY0MDgzNg==&mid=2247484373&idx=1&sn=85275117f19ddcaaeba06cafafdb51df": "MCP漏洞靶场：DVMCP", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247494164&idx=1&sn=71adbe1ea5788317977213a100591066": "Spring漏洞扫描工具，springboot未授权扫描∕敏感信息扫描以及进行spring相关漏洞的扫描与验证", "https://mp.weixin.qq.com/s?__biz=Mzg4MzkwNzI1OQ==&mid=2247486216&idx=1&sn=b7358387e35533628c41cabd76af52e7": "【PHP代审】星河留言板存在前台任意文件上传RCE", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610318&idx=3&sn=456674d66829e07f2021bf66d3954dd1": "AI自动化代码审计RCE", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247489236&idx=1&sn=73c45ed6d310b9ed2d96e523f3429148": "分享某EDUSRC漏洞挖掘复盘", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499862&idx=1&sn=24ec3a3030f845e4a0a76fc15db41692": "漏洞赏金实战案例分享", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491174&idx=1&sn=48adfa4bb1323e554e262adcdbb55cf1": "CentreStack 反序列化漏洞 (CVE-2025-30406)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493634&idx=1&sn=bb752006e1cdf2ae9b89d547e5487b2a": "搭载AiCloud功能的华硕（ASUS）路由器存在身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247492208&idx=1&sn=144092717bb4f42f4184c50743418c1a": "漏洞预警 西部数据 NAS ftp_download.php 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652115330&idx=1&sn=7b6c1320e8d3c6a3a2719da61a23839a": "新的Windows NTLM漏洞被利用进行攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487193&idx=1&sn=aa9c52590c523df026ecadf553f2760b": "Kubernetes CVE-2025-1974 RCE", "https://mp.weixin.qq.com/s?__biz=MzU1NzkwMzUzNg==&mid=2247484486&idx=1&sn=b703890fc5173946b326edd3474a6515": "云对象存储桶写漏洞？模型和数据被投毒、机器沦陷？- AI & 云安全", "https://mp.weixin.qq.com/s?__biz=MzkxMTMyOTg4NQ==&mid=2247484465&idx=1&sn=af78c13de124b66e98fb89b64318144a": "MRCMS（蘑菇建站）跨站脚本漏洞及解决方法（CNVD-2025-05252、CVE-2025-2195）", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492919&idx=1&sn=ae262e31be8df4bec3a1959d904c4c44": "漏洞预警 | 神州讯盟芯管家SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODQzNDU5NQ==&mid=2247486224&idx=1&sn=16c2d8234d4b1e73a86d148c172863a4": "【工具分享】ruoyi-Vue-tools-若依Vue漏洞检测工具v4更新", "https://mp.weixin.qq.com/s?__biz=MzkzMDQ0NzQwNA==&mid=2247486487&idx=1&sn=efbdfc0003e11d709b71dd059c007830": "必备安全工具：推荐一款高效的漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649172609&idx=1&sn=00c15fa3090200ff05c33b60c870efcc": "WinRAR安全漏洞可绕过Windows安全警告 执行恶意软件", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511702&idx=1&sn=cf6f539d15581b23e00b54cfb765c33c&subscene=0": "利用 API 和硬件漏洞控制数百万台智能称重机", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492919&idx=2&sn=1b11e06df8b555668fdc6e5fbea25eb2": "漏洞预警 | 汉塔科技上网行为管理系统命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492919&idx=3&sn=c23d52e3637d24cc5465f0caf33215aa": "漏洞预警 | 用友NC SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247486351&idx=1&sn=ee57024144cf2d8ffc6b9fa2e1e803b7": "记一次某大学附属医院漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzk3NTIyOTA0OQ==&mid=2247484793&idx=1&sn=682b1258b4bfec6f09ee26ed6c5dce98": "DC-1,一台和蔼可亲的靶机。Drupal7，msfcve-2018-7600漏洞利用，隧道建立，SUID提权", "https://mp.weixin.qq.com/s?__biz=Mzk0MTYyNTg3Mg==&mid=2247492776&idx=1&sn=fe141bb901c29d2601599011a526fd9b": "【星闻周报】TP-Link存在严重漏洞，Wi-Fi 凭据面临泄露风险", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260921&idx=1&sn=f9794ff09d0d33cec52606f8b5d586f8": "价值$10,000的PS5内核漏洞！TheFlow再曝索尼系统级缺陷", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652251722&idx=1&sn=e88ddfedef90469c15468e4d0a1f96e7": "苹果紧急修复两个“极其复杂”的高危零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1MTE1MjU5Nw==&mid=2247485568&idx=1&sn=8bebed75d5bd1c90ba947f7e628c4385": "WinRAR安全漏洞可绕过Windows安全警告 执行恶意软件", "https://mp.weixin.qq.com/s?__biz=MzA4NDQ5NTU0MA==&mid=2647690686&idx=1&sn=e8cc8948185a751e5579b489f0ff6e5f": "0036. 我是如何发现一个关键的商店 XSS 漏洞并获得 2,000 美元赏金的——我的挣扎、失败和突破", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520170&idx=1&sn=26f49870544ab1e8f49d6b691538c471": "Wordpress wpdm-premium-packages SQL注入漏洞(CVE-2025-24659)", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247491776&idx=1&sn=8fe7433aaae447fe8dc9569ef0f44bc3&subscene=0": "CVE-2024-0012&CVE-2025-0108 PAN-OS 从配置文件中寻找认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498083&idx=2&sn=88ce3a7141c996b718e6a760aa593948": "严重 PyTorch 漏洞 CVE-2025-32434 允许远程代码执行", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484933&idx=2&sn=5ee03ca2d1bc1535af946a1ae3629445": "CVE-2025-22457：基于堆栈的远程缓冲区溢出的POC验证脚本", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490249&idx=5&sn=af55886821f067cabe1a01c3e297c462": "记一次某大学附属医院漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582062&idx=3&sn=9272f215924def481a6cc32cf376b140": "安全动态回顾|国家计算机病毒应急处理中心监测发现13款违规移动应用 SonicWall SMA设备存在被积极利用的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDYwMDcyNQ==&mid=2247488979&idx=1&sn=7b9ef6708bf8304dbd64754ff01c14b1": "【漏洞速递】PyTorch模型加载远程代码执行漏洞(CVE-2025-32434)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489981&idx=1&sn=426a855d81aa7cfdb5d1ac327fbf91c6": "【漏洞预警】PyTorch反序列化远程代码执行漏洞CVE-2025-32434", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069203&idx=2&sn=0a7182f2292919ed49c24fa4779a0b99": "【安全圈】Speedify VPN macOS 漏洞使攻击者能够提升权限", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491203&idx=1&sn=ba2d464072b9e0ed491dae33db0e82e9": "亿华考勤软件 default.aspx 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzU5MDMxOA==&mid=2247484356&idx=1&sn=fcae12de7fb60dab9b460c5c42003f8c": "UNA CMS <= 14.0.0（PHP反序列化）命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519070&idx=1&sn=7b36b062917307786a1e64eb81cce87e": "AI自动化代码审计RCE", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491193&idx=1&sn=9560f00aec07906845d2615da9a6855c": "速达软件 多款产品 doSavePrintTpl.action Struts2 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490372&idx=1&sn=9da4423987d87edc2a4f1029419583cb": "【风险通告】PyTorch存在远程代码执行漏洞（CVE-2025-32434）", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520194&idx=1&sn=844636698ed6fa17c2e0bc1f6b086ab8": "Java代码审计之命令执行漏洞详解", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247554571&idx=1&sn=241ebd6994985d4e7d2b6cc19e449ec1": "MIPS栈溢出漏洞实战解析：从DVRF题目看ROP链构造", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503342&idx=1&sn=2e5b04fa739192fac3232716a4ffedda": "安全热点周报：零日漏洞瞄准 iPhone，苹果紧急发布安全补丁", "https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483926&idx=1&sn=e08a8201fa29f7036f0c0217d786c06f": "RAG 受到攻击：LLM 漏洞如何影响真实系统", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495936&idx=1&sn=c82669cf189a7a6a99efa97d8573b7ca": "CNVD漏洞周报2025年第15期", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497471&idx=1&sn=ce0c9ed5daafd29a32f7734381152894": "api漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzNjczNzEyMw==&mid=2247484447&idx=1&sn=a00607755678bcf14602f16e7a7abb2f": "【CNVD漏洞挖掘实战训练营】从零到一，拿到属于自己的第一本证书！", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247497174&idx=1&sn=72219cdd8b133dbb846d7aa33a131efb": "Spring漏洞扫描工具，springboot未授权扫描∕敏感信息扫描以及进行spring相关漏洞的扫描与验证", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522801&idx=2&sn=92cd7620a74a8d5e609a3bd300ef2a66": "PyTorch 中存在严重的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491045&idx=1&sn=246a2616f69041145ab7a8b9553ee2bc": "用 AI 自动化渗透测试，PentAGI 打造全新AI安全测试 助力快速发现漏洞与安全隐患|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651135573&idx=1&sn=cbfe68f51f047095f3b9456a5b3ea276": "APP上线安全预警 | 全方位发现应用风险漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495936&idx=2&sn=742898e5475cc58e1b6af719b0bb7fd5": "上周关注度较高的产品安全漏洞(20250414-20250420)", "https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247518153&idx=2&sn=7f2d17c2f2f0ac67abb161eacb96f64a": "白宫平面图等敏感信息泄露，特朗普政府又一次曝出安全漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458592750&idx=2&sn=5ea70dcc58448329bb73d7e44a961078": "华硕AiCloud功能现重大安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247484827&idx=1&sn=cfa6c9aaf7aeee7d425cb3b1e72fc5ff": "SpEL 漏洞渗透测试实战：全网最全姿势集合！", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489582&idx=1&sn=5100f47a84033f9064c87d1242592599": "【JAVA代码审计】启航电商ERP2.0漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247638864&idx=2&sn=246010281645170f07ca31e62da3fcbb": "华硕确认AiCloud路由器存在严重漏洞；敦促用户更新固件", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522801&idx=1&sn=be29e21bdd328bab3ee1bbc42562d47e": "华硕：启用AiCloud 的路由器中存在严重的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485755&idx=1&sn=2b30a7ad1e030fa8c5ff90c415ca61ab": "Vite 任意文件读取漏洞（CVE-2025-30208）", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492927&idx=3&sn=57762fb656e4ec55d1541976447ec7ec": "漏洞预警 | 家装ERP管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529226&idx=2&sn=42e09ac65e77b4b22b4a56ac686bfe3e": "Cellebrite Android 零日漏洞 PoC 发布：CVE-2024-53104", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492927&idx=2&sn=3bc814bb89316b5b52f732f5bd2b1f2b": "漏洞预警 | 红帆HFOffice SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247494174&idx=1&sn=3a6153eff636034ea528dedd9d8ea7e9": "若依Vue漏洞检测工具更新！V5", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247506096&idx=1&sn=20053963cba0b2b608e4295bb3b754bc": "自动化JS提取与漏洞检测工具 - JSSS-Find", "https://mp.weixin.qq.com/s?__biz=MzU0NDk4MTM0OA==&mid=2247488270&idx=1&sn=515f0a150504459682f9311f5da63168": "科拓全智能停车收费系统（漏洞复现）", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794910&idx=1&sn=04c6128848795aabdac6e12bdba9e074": "Kimsuky APT组织利用 BlueKeep RDP 漏洞对韩国日本发起攻击", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486854&idx=1&sn=1ad8fc3dfdd5d35aef31d0976581b613": "猎洞时刻漏洞挖掘SRC培训第三期塞满干货来袭！", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247511647&idx=1&sn=333f8a029ce85430ff253fdd247bc2f4": "内推 | 漏洞挖掘工程师(iot 方向)", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247526096&idx=1&sn=6183f6f580f397f972c4c3dcc14e6c21": "实战|小程序渗透记录 通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486639&idx=1&sn=111732182f523fe12fe65114add3b799": "真的就是RCE", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247489254&idx=1&sn=c0c6eedb35c5ce6e2e4716c3f1aa5077": "记一次Druid Monitor漏洞日常渗透", "https://mp.weixin.qq.com/s?__biz=MzA4NzU1Mjk4Mw==&mid=2247492617&idx=1&sn=dc983c01cb50a1f55e988583b0a4f4f7": "Sirius！功能强大的通用漏洞扫描器", "https://mp.weixin.qq.com/s?__biz=MzkxODQzOTYxMQ==&mid=2247483837&idx=1&sn=54a414fda1e893f34de457434359a822": "常见弱口令漏洞的发现与防护（文内送常见字典）", "https://mp.weixin.qq.com/s?__biz=Mzk1Nzg3ODkyNg==&mid=2247484089&idx=1&sn=91bf484f64dfe227798b58b0042e6e2a": "广西金中软件集团有限公司智慧医养服务平台Uploads存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODQzNDU5NQ==&mid=2247486237&idx=1&sn=0e1aa25d806955e6639f0568f18d751d": "【工具分享】Sirius一个强大的通用漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503342&idx=1&sn=2e5b04fa739192fac3232716a4ffedda&subscene=0": "安全热点周报：零日漏洞瞄准 iPhone，苹果紧急发布安全补丁", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495936&idx=1&sn=c82669cf189a7a6a99efa97d8573b7ca&subscene=0": "CNVD漏洞周报2025年第15期", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487950&idx=1&sn=44e2ed673b375dba4e66f99c40711125": "Github中项目的公开漏洞合集", "https://mp.weixin.qq.com/s?__biz=Mzk1NzIyODg2OQ==&mid=2247484424&idx=1&sn=5b6e22be222abbd66136f95c6ca740d9": "faraday好用的开源漏洞管理平台", "https://mp.weixin.qq.com/s?__biz=MzkxMTMyOTg4NQ==&mid=2247484475&idx=1&sn=b08f4ea56144c26950e5291e62aab543": "WP Shuffle plugin SQL注入漏洞及解决办法（CNVD-2025-06478、CVE-2025-28873）", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610374&idx=3&sn=e520da004250b45ee2d8c250f17708ce": "某单位软件供应商黑盒下的0day挖掘", "https://mp.weixin.qq.com/s?__biz=MzkwODE4ODUzMg==&mid=2247486718&idx=1&sn=8214cfe4bd6ff6c2c810843524901a23": "近期部分漏洞预警通报（2025年4月）部分已复现", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYxMjk0Mw==&mid=2247490190&idx=1&sn=ea88ac42c28bef19dae65dbcd16b5e94": "【SRC】某选课小程序任意用户登录漏洞深度剖析", "https://mp.weixin.qq.com/s?__biz=MzU3OTYxNDY1NA==&mid=2247485431&idx=1&sn=dfb9402f8c66dce14a159fae3f395703": "Src捡钱5，为什么大佬总能挖到你挖不到的漏洞（CORS）", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492927&idx=1&sn=80bb2082eec2876ce2c182a8e5bacccb": "漏洞预警 | 安科瑞环保用电监管云平台任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499862&idx=1&sn=24ec3a3030f845e4a0a76fc15db41692&subscene=0": "漏洞赏金实战案例分享", "https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247497134&idx=2&sn=ce6994a395155e641cd7737259a7ed34": "PHP反序列化漏洞：一场代码炼金术引发的黑客狂欢", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069203&idx=2&sn=0a7182f2292919ed49c24fa4779a0b99&subscene=0": "【安全圈】Speedify VPN macOS 漏洞使攻击者能够提升权限", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247492215&idx=1&sn=afb9e89adc9c13a77c942c21da8d4320": "漏洞预警 锐X eweb ipam.php 文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522801&idx=1&sn=be29e21bdd328bab3ee1bbc42562d47e&subscene=0": "华硕：启用AiCloud 的路由器中存在严重的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk1Nzg3ODkyNg==&mid=2247484084&idx=1&sn=f39318a4620c5967906bb9aecedd7bf9": "科拓全智能停车收费系统的T_SellFrom.aspx接口存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495936&idx=2&sn=742898e5475cc58e1b6af719b0bb7fd5&subscene=0": "上周关注度较高的产品安全漏洞(20250414-20250420)", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487195&idx=1&sn=d36cf642f87b34cbbf95ccf9b56b4aee": "代码审计|SpringKill如何用CodeAuditAssistant挖掘0day教程公布", "https://mp.weixin.qq.com/s?__biz=Mzg4MzA4NTM0OA==&mid=2247493747&idx=1&sn=74c15d327a5f704be441ad3ddc5fc6d4": "披露 DOGE 系统网络安全漏洞和数据泄露，以及对举报人∕证人的恐吓（老毛子？）", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484941&idx=2&sn=be33180668dd869e5eb06feabf0cca36": "prismx：【漏洞扫描器】棱镜开源版", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458592750&idx=2&sn=5ea70dcc58448329bb73d7e44a961078&subscene=0": "华硕AiCloud功能现重大安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497471&idx=1&sn=ce0c9ed5daafd29a32f7734381152894&subscene=0": "api漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498122&idx=2&sn=1e9f5daff6b17c238ab90761004cbe03": "CVE-2025-33028：WinZip 再次爆出漏洞通过 MotW 绕过导致用户遭受静默代码执行，目前无补丁", "https://mp.weixin.qq.com/s?__biz=MzU3MDg2NDI4OA==&mid=2247491038&idx=1&sn=f58f0cbda56371ce83b6b010f29d5cc2": "CVE-2017-3066 深入利用获取命令回显", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489592&idx=1&sn=c2a7895c7be76ad71e98d307995b8f02": "kangle 虚拟面板存在前台XSS漏洞", "https://mp.weixin.qq.com/s?__biz=MzUxNTQxMzUxMw==&mid=2247525446&idx=1&sn=3efe3d2b1a08e481658ed165edfdc75a": "安全通告丨网络安全漏洞通告（2025年4月）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522801&idx=2&sn=92cd7620a74a8d5e609a3bd300ef2a66&subscene=0": "PyTorch 中存在严重的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485311&idx=1&sn=779f797318caa0189271e570299adf51": "从代码看Java反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529226&idx=1&sn=04fdb9e880273a88fbebbfdc6be75822": "Cellebrite 零日漏洞攻击塞尔维亚学生活动人士的手机", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY2ODE1NA==&mid=2247485364&idx=1&sn=fdf5e76aff6bc14cd18391d503ac998e": "Windows高危提权漏洞CVE-2025-21204曝光，千万用户需立即修复​​", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522819&idx=2&sn=183839121efb6572f3febfbb1d939f28": "仅有不到一半的可利用漏洞被企业修复，GenAI 漏洞更低", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497475&idx=1&sn=09ed4e87146efd1fd0d05e18d836e479": "Web漏洞挖掘指南 -SSRF服务器端请求伪造", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491213&idx=1&sn=28cb5bc107b3d94a73135dee17a20266": "用友U8 CRM eventsetlist.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522819&idx=1&sn=005966b8a5fb21a2ac90627b6b0075bc": "8天，这个被微软认为“低可利用性”的漏洞即遭利用", "https://mp.weixin.qq.com/s?__biz=MzkwMzUyMjk2MQ==&mid=2247484357&idx=1&sn=57e85783d6b59a3f614a987effb9b745": "Erlang∕OTP SSH 远程代码执行漏洞（CVE-2025-32433）POC及一键部署环境", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507749&idx=1&sn=359c5df2d9430f788eb658213afc05ff": "漏洞通告 | 泛微E-cology前台远程代码执行漏洞（NVDB-CNVDB-2025530957）", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247491269&idx=1&sn=00145cb95476525233d79a2fcb910109": "内存中的幽灵：Linux系统最致命安全漏洞揭秘", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484016&idx=1&sn=6d559734049b892419fba6dcef1e8265": "【漏洞预警】Open WebUI 0.5.16 SSRF漏洞（CVE-2025-29446）", "https://mp.weixin.qq.com/s?__biz=MzkzNzU5MDMxOA==&mid=2247484383&idx=1&sn=5bd16bddd1b8f341448539552fbf9315": "实战分享｜Autorize如何让我躺赚接口越权漏洞赏金", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458592862&idx=4&sn=1d8b719cda2e840ec89e076c573aae3a": "更新3节：漏洞分析与利用 | 系统0day安全-IOT设备漏洞挖掘（第6期）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069221&idx=3&sn=f624fa8b0ad6844d5bd3d85b2f32c897": "【安全圈】Storm-0558 漏洞后，微软通过 Azure 机密虚拟机确保 MSA 签名安全", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499875&idx=1&sn=3ccc7eddec0e833a3d6c56c51e00f41a": "20 万 POC，直接拿来用，这不是测试，这是拒绝服务！！！", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490000&idx=3&sn=b439e61d98d017db32a9938676568913": "【漏洞预警】OpenCMS任意文件读取漏洞 (CVE-2025-28099)", "https://mp.weixin.qq.com/s?__biz=Mzk0ODU4MjIyNQ==&mid=2247484100&idx=1&sn=88d7e28b9f9f18bc90ee811dc3b25953": "猎洞时刻漏洞挖掘SRC培训第三期塞满干货来袭！", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490000&idx=2&sn=238c5455a252cddab892084b452a2941": "【漏洞预警】Open-WebUI SSRF漏洞 (CVE-2025-29446)", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486245&idx=1&sn=1e8f23b3af67b8e46b21b67136b1d0ef": "Shiro反序列化漏洞综合利用 - ShiroAttack2_Pro", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490322&idx=5&sn=0ae4dd719f79135f775d4fb0c6e0bf32": "Erlang∕OTP SSH 远程代码执行漏洞（CVE-2025-32433）POC及一键部署环境", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462772&idx=1&sn=51cae796b73765425a9c62cb8b32d2ea": "信息安全漏洞周报（2025年第16期）", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490322&idx=4&sn=3d3c191874947492b8c2d8113da8bcc2": "20 万 POC，直接拿来用，这不是测试，这是拒绝服务！！！", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490322&idx=6&sn=5f20f5303a8223603444ecc041736eeb": "【漏洞预警】Open WebUI 0.5.16 SSRF漏洞（CVE-2025-29446）", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488376&idx=1&sn=1ed56ec22fcf08d960c53303d2d90a62": "泛微移动管理平台E-mobile error接口存在远程命令执行漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490000&idx=1&sn=731dfc3cf4323232c1323d80cef4a9a1": "【漏洞预警】H3C GR-3000AX代码执行漏洞(CVE-2025-3854)", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQ0MTI2MQ==&mid=2247484846&idx=1&sn=04057d9546256867fbc826a2946cac3d": "小白黑客成长日记：漏洞批发商与罪证算法", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485760&idx=1&sn=f6aedb3b596b0c71adba83ee7d104ac6": "Next.js 中间件鉴权绕过漏洞 (CVE-2025-29927)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492944&idx=2&sn=28891b004d01e2b272286b498ea3b27c": "漏洞预警 | 百易云资产管理运营系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492944&idx=3&sn=5696bc27882be89d2667e520dec9a38c": "漏洞预警 | 汉王e脸通智慧园区管理平台任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247484700&idx=1&sn=a4d12b121ff1208729878bf7662f4c19": "【漏洞复现】锐捷EWEB 路由器多个漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247489294&idx=1&sn=63831ba736dd9c79bfae6b7e1340f83c": "针对Nacos漏洞猎杀的各种骚姿势", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503376&idx=1&sn=af71b83f1e0b1cb7bfc91a17bd900c37": "雷神众测漏洞周报2025.4.14-2025.4.20", "https://mp.weixin.qq.com/s?__biz=MzIwMDE5NDg1MA==&mid=2247494324&idx=1&sn=816579242ea18d532fb6173753126952": "讯飞SRC | 重生礼包已到账→ 端午漏洞退散作战启动！", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458592862&idx=4&sn=1d8b719cda2e840ec89e076c573aae3a&subscene=0": "更新3节：漏洞分析与利用 | 系统0day安全-IOT设备漏洞挖掘（第6期）", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487750&idx=1&sn=a66836ce9156b8dc5829b66bfe129ef7": "朝鲜黑客组织Kimsuky利用BlueKeep漏洞入侵日韩关键系统，网络间谍活动再升级", "https://mp.weixin.qq.com/s?__biz=Mzk0OTU2ODQ4Mw==&mid=2247487147&idx=1&sn=1724d79131dcf952c79473f31143bbbb": "WordPress插件认证绕过与权限提升漏洞实例分析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069221&idx=3&sn=f624fa8b0ad6844d5bd3d85b2f32c897&subscene=0": "【安全圈】Storm-0558 漏洞后，微软通过 Azure 机密虚拟机确保 MSA 签名安全", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492944&idx=1&sn=9951cc229da02842aacfc0c71b661ffc": "漏洞预警 | UniTalk信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247485230&idx=1&sn=6ec77122dd221daf3390779d00f47dcf": "CVE-2025-21204：Windows更新堆栈权限提升漏洞 附POC及漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507749&idx=1&sn=359c5df2d9430f788eb658213afc05ff&subscene=0": "漏洞通告 | 泛微E-cology前台远程代码执行漏洞（NVDB-CNVDB-2025530957）", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610384&idx=4&sn=c9d000fce53e1bb066d7f723433754c8": "AscensionPath一个基于Docker容器化技术的漏洞环境管理系统", "https://mp.weixin.qq.com/s?__biz=MzU0NDk4MTM0OA==&mid=2247488277&idx=1&sn=386c895dfa64222ca50d1c12bce6b4b1": "某通信设备有限公司（漏洞复现）", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497475&idx=1&sn=09ed4e87146efd1fd0d05e18d836e479&subscene=0": "Web漏洞挖掘指南 -SSRF服务器端请求伪造", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522819&idx=1&sn=005966b8a5fb21a2ac90627b6b0075bc&subscene=0": "8天，这个被微软认为“低可利用性”的漏洞即遭利用", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYxMjk0Mw==&mid=2247490308&idx=1&sn=13924ed91f3727a95211de43d38dfa67": "【PHP代码审计】ZZCMS 2019多个漏洞（附POC）", "https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247534862&idx=1&sn=ef1658a7f7aa92d25ca76cb76826007d": "【漏洞预警】：紧急！H3C GR-3000AX代码执行漏洞或成内网渗透跳板", "https://mp.weixin.qq.com/s?__biz=Mzg3OTcxMjE2NQ==&mid=2247487311&idx=1&sn=37dd243f936e08dd69d3580bd629da0b": "【漏洞实战研磨】实战 我是如何突破层层限制利用ssrf的", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU0OTQyMg==&mid=2247484419&idx=1&sn=82f9fac62edfafaeb2ce2c61ab7a7794": "【漏洞预警】泛微E-cology前台远程代码执行漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522819&idx=2&sn=183839121efb6572f3febfbb1d939f28&subscene=0": "仅有不到一半的可利用漏洞被企业修复，GenAI 漏洞更低", "https://mp.weixin.qq.com/s?__biz=Mzg5MDQyMzg3NQ==&mid=2247484807&idx=1&sn=7faa2948e748f6e7186d812d6a7fd7e7": "提示词宝库！NucleiPrompts 助你轻松玩转 Nuclei AI智能漏洞扫描", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493645&idx=3&sn=0a5867f5db7be577766c582626b5155a": "朝鲜黑客组织Kimsuky利用BlueKeep远程桌面漏洞对韩日两国发动攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487264&idx=1&sn=fe956bcda547e80ae6db3e1e0b4f89cd": "CVE-2024-56145：Craft CMS RCE", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582095&idx=2&sn=4fda6a44b68c7b6d9de0aa5841ad3a86": "华硕路由器 AiCloud 发现严重漏洞，官方紧急发布多系列固件补丁", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247526102&idx=1&sn=a69f82e7afb477bef35d6c174380838d": "某开源cms 0day挖掘", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247492916&idx=1&sn=e7ccabe59fdefd807e2bb7d63b7f0738": "《独家揭秘：1000万漏洞赏金白帽，SRC漏洞挖掘通杀思路分享》", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484793&idx=3&sn=d2ca34d5e594924cb54af14da20b1dd3": "入选作品公布｜安钥®「漏洞处置标准作业程序（SOP）」征文第三十二期", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651136360&idx=2&sn=23e0c9d218254d5ca3376887416cd450": "绿盟科技披露2024年报，营收增长超40%，亏损收窄；漏洞研究新突破：利用ChatGPT快速创建利用代码 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247491314&idx=1&sn=72d1a4da89c99b27249f0955592bf4ad": "隐秘的后门：HTTP参数污染漏洞如何让黑客悄悄获取管理员权限", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522834&idx=1&sn=0a385b06e817fa2780f705f50351603e": "Active! mail 中的RCE 0day漏洞用于攻击位于日本的机构", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497479&idx=1&sn=563bdc63916a36d8a14b7e3836cb555e": "价值$10,000的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQyMzI4Mg==&mid=2247483926&idx=1&sn=e04a689483b4646e7447a28f24ea51b4": "HessianServlet、HessianServiceExporter场景下的Payload", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5Mzk2OQ==&mid=2247486715&idx=1&sn=6f073f8db82d0012b8dae93f8c0edfff": "【CNVD漏洞挖掘实战训练营】从零到一，拿到属于自己的第一本证书！", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489608&idx=1&sn=fcf93096d383ba9b5c4d047a10dbc126": "Funadmin v5.0.2 存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096173&idx=1&sn=f9ddb9b1c4f93375312a1b9853f079dd": "Windows 更新堆栈中存在允许代码执行和权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651319257&idx=1&sn=a603c646a53e3a242a2e79faf4f06239": "ChatGPT在公开漏洞利用代码发布前成功生成CVE有效攻击程序", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260929&idx=1&sn=2f8d14dd48df42d04bd14ad8ca9e9b22": "无需交互即可攻破？CVE-2025-24054正被利用绕过Windows身份验证\"", "https://mp.weixin.qq.com/s?__biz=Mzk0ODE5NjE3Mw==&mid=2247483766&idx=1&sn=ed607434f8b281e94ef7991a45e5fbb4": "K8s下的漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486379&idx=1&sn=4e49b9db2247a94600a98e3900c27fe7": "高危证书 | 记一次白盒审计快速拿下RCE漏洞的过程", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491222&idx=1&sn=4995059a69a53dc8ea9a20e5ba371062": "Cleo Harmony ∕Synchronization 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247554590&idx=1&sn=714c46d7c252a19494e5e55f843efe4c": "内存利用：迟来的blindless与逃不掉的exit漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247498846&idx=1&sn=a7f9302b4fd8fe61a5d53c14216c2a36": "CVE-2025-32433 - Erlang∕OTP SSH 中的严重 RCE（CVSS 10）", "https://mp.weixin.qq.com/s?__biz=MzUxODY3MDExMA==&mid=2247490223&idx=1&sn=7d830cd9e8ad3d47f744c6cb698638fd": "[从漏洞挖掘到隐私保卫战！虎符网络安全专家受邀揭秘AI时代安全新攻防]", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529289&idx=1&sn=2e92df89416952c0384fcff23c506a2a": "通过代理实现代码执行——DLL劫持的另一种方式", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486268&idx=1&sn=a24c7995a782a7f9ec68ff929ba2cda8": "XSS与SSRF漏洞联合攻击实验平台 - XSS_SSRF_Attack_Prevention", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247484869&idx=1&sn=88c819aa551068b45e14ae20ae239e21": "DNS 一响，漏洞登场！FastJSON 不出网探测全攻略", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485741&idx=1&sn=e79dc8ef31fe1e88b840fdaaa5b963ec": "【翻译】Greenshift WordPress 插件中的任意文件上传漏洞影响 5 万个 WordPress 网站", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484793&idx=2&sn=12a0be10af54c10992c1b3db8b51a4f8": "【漏洞处置SOP】Apache Tomcat远程代码执行漏洞（CVE-2025-24813）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490005&idx=1&sn=3ead08dd9266c53f8fc48809e47b97be": "【漏洞预警】Vmware Spring Security设计缺陷漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDYyOTI1NQ==&mid=2247486809&idx=1&sn=1bd56a972284e9d4dfe357ecdf5ffb9e": "护网行动2024漏洞复盘：这些\"0day漏洞\"为何让企业一夜崩盘？", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519072&idx=1&sn=1a09d970a13668bfe21ae2d9ced66a00": "汉堡白吃？某连锁餐饮 App 竟藏\"0元购\"漏洞！", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488387&idx=1&sn=5f90da110ba5388622ca9b920af79b50": "Cleo Synchronization接口任意文件读取漏洞CVE-2024-50623 附POC", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538573&idx=1&sn=feace6e44af6ca3cabc1d03c46ba84f3": "2025年渗透测试现状报告：关键漏洞不能全靠“随缘”修复", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484793&idx=1&sn=1eed92a39c1b08668eea4450bd56dd45": "安钥®「漏洞防治标准作业程序（SOP）」征文启示 [2025年第16期，总第34期]", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247489464&idx=1&sn=5b834d4563f456b706abed80743f4d2a": "渗透测试 | 实战swagger框架漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900455&idx=1&sn=a3b49dbea3c4ce839f336c799c1f5a90": "Windows CVE-2025-24054 漏洞解析：下载即泄 NTLM 哈希，Pass-the-Hash 风险剧增！", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247491940&idx=2&sn=5cf0593750b1ef5a99de9cd8209d9c5e": "自动化JS提取与漏洞检测工具 - JSSS-Find", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247545290&idx=3&sn=6da520f2cadb61a3cbf711ee95d259a0": "2025年渗透测试现状报告：关键漏洞不能全靠“随缘”修复", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247484890&idx=1&sn=4eb7e458e5a6efb8b2f78710f8eba955": "渗透测试实战：FastJSON漏洞如何在黑盒场景中精准触发？", "https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247484714&idx=1&sn=19e40a91e637794253c8691d7ffe40c6": "【安全研究】若依4.8.0版本计划任务RCE研究", "https://mp.weixin.qq.com/s?__biz=MzU5ODMzMzc5MQ==&mid=2247486444&idx=1&sn=4bb86e8a3248bba7a468c274d39b46b6": "HFS2.3远程代码执行(CVE-2024-23692 )漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492958&idx=1&sn=0aab85fd08ee207691068d1a999179ea": "漏洞预警 | WordPress Plugin Google for WooCommerce信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492958&idx=3&sn=b2b3087ceba0660a09e289d77bfeef11": "漏洞预警 | 用友NC SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMTMyOTg4NQ==&mid=2247484491&idx=1&sn=885a28707090ba25779a7e4e8c2d60e5": "PHPGurukul Men Salon Management System最新SQL注入漏洞及解决方法", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247486357&idx=1&sn=473220fda564f66f63fe3de529e18120": "渗透技巧 | 小白都能会的通用漏洞挖掘技巧", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497479&idx=1&sn=563bdc63916a36d8a14b7e3836cb555e&subscene=0": "价值$10,000的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247494186&idx=1&sn=cab477ce8e2b5ad7882c62550f393a66": "可防护0day的智能语义分析防护系统", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582095&idx=2&sn=4fda6a44b68c7b6d9de0aa5841ad3a86&subscene=0": "华硕路由器 AiCloud 发现严重漏洞，官方紧急发布多系列固件补丁", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499514&idx=3&sn=baac142c545258ae85b3b3b5a07543d6&subscene=0": ".NET 高级代码审计：一种尚未公开绕过 GZip 实现反序列化漏洞的方法", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491231&idx=1&sn=6978b52a136b9d3dc214e99e9646ea6f": "EnGenius usbinteract.cgi 未授权远程命令执行", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651136360&idx=2&sn=23e0c9d218254d5ca3376887416cd450&subscene=0": "绿盟科技披露2024年报，营收增长超40%，亏损收窄；漏洞研究新突破：利用ChatGPT快速创建利用代码 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610400&idx=4&sn=a09e7d5d5efa700bba4ac8657096b5a0": "Spring漏洞扫描工具，springboot未授权扫描∕敏感信息扫描以及进行spring相关漏洞的扫描与验证", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655276501&idx=7&sn=f590cf3c52d8e6681493ef9f94479f15": "网络安全漏洞态势报告", "https://mp.weixin.qq.com/s?__biz=MzkxODQzOTYxMQ==&mid=2247483850&idx=1&sn=8816fe025700ac2e7c89e91a33a2b7f1": "分享常见的逻辑漏洞挖掘方法(第一部分)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522834&idx=1&sn=0a385b06e817fa2780f705f50351603e&subscene=0": "Active! mail 中的RCE 0day漏洞用于攻击位于日本的机构", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503376&idx=1&sn=af71b83f1e0b1cb7bfc91a17bd900c37&subscene=0": "雷神众测漏洞周报2025.4.14-2025.4.20", "https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247485254&idx=1&sn=86fb7226b3b0d1404c9d6dc8dda9ce4d": "可防护0day的智能语义分析防护系统·雷池", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538597&idx=1&sn=ba99158c449c3a565ed63ad403a16da8": "别怪技术不够硬，网络钓鱼拿捏的就是“人性漏洞”", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538573&idx=1&sn=feace6e44af6ca3cabc1d03c46ba84f3&subscene=0": "2025年渗透测试现状报告：关键漏洞不能全靠“随缘”修复", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498191&idx=1&sn=a966c701ce6061ee4f88628695cecb21": "攻击 FastCGI 库：CVE-2025-23016", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498191&idx=2&sn=2f66a3e1f99ea98fae60308efd1dc327": "GitLab 发布安全更新以修复 XSS 和帐户接管漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMDMwNDgwNQ==&mid=2247485823&idx=1&sn=8712bd94384a346119b1be32969df1ab": "Pega Infinity - 绕过身份验证[CVE-2021-27651]", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247920&idx=1&sn=2d4f707cf4d7ef2371731d19101c8e70": "大模型10大网络安全威胁及防范策略 | ChatGPT在公开漏洞利用代码发布前成功生成CVE有效攻击程序", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485313&idx=1&sn=198a3be4357c854dcf4b7a72f6cba9db": "SpEL 表达式注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492958&idx=2&sn=059525cd50a7ab896fa1b74ddaf666e2": "漏洞预警 | 红帆HFOffice SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247486062&idx=1&sn=90cdb6b5758ea4edd8dd9cc04d99605b": "微软警示：俄罗斯“沙虫”APT组织借Edge漏洞全球出击", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247492222&idx=1&sn=271d0575939c30715dc6a988a89f4f15": "漏洞预警 Netxxxx 日志审计 hostdelay.php 命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651319330&idx=4&sn=a2d4ea6741ac9184d5f80cde52f1e9a9": "浏览器加密钱包高危漏洞可致资金遭窃", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096180&idx=2&sn=58874b98f135ceb4184155f4d744dac1": "Synology 网络文件系统漏洞允许读取任何文件", "https://mp.weixin.qq.com/s?__biz=MzkwODE4ODUzMg==&mid=2247486758&idx=1&sn=e5640c78786589edb76374c1e8b2336c": "【代码审计】Emlog存在SQL注入+XSS漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486269&idx=1&sn=be0f4d08f2234fdb76c1956104204e03": "文件泄露、目录泄露漏洞利用工具 - forBy", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490377&idx=1&sn=766ad18b8cbcd36d7a499c41be61887a": "【AI风险通告】NVIDIA NeMo存在多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501013&idx=3&sn=df64e88c62f84227073367a311ab4baf": "【漏洞通告】PyTorch 远程命令执行漏洞(CVE-2025-32434)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651319330&idx=3&sn=5ca24153ee938c4148febeb8b4a00bc7": "钓鱼检测机制已失效：为何大多数攻击都像零日漏洞般难以防范", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498243&idx=1&sn=a4d0e5d4e78e0240d96e3c7b2a12c766": "PoC | Commvault 远程代码执行 CVE-2025-34028（9.0）", "https://mp.weixin.qq.com/s?__biz=MzkwNjM5NTkwOA==&mid=2247483905&idx=1&sn=6d69f97abb24d53c884b8c673912c9fb": "从 CVE-2024-0012 到 CVE-2024-9474：Palo Alto 的分析与思考", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458592922&idx=3&sn=c560042d42fba4980bc8dd4a995a051d": "无认证也能入侵？Commvault 现严重漏洞，黑客可借此远程 “掌控” 系统", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk3NjczNQ==&mid=2247485908&idx=1&sn=d4644e4a34651a7f35768ba3ea0f761e": "如何应对攻防演练过程中的逻辑漏洞？", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522841&idx=1&sn=b39cd7520c5b0c63d3c0e807374feeb2": "华硕修复严重的AMI 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247491003&idx=1&sn=c20dd4edf49ed87a46722ce97bc3dec0": "创宇安全智脑 | 时空智友企业流程化管控系统 indexService.notice SQL注入等88个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529299&idx=2&sn=49f7a34017d1d3b85d327b0c68ac08b9": "Rust 中的等待线程劫持。特别感谢 @hasherezade 为了出色的 PoC", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492792&idx=1&sn=5cb94a67c2deab77d9fd1d0db1d0bfe3": "【原创0day】金蝶天燕应用服务器IIOP反序列化远程代码执行漏洞（NVDB-CITIVD-2025865374）", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247572478&idx=1&sn=6929bba0e13fd04ee6dba3ed944e84b0": "漏洞扫描原理和工具", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247484926&idx=1&sn=d6ae57fae602f4315ef2409421719baf": "FastJSON + MQ 实现反序列化漏洞攻击链", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490011&idx=1&sn=4020ceb268c2880dc7c75ab6a9fc25d9": "【漏洞预警】DataEase H2 JDBC远程代码执行漏洞CVE-2025-32966", "https://mp.weixin.qq.com/s?__biz=MzkyMjM0ODAwNg==&mid=2247488506&idx=1&sn=b48b84248cf27ef0eff54422a417e831": "利用 Windows 更新堆栈获取系统访问权限（CVE-2025-21204）附exploit", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490380&idx=2&sn=446486a4658f2a6bd6e87f68737311de": "利用 Windows 更新堆栈获取系统访问权限（CVE-2025-21204）附exploit", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488398&idx=1&sn=7a2c57161e0d2eab963ddada274c4b85": "EnGenius路由器usbinteract.cgi接口存在远程命令漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492974&idx=1&sn=af7da704aa7e9e6e01021f44ceda5524": "漏洞预警 | 信呼OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NDc3NDQ3NA==&mid=2247485081&idx=1&sn=0e1c4533cce261d0dfa49d570e148ed3": "nginxWebui后台任意文件读取漏洞&rce分析-0day&nday", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499531&idx=1&sn=bb741abbff893460d68ff6d3793bad05": "一种利用路径变形绕过权限校验的思路：那些容易被忽视的 .NET 漏洞触发点", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794950&idx=1&sn=6642725c8bcebf170a680f15843e31eb": "Lazarus APT 利用1day漏洞攻击韩国目标", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247485297&idx=1&sn=78d3717fe173bfec11dc4b6902f64845": "CVE-2025-31324 - SAP NetWeaver Visual Composer 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492974&idx=3&sn=33643ead4537eaec9350bad94b4d8fb4": "漏洞预警 | 金盘移动图书馆系统信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486691&idx=1&sn=b7f1947265bcbb4a26c21df66e6100d2": "一个漏洞仓库免费送~", "https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247485263&idx=2&sn=a075105a69658ee8e406e8b8dc90c0e1": "Redis 漏洞导致服务器遭受拒绝服务攻击", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491135&idx=1&sn=51bcc6a04528afc85db9bee9f064d61c": "AI基础设施安全评估系统|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247485263&idx=1&sn=027919b5c15cc15963221333bb5101d5": "GitLab安全通告 | 修复了XSS 和帐户接管漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247492034&idx=1&sn=c9b965192ea74eb78b3d26380dc60afc": "《存量线上系统安全漏洞管理：从渗透测试到全面收敛》｜总第286周", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492974&idx=2&sn=400a40dcd37c5e3a5127c17e35a1307c": "漏洞预警 | Netgear信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492055&idx=1&sn=47ac22e92828d180d7d2891bf4b74a2d": "“脚本小子”-之恶意poc投毒事件", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610410&idx=4&sn=67cc1669623d91c3c67a5fd4a020b105": "Sirius！功能强大的通用漏洞扫描器", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247486063&idx=1&sn=20d68eb6ad60eb7dd5f75e77b90e8099": "警惕！APT组织利用ESET软件漏洞悄然植入恶意软件", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484021&idx=1&sn=38955c1dd2082fff24c7bb3fd7f3a384": "【在野利用】SAP NetWeaver MetadataUploader 文件上传漏洞（CVE-2025-31324）", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538597&idx=1&sn=ba99158c449c3a565ed63ad403a16da8&subscene=0": "别怪技术不够硬，网络钓鱼拿捏的就是“人性漏洞”", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYxMjk0Mw==&mid=2247490338&idx=1&sn=ab182f520cdb8b37ce1bc45e400d55bc": "攻防实战绕过disable_function命令执行", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247526117&idx=1&sn=9bc4ae39186a5946b2be586c51ebc951": "AI自动化代码审计RCE", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247498905&idx=1&sn=24c71b2dfde953a0f3cb43c744bfb43c": "Fortinet FortiSwitch 任意密码重置 CVE-2024-48887", "https://mp.weixin.qq.com/s?__biz=MzkxNDQ5MTQ2Mg==&mid=2247483988&idx=1&sn=60b276108d91599743cf5638eb6006bf": "CVE-2025-0282：Ivanti缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519080&idx=1&sn=f3d7a6c97ae9d25231d5f46e930edd76": "揭秘千万漏洞赏金密码！跟着漏洞挖掘大神解锁 SRC 变现新赛道", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458592922&idx=3&sn=c560042d42fba4980bc8dd4a995a051d&subscene=0": "无认证也能入侵？Commvault 现严重漏洞，黑客可借此远程 “掌控” 系统", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc2MDQyMg==&mid=2247486529&idx=1&sn=1267e92ffa94a2e0550b77a7354abc02": "【漏洞预警】泛微 E-cology 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MDI1MjUxMg==&mid=2247533392&idx=1&sn=8c49c9cf3e1cbea844d0fd2e2a548ec5": "IoT智能设备产品「发售前」安全检验：关乎品牌声誉的漏洞之战", "https://mp.weixin.qq.com/s?__biz=MzAxNjg3MjczOA==&mid=2247486778&idx=1&sn=f6d7a0e2bb42cd607673aaf514dac588": "同步漏洞行动：“ Lazarus 高级持续性威胁组织”再次故技重施", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247492229&idx=1&sn=0f01b9d6172eaca7191b991d309fb154": "漏洞预警 福建科X讯通信有限公司指挥调度 命令执行 send_fax.php", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497422&idx=1&sn=25b709157e812df543a96398adb8ee76": "【漏洞通告】金蝶天燕应用服务器IIOP反序列化远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzk0MDQzNzY5NQ==&mid=2247493620&idx=1&sn=30e242892f367e7223a6ec32e9d4e185": "【红队】JNDIExploit 改进版", "https://mp.weixin.qq.com/s?__biz=MzkzODQzNDU5NQ==&mid=2247486275&idx=1&sn=78ef19829aed8e60e9aebaf81ce2988d": "【工具分享】JavaSecLab综合且全面的Java漏洞平台", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492792&idx=1&sn=5cb94a67c2deab77d9fd1d0db1d0bfe3&subscene=0": "【原创0day】金蝶天燕应用服务器IIOP反序列化远程代码执行漏洞（NVDB-CITIVD-2025865374）", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497422&idx=3&sn=7015535a8d450e361c17401b7e9af8c1": "【漏洞通告】PyTorch远程命令执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491241&idx=1&sn=dd38869f9c545622339dd36ab905aece": "时空智友 企业流程化管控系统 indexService.notice SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522841&idx=1&sn=b39cd7520c5b0c63d3c0e807374feeb2&subscene=0": "华硕修复严重的AMI 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247520332&idx=1&sn=3364d1b0ce7a6e2fbe99dbb7f796f5fe": "浅谈常见edu漏洞，逻辑漏洞，越权，接管到getshell，小白如何快速找准漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490415&idx=1&sn=e9d22f78d17e3470a660700d98aa4709": "【在野利用】SAP NetWeaver MetadataUploader 文件上传漏洞（CVE-2025-31324）", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485346&idx=1&sn=45c65a8cf45b500e29b50de741357c62": "常见EDU漏洞，附实战案例", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489643&idx=1&sn=6cc9549f8edc947cf894866e6906c388": "某GPS定位系统存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNjI2NjUzNw==&mid=2247493177&idx=3&sn=83925203c8af0451f4866346d5e8bb6f": "上周关注度较高的产品安全漏洞(20250414-20250420)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524300&idx=1&sn=61b24316b9f37ce64fe962488a66acd9": "【漏洞通告】Commvault 远程代码执行漏洞(CVE-2025-34028)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651319505&idx=4&sn=bf97b7d596686473d85ecf14ad5cf251": "微软悬赏最高3万美元征集AI系统漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497422&idx=2&sn=4aa07a29eb9043fda3afbd8a99158478": "【漏洞通告】Redis输出缓冲区无限增长漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247572488&idx=1&sn=fb46d17acd46d619bb34786240fcaeae": "Top 10 漏洞不懂？这还不手拿把掐吗？", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522855&idx=1&sn=a1bca2956d4fbf963b9b88a083a14e0a": "2025年Q1 遭利用漏洞达159个，开源软件类排名第四", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529330&idx=3&sn=c2b1ae814f79a58ae8aa630f27df0a49": "揭秘 SuperNote Nomad 电子墨水屏平板电脑中的 0-Click RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651319505&idx=1&sn=47cfe84c58cbf0a4340300245c458b96": "2025年第一季度159个CVE漏洞遭利用", "https://mp.weixin.qq.com/s?__biz=MzkxODQzOTYxMQ==&mid=2247483853&idx=1&sn=1a087ace4e3172d75778afe88364aaf9": "分享常见的逻辑漏洞挖掘方法(第一部分)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069278&idx=2&sn=1de49835dbc9a027714f7dd639995399": "【安全圈】Kubernetes 集群安全漏洞遭利用，算力资源面临严重危机", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247484760&idx=1&sn=c15ee9e8c3a22263f1d8a84d5be44167": "小程序渗透记录 通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MzA5Nzc4Njg1NA==&mid=2247489237&idx=1&sn=220aba54ff373c4fbcccf474a8eacac7": "关于防范Google Chrome沙箱逃逸高危漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=MzkzNzQyMDkxMQ==&mid=2247488035&idx=1&sn=274a2f64a5da0da9cbc0677e3f1b79fa": "独家揭秘：1000万漏洞赏金白帽，SRC漏洞挖掘通杀思路分享", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247486363&idx=1&sn=2fba6ac5ecaf5f265ba1384fc09400a2": "漏洞预警 | 金和OA文件任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMjE2NTM5Mg==&mid=2247485561&idx=1&sn=01a2762c91f33dedccdbcfff2d38ee16": "二维码功能点SRC漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg4MDcyMDkxNQ==&mid=2247483733&idx=1&sn=c75fad5f7e73656b5342c2f3c63de6ef": "记一次接口导致的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069278&idx=4&sn=65b96c2d3c069f56a8cea6f42de7bddd": "【安全圈】微软的符号链接补丁造成了新的 Windows DoS 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069278&idx=1&sn=438c2449a1c0f61060e790d949b847cc": "【安全圈】NVIDIA NeMo 框架三大高危漏洞致远程攻击与数据篡改风险剧增", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529330&idx=1&sn=5273a3d55b47ff1835c54020889f53b0": "Sunder：旨在利用 BYOVD 漏洞的 Windows rootkit", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490439&idx=2&sn=8029c1b6c6cb4fc1169abf3a53ac4447": "最新版 ThinkPHP (8.1.2) 反序列化漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkwMzQyMTg5OA==&mid=2247487182&idx=1&sn=8c2b60b3566660b43f205a0b89726616": "最新版 ThinkPHP (8.1.2) 反序列化漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490439&idx=3&sn=7822e78bd1e899c30605c7c609a46f97": "【成功复现】Langflow框架远程命令执行漏洞(CVE-2025-3248)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490016&idx=1&sn=212825e78ccf912c2055b4f72bf76d21": "【漏洞预警】Redis 输出缓冲区无限增长漏洞(CVE-2025-21605)", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064123&idx=1&sn=721f25cefdfacffd7ce62f78013ecd9c": "信息安全漏洞周报【第019期】", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484859&idx=1&sn=52e57dc121dc0387b40b7290e79f2311": "【复现】金蝶天燕应用服务器IIOP远程代码执行漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520238&idx=1&sn=6c8b09c6d48109abd244d88e0cc4ad70": "emlog2.5.3代码审计（后台文件上传漏洞）", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490427&idx=1&sn=27bc97bfd0b09206a6e4b7c06ad6409f": "SyntaxFlow：挖掘 CVE 漏洞必备神器！你还不赶紧了解？", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247528099&idx=1&sn=966bc9b67422d7cc64c8820ab10eb3fd": "SyntaxFlow：挖掘 CVE 漏洞必备神器！你还不赶紧了解？", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788499&idx=1&sn=9a053702b5755c299da17056ceb7ee75": "高达30000美元！微软大幅提升AI漏洞奖金，强化企业级AI安全防线", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096187&idx=1&sn=806c612704119ea11c83967dd85c8a78": "NVIDIA NeMo 框架存在允许攻击者执行远程代码漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490427&idx=2&sn=cc59c6319bf0c47e8b08fd7d7310cb14": "分享常见的逻辑漏洞挖掘方法(第一部分)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593074&idx=1&sn=92500ea77b51003d5cd11a932ce93e18": "基于静态分析的路由器固件二进制漏洞挖掘经验分享", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503169&idx=1&sn=6c2c3a924e8d7e9eb096f5e2703592ff": "【成功复现】Langflow框架远程命令执行漏洞(CVE-2025-3248)", "https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247487722&idx=1&sn=90f89a1a6fbdb5fe671466a3c09d7d96": "分享常见的逻辑漏洞挖掘方法(第一部分)", "https://mp.weixin.qq.com/s?__biz=MzkwMzUyMjk2MQ==&mid=2247484369&idx=1&sn=6264d0cf790e747b8e22bcede8991457": "尽快更新Redis，最新漏洞可导致服务器遭受拒绝服务攻击（CVE-2025-21605）", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489732&idx=1&sn=698bede76a8adebf728d0d33371f0c08": "国外顶级漏洞实战工具推荐（附下载）", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610417&idx=4&sn=6972dd43d82d5f9c4167b7d74cb0b17d": "若依Vue漏洞检测工具更新！V5", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610417&idx=3&sn=bfbff1b7860e42d001a0044c92dc76f5": "某开源cms 0day挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487362&idx=1&sn=ffab6e6499a8203e377311e6ebc5c794": "LFI漏洞攻击技巧", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486771&idx=2&sn=ab22dce138ee1747f457073376df6da6": "一个漏洞仓库免费送~", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492981&idx=3&sn=39816d35194849a0b028af9fc33d2549": "漏洞预警 | 红帆HFOffice SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MzkwNzI1OQ==&mid=2247486343&idx=1&sn=5d6b5ed29ee6c4cfbb7d1471d61c62b5": "【0day预警】最新版小皮面板(XPanel)组合拳前台RCE", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486856&idx=2&sn=79155121efd595cc94acdb1dff84ae1f": "猎洞时刻漏洞挖掘SRC培训第三期塞满干货来袭！", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487772&idx=1&sn=ffbb3f555dc0c92f7d4788ffe6c9eb41": "日本遭定向攻击！Ivanti ICS零日漏洞被利用部署新型恶意软件DslogdRAT", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492981&idx=1&sn=f0d6ac50be626c0e77dbfafc97dec4a9": "漏洞预警 | Redis拒绝服务漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485347&idx=1&sn=295383c5facaf1c481ac363d502b770e": "拿来即用SQL注入POC，亲测好用", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490449&idx=4&sn=4ad721ff8b9729a350800e29699984d9": "日本遭定向攻击！Ivanti ICS零日漏洞被利用部署新型恶意软件DslogdRAT", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490449&idx=3&sn=e4eb4147d90370d16cdcab66f0e17707": "若依系统 | SQL注入漏洞+druid框架漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MDQzNzY5NQ==&mid=2247493627&idx=1&sn=381529411d515cf131ccedcfaa7470a8": "【红队】一款全方位扫描工具，具备高效的机器探活，端口探活，协议识别，指纹识别，漏洞扫描等功能", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490449&idx=2&sn=cd26d02ff5f914b863c5a673b5e13a80": "【0day预警】最新版小皮面板(XPanel)组合拳前台RCE", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492057&idx=1&sn=90d778ada4d2af36ea7937a4d95fe312": "记一次某大学附属医院漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg3NDc3NDQ3NA==&mid=2247485089&idx=1&sn=44571c1bda12501c01348db5868565f3": "e0e1-wx 2.0版本更新以及关于POC项目和开源的一些想法", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492981&idx=2&sn=ebc9e26c5521a39359b4d6c7994cc6d8": "漏洞预警 | 泛微E-Office SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499531&idx=1&sn=bb741abbff893460d68ff6d3793bad05&subscene=0": "一种利用路径变形绕过权限校验的思路：那些容易被忽视的 .NET 漏洞触发点", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247489476&idx=1&sn=f441418089f78116945e2b8916a6aa6f": "若依系统 | SQL注入漏洞+druid框架漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485765&idx=1&sn=8214658c5313ed015df1891d38335243": "Mitel 企业协作平台 npm-pwg 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247485456&idx=1&sn=4e6e93e88b117526a6f87f5d3815d9e7": "紧急预警！某高校EDU越权漏洞被盯上！我竟在后台改写了百万师生“生死簿”？！", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069289&idx=1&sn=16bc1c5c2d7fb83e495c4733c49d8cab": "【安全圈】零日漏洞引发危机：黑客利用 Ivanti VPN 发动 DslogdRAT 恶意攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069289&idx=3&sn=ec5cf76b3bc93780cc966c259505f57d": "【安全圈】NVIDIA NeMo 框架三大高危漏洞致远程攻击与数据篡改风险剧增", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247492324&idx=1&sn=494f00f92c293602a05ffbb5b0ae7d45": "PoC攻击暴露Linux安全工具缺陷，以色列厂商称过度依赖eBPF埋隐患", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247639022&idx=2&sn=e5a458cfa9a3dca4c3690cd7e2f241d1": "在看 | 周报：国家部委张某犯重大间谍案；微软新安全功能误判导致全球性账户锁定；华硕确认AiCloud路由器存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247491373&idx=1&sn=bddc643fa7e0e7a9925c0c6033d1a498": "隐藏在菜单外的\"秘密菜品\"：我如何通过robots.txt找到管理后台并实现远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498299&idx=4&sn=7fc6a5afafb1dcc87ce8e0bd169e98c9": "SAP NetWeaver 中的关键漏洞受到主动利用的威胁", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247487464&idx=1&sn=e0b566b9dddca36bdf056ad6cd249264": "第120篇：蓝队溯源之蚁剑、sqlmap、Goby反制方法的复现与分析", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497501&idx=1&sn=c783d1b5f731639fcaf36886991d03ac": "通过svg图片所引发的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490471&idx=3&sn=4aa1ab94347fba06d79d95b2c6e25e7f": "e0e1-wx 2.0版本更新以及关于POC项目和开源的一些想法", "https://mp.weixin.qq.com/s?__biz=MzkzMTYyMDk1Nw==&mid=2247483807&idx=1&sn=afa867ab0098d7309f26e8a4e1b41d47": "Clash Verge rev存在提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491250&idx=1&sn=1589cdf95c37135b68060eeea580a1ba": "mojoPortal 路径穿越漏洞 (CVE-2025-28367)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493694&idx=1&sn=af635b142263362a3546be45499fcc08": "某初始访问代理（Initial Access Broker）正在利用SAP NetWeaver的零日漏洞进行攻击", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247490084&idx=1&sn=40aee54b80b075aedd94ffb9eeea2ea8": "分布式自动化信息收集、漏洞扫描", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247511837&idx=1&sn=649a9d22890acc1ac0489e67547d8ac7": "浅谈常见edu漏洞，逻辑漏洞-越权-接管-getshell，小白如何快速找准漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODY1NzEwMA==&mid=2247488619&idx=1&sn=f73dc7c836502d7d9d091067c809e3db": "【神器合集】漏洞挖掘效率翻倍！200+BurpSuite插件清单收录", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485277&idx=2&sn=bec458c6ec98af95cb42cc46ca2ec753": "宏景人力资源管理系统 searchCreatPlanList.do SQL注入漏洞(CNVD-2025-6953)", "https://mp.weixin.qq.com/s?__biz=Mzg4MzkwNzI1OQ==&mid=2247486384&idx=1&sn=b6fb6926d5a741f709d143d27b79eaba": "【0day预警】最新版小皮面板(XPanel)绕过随机安全入口前台RCE方法", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247545362&idx=3&sn=aa7972bdc76a510d57709e9f6aba868d": "护网行动2024漏洞复盘：这些\"0day漏洞\"为何让企业一夜崩盘？", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493694&idx=5&sn=49db93550106b05328cf156c1793c8e9": "\"同步漏洞行动\"：朝鲜Lazarus APT组织针对韩国供应链发起攻击", "https://mp.weixin.qq.com/s?__biz=MzA5Nzc4Njg1NA==&mid=2247489241&idx=1&sn=1ea2b1e95eae60d541f666bf209182df": "关于防范WinRAR安全绕过漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=MzkxODQzOTYxMQ==&mid=2247483866&idx=1&sn=7282798bc74793bf077cebd365095660": "分享常见的逻辑漏洞挖掘方法（第二部分）", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYxMjk0Mw==&mid=2247490385&idx=1&sn=4cfdc0b4934024bd105c72784afa70a8": "Spring Boot漏洞总结（文末加技术交流群）", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655276954&idx=1&sn=870030f19adfaab97c56128696974508": "170页 漏洞挖掘总结", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492061&idx=1&sn=64139272d079affc4eb3df7762bf31cf": "【代码审计】Emlog存在SQL注入+XSS漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247489615&idx=1&sn=fb03351f755d4563e443004961f44714": "智能汽车安全-漏洞挖掘到控车攻击", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524459&idx=3&sn=231cd7445803c6bab90466a6ef29caac": "Chrome浏览器\"释放后使用\"漏洞已被黑客在野利用", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524459&idx=4&sn=bb673eca55bbe03aae54703463f04026": "黑客利用MS-SQL服务器漏洞部署Ammyy Admin以获取远程访问权限", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490024&idx=2&sn=27f7a3003f330bab03408c0b7de38e21": "【高危漏洞预警】Craft CMS generate-transform反序列化代码执行漏洞（CVE-2025-32432）", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485277&idx=1&sn=293b817116541488409589488335368d": "WordPress未授权任意文件读取_CVE-2025-2294", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486775&idx=3&sn=416f965f0a9a78a97ad6220308ccca8e": "一个漏洞仓库免费送~", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484027&idx=1&sn=d90e95c4319a9fb9c58e06a19a2c8540": "【二次更新已复现】SAP NetWeaver MetadataUploader 文件上传漏洞（CVE-2025-31324）", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524459&idx=5&sn=2fab8c693996300aaa17336b62626cb2": "DragonForce 和 Anubis 勒索软件运营商推出新的联盟模式", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247489111&idx=3&sn=e9d75ee5861c3d5214d11ed7a192e9b4": "谷歌云平台云Composer权限提升漏洞修复：ConfusedComposer", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247486083&idx=1&sn=22fe8561c0b5a6e7c5de899debb5e8f1": "注意！朝鲜Kimsuky组织利用BlueKeep漏洞，疯狂攻击日韩", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491260&idx=1&sn=e755a07fdb95a8da29e4d52f916d8bc7": "CrushFtp 权限绕过漏洞 (CVE-2025-31161)", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503192&idx=1&sn=714ca6216b263e65726e7ccad9e77563": "【成功复现】CrushFTP身份认证绕过漏洞（CVE-2025-2825)", "https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650278191&idx=2&sn=af54521d53c958ca738da98aa135275d": "盛邦安全获评“国家信息安全漏洞库（CNNVD）一级技术支撑单位”", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486860&idx=2&sn=006ac94da842509758fcd16e3890de95": "猎洞时刻漏洞挖掘SRC培训第三期塞满干货来袭！", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247572516&idx=2&sn=2f22c93716171977e91e54a0780f0d38": "容器镜像安全：安全漏洞扫描神器Trivy", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490024&idx=1&sn=59886c95df43ebe7b2c5e6d30022aaff": "【漏洞预警】Grafana权限管理不当漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490511&idx=2&sn=934a5720e528d15828201864c9501c68": "分享常见的逻辑漏洞挖掘方法（第二部分）", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485392&idx=1&sn=57ef28cc29e3c27486dddbf4b56b3426": "智能汽车漏洞挖掘案例分享", "https://mp.weixin.qq.com/s?__biz=MzkyOTQ0MjE1NQ==&mid=2247498989&idx=1&sn=0ef9ce3aa929cc157dc2393e6f8b4dbb": "【文章转载】DragonForce与Anubis再掀风暴：勒索软件“加盟制”全面升级，你的数据还安全吗？", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529349&idx=3&sn=0fced79c14158455ee6b98e3d298eaf6": "BleedingTooth：Linux 蓝牙零点击远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522866&idx=2&sn=5e8614c50bbde8621342a1caffc25b99": "SAP修复已遭利用的0day漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650622118&idx=2&sn=378b487b61b6624a14b17a64b494189d": "CVSS10分！Erlang∕OTP SSH远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247554620&idx=2&sn=48b116a5316e756bade77cd6318bffbd": "【免费领】超400页！Android系统漏洞实战权威指南", "https://mp.weixin.qq.com/s?__biz=MzkzODQzNDU5NQ==&mid=2247486292&idx=1&sn=f953fc8eddfc54310b07d7203a934fef": "【工具分享】SMS_Bomb_Fuzzer漏洞挖掘之短信轰炸辅助绕过插件", "https://mp.weixin.qq.com/s?__biz=MzA3NTIyNzgwNA==&mid=2650260114&idx=1&sn=f6ffb848bca1aeeaeef38f1444723053": "SAP NetWeaver中存在严重漏洞，面临主动利用威胁", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651319591&idx=3&sn=bb25fe344d136765f4842ec2635d92b2": "同步漏洞行动：朝鲜Lazarus APT组织针对韩国供应链发起攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522866&idx=1&sn=f8c7ca3a1ba46ce90b3df18909d4b5b4": "Craft CMS RCE利用链用于窃取数据", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484033&idx=1&sn=1b001fdce45c26dae3323b272cf87fb6": "【已复现】Craft CMS generate-transform 反序列化代码执行漏洞（CVE-2025-32432）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069303&idx=4&sn=2be93ee795a859778f6b32285101b8fc": "【安全圈】CVE-2025-3248：Langflow 开源平台严重远程代码执行漏洞威胁 AI 工作流安全", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490523&idx=1&sn=b842c67635f0e5ef41bb3169cc1d5320": "【成功复现】CrushFTP身份认证绕过漏洞（CVE-2025-2825)", "https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649172696&idx=1&sn=7c590e6c2eac84fac168019dea52ae62": "预警丨防范WinRAR安全绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514261&idx=2&sn=f0875aa740f8b02e3cafb8f0d80e80d3": "工信部：关于防范WinRAR安全绕过漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489658&idx=1&sn=93ac859afef58e956ec55b5a9e03e722": "whisper多商户客服系统存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247493334&idx=1&sn=7b4e431ce2d3cd74d6067f9a2c5ca5fa": "记一次漏洞复现威胁情报导致的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzNDE0Mzk0NA==&mid=2649595577&idx=1&sn=4be078f0d7364e26e7949c38af820abe": "今天省 1 千漏洞修复费，明天赔 10 万应急款：漏洞沉默成本到底如何算？", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491165&idx=1&sn=0b2ef143b18654783c497a621e4b9f71": "如何利用隐藏功能点发现SQL注入漏洞和注入绕过技巧|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490523&idx=2&sn=415db99a23021d22f8d14d21b31123bc": "今天省 1 千漏洞修复费，明天赔 10 万应急款：漏洞沉默成本到底如何算？", "https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247485060&idx=1&sn=bd3e6ce98f737ab0af86429d7da47278": "Steam 客户端漏洞 &&从csgo角度看待网络安全", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506286&idx=1&sn=70e7a1dd625b3fe2e74b6f59e582870b": "每周网安资讯 （4.22-4.27）|Johnson Controls ICU漏洞预警", "https://mp.weixin.qq.com/s?__biz=Mzg5MjkwODc4MA==&mid=2247486045&idx=1&sn=192941403d7761e2376a9abd54ec6e6f": "2025 年第一季度漏洞利用趋势", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486824&idx=1&sn=1cbafa923a71d33f36de9418d1eeabbe": "浅谈常见edu漏洞，逻辑漏洞、越权、接管、小白如何快速找准漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MDI0NTM2Nw==&mid=2247490591&idx=1&sn=f71356f00e6f6c1da15d31b33fdb715a": "Wazuh监视恶意命令执行", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794968&idx=1&sn=cabaaf154b40170f33f81fd86b639fcc": "DslogdRAT 恶意软件利用 Ivanti ICS 0day漏洞（CVE-2025-0282）攻击日本", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492988&idx=3&sn=21e89154c01f3abb41a02ec5e3d317a7": "漏洞预警 | 金蝶云星空反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506274&idx=1&sn=3ffab272664a528951d8ef6f75cfbeb0": "我如何从已删除的文件中赚取 64 美元 — 一个漏洞赏金故事", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794968&idx=3&sn=308b265cd03edb079a32683a1945d76f": "Planet Technology 工业交换机漏洞可导致设备被接管", "https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247485274&idx=1&sn=2eb953e29d8005942bd0777eb0596efa": "CVE-2025-43859：Python h11 HTTP 库中的请求走私漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247489681&idx=1&sn=4d5880e4037c6120c0eda0af0933b71b": "浅谈常见edu漏洞，逻辑漏洞、越权、接管、getshell，小白如何快速找准漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492988&idx=4&sn=6a70705789bddc11aa1782907cf8cd98": "漏洞环境 | AscensionPath", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247545403&idx=3&sn=feadcaf7742a22330b676d1c9e307aea": "别怪技术不够硬，网络钓鱼拿捏的就是“人性漏洞”", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492988&idx=1&sn=a5738e65a40b5569ed8346029928619a": "漏洞预警 | PyTorch远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485287&idx=2&sn=56cd0ef3de3e2432f7221ca9a22230a2": "核弹级漏洞预警｜NUUO监控设备远程沦陷实录(CVE-2025-1338)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492988&idx=2&sn=7234221adadbaab801431495a0911d35": "漏洞预警 | 泛微E-Cology SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMTMyOTg4NQ==&mid=2247484505&idx=1&sn=cf094b4a2ce3feacebb23599aca0d1a5": "StudentServlet-JSP跨站脚本漏洞及解决办法（CNVD-2025-06945、CVE-2025-3036）", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485287&idx=1&sn=63d5a97d15463a1ed0e183a00c8fda38": "Apache Calcite惊现高危漏洞！数据库连接竟成黑客后门？", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522866&idx=1&sn=f8c7ca3a1ba46ce90b3df18909d4b5b4&subscene=0": "Craft CMS RCE利用链用于窃取数据", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491269&idx=1&sn=1270ce233c8220513fadb1a3c69b928c": "时空智友 企业信息管理系统 updater.getStudioFile 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514261&idx=2&sn=f0875aa740f8b02e3cafb8f0d80e80d3&subscene=0": "工信部：关于防范WinRAR安全绕过漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=MzI5MDcyODIzNg==&mid=2247485018&idx=1&sn=8ba2cafe78cf870bfa17f2f821016416": "地理数据的背叛：坐标风暴漏洞讲解", "https://mp.weixin.qq.com/s?__biz=MzIyOTUzODY5Ng==&mid=2247504434&idx=1&sn=0403e4ddf5488d49eec5fb5c51f65548": "攻防演练大考将至，企业如何防范人员安全漏洞？", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247492244&idx=1&sn=69fcc88e6c320fb6dc9c59df7eca18b0": "漏洞预警 西部数据 NAS remoteBackups.php 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069303&idx=4&sn=2be93ee795a859778f6b32285101b8fc&subscene=0": "【安全圈】CVE-2025-3248：Langflow 开源平台严重远程代码执行漏洞威胁 AI 工作流安全", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247935&idx=1&sn=70e053b983cc95611aca67f21cb28eca": "工信部：关于防范WinRAR安全绕过漏洞的风险提示 | 干翻KnowBe4！网安黑马掀起安全培训的AI革命", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495954&idx=1&sn=e478e61075e5eb45188c2a96d63c2c48": "CNVD漏洞周报2025年第16期", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522882&idx=2&sn=dae814c7878a36e517a81042fa236d76": "Ruby 服务器中存在 Rack::Static 漏洞，可导致数据遭泄露", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491278&idx=1&sn=4c7432ffaaf024132c1e31350888201d": "深澜计费管理系统 down-load 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247489095&idx=1&sn=5909aa6be7c2a8b081ec2dc27c706f9a": "记一次某大学附属医院漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkyNzc0MzcwMA==&mid=2247484099&idx=1&sn=cfae9707ca8e7526b6c9681f2c5b59de": "面对零日漏洞：如何提高应对能力？", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYxMjk0Mw==&mid=2247490402&idx=1&sn=13d411f7fac2b7ae96ecebef4e6b0885": "2024全球高危漏洞预警报告（含POC）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522866&idx=2&sn=5e8614c50bbde8621342a1caffc25b99&subscene=0": "SAP修复已遭利用的0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495954&idx=2&sn=275c31884318b2e37e10c7ff773792ca": "上周关注度较高的产品安全漏洞(20250421-20250427)", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499898&idx=1&sn=c2635faac9b58a5aaa99bb9310c17c6d": "印度阿三安全研究员，欺骗漏洞赏金全过程！", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582167&idx=2&sn=9118e919e74cfe65375cf71142b941b8": "安全动态回顾|“银狐”木马病毒再度来袭 关键Commvault RCE漏洞允许远程攻击者执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247506887&idx=1&sn=d5c4d3be5a2afc1603311d2ad3903fb6": "立即保护好Clash Verge rev！ 远程命令执行漏洞公开！", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489747&idx=1&sn=006aa2fbd41bbc31b587cb5d58f022e5": "无法避免的漏洞！认栽？", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498368&idx=2&sn=08e4286762e01e054a6da2bd6b1a0a92": "Craft CMS CVE-2025-32432 exp发布", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503384&idx=1&sn=63cc47226cc79b1cdc81588158ec468b": "雷神众测漏洞周报2025.4.21-2025.4.27", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503347&idx=1&sn=3e8a4766a143c1ac8b60d02ae3610cc2": "安全热点周报：黑客精心设计 Craft CMS 漏洞链，用于零日攻击窃取数据", "https://mp.weixin.qq.com/s?__biz=MzkwNDI0MjkzOA==&mid=2247486038&idx=1&sn=1999461c4d4202a5f08954f84632b0c7": "成为CNNVD漏洞库支撑单位，申请全流程解读，专业团队助您高效通过", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651319641&idx=4&sn=9cf8c370c44170ea73c3ec07720ea631": "虚假安全补丁攻击WooCommerce管理员以劫持网站", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524408&idx=2&sn=f78633e4f9b498dcf6eaa57dce9398bb": "【漏洞通告】Craft CMS 远程代码执行漏洞(CVE-2025-32432)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529391&idx=4&sn=12a5422e65182402e873f1d6152292f5": "安全专家提供的 APT38 窃取 0day 漏洞的策略 PoC", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247486223&idx=1&sn=7f6e6fcfaa74e32348aa21471b7c2fd0": "福建科立讯指挥调度管理平台send_fax远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MzA4NTM0OA==&mid=2247493751&idx=1&sn=7620b7b8ed733e049225a65ebd7e3286": "mybb 0day？ bf复活？", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524408&idx=1&sn=d6c29a2295cba12b60be9edf535a4b09": "【漏洞通告】SAP NetWeaver 远程代码执行漏洞(CVE-2025-31324)", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247554627&idx=1&sn=3052215a08035935eb1fb8fda08baa31": "无法避免的漏洞，别轻易认栽", "https://mp.weixin.qq.com/s?__biz=Mzg2ODY3NDYxNA==&mid=2247486036&idx=1&sn=bfcb31206d049f5d266f3f676d33a4cd": "限时开放注册-Ai网络安全智能助手 - 漏洞检索、攻防技巧、CVE知识库、代码审计、应急响应 、聊天机器人、安全基础知识等", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490034&idx=1&sn=0a33514a576e3f84a20c7d7ca7daffea": "【高危漏洞预警】基于browser-use的AI Agent应用pickle反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485399&idx=1&sn=838097fded634b952db553b20e918eca": "SSTI 模板注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488409&idx=1&sn=37f4e49b2d10bc4495aaafb5a040b0b7": "XWiki SolrSearch接口存在远程命令执行漏洞CVE-2025-24893 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492763&idx=1&sn=625232d93ac8504b86a7342d408389e2": "Kimsuky 利用 BlueKeep RDP 漏洞入侵韩国和日本系统", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096196&idx=2&sn=1e8d21cd19321f47aedc061df955dce5": "Microsoft 的符号链接补丁创建了新的 Windows DoS 漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651136458&idx=1&sn=8edda4cb9be93dda140e8cd097cba008": "《2025年提升全民数字素养与技能工作要点》印发，提出营造安全有序数字环境；PoC攻击暴露Linux安全工具核心设计缺陷 |牛览", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490034&idx=2&sn=bb526b3f64729cd3852c66a5747123df": "【漏洞预警】SAP NetWeaver Visual Composer远程代码执行漏洞CVE-2025-31324", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247623928&idx=1&sn=a282f1a835ce7005bdbcc252bd8af2b6": "人工智能自动化模糊测试：如何自主发现汽车软件中的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491200&idx=1&sn=0f6918e34add23928d4cdb7c91127bbd": "告别手动测试！AutoFuzz极速挖掘漏洞BurpSuite插件|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzkyNzQxMjQ4Ng==&mid=2247484246&idx=1&sn=290f318476877c50a65c60230f497ee1": "CrushFTP身份认证绕过漏洞（CVE-2025-2825)", "https://mp.weixin.qq.com/s?__biz=Mzg4MzkwNzI1OQ==&mid=2247486405&idx=1&sn=921e30bbc4876f7fef8c66c887e5b41b": "【吾好梦中测站】一次资金盘渗透的源码爬取与0day挖掘实录", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492999&idx=1&sn=9fc9cad4e0eb844bf9f5b4c36da0083c": "漏洞预警 | 昂捷CRM SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk3NTQwMDY1NA==&mid=2247485157&idx=1&sn=65599d4007c0db1a60a54ca2689c1fbe": "工具篇 | 超绝！漏洞盒子一键自动提交脚本，效率飞升秘籍", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247489682&idx=1&sn=735e081a2ed55cc54fbb3798d57ae3c3": "针对Spring-Boot漏洞框架的渗透测试", "https://mp.weixin.qq.com/s?__biz=Mzg4NTczMTMyMQ==&mid=2247486227&idx=1&sn=55099f47115fdab70db0ba6e7ba685b9": "CVE-2025-32432（RCE）漏洞被大规模利用，未修复系统可能已遭数据窃取", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485296&idx=2&sn=2d5fcf6719a8a39955fcbfa59aec80f6": "【漏洞复现】Erlang∕OTP SSH远程代码执行漏洞（CVE-2025-32433）环境搭建与POC使用指南", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492999&idx=2&sn=1bf3cb1368c1af55a53dd64fa1eee1f0": "漏洞预警 | NetMizer日志管理系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610449&idx=3&sn=469dc9e1efd0e45b858c92f3730338f4": "浅谈常见edu漏洞，逻辑漏洞，越权，接管到getshell，小白如何快速找准漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260955&idx=1&sn=8df80063ef375c070447ab01a1d1f1c9": "【白帽狩猎日记】一个支付逻辑漏洞，怒赚 $9000 赏金", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491288&idx=1&sn=275b7354dd19725de555f774656952cf": "万户 ezOFFICE selectCommentField.jsp sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247615972&idx=1&sn=b479bd671e0e5d76a57af77c75d360b9": "漏洞赏金故事 | 通过已删除的文件赚到 6.4 万$", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487789&idx=1&sn=77aa7afe44d4976e6bdc8705dd411d63": "CVE-2025-32432（RCE）漏洞被大规模利用，未修复系统可能已遭数据窃取", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492999&idx=3&sn=2ef39580c664372beeefdbf36fcb99ce": "漏洞预警 | 红帆HFOffice SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652251777&idx=1&sn=68da761200a8322bd91dc18cc1298bd3": "第一季度159个CVE遭到野外利用，近三成漏洞24小时内被武器化", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493721&idx=1&sn=61208c3a6f1dd07f08a296b7aa05150a": "PoC级Rootkit\"Curing\"突破传统Linux检测机制", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498393&idx=1&sn=c1d865fb4b31e041129afdbc81a38eab": "【PoC】0-Click NTLM 身份验证绕过 Microsoft Telnet 服务器 0day，无补丁", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247520452&idx=1&sn=fac017415e0dc7815a4170b0b6b0eeec": "实战攻防之Nacos漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514274&idx=2&sn=00d8fd9045b8d0ad42afa868edbd33e9": "现代漏洞管理厂商ProjectDiscovery斩获RSAC 2025创新沙盒冠军", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538650&idx=1&sn=7dbd3d3ecaf24c6caccadeb964a1cc64": "最新报告：2024 年网络攻击总量达 3110 亿次，AI API 漏洞成“罪魁祸首”", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498393&idx=2&sn=60397211c87106c7f1e0618e95f8c89a": "BreachForums 显示关于关闭的消息，引用 MyBB 0day 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487400&idx=1&sn=857d68271aceb42921819cb35ec99321": "OttoKit WordPress 插件管理员创建漏洞 CVE-2025-3102", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493721&idx=4&sn=534c3042ecda8f4418c0c8e67cc51c18": "大规模钓鱼攻击瞄准WordPress WooCommerce用户", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247498926&idx=1&sn=245c22236290b9a85ae9ef307e62e465": "CVE-2025-26244 DeimosC2 XSS", "https://mp.weixin.qq.com/s?__biz=Mzg3NDk1MDczOQ==&mid=2247485056&idx=1&sn=5813347be79276600151056ae69fbbbb": "Clash Verge 提取漏洞分析与复现", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490573&idx=2&sn=96a32ecd7173ec089c11b18803bd9fa3": "CVE-2025-32432（RCE）漏洞被大规模利用，未修复系统可能已遭数据窃取", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507755&idx=1&sn=80f46c6c023de56c5d31193cb4e64819": "漏洞通告 | SAP NetWeaver Visual Composer Development Server 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484045&idx=1&sn=e2506204946c5d086b793d05d830bed7": "【已复现】 Commvault SSRF 致代码执行漏洞（CVE-2025-34028）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593244&idx=3&sn=927f267fd5d97e0375b099c5fc39e370": "速升级！Apache Tomcat高危漏洞可致DoS和规则绕过", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk3NjczNQ==&mid=2247485934&idx=2&sn=b5313919518f3648a67191db69d0916f": "漏洞预警|工信部发布关于防范WinRAR安全绕过漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=MzkwMzUyMjk2MQ==&mid=2247484388&idx=1&sn=26ea776faff7a337ab0c8c94dd458623": "Craft CMS命令执行漏洞POC（CVE-2025-32432）", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651319699&idx=1&sn=127e9ca1a8d55931beae293a68e3b706": "微软Telnet服务器曝0点击NTLM认证绕过漏洞，PoC已发暂无补丁", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651319699&idx=3&sn=7b71152fb35d7895dfea93f15fad09ed": "Apache Tomcat安全更新：修复拒绝服务与重写规则绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522902&idx=2&sn=7fcf319ff464d0f4275a2de94fe854f8": "Planet Technology 工业网络产品中存在多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247501683&idx=1&sn=e439870f953f8529041e66b611840b66": "【CTFer成长之路】SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247496377&idx=1&sn=ddf359203c50bc1f0e7254dad4e79ed5": "【论文速读】| MOS：通过混合专家调优大语言模型实现有效的智能合约漏洞检测", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247499287&idx=2&sn=826c08c902c5030a2b15d76ccb901940": "Linux 内核高危漏洞致系统面临权限提升攻击", "https://mp.weixin.qq.com/s?__biz=MjM5OTc5MjM4Nw==&mid=2457388789&idx=1&sn=76b923c6a7c1f3ab569dc36e76a679b1": "Expect技巧大揭秘：轻松应对脚本中的交互挑战", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529406&idx=3&sn=e26688d22d3d923b7e8329b421c52f64": "CVE-2025-23016：严重的 FastCGI 堆溢出威胁嵌入式设备，PoC 发布", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651319699&idx=2&sn=41dc6fe173fda324d053dab436917a9c": "深度剖析 CVE-2025-21756：Linux 内核漏洞触发 Root 提权全流程", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490039&idx=1&sn=e099a4d15d3ebfbf2733573086fd9207": "【漏洞预警】Apache Tomcat 逻辑缺陷漏洞CVE-2025-31651", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529406&idx=2&sn=b03a5942c7c90f70ad49eff3936e922b": "CVE-2025-21756：Linux 内核漏洞如何导致完全 root 权限利用，PoC 发布", "https://mp.weixin.qq.com/s?__biz=MzAwOTczODMxMw==&mid=2651017547&idx=1&sn=a28bcc3c148fe384736137ed48f8c061": "代码里的黄金周，单个漏洞至高奖励3万元！", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490600&idx=2&sn=5f7a34ea48b2d067dffedc763d84e076": "【已复现】 Commvault SSRF 致代码执行漏洞（CVE-2025-34028）", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490600&idx=3&sn=68f509cd14844364d6c00e49823c87f9": "Craft CMS命令执行漏洞POC（CVE-2025-32432）", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487401&idx=1&sn=00f2815a0fb59f54f7fab8c249a11d6c": "GLPI 中的预身份验证 SQL 注入到 RCE（CVE-2025-24799∕CVE-2025-24801）", "https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486375&idx=1&sn=47fe33f6229583275d6ec2dcb753df83": "2024年在野零日漏洞利用分析（上）", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247498932&idx=1&sn=7a060168271d068dd0d9f08511c31d62": "CVE-2025-0411 7-Zip Mark-of-the-Web 绕过", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247545529&idx=2&sn=243c90b00c86349e62d148c81a4c0d95": "微软Telnet服务器曝0点击NTLM认证绕过漏洞，PoC已发暂无补丁", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493015&idx=1&sn=2f83a1123b656d0f9978e81901a63ea1": "漏洞预警 | 维达外贸客户关系管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247499290&idx=1&sn=37b33780bf1ecd484fc16b58f6e778ea": "每周回顾：关键SAP漏洞、AI驱动的网络钓鱼、重大漏洞、新CVE等", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247490156&idx=1&sn=2a0bb274b22bd4f90c60495e3e419b95": "具有资产测绘、子域名枚举、信息泄露检测、漏洞扫描、目录扫描、子域名接管、爬虫、页面监控功能的工具", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794994&idx=2&sn=13c838688cc26b49be52bdc3b63d884a": "AirPlay 零点击 RCE 漏洞可通过 Wi-Fi 实现远程设备接管", "https://mp.weixin.qq.com/s?__biz=MzU4NDMyODE0NQ==&mid=2247483857&idx=1&sn=6fa6ddf8ab9535be7a20ce8febe93212": "AI 自主调用 BurpSuite 完成漏洞自动化检测", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493015&idx=3&sn=49635bd0cfdd0a3cc9d73e0f566c9a1e": "漏洞预警 | IBOS企业协同管理软件SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610468&idx=1&sn=5c04e7dc15b0749c45e0a6036f723e12": "尽快升级：苹果 AirPlay 漏洞被披露，数百万 iPhone ∕ Mac 等设备安全告急；|既能轻松赚钱，又能享受特殊服务；", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493015&idx=2&sn=34cfea0215cb67f87b794eed31f08ffc": "漏洞预警 | 锐捷EWEB任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522916&idx=1&sn=bd784cba5a2043dfacb33dcf271ed806": "谷歌2024年检测到75个已遭利用0day，44%针对企业安全产品", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247490070&idx=1&sn=37104beb3e4ef4ccc8acc7c27ca539b5": "某厂商路由器摄像头设备漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493731&idx=2&sn=302b84af285a43c35c8a10c7661a8cb9": "VeriSource数据泄露事件影响400万人", "https://mp.weixin.qq.com/s?__biz=MzkzMzcxNTQyNw==&mid=2247487587&idx=1&sn=165ab7f26fc5ae6b7a7288b39082916b": "【26届实习】安恒实习生招聘，安全运营、培训、服务别错过！二进制漏洞面试题挑战！", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247486405&idx=1&sn=b2fdb02b8e1f37bf30eb9596246eee8f": "从Nacos derby RCE学习derby数据库的利用", "https://mp.weixin.qq.com/s?__biz=MzkwMTc2MDE3OA==&mid=2247486597&idx=1&sn=6b0f59a290b6cc24ebe18861ccedc01b": "DeFiVulnLabs靶场全系列详解（三十二）基于闪电贷的价格操纵漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMDQ0NzQwNA==&mid=2247486542&idx=1&sn=d01daa072b41790df7bb414a85fddca9": "Apache Tomcat发布安全更新，修复两个关键安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247615999&idx=1&sn=cf97bc6d114d072d181391ccef6a50fc": "React Router曝高危漏洞，可导致内容伪造与数据篡改", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522916&idx=2&sn=1292db15893e34108514b0dc4437e9f7": "苹果 “AirBorne” 漏洞可导致零点击 AirPlay RCE 攻击", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247945&idx=1&sn=34238c2eca2f5579301a08d4e7fc3084": "深度剖析 CVE-2025-21756：Linux 内核漏洞触发 Root 提权全流程 | 微软Telnet服务器存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NTU3NTY0Nw==&mid=2247489812&idx=1&sn=03167afe5939ad6b67d0afd78fe9ac52": "【技术揭秘】用Bitpixie漏洞破解BitLocker加密！完整流程+深度解读", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247503118&idx=1&sn=741ec90f6857c688ba35215ffe163ad7": "AI本地部署的天坑？RAG曝出重大安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247489731&idx=1&sn=c3a5ef01648fad496ecda36b653b6e21": "浅谈src漏洞挖掘中容易出洞的几种姿势", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492086&idx=1&sn=ca804a2b0eefcf97eacc10df5aa0a5bb": "一次漏洞挖掘过程中的SQL注入浅浅绕过记录", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247492252&idx=1&sn=535bf293bd992ff4040807da0b0ae040": "漏洞预警 锐X eweb dhcp.php 文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582213&idx=2&sn=f318884bd75b11598eb5ae5992d11c75": "Cookie-Bite攻击PoC使用Chrome扩展窃取会话令牌", "https://mp.weixin.qq.com/s?__biz=MzU3ODc2NTg1OA==&mid=2247492476&idx=1&sn=2a0b1e2b91da8cf4d8c34345955288c3": "CVE-2025-0282复现", "https://mp.weixin.qq.com/s?__biz=MzkzMTYyMDk1Nw==&mid=2247483814&idx=1&sn=e807e75cb4abb8666341054a7f0af412": "【情报】SAP NetWeaver存在RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498540&idx=3&sn=3fd704bd50150f564c954f29b995cd45": "苹果的“AirBorne”漏洞可能导致零点击 AirPlay RCE 攻击", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487802&idx=1&sn=d0c698c69d06501007b2d16fbec67b12": "紧急！苹果AirPlay曝高危漏洞，数千万设备面临攻击风险！速看修复指南", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490629&idx=1&sn=d9b4be31992c135e6f3040544f3411e0": "浅谈src漏洞挖掘中容易出洞的几种姿势", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498540&idx=5&sn=dc579506c68a23389ad4f8b82cc58191": "谷歌威胁情报小组2024年0day漏洞利用分析报告", "https://mp.weixin.qq.com/s?__biz=Mzg4Njc3NzM1OA==&mid=2247484980&idx=1&sn=7ec16b77794560d035a73cf5a2784ac7": "只需写个 .pyc 文件？Python 任意文件写入也能打 RCE！", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247488245&idx=1&sn=73ff96bd0f5e2dab0caf9f642b70f53d": "一种非常优雅的获取 Solr 服务器 RCE 的方法", "https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247485305&idx=1&sn=8dcb6f803f544c6f0706573cecd168a4": "【漏洞情报】SAP NetWeaver存在RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk1NzE0ODUyOA==&mid=2247492186&idx=1&sn=ae798bcc8e7a724e9fe6fe371f0e1fb8": "【复现】Chrome V8堆沙箱绕过分析", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582213&idx=1&sn=8836a6cf09badd147c8e20d0dd545e51": "新的iOS关键漏洞仅用一行代码就可禁用iphone", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493731&idx=1&sn=a80af9319eebb5e1f199c51427f74f6c": "谷歌威胁情报小组（GTIG）追踪到2024年有75个被主动利用的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NDQ5NTU0MA==&mid=2647690699&idx=1&sn=b3a052f99fd38c5eef0a0582a2fa11ed": "37.漏洞赏金项目中的URL- 掌握 URL：2025 年版", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484816&idx=1&sn=4acb9fae17b16fd88c8ae8dfe8c2fa73": "安钥®「漏洞防治标准作业程序（SOP）」征文启示 [2025年第17期，总第35期]", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507755&idx=1&sn=80f46c6c023de56c5d31193cb4e64819&subscene=0": "漏洞通告 | SAP NetWeaver Visual Composer Development Server 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxODIzNzgwMw==&mid=2654071699&idx=1&sn=b854fd8562f7c626cf98142281cbd2a4": "漏洞盒子助力 | GOGOGO！71SRC限时双倍金币活动开启！", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247491076&idx=1&sn=9a9c97cfa66c7ac05adff672547978ae": "能信安：漏洞通告", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651319938&idx=3&sn=f63f4cdc869cd38d47b8a177ac3ee6f6": "主流AI系统或存在越狱、代码及数据安全漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260973&idx=1&sn=3f874d1c7dc1d8866ffa548ce2110c46": "右键点击就能窃取 NTLM 密码？- 技术分析与 PoC", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651136563&idx=2&sn=a0571e3898f312e173180f22ec47d2fe": "奇安信发布2024年年报，实现营收43.49亿元，同比下降32.49% ；苹果AirPlay协议零点击远程代码执行风险曝光|牛览", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538650&idx=1&sn=7dbd3d3ecaf24c6caccadeb964a1cc64&subscene=0": "最新报告：2024 年网络攻击总量达 3110 亿次，AI API 漏洞成“罪魁祸首”", "https://mp.weixin.qq.com/s?__biz=Mzg4MDcyMDkxNQ==&mid=2247483740&idx=1&sn=e7646f3df1ee36c13029c3e71f1104e1": "记一次越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462808&idx=1&sn=d5a46430dbd656b19ba0efc4eae3fd60": "信息安全漏洞周报（2025年第17期）", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247491032&idx=1&sn=5f52ed543c07f52a79d6e4ea1168e370": "创宇安全智脑 | 小皮面板 JWT 硬编码认证绕过等71个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247572572&idx=1&sn=0239c40ea95efb55cdb8bffe01622d8e": "某开源cms 0day挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069369&idx=3&sn=ad648277b98ceb64dfd2d2ca0b6a1fca": "【安全圈】CISA 就 Commvault Web 服务器漏洞发布警告，称该漏洞可能被利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069369&idx=2&sn=f7f84aa2b4e350b27918d216e6977bc6": "【安全圈】Apache Tomcat 漏洞可导致攻击者绕过规则并触发 DoS 条件", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514274&idx=2&sn=00d8fd9045b8d0ad42afa868edbd33e9&subscene=0": "现代漏洞管理厂商ProjectDiscovery斩获RSAC 2025创新沙盒冠军", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514283&idx=1&sn=681c71445b5cfa5f0ab2fde668d4fef8": "2024年至少75个零日漏洞遭滥用，网络与安全产品占比近三成", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593244&idx=3&sn=927f267fd5d97e0375b099c5fc39e370&subscene=0": "速升级！Apache Tomcat高危漏洞可致DoS和规则绕过", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490642&idx=2&sn=3c63bc932766f09781474e565e50061b": "记一次越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490045&idx=1&sn=6a8ac602f3c2d561b1738f0292d82d55": "【漏洞预警】Yeswiki远程代码执行漏洞CVE-2025-46347", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489271&idx=1&sn=8d47ee4c8bb63b8265049ea0dcd8ce78": "【漏洞通告】微软Telnet Server(MS-TNAP)身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522902&idx=2&sn=7fcf319ff464d0f4275a2de94fe854f8&subscene=0": "Planet Technology 工业网络产品中存在多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484816&idx=3&sn=b5673d90eadf3ee6f4dc1bf3c39ab44d": "入选作品公布｜安钥®「漏洞处置标准作业程序（SOP）」征文第三十三期", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484816&idx=2&sn=24c18051273a89a9237d6fa7343b76c0": "【漏洞处置SOP】PHP CGI代码注入漏洞（CVE-2024-4577）", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503201&idx=1&sn=51cbcde9c3c7543236c2e0da86236628": "【成功复现】XWiki Platform系统远程代码执行漏洞（CVE-2025-24893)", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487402&idx=1&sn=22205dce2081be628b82861bc0db884e": "CVE-2025-32433 PoC 漏洞利用发布 - Erlang∕OTP 中的严重 SSH 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582213&idx=2&sn=f318884bd75b11598eb5ae5992d11c75&subscene=0": "Cookie-Bite攻击PoC使用Chrome扩展窃取会话令牌", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247486087&idx=1&sn=247be08e59f1f83dd714ecf5dd76e900": "紧急！朝鲜Kimsuky组织利用BlueKeep漏洞，疯狂攻击日韩！", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582213&idx=1&sn=8836a6cf09badd147c8e20d0dd545e51&subscene=0": "新的iOS关键漏洞仅用一行代码就可禁用iphone", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522916&idx=1&sn=bd784cba5a2043dfacb33dcf271ed806&subscene=0": "谷歌2024年检测到75个已遭利用0day，44%针对企业安全产品", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514283&idx=1&sn=681c71445b5cfa5f0ab2fde668d4fef8&subscene=0": "2024年至少75个零日漏洞遭滥用，网络与安全产品占比近三成", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492100&idx=1&sn=18b45884d06bcca22ae4c74964f66c3d": "一次从注册功能隐藏到发现的sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489271&idx=1&sn=8d47ee4c8bb63b8265049ea0dcd8ce78&subscene=0": "【漏洞通告】微软Telnet Server(MS-TNAP)身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498562&idx=2&sn=627b2b4f0bf40d30aa0679f5febc511c": "vLLM 的 Mooncake 存在严重 RCE 漏洞（10)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522916&idx=2&sn=1292db15893e34108514b0dc4437e9f7&subscene=0": "苹果 “AirBorne” 漏洞可导致零点击 AirPlay RCE 攻击", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651136563&idx=2&sn=a0571e3898f312e173180f22ec47d2fe&subscene=0": "奇安信发布2024年年报，实现营收43.49亿元，同比下降32.49% ；苹果AirPlay协议零点击远程代码执行风险曝光|牛览", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069369&idx=3&sn=ad648277b98ceb64dfd2d2ca0b6a1fca&subscene=0": "【安全圈】CISA 就 Commvault Web 服务器漏洞发布警告，称该漏洞可能被利用", "https://mp.weixin.qq.com/s?__biz=Mzk0NDcyMjU2OQ==&mid=2247484713&idx=1&sn=c4477dd9b0ca46b1ae12b8c2c19dd399": "面临困境的漏洞管理生态系统", "https://mp.weixin.qq.com/s?__biz=MzU0MDc5ODM0Mg==&mid=2247485090&idx=1&sn=9c09928204556d838f61e484cd2758c1": "从IBM《2025年X-Force威胁情报指数报告》看安全文化的必要性", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485752&idx=1&sn=d991fdc2d13d3fc422d3148704ff225a": "【情报】CVE出现罕见的10.0评分漏洞，SAP NetWeaver存在RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489679&idx=1&sn=550fcfaa03734416bba06a439cf8a9fc": "CraftCMS 存在前台命令执行漏洞 (CVE-2025-32432)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069369&idx=2&sn=f7f84aa2b4e350b27918d216e6977bc6&subscene=0": "【安全圈】Apache Tomcat 漏洞可导致攻击者绕过规则并触发 DoS 条件", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529482&idx=2&sn=662fdb70e9617d5c291c3f9e1734d2f4": "AirPlay 协议中易受蠕虫攻击的零点击远程代码执行 (RCE) 漏洞使 Apple 和 IoT 设备面临风险", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069387&idx=1&sn=15d70e792b5f5150cebe5632890b1182": "【安全圈】苹果隔空播放(AirPlay)协议存在可蠕虫的远程代码执行漏洞 可批量感染大量设备", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610476&idx=2&sn=8ae8a8c200c3ebe2674ec8fff081acc7": "漏洞管理中的四大常见误区及改进方案", "https://mp.weixin.qq.com/s?__biz=Mzg4MzkwNzI1OQ==&mid=2247486407&idx=1&sn=2f1dd6ddef7341493176d84bd03176e3": "CraftCMS 存在前台命令执行漏洞 (CVE-2025-32432)", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516546&idx=1&sn=8be33a9d5654ec195a0db563ba03a514": "Clash Verge rev 本地提权∕远程命令执行漏洞 POC（5月1日更新）", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520278&idx=1&sn=53bc198f82af993deb51f1c332194fff": "一文详述XSS漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069387&idx=1&sn=15d70e792b5f5150cebe5632890b1182&subscene=0": "【安全圈】苹果隔空播放(AirPlay)协议存在可蠕虫的远程代码执行漏洞 可批量感染大量设备", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064127&idx=1&sn=a38dd5d1388e4f58b34e5f8421e75d80": "信息安全漏洞周报【第020期】", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485948&idx=2&sn=505ec1bf529e57c2ff1977b76ae75eb9": "CVE-2025-32432｜Craft CMS反序列化代码执行漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320016&idx=3&sn=8d7946558d40a025b6966fa85983ed39": "网络入侵新态势：凭证窃取与边界漏洞利用激增，钓鱼攻击持续衰退", "https://mp.weixin.qq.com/s?__biz=Mzg2OTU3MzI1OQ==&mid=2247486037&idx=1&sn=09e23379ab2c33e3bdbcfb446add2b30": "从代理到后门：Mihomo Party漏洞直通SYSTEM权限，你的设备已经在裸奔。", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485948&idx=1&sn=48bbbbbc068ec1576230298b3316d386": "CVE-2025-31324｜SAP Netweaver代码执行漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247496608&idx=2&sn=88c4a395322118b2aa02ff05b4e6dc71": "微软Telnet服务器曝0点击NTLM认证绕过漏洞，PoC已发暂无补丁", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487810&idx=1&sn=4c895f5ba78e7deb992661ae219a043f": "突发！国家级黑客利用零日漏洞入侵Commvault Azure环境，数据安全再响警报", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320016&idx=2&sn=3bff5977c7a5db49f22446980f1fabaa": "AirBorne漏洞可导致苹果设备被完全劫持", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247496608&idx=3&sn=b3b409e4e057276508705ab28d9ffcdc": "2024年至少75个零日漏洞遭滥用，网络与安全产品占比近三成", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247549683&idx=1&sn=0483a4615004367b1833d6fbae86eb29": "记一次网上阅卷系统漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247484841&idx=1&sn=38c85e5766f3b888aee0dad6c22dd4f5": "用友U8Cloud getReportIdsByTaskId方法-多处SQL注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610481&idx=2&sn=895f476e59c57fee160996e6a3fe3058": "网络入侵新态势：凭证窃取与边界漏洞利用激增，钓鱼攻击持续衰退", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499578&idx=3&sn=79631c9b9920c6e260a7322ef6b0c559": ".NET 四种方法上传 web.config 绕过限制实现RCE", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247506192&idx=1&sn=4fdac5ff836a15b2cb3cdb9386d39196": "若依Vue漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499578&idx=3&sn=79631c9b9920c6e260a7322ef6b0c559&subscene=0": ".NET 四种方法上传 web.config 绕过限制实现RCE", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247518825&idx=1&sn=9567d6018102baa464dfea89e4abaa0e": "BurpSuite插件 | 告别手动测试，快速挖掘漏洞！", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487404&idx=1&sn=9a13d535474e6a0c754a8928f4840021": "CVE-2025-33028：WinZip 漏洞通过 MotW 绕过导致用户遭受静默代码执行", "https://mp.weixin.qq.com/s?__biz=MzIyOTAxOTYwMw==&mid=2650237152&idx=1&sn=b10e2842659aaa2534416d1b9464e8b8": "聊聊对安全漏洞的一些关键认知", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYxMjk0Mw==&mid=2247490427&idx=1&sn=9d6943da82f1ddcf2e7cc04d8592e841": "五一福利 | 抽CNVD高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529516&idx=2&sn=303f93eb90c85f6e8d03e927017191ef": "入侵苹果——SQL注入远程代码执行", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU1MjgwNA==&mid=2247487347&idx=1&sn=956ce92cd588cf5c8bf8cb9e6c14d9b5": "『Java代码审计零基础到高阶实战班』正式开班啦！手把手带你从零基础学习到反序列化，内存马以及框架漏洞等实战知识！！！", "https://mp.weixin.qq.com/s?__biz=MzkyNjczNzgzMA==&mid=2247484512&idx=1&sn=23682b51104b29e8288ad6f5df352494": "漏洞挖掘—隐藏资产挖掘SQL注入", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529516&idx=1&sn=eac81d1a8e4ccc214e79d33fac4035f4": "Spring Security CVE-2025-22234 引入用户名枚举向量", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320017&idx=1&sn=4080bb56066bacc31101d91f343dda07": "未修复的Windows快捷方式漏洞可导致远程代码执行，PoC已公布", "https://mp.weixin.qq.com/s?__biz=Mzg3MzkwNTE3MQ==&mid=2247484160&idx=1&sn=a1ff618973c79f180e7821d5de0f274f": "[靶场复现]CyberStrikeLab-Gear", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247554544&idx=2&sn=9056af459358f5328168849972f0deba": "ECU自适应模糊测试：用于增强漏洞检测的模块化测试平台方法", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635693&idx=4&sn=4db1e22c3972712a351689e95f6ec0dc": "AirBorne漏洞可导致苹果设备被完全劫持", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247624024&idx=1&sn=3cbf9efab24cdeec0644851e3c0d3c34": "最佳实践：通过有效的基于风险的漏洞管理加强汽车网络安全", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490757&idx=4&sn=c69172ed23d7eb8304847946e0755fe3": "[靶场复现]CyberStrikeLab-Gear", "https://mp.weixin.qq.com/s?__biz=MzkxNjQyMjcwMw==&mid=2247486984&idx=2&sn=15a6dd1268af9c974c6c4bf10c3c9f31": "第120篇：蓝队溯源之蚁剑、sqlmap、Goby反制方法的复现与分析", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497546&idx=1&sn=5e65d132cee50ec6533c214ebb178613": "$9000 赏金的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490757&idx=3&sn=eb8432565502d9be2990635c73aa02e5": "手把手教你写好一份完整的漏洞报告", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320017&idx=2&sn=0b13fa4fde81305a2a03973d8d456fc0": "一行代码即可让iPhone“变砖”：iOS高危漏洞解析", "https://mp.weixin.qq.com/s?__biz=Mzg4NjY3OTQ3NA==&mid=2247486938&idx=1&sn=788887fb79c89148224afcf4579e3496": "手把手教你写好一份完整的漏洞报告", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487414&idx=1&sn=c942ae99eeb6beee0350a45e2c2022dd": "Next.js CVE-2025–29927 hackinghub", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492768&idx=1&sn=d47f1088aa4c48d4445462cab9f0de2e": "西悉尼大学披露安全漏洞和泄露了 580 TB 数据", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520296&idx=1&sn=3ba29d58a66d78529f704be3c6d5a5ef": "SimpleHelp复现", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900492&idx=1&sn=6c2281952da1439b110f84c51a848774": "SAP NetWeaver RCE 漏洞 (CVE-2025-31324)：深度剖析、高级威胁与全方位防御策略", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497546&idx=1&sn=5e65d132cee50ec6533c214ebb178613&subscene=0": "$9000 赏金的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247503712&idx=1&sn=3aedd26d153b0fa835c0002d815b5a8e": "数字青春，榜样力量！360漏洞云五四特别直播回顾！", "https://mp.weixin.qq.com/s?__biz=MzIyOTAxOTYwMw==&mid=2650237152&idx=1&sn=b10e2842659aaa2534416d1b9464e8b8&subscene=0": "聊聊对安全漏洞的一些关键认知", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635703&idx=4&sn=3d67251e1067caab5ccecc4d2f163671": "一行代码即可让iPhone“变砖”：iOS高危漏洞解析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069434&idx=2&sn=d5df9c61dfde5337bda54bd34af3c2af": "【安全圈】TensorRT-LLM高危漏洞可导致攻击者远程执行代码", "https://mp.weixin.qq.com/s?__biz=MzkyNTU4OTc3MA==&mid=2247485436&idx=1&sn=28a3a050921bca199f7b8d1e0f90a17d": "7天如何从捡破烂到成功挖出一堆0day", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247496630&idx=2&sn=25f5ebd829c7e4484aeac65832518e9e": "AirBorne漏洞可导致苹果设备被完全劫持", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499771&idx=1&sn=058e197a5164b2ff43ba6e50660596f7": "分享短信轰炸漏洞小窍门", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247499007&idx=1&sn=5c9c1acc054b4a079dffc9c45a06eb2c": "CVE - 2025 - 29927 POC Next.js 存在严重漏洞，可导致黑客绕过授权", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520322&idx=1&sn=e1eb82b0c1dcaa7bdf2d0fe4925b4701": "Java代码审计之命令执行漏洞详解", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490781&idx=2&sn=83846431249d32b3551ab831c080c3d9": "SAP NetWeaver RCE 漏洞 (CVE-2025-31324)：深度剖析、高级威胁与全方位防御策略", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247497293&idx=1&sn=7970fdd3e428d9e4fd731c1d472ad18a": "小程序渗透记录 通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593264&idx=1&sn=677156abb956ed47c5886b74f930f289": "zyxel路由器CVE-2024-9200漏洞调用链分析", "https://mp.weixin.qq.com/s?__biz=Mzk3NTQwMDY1NA==&mid=2247485175&idx=1&sn=c1bd499d39af1bf38c006d5dfaabd0f1": "漏洞复现篇 | CraftCMS 任意命令执行漏洞，CVE-2025-32432", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485465&idx=2&sn=3a0a86de823f1aac1ef00fd2aa44fbc6": "从代码看任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610492&idx=3&sn=deb0e040e49e9740520182d217d029c1": "实战攻防之Nacos漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485957&idx=1&sn=aa11e3064d2545df051fd19f7f5e8bd0": "CVE-2025-21756｜Linux提权漏洞（PoC）", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487415&idx=1&sn=8d3b54fb135adc6712e9afc6d4e41aed": "CVE-2025-27095：JumpServer 中的令牌盗窃漏洞导致 Kubernetes 集群遭受未经授权的访问", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610492&idx=1&sn=e264678369fdc88ca86279ef8a2c86ae": "天津市破获一起“扫码领鸡蛋”个人信息贩卖案；|一行代码即可让iPhone“变砖”：iOS高危漏洞解析", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485957&idx=2&sn=3f11cfc79888e16fa78d309e708d0df0": "CVE-2025-24893｜XWiki Platform远程代码执行漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069434&idx=2&sn=d5df9c61dfde5337bda54bd34af3c2af&subscene=0": "【安全圈】TensorRT-LLM高危漏洞可导致攻击者远程执行代码", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593264&idx=1&sn=677156abb956ed47c5886b74f930f289&subscene=0": "zyxel路由器CVE-2024-9200漏洞调用链分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTMwNjYyMA==&mid=2247485024&idx=1&sn=2b2884c9a2c66272657ccf4322921247": "【极思】一个伪0day的抓捕实录", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247503712&idx=1&sn=3aedd26d153b0fa835c0002d815b5a8e&subscene=0": "数字青春，榜样力量！360漏洞云五四特别直播回顾！", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247491559&idx=1&sn=d08ef2ccc066b196128a1a160fa60b5c": "渗透测试实战：永恒之蓝漏洞识别、扫描与Metasploit利用全流程", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247490240&idx=1&sn=3433a7611ddf3328acdef8b5e6646664": "Ingram【网络摄像头漏洞扫描工具】", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247486428&idx=1&sn=dba2f9a759218bb795755ba60f6bff9e": "记某医院APP的一次逻辑漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487843&idx=1&sn=3f05cfb22255290bf33e9b9b4ccf40b9": "伊朗黑客持续渗透中东关键基础设施：VPN漏洞与恶意软件成长期后门", "https://mp.weixin.qq.com/s?__biz=MzkzNzI2Mzc0Ng==&mid=2247486575&idx=1&sn=d2d394773cde8edaf12cd2425a685ca8": "【极思】一个伪0day的抓捕实录", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486990&idx=1&sn=3a3329b11e5d92f5947689341d6bad9f": "通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247501714&idx=1&sn=bba783c21689e9c6fbef317b613df486": "【CTFer成长之路】反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320090&idx=1&sn=cb1b7e4d9fbfa8c98cf0c378da407981": "vLLM框架曝高危远程代码执行漏洞，威胁AI基础设施安全", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU1MjgwNA==&mid=2247487356&idx=1&sn=14b0eb20b4a633044ce2718398120e8f": "SRC漏洞挖掘天花板！千万赏金大神亲授秘籍——跟随顶尖大师，成就巅峰之路！", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069446&idx=2&sn=b093a02905ad8999ac398713a11bd267": "【安全圈】微软Telnet服务器被曝0-Click漏洞：无密码即可控制系统", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096204&idx=2&sn=36ef86fdfae7678c600231d2565e9eb6": "Apache Parquet Java 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247494224&idx=1&sn=109e61592a775b5cf5c8561d1bd316ba": "基于AWVSapi实现的漏洞扫描网站", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492770&idx=1&sn=6a6458b562a3c751fa4a82d27defd2ac": "Cisco Webex 漏洞可让黑客通过会议链接获取代码执行权限", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484981&idx=3&sn=d8be865f9f42ec55e83975f0d6d59e66": "0day：各种CMS、平台、系统和软件漏洞的EXP和POC合集", "https://mp.weixin.qq.com/s?__biz=MzkwMDMyOTA1OA==&mid=2247484474&idx=1&sn=be5f7017ffd8e72f9541a327e40cc65f": "【※】一个神一般的linux全架构全漏洞提权傻瓜程序", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484981&idx=2&sn=f5668b7d8fe3098326e01f0e4eb85390": "PenetrationTestingPOC：渗透测试相关工具合集", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490812&idx=1&sn=8520bdd56980ae4d855cc0ae66e9112e": "记某医院APP的一次逻辑漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491307&idx=1&sn=9716bbe658600defc07b7543db2a46a1": "Commvault SSRF 致代码执行漏洞 (CVE-2025-34028)", "https://mp.weixin.qq.com/s?__biz=MzkwNjY1Mzc0Nw==&mid=2247488540&idx=1&sn=2654424553a85b8901765d5e2b5d1958": "【26届实习】安恒实习生招聘，安全运营、培训、服务别错过！二进制漏洞面试题挑战！", "https://mp.weixin.qq.com/s?__biz=MzkyNjcyODI1OA==&mid=2247484620&idx=1&sn=b6b0dd7fcabe307b78ca52064c885cb1": "JAVA代审之XSS漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493040&idx=2&sn=33b9c4b2ece56597baca567f31cf0b21": "漏洞预警 | 红帆HFOffice SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247545577&idx=2&sn=6a5981d94eadfd34a0b67cd98d4c02a3": "公共场所免费 WiFi 暗藏的安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487016&idx=1&sn=1d094190ee9ad522d6f6948544481625": "记一次实战小程序漏洞测试到严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247509642&idx=1&sn=e47bb236dca5ad869d2c3144f90f109c": "新型“自带安装程序”技术突破EDR防护，勒索软件利用SentinelOne升级漏洞发动攻击", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247488043&idx=1&sn=4c6e40b4e869d6fd512bcb12106a1d80": "Vitejs漏洞复现与利用", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491316&idx=1&sn=d01849a1f4cb5884827ad85bf874a437": "CraftCMS 前台命令执行漏洞 (CVE-2025-32432)", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487016&idx=2&sn=defbecd00245fe9baacbe7fb60293a29": "通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493040&idx=1&sn=0ea53f3c58166c3341a2f83cfc499d7c": "漏洞预警 | NetMizer日志管理系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795004&idx=2&sn=6913095b74da29745a9298d018c002cd": "伊朗黑客利用 VPN 漏洞和恶意软件持续访问中东关键基础设施两年", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493040&idx=3&sn=9ac0075b9e849ad994d643c17f6525e6": "漏洞预警 | 汉王e脸通智慧园区管理平台任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485515&idx=1&sn=870130074c7b85208eaaa984c41e3cce": "多个高危漏洞挖掘实战", "https://mp.weixin.qq.com/s?__biz=MzIxNjI2NjUzNw==&mid=2247493239&idx=2&sn=72b5f2543a2f438b00bedafe9fe65711": "上周关注度较高的产品安全漏洞(20250421-20250427)", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512001&idx=1&sn=98b2fa4a434cd4697a9ca5724fb4b5ba": "AOSP OTA签名验证漏洞——如何绕过Android系统更新包的安全检查？", "https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650278232&idx=1&sn=324bcdc6416f113bd710b0ca0f971e46": "全场景漏洞扫描“小钢炮”RayScan V8重磅发布", "https://mp.weixin.qq.com/s?__biz=Mzk0ODY1NzEwMA==&mid=2247488623&idx=1&sn=4cb5f4fab0682a40ba11b384b02cd308": "API漏洞挖掘指北-APISandbox靶场通关.1", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493755&idx=6&sn=85aecb939d45af53faeac6a4d3e330fd": "DragonForce黑客组织宣称对Co-op网络攻击事件负责并窃取数据", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655277826&idx=1&sn=04f3f2b3f71b2d442a5d63ff0c3e7b09": "IBM X-Force 2025威胁情报指数报告", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635713&idx=4&sn=b672bb86a0a8808ab3b047a6b5685a80": "未修复的Windows快捷方式漏洞可导致远程代码执行，PoC已公布", "https://mp.weixin.qq.com/s?__biz=MzkyNzg4NTU0NQ==&mid=2247485482&idx=1&sn=eab009bdddc94441491b0654c51bc264": "域渗透入门-令牌窃取（含复现步骤）", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247485017&idx=1&sn=3fc4ef2fc3f3dcccffdcd5b868fdc4d6": "FastJSON 安全审计简洁实用指南：黑盒免测也能揪出漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529535&idx=2&sn=e9ab35af50364b690d8f888988ca5908": "通过@fastify∕view raw 渲染实现远程代码执行", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487424&idx=1&sn=9f2932094a9e1f69c27ea4d0498353d7": "9万个站点面临风险：Jupiter X Core RCE 漏洞（CVE-2025-0366）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069446&idx=2&sn=b093a02905ad8999ac398713a11bd267&subscene=0": "【安全圈】微软Telnet服务器被曝0-Click漏洞：无密码即可控制系统", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490827&idx=4&sn=42e9dc02c4b652d3a4fde7daa3bae244": "自动化漏洞检测方案-使用AI调用BurpSuite", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247489099&idx=1&sn=50e542e6718a6fdc52586b8328e81c94": "漏洞预警|畅捷CRM存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037674&idx=1&sn=3c2070eabf4535bd48c42976876830a5": "Linux内核高频攻击面与漏洞类型统计研究", "https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247530393&idx=1&sn=f3316b2b06f0372fb279fc9d1e5aad9b": "SSH服务已关，为何还被扫描出漏洞？", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491326&idx=1&sn=1a53b44366e8e8d78ae9fd475c3d7e62": "万户 ezOFFICE selectAmountField.jsp SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582234&idx=1&sn=93a0e5ec10f5fee802cea3b4a1279e89": "苹果“AirBorne”漏洞可能导致零点击 AirPlay RCE 攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5NDU3NDA3OQ==&mid=2247491189&idx=1&sn=8ab999ea264a6356d7f8850f5cb51cf2": "自动化漏洞检测方案-使用AI调用BurpSuite", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491335&idx=1&sn=41fb84356629ac2796bea7209f48d305": "龙腾码支付 curl 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069467&idx=4&sn=82381e377828001cba5f1b8b0cd0bdf1": "【安全圈】CVE-2025-21756：Linux 内核漏洞如何导致完全 root 权限利用，PoC 发布", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491344&idx=1&sn=0ed048d4c639ed8a15eb5222800fd30c": "用友NC ECFileManageServlet 反序列化RCE", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYxMjk0Mw==&mid=2247490463&idx=1&sn=aa144f78fd856645a2643cfa6811abfb": "【代码审计】某JAVA酒店管理系统多个漏洞（附源码）", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484996&idx=1&sn=a7399eb56405b375b77e4fa608da1891": "data-cve-poc：此仓库收集了在GitHub上发现的所有CVE漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506314&idx=1&sn=5a420046bf7d15da0d18e5b26275ec01": "每周网安资讯 （4.28-5.6）|DragonForce勒索团伙近期针对英国零售业发动大规模攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593294&idx=2&sn=902d175508a60f0517069a960b940b64": "微软 Telnet 服务器惊现 0Click 重大漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484996&idx=3&sn=6054fbaa4233f094dc34c3aacda32db1": "CVE-2025-21756：linux6.6.75内核自动提权", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593294&idx=3&sn=33defc4d7ed7b60cd6c6a3c15abab69f": "25年夏季班招生啦 | 系统0day安全-IOT设备漏洞挖掘（第6期）", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484996&idx=2&sn=e8a908d1b9a41a512a57643afd827d9f": "多个公共漏洞知识库集成汇总", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247496385&idx=1&sn=136a4278dd358937e1439af867ed8e16": "【论文速读】| 通过整体神经符号方法实现自动静态漏洞检测", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247949&idx=1&sn=64818f92eb72135007f30fc07f1dd794": "关于对网络安全等级保护有关工作事项进一步说明的函原文 | 2024年至少75个零日漏洞遭滥用，网络与安全产品占比近三成", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247626698&idx=2&sn=ce3504318ade61d17659729c035307ec": "Chrome浏览器惊现高危漏洞！天擎漏洞攻击防护第一时间提供安全保障", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503216&idx=1&sn=aaf7ab33cb743966c0a67ab042249c65": "【成功复现】Next.js中间件认证绕过漏洞(CVE-2025-29927)", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485773&idx=1&sn=e57e9c5f49b3dd80fbb694ec5e14250b": "金和JC6协同管理平台 oaplusrangedownloadfile 任意文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503352&idx=1&sn=283ef81dee566006f482ac1dc2eaec42": "安全热点周报：邮件远程代码执行漏洞遭利用，用于攻击日本机构", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485528&idx=1&sn=be29d63f30cca17dc28989aedb0ef043": "支付漏洞实战", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096211&idx=2&sn=439ab06d63daa827f1cb7e56be548b51": "Windows 部署服务中发现新漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490830&idx=1&sn=77539c110a925cecffdceeaaf4bccf96": "基于 LNK 快捷方式获取Windows NTLM的 漏洞（无需运行，已复现！）", "https://mp.weixin.qq.com/s?__biz=Mzk0MzY3MDE5Mg==&mid=2247484222&idx=1&sn=513666d7126d02a4b8bdeb0e966ddf3c": "基于 LNK 快捷方式获取Windows NTLM的 漏洞（无需运行，已复现！）", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529549&idx=1&sn=f36a6eef31d4ae6c387ae63ffaf720b6": "利用空字节写入攻击Synology DiskStation在 DS1823xs+ NAS 上以 root 身份实现代码执行", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320142&idx=4&sn=ed93c0ee495ef976ddc919bd65eef508": "可蠕虫化AirPlay漏洞：公共WiFi环境下可零点击远程控制苹果设备", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488445&idx=1&sn=e9e238c8521aec39f247c6cfbfaf041f": "Craft CMS generate-transform接口存在远程命令执行漏洞CVE-2025-32432 附POC", "https://mp.weixin.qq.com/s?__biz=MzkzNTA0NzgyMA==&mid=2247484263&idx=1&sn=0a6168400765119305f334a310f02c78": "CVE-2017-9769 RZPNK.sys漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490382&idx=1&sn=d16811990ed28de75af79d72d819dae7": "【AI风险通告】vLLM存在远程代码执行漏洞（CVE-2025-32444）", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487854&idx=1&sn=8cab3e5521e4d13010f4321675d51585": "立即更新！Google修复已被攻击者利用的Android高危漏洞（CVE-2025-27363）", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795021&idx=3&sn=879212b268b99fe37554af345c9582c3": "三星MagicINFO漏洞在PoC发布几天后被利用", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493052&idx=1&sn=4c8b076cc612c8c72d2dc29569bfaef6": "漏洞预警 | Unibox路由器命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247506194&idx=1&sn=9a294a51b942a7e7059b5275e64e3700": "某开源cms 0day挖掘", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493052&idx=3&sn=1a3de93e9c0b4807f82189aeb34f9f45": "漏洞预警 | SmartBI任意用户删除漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491238&idx=1&sn=172270b5a7a5a9b0072cdfa4fa8fb57a": "最新Nessus2025.5.7版本主机漏洞扫描∕探测工具Windows∕Linux下载", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247489896&idx=1&sn=5054d99b8fb8531026638de176386ed9": "漏洞挖掘 | 简单的弱口令到垂直越权思路分享", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261002&idx=1&sn=0fa057549bf78b2354de47ae7cd46b59": "价值2500 美元的漏洞：通过供应链攻击实现RCE", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487208&idx=2&sn=5030cae874430a497bb90327e0d61c7a": "通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MzkzMDQ0NzQwNA==&mid=2247486558&idx=1&sn=0feca183969cee706e0617dcb355632c": "漏洞扫描结果差异背后的评分标准揭秘：国内外主流体系对比", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593294&idx=2&sn=902d175508a60f0517069a960b940b64&subscene=0": "微软 Telnet 服务器惊现 0Click 重大漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503359&idx=1&sn=3976329cdddd018ab4307524061b68c0": "Elastic Kibana 原型污染致任意代码执行漏洞(CVE-2025-25014)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247489175&idx=1&sn=91bc630d46098fc4c831a2176c8f5b49": "审计分析 | 某次.NET源码的前台漏洞审计流程", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503391&idx=1&sn=f8b5ece2bc2ee173a9f4c33b8b2e6ce6": "雷神众测漏洞周报2025.4.28-2025.5.5", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900506&idx=1&sn=b1371143cc39f7a07b516fcb5f941faa": "AirPlay 曝“AirBorne”蠕虫级 0-Click RCE 漏洞！无需交互即可入侵 iPhone∕Mac", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610510&idx=4&sn=9d3f3190409ef7ccce68548f15cfd1cb": "基于AWVSapi实现的漏洞扫描网站", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493763&idx=1&sn=f746ccce6d78fef871390aea0e278eb6": "谷歌修复了已被积极利用的Android漏洞CVE-2025-27363", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593294&idx=3&sn=33defc4d7ed7b60cd6c6a3c15abab69f&subscene=0": "25年夏季班招生啦 | 系统0day安全-IOT设备漏洞挖掘（第6期）", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512001&idx=1&sn=98b2fa4a434cd4697a9ca5724fb4b5ba&subscene=0": "AOSP OTA签名验证漏洞——如何绕过Android系统更新包的安全检查？", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247484947&idx=1&sn=35b767bcc73cac5983a53cd1a46af8dd": "若依(RuoYi)框架漏洞战争手册", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493052&idx=2&sn=4905413e0178b6bb2f86a921bf74de38": "漏洞预警 | 用友NC SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795021&idx=1&sn=cb576d2f07bbd6a4dfb8fd8fffc03eb3": "微软 0-Click Telnet 漏洞可导致无需用户操作即可窃取凭证", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247549783&idx=1&sn=f28d088202fd236d66bb8917bac6df62": "出洞如此简单！一次轻松的小程序漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069467&idx=4&sn=82381e377828001cba5f1b8b0cd0bdf1&subscene=0": "【安全圈】CVE-2025-21756：Linux 内核漏洞如何导致完全 root 权限利用，PoC 发布", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582234&idx=1&sn=93a0e5ec10f5fee802cea3b4a1279e89&subscene=0": "苹果“AirBorne”漏洞可能导致零点击 AirPlay RCE 攻击", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503352&idx=1&sn=283ef81dee566006f482ac1dc2eaec42&subscene=0": "安全热点周报：邮件远程代码执行漏洞遭利用，用于攻击日本机构", "https://mp.weixin.qq.com/s?__biz=MzIzMjg0MjM5OQ==&mid=2247488046&idx=1&sn=4e3163b45b07288c088e3952bdd201ec": "被忽视的暗面：客户端应用漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491366&idx=1&sn=ed90802522084f51539954e091d9b130": "用友NC ncmsgservlet 反序列化RCE", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498692&idx=2&sn=0baa28b11a133d27696fb48799898d9a": "Apache Parquet Java 漏洞 CVE-2025-46762 使系统暴露于远程代码执行攻击", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490851&idx=1&sn=ae092989be7c5a24727ce2506a1d2cf8": "出洞如此简单！一次轻松的小程序漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069467&idx=3&sn=24714661691469cf4a95022a439d1f5f&subscene=0": "【安全圈】iOS 出现新严重漏洞，仅需一行代码即可导致 iPhone 崩溃", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491358&idx=1&sn=25d5069956ba79f8cdaf18aa233bfebd": "用友NC jiuqisingleservlet 反序列化RCE", "https://mp.weixin.qq.com/s?__biz=MzkxMDc0MTc5Mw==&mid=2247483817&idx=1&sn=35e0f3a07599d753c57e63a9773f7363": "紧急预警！微软Telnet惊现\"零点击\"核弹级漏洞，旧系统用户速查！", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498692&idx=3&sn=69326d8c536920e7fa412720fdb23bb2": "PoC | 三星 MagicINFO 9 服务器中的漏洞 (CVE-2024-7399) 被利用", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247616061&idx=1&sn=ba07725e0de0e77761e54fe7fef1fb6b": "Apple及物联网设备面临风险 | 空中传播：AirPlay 协议中的零点击蠕虫式远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490851&idx=3&sn=b2361c95695a8d9de2a17e76a812fc28": "雷神众测漏洞周报2025.4.28-2025.5.5", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484821&idx=1&sn=e819acc8cde570ffdb0afe3ecb1f115d": "安钥®「漏洞防治标准作业程序（SOP）」征文启示 [2025年第18期，总第36期]", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247626707&idx=2&sn=014812173bfbd41a4f5993a72639e999": "Chrome浏览器高危漏洞已被黑客利用，奇安信可信浏览器为企业撑起“安全伞”", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501043&idx=2&sn=f13209a4ac885ea075fdbfedc8ce007a": "【漏洞通告】Kibana 原型污染导致任意代码执行漏洞 (CVE-2025-25014)", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484051&idx=1&sn=bd6349f85a85e09bf31c2c1ba728bee7": "【漏洞预警】Elastic Kibana 原型污染致任意代码执行漏洞(CVE-2025-25014)", "https://mp.weixin.qq.com/s?__biz=MzkzNTYwMTk4Mw==&mid=2247489135&idx=1&sn=1b47ec95f6a9cfeb72702cc7e0e36c85": "若依(RuoYi)框架漏洞战争手册", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320263&idx=4&sn=4eaf9a69ad3ada30bd7aaca67c679eba": "Kibana原型污染漏洞可导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522938&idx=1&sn=d6e3777945383ca1a0f8df487903c8e5": "严重的Langflow RCE 漏洞被用于攻击AI app 服务器", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522938&idx=2&sn=d6e089276d9d14177da8b1d1e1d32736": "谷歌修复安卓遭活跃利用的 FreeType 0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069486&idx=3&sn=4f5c262b7363fc3d020faaae04c66c05": "【安全圈】未经身份验证的 DoS 漏洞导致 Windows 部署服务崩溃，目前尚无补丁", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486684&idx=1&sn=c6d841b946758cf27ae33baff3e84c79": "【漏洞预警】Kibana 原型污染导致执行任意代码漏洞（CVE-2025-25014）", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490387&idx=1&sn=a2bfa25172a3a206f17fa4be6e6d22e7": "【风险通告】Elastic Kibana存在原型污染致任意代码执行漏洞（CVE-2025-25014）", "https://mp.weixin.qq.com/s?__biz=Mzg3MDcxNTkyMA==&mid=2247484572&idx=2&sn=1fce16454055968fb3e2f4aceba81a32": "CVE-2025-24071：通过 RAR∕ZIP 提取和 .library-ms 文件泄露 NTLM 哈希值", "https://mp.weixin.qq.com/s?__biz=Mzg5Mjg4Mjg0MQ==&mid=2247483858&idx=1&sn=0a09908d1d547dd0fd19309035313a63": "Apache OFBiz 路径遍历漏洞（CVE-2024-36104）", "https://mp.weixin.qq.com/s?__biz=Mzk1Nzg3ODkyNg==&mid=2247484094&idx=1&sn=500d0790fdd6f1c97cae965d152f63c9": "WordPress depicter插件SQL注入漏洞（CVE-2025-2011）", "https://mp.weixin.qq.com/s?__biz=MzkyNjcyODI1OA==&mid=2247484683&idx=1&sn=d3e64c62aee2c73abd3a1e044b69d611": "Nacos Derby RCE代码审计", "https://mp.weixin.qq.com/s?__biz=Mzg4OTU4MjQ4Mg==&mid=2247488527&idx=1&sn=17cc9468f596e8a762e8c5ba38f143d6": "星图实验室协助vLLM项目修复多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MzkwNzI1OQ==&mid=2247486490&idx=1&sn=9815d6f53761ca0d636b6e2ecf4208d2": "一次某info开源系统漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497563&idx=1&sn=ceaea8297e93659498c5576678d85f50": "RCE", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486422&idx=1&sn=3811dd4823e37100c77350dcd6521da5": "一次某info开源系统漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247496394&idx=1&sn=d001c2e4d819caee3d146316286f59e5": "【论文速读】| 漏洞放大：针对基于LLM的多智能体辩论的结构化越狱攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519289&idx=1&sn=1699b806a26022b3a7f1bd3876f20717": "实战攻防之Nacos漏洞一文通", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247488057&idx=1&sn=3f3aeb579ab406fe8f47558d666d502b": "znlinux linux全架构全漏洞提权程序", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593301&idx=1&sn=28d71b01d0207906a35a3882f88828de": "使用区间分析识别智能合约中的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247484949&idx=1&sn=c37eaf049f706e55ef603f83649e7e1b": "Dify 组合漏洞获取LLM KEY", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516589&idx=1&sn=82e60d5e426e05d401c4e79eec81d652": "漏洞扫描工具 -- ThinkPHPKiller（5月6日更新）", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247485311&idx=1&sn=6cf446fe3a9deb2ffcb471aaae73cecb": "CVE-2025-2905（CVSS 9.1）：WSO2 API 管理器中发现严重 XXE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529605&idx=1&sn=6fa3721d92926efa358777464843d15f": "SysAid 本地预授权 RCE 链（CVE-2025-2775 及其相关漏洞）- watchTowr 实验室", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490864&idx=1&sn=0cb165bed1319669958344fa0fdcd7e8": "【漏洞预警】Kibana 原型污染导致执行任意代码漏洞（CVE-2025-25014）", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490864&idx=2&sn=69f3bc42c70c19053f7e3ff730849186": "【论文速读】| 漏洞放大：针对基于LLM的多智能体辩论的结构化越狱攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484444&idx=1&sn=85b9fad1ca755cc210ad963d5e54588f": "超越漏洞修复的安全观", "https://mp.weixin.qq.com/s?__biz=Mzg2MzkwNDU1Mw==&mid=2247485676&idx=1&sn=9f3355d8d47eb5ad5b9ef48c1e7d5659": "OSS漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247490243&idx=1&sn=93258dfb0f3a806e3099ede6fbbd6e43": "Milkyway【具备效的机器探活，端口探活，协议识别，指纹识别，漏洞扫描等功能的全方位扫描工具】", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487228&idx=2&sn=b9686feeabeb4a384bec87e310213972": "通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493056&idx=2&sn=1cd36807eb2525ca7a869ed2146996c1": "漏洞预警 | 锐捷EWEB远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487228&idx=1&sn=4ea3e89bd548586c3a916e5ac42e0404": "支付类漏洞挖掘技巧总结", "https://mp.weixin.qq.com/s?__biz=MzkxMTMyOTg4NQ==&mid=2247484530&idx=1&sn=2d6ab693e8237d9ae98438818ba781f9": "phpIPAM跨站脚本漏洞及解决方法（CNVD-2025-06929、CVE-2024-55093）", "https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247492052&idx=1&sn=e219ac550df60a2a73d39aa6f6b987b5": "《跨机房漏洞扫描挑战、设备使用人管理优化及审计账号权限分配策略解析》｜总第288周", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497440&idx=1&sn=31f4a4d8d75b507676f36e255eab63c3": "【漏洞通告】Kibana原型污染导致任意代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkxOTIzNDgwMQ==&mid=2247484643&idx=1&sn=106862e046fbe8b89cde1ad93413bce3": "【工具推荐】利用Burp Suite 插件进行文件上传Fuzz", "https://mp.weixin.qq.com/s?__biz=MzU0NjU5NDE4Mg==&mid=2247485602&idx=1&sn=f004f26af0ff476bc38a0ad5d35d5976": "EMQX命令执行后渗透", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487859&idx=1&sn=21830632f377e379519f4f69bf29a29b": "紧急！SysAid On-Premise曝高危漏洞，未授权攻击可接管服务器！速修复！", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795032&idx=2&sn=e9e09cc70275edb332e37d3341f2657f": "赛门铁克称，多个勒索软件组织利用了最近修补的 Windows 0day（CVE-2025-29824）", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247506211&idx=1&sn=26660b6abe5fb1714974c19b983a63f0": "AI自动化代码审计RCE", "https://mp.weixin.qq.com/s?__biz=MzkwNjczOTQwOA==&mid=2247494567&idx=1&sn=052cbf0cb30bdebf35ee81f84c1b946a": "工具推荐 | MSSQL多功能集合命令执行利用工具", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497563&idx=1&sn=ceaea8297e93659498c5576678d85f50&subscene=0": "RCE", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493056&idx=3&sn=02acc8d19b6d3162024d3a9f48bccc1c": "漏洞预警 | 通达OA远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484444&idx=1&sn=85b9fad1ca755cc210ad963d5e54588f&subscene=0": "超越漏洞修复的安全观", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522938&idx=2&sn=d6e089276d9d14177da8b1d1e1d32736&subscene=0": "谷歌修复安卓遭活跃利用的 FreeType 0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493056&idx=1&sn=e403ede2a981aa23d95670c6be53a975": "漏洞预警 | 汉王e脸通智慧园区管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493781&idx=2&sn=3ff46263da891e1311e88fecaa375742": "Canary Exploit工具可检测受Apache Parquet漏洞影响的服务器", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493781&idx=4&sn=40dd947a49deeeac2d77c26174e7aa14": "Play勒索软件团伙利用零日漏洞部署恶意程序", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490053&idx=1&sn=4f6e0b57c4d90d911ca3d4d451fd6e53": "【高危漏洞预警】Elastic Kibana需授权代码注入漏洞 (CVE-2025-25014)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490053&idx=2&sn=e1fa7a6beecbecd929a120e00f53677d": "【高危漏洞预警】Microsoft Azure AI Bot Service权限提升漏洞CVE-2025-30392", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503359&idx=1&sn=3976329cdddd018ab4307524061b68c0&subscene=0": "Elastic Kibana 原型污染致任意代码执行漏洞(CVE-2025-25014)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522938&idx=1&sn=d6e3777945383ca1a0f8df487903c8e5&subscene=0": "严重的Langflow RCE 漏洞被用于攻击AI app 服务器", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593301&idx=1&sn=28d71b01d0207906a35a3882f88828de&subscene=0": "使用区间分析识别智能合约中的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486425&idx=1&sn=f0097b5f133b5a4c9bf1ec100e8d6e55": "某CRM系统前台RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDI5NjEzMQ==&mid=2247484538&idx=1&sn=59f432e51500e860d74ce85acaee3dd1": "命令执行不出网、无回显、连基础工具base64∕xxd都没有？极限生存下的命令执行，怎么打？", "https://mp.weixin.qq.com/s?__biz=MzU0MDI1MjUxMg==&mid=2247533541&idx=1&sn=715a139cafbc35e828ddb3d7abf30c5e": "斗象科技连续4年获国家信息安全漏洞库CNNVD“一级技术支撑单位”", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487864&idx=1&sn=4238407abb15d947187e4e1829aefd44": "play勒索软件利用Windows零日漏洞入侵美国企业，系统权限遭全面窃取！", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247499063&idx=1&sn=3396c01db284160ff26017eae2990463": "通过代理实现代码执行 - DLL劫持的另一种方式", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491374&idx=1&sn=96d62a86f1515d0b75406b84f40953c2": "用友NC files 反序列化RCE", "https://mp.weixin.qq.com/s?__biz=MzI5MDcyODIzNg==&mid=2247485049&idx=1&sn=44f2debeea4d71c3132e5f8b67b8ade8": "SRC漏洞案例之祝你生日快乐", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493781&idx=3&sn=00dc9443028818fad58e65c958c42e65": "三星MagicINFO漏洞在概念验证利用代码公开数日后遭攻击", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503391&idx=1&sn=f8b5ece2bc2ee173a9f4c33b8b2e6ce6&subscene=0": "雷神众测漏洞周报2025.4.28-2025.5.5", "https://mp.weixin.qq.com/s?__biz=MzkzMDQ0NzQwNA==&mid=2247486564&idx=1&sn=69697bc2be8941f7488755d9c6ad8bce": "警惕|Play Ransomware 利用 Windows CVE-2025-29824实施勒索攻击", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490893&idx=1&sn=230244deecf9efb66a5cbf8858f10871": "某CRM系统前台RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493781&idx=1&sn=9f712f2d6d7e8441f4b26a89e1b38c9c": "专家警告称，针对SAP NetWeaver漏洞CVE-2025-31324的第二波攻击正在袭来", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462844&idx=1&sn=16f905bb023c4905a56d59c04da30a11": "信息安全漏洞月报（2025年4月）", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492658&idx=1&sn=442ddacdf8a9b8cfc22f3177cc5254ba": "漏洞复现 || XWiki Platform系统远程代码执行", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484826&idx=1&sn=0ab9bc7eafadb32a2dce9850874b4ffa": "安全漏洞防治工作的挑战与解决方案：从CVE停更到可信计算环境构建", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247492522&idx=1&sn=55381a89501a176cdc954fc4de9c67c9": "无需认证的 DoS 漏洞可致 Windows 部署服务崩溃", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462844&idx=2&sn=e8c11038831948335aa6faced3c458a7": "信息安全漏洞周报（2025年第18期）", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489277&idx=1&sn=6c55779812dc46ead6693965106dd9ed": "【漏洞通告】Elastic Kibana原型污染致任意代码执行漏洞（CVE-2025-25014）", "https://mp.weixin.qq.com/s?__biz=MzU3MDg2NDI4OA==&mid=2247491095&idx=1&sn=8c0720271ea656fc753561a44d768125": "某OA代码审计之挖掘0day，未公开poc", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489715&idx=1&sn=edaedaf50d5c0de6782c8eac9eae3970": "WordPress TargetSMS 插件存在前台代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650622394&idx=2&sn=2bcbe3b2a1581342454f2868b1634978": "CVSS10分！Craft CMS 远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247554773&idx=2&sn=286e5211128b34b989a4a5a82838e9c8": "【免费领】大佬挖洞秘笈：全网最详尽的漏洞挖掘实战技巧大全", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069510&idx=4&sn=13e42b32cf0c000f6d63304e4a836f24": "【安全圈】SonicWall SMA 100系列发现多个漏洞紧急安全更新", "https://mp.weixin.qq.com/s?__biz=MzAxNTQwMjAzOA==&mid=2452514890&idx=1&sn=7e4fb2a49c56b2c6fc17c84b05371b59": "【漏洞赏金计划】—— 提交漏洞，赢取高额奖金！", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519291&idx=1&sn=d35441ef0017e23c68e09e72a45f1183": "浅谈edusrc，逻辑漏洞，越权，接管到getshell，如何快速找准漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491302&idx=1&sn=58eaf1f31c356485e2e041aff9b6a138": "Rscan自动化扫描利器，指纹识别更精准，漏洞扫描更全面|漏洞探测", "https://mp.weixin.qq.com/s?__biz=Mzg2NDcwNjkzNw==&mid=2247487497&idx=1&sn=9ba99fad3e77a68a6ae4c3c91348db3d": "某OA代码审计之挖掘0day，未公开poc", "https://mp.weixin.qq.com/s?__biz=MzA5NzQ0Mjc5NA==&mid=2649768949&idx=1&sn=1ecde373bf55882e9275155658f9e50d": "原力金智SRC上线漏洞盒子 | 「企业SRC」新住客", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497567&idx=1&sn=0abc159207103dccd3e73039c850bf2a": "一次十分详细的漏洞挖掘记录,新思路+多个高危", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520404&idx=1&sn=e8a6e80ecf53ea04e94d8c714c68928e": "AI的攻与防：基于大模型漏洞基因库的威胁狩猎与企业级纵深防御", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499624&idx=1&sn=7c645b1f4a16642c32bafc3802d9582a": "从 .NET 代码审计看 ViewState 反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493070&idx=2&sn=c9f99407ce417bc7b5ebd84f2d42edaa": "漏洞预警 | 用友U8CRM SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493792&idx=1&sn=a89a0fa01c39e64a57ad642a05f14904": "思科发布IOS XE无线控制器中的关键漏洞更新", "https://mp.weixin.qq.com/s?__biz=Mzg2MzYzNjEyMg==&mid=2247487203&idx=1&sn=714e8903bd08d274bcaaf0f09d461a65": "栈溢出从复现到挖掘-CVE-2018-18708漏洞复现详解", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247506359&idx=1&sn=397454a7b547b06a7dc384e188d18259": "某云盘系统 API 端点无限制上传漏洞解析", "https://mp.weixin.qq.com/s?__biz=MzIxOTM2MDYwNg==&mid=2247513579&idx=1&sn=7378085d9863deac22e2a37990a499d4": "实战中踩过的坑：我是如何用Ingram搞定摄像头漏洞扫描的", "https://mp.weixin.qq.com/s?__biz=Mzg2NDcwNjkzNw==&mid=2247487495&idx=1&sn=ec1e90a954685b653561732410288e2a": "栈溢出从复现到挖掘-CVE-2018-18708漏洞复现详解", "https://mp.weixin.qq.com/s?__biz=MzU3MDg2NDI4OA==&mid=2247491097&idx=1&sn=ce5a9d032e7a62b5edd058ea86bc7ff6": "栈溢出从复现到挖掘-CVE-2018-18708漏洞复现详解", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493070&idx=3&sn=7c31151901744fd0b812bb3637f38369": "漏洞预警 | Unibox路由器命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxODQzOTYxMQ==&mid=2247483896&idx=1&sn=6cb883625f1ea191a575188e8f62fe6e": "常见的信息泄露漏洞挖掘（第二部分）", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489277&idx=1&sn=6c55779812dc46ead6693965106dd9ed&subscene=0": "【漏洞通告】Elastic Kibana原型污染致任意代码执行漏洞（CVE-2025-25014）", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247549838&idx=1&sn=1589f72d6458104c54add6c222ed1b7b": "Clash Verge rev提权与命令执行分析", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610538&idx=3&sn=d70828a5aac5511a179d1b11a8ebd633": "实战攻防之Nacos漏洞一文通", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487237&idx=2&sn=5334c3b046990084903fd1c13c72d3c0": "支付类漏洞挖掘技巧总结", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490905&idx=2&sn=0ed05b80a5c90ec20ddbdbe592ce7c74": "安全漏洞防治工作的挑战与解决方案：从CVE停更到可信计算环境构建", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487237&idx=3&sn=9f2875a71a76b3c9a2709d340ccedb09": "通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247490178&idx=1&sn=d10553e8e32bd18524192fa6feba92ad": "若依(RuoYi)框架漏洞战争手册", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490921&idx=3&sn=d0684326d1fe6ee4aa19ed36bb064268": "栈溢出从复现到挖掘-CVE-2018-18708漏洞复现详解", "https://mp.weixin.qq.com/s?__biz=Mzk0NDcyMjU2OQ==&mid=2247484718&idx=1&sn=e9e372132c647334ed0b8f7b070e2648": "讲好漏洞管理故事，没有指标怎么行", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524506&idx=4&sn=19574fc4946c6ff3485b0ae05a74ae05": "IBM Cognos Analytics 漏洞允许攻击者上传恶意文件", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582281&idx=1&sn=eff71cea21807271925c234b3191e3c9": "超过1200个SAP NetWeaver服务器容易受到主动利用漏洞的攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487427&idx=1&sn=aff15883cfe6cb9c4a41045459db8e4e": "通过@fastify∕view raw 渲染实现远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524506&idx=3&sn=2e2f7135cdec284e7cd6b8d41eca7345": "Apache ActiveMQ 漏洞让攻击者触发 DoS 条件", "https://mp.weixin.qq.com/s?__biz=MzkxMTMyOTg4NQ==&mid=2247484536&idx=1&sn=65fffa821513f4963041e2a504f1d07c": "YzmCMS最新跨站脚本漏洞及解决方法（CNVD-2025-08792、CVE-2025-3397）", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538714&idx=2&sn=d5c3a134feb1803915d85600ad4b9f08": "漏洞管理“扫雷”之动态优先级技术", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490058&idx=1&sn=59824a284d0e7c2b6e5fb5765f62af59": "【高危漏洞预警】F5OS身份认证绕过漏洞(CVE-2025-46265)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497567&idx=1&sn=0abc159207103dccd3e73039c850bf2a&subscene=0": "一次十分详细的漏洞挖掘记录,新思路+多个高危", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069525&idx=4&sn=a0ceb517f0bd46bd1296a5aa917fbf4c": "【安全圈】Cisco IOS XE WLC 中的关键 CVE-2025-20188 (CVSS 10) 缺陷允许远程根部访问", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320545&idx=1&sn=ad3eabe16fc21bfd8a2813c78951fd20": "AI生成虚假漏洞报告污染漏洞赏金平台", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064140&idx=1&sn=d260768ad429a25cbf848cf56cd7d89a": "信息安全漏洞周报【第021期】", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489789&idx=1&sn=77ee0c2a61fd563529f6651f7c785edf": "从靶场到实战：某双一流高校多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593398&idx=2&sn=37e1aae01543dd7d70cdf78802000f93": "思科紧急修复致命漏洞，黑客可借此全面接管设备", "https://mp.weixin.qq.com/s?__biz=Mzk3NTIyOTA0OQ==&mid=2247484976&idx=1&sn=6f68502e14ea7cd7b9cbb0cac874a1e7": "思路清晰，我是菜B，8小时爆肝windows 32位syncbreeze缓冲区溢出漏洞复现", "https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649172839&idx=2&sn=29e9e937371118efec358a6e7dea8cec": "CFCA联合银联云计算中心发现AI助手安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk1NzE0ODUyOA==&mid=2247492196&idx=1&sn=fcfa14e51c4953a578125b94eecc539a": "【原创漏洞】AOSP跨用户资源访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247484984&idx=1&sn=997d6624942661f938be7632e0642bb1": "健康证泄露导致的越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485788&idx=1&sn=bee67e0f5b502534a62a2a4ec99877bd": "亚控科技 KingPortal 开发系统 imgPath 文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491384&idx=1&sn=867c9a3c8083cc415d9de07e67971b98": "electrolink 信息泄露漏洞 (CVE-2025-28228)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493077&idx=2&sn=fa116b649bc919a9bf2172868387fb9a": "漏洞预警 | Tenda AC9命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493077&idx=1&sn=c9e0584a42165249cc7d331513aafd17": "漏洞预警 | SeaCMS海洋影视管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651132902&idx=1&sn=bdfaec57ddc0a69a2a89a2753a0597fa": "公安部发布等保工作说明函，流行AI开发工具曝严重漏洞|一周特辑", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247490200&idx=1&sn=259f1f3bb8b6564d6c207190471fbe85": "JS漏洞挖掘｜分享使用FindSomething联动的挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493077&idx=3&sn=6a7285844a60fc2f82971fd2c6b6c225": "漏洞预警 | 锐捷EWEB任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247484990&idx=1&sn=4c6c6e9debbb9597749ac55434d1dc96": "若依(RuoYi)框架漏洞战争手册", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593398&idx=2&sn=37e1aae01543dd7d70cdf78802000f93&subscene=0": "思科紧急修复致命漏洞，黑客可借此全面接管设备", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538714&idx=2&sn=d5c3a134feb1803915d85600ad4b9f08&subscene=0": "漏洞管理“扫雷”之动态优先级技术", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497571&idx=1&sn=9ca2dfab23ac7985bbd0170175c7c154&subscene=0": "实战-漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651132902&idx=1&sn=bdfaec57ddc0a69a2a89a2753a0597fa&subscene=0": "公安部发布等保工作说明函，流行AI开发工具曝严重漏洞|一周特辑", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499624&idx=1&sn=7c645b1f4a16642c32bafc3802d9582a&subscene=0": "从 .NET 代码审计看 ViewState 反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069525&idx=4&sn=a0ceb517f0bd46bd1296a5aa917fbf4c&subscene=0": "【安全圈】Cisco IOS XE WLC 中的关键 CVE-2025-20188 (CVSS 10) 缺陷允许远程根部访问", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489726&idx=1&sn=e7e0eb205d84df56195609e87c843a5f": "国外某停车管理系统V1.13存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498775&idx=1&sn=29f2b9e85b1798dd90285f151987a509": "【PoC】威胁行为者在野利用 SAP 漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320568&idx=2&sn=4f78388dd0e6383e06bfd44e179712a5": "FreeBuf周报 | 最强防护也难防大语言模型被欺骗；AI生成虚假漏洞报告污染漏洞赏金平台", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247526287&idx=1&sn=6b71b0ff47c9db7f74c5d92b44ced3d8": "某OA代码审计之挖掘0day，未公开poc", "https://mp.weixin.qq.com/s?__biz=MzkwNDUwNDU0OA==&mid=2247483765&idx=1&sn=43c35400f383276717ac879629f7db49": "关于小红书SRC暂停漏洞测试活动的公告", "https://mp.weixin.qq.com/s?__biz=Mzg4MTgxNjQwOQ==&mid=2247484866&idx=1&sn=354d8638c29cecc786bb0cb463c2f741": "好用的漏洞复现靶机推荐", "https://mp.weixin.qq.com/s?__biz=Mzk1NzMwNTM5NQ==&mid=2247485682&idx=1&sn=5907f8b6dea30490048f9168c84cc95c": "282G福利大放送！2025黑客、网络安全资料全网最全资料大合集（从0到挖漏洞、打CTF、护网、就业）", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610697&idx=3&sn=ee9f9fefcd9cd42cfca299aa1a8d44da": "浅谈edusrc，逻辑漏洞，越权，接管到getshell，如何快速找准漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582281&idx=1&sn=eff71cea21807271925c234b3191e3c9&subscene=0": "超过1200个SAP NetWeaver服务器容易受到主动利用漏洞的攻击", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610697&idx=2&sn=71bf35dc2d544216c0138f43b22158a1": "AI生成虚假漏洞报告污染漏洞赏金平台", "https://mp.weixin.qq.com/s?__biz=MzIxOTM2MDYwNg==&mid=2247513780&idx=1&sn=8d53faf470573cd7361a1f1ea2f65d70": "电商诈骗平台漏洞挖掘实录：从供应链后台到数据泄露的破局之路", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247488287&idx=1&sn=464d2d0e5dc7738859fbed59509f0993": "CVE-2025-29774∕CVE-2025-29775: xml-crypto XML Signature Wrapping", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320568&idx=1&sn=434f968a88b181c31066694c59734bb1": "超越漏洞管理：CVE体系面临哪些挑战？", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499641&idx=3&sn=d7f3a802ba857dfd318ec850e660210b": "从 .NET 代码审计看 ViewState 反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096221&idx=1&sn=ac96a88643c60815ce741fbb234b6cee": "研究人员发现 macOS 远程代码执行缺陷漏洞 – CVE-2024-44236", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247490199&idx=1&sn=d001d438287d7b024227d4cffb4a4d4e": "分享云安全浪潮src漏洞挖掘技巧", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247499082&idx=1&sn=89c617281776f78ca93ac1853441b97c": "CVE-2025-24071：通过 RAR∕ZIP 提取和 .library-ms 文件泄露 NTLM 哈希值", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485599&idx=1&sn=3a48cab83ec961c96ff5843d9ebfe0d1": "任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247492026&idx=1&sn=a45585cfb3c85bb1d0d2101a1ff10b41": "CVSS 10 满分漏洞：CVE-2025-32432 Craft CMS RCE 及未公开利用链深度解构", "https://mp.weixin.qq.com/s?__biz=MzU4Mzc4MDQyOQ==&mid=2247484664&idx=1&sn=20614437f6665e2bcb3a7b89fa5a26e1": "Clash verge 漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503235&idx=1&sn=71f55f311c5c308014a3271e92332314": "【成功复现】DocsGPT远程代码执行漏洞 (CVE-2025-0868)", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247526293&idx=1&sn=ef18b8e203a13372a4ae6e2e64021d6b": "一张照片、一句简单提示词，就被ChatGPT人肉开盒，深度解析o3隐私漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NDQ5NTU0MA==&mid=2647690710&idx=1&sn=fc4cae87be57161eff78f17fe0bfcd8b": "0038.我如何在顶级漏洞赏金计划中找到我最喜欢的漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247549854&idx=1&sn=443df06051542ef0a63b806e2c0237ad": "挖洞日记 | 记一次不断FUZZ拿下高危越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497580&idx=1&sn=c77028340ad979d0182045d5796a3826": "命令执行不出网、无回显、连基础工具base64∕xxd都没有？极限生存下的命令执行，怎么打？", "https://mp.weixin.qq.com/s?__biz=Mzg2NTgzMDg1NA==&mid=2247484166&idx=1&sn=ea248bc37355933590a2ccaae38f7eca": "某报表漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247502141&idx=1&sn=f372a42f927527cbe6c164a6df175c6e": "【CTFer成长之路】零元购逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NDcwNjkzNw==&mid=2247487502&idx=1&sn=20724856905cdf62df94314268764232": "栈溢出从复现到挖掘-CVE-2018-16333漏洞复现详解", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486927&idx=1&sn=88fd42417284d98b5c427404832afd6f": "Edu双一流证书站 | github密码泄露导致的越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486927&idx=2&sn=8307176025613e1808289ac6b0fba9d2": "猎洞时刻漏洞挖掘SRC培训第三期塞满干货来袭！", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485789&idx=1&sn=aaf909933f3ec246329ed13d7578c3b5": "吉大正元身份认证网关 downTools 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247490216&idx=1&sn=1524e1403cce0c787e3cfa0e4ee24ff6": "src漏洞挖掘之XSS由浅入深", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493809&idx=1&sn=19f2b67e11a82faf3a824db9ddad5420": "网络安全厂商SonicWall修复SMA 100系列设备高危漏洞 攻击者可组合利用执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485602&idx=1&sn=113b5a508399efb0214e5a8dc86e2d21": "多个未授权漏洞深度利用实战", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247624248&idx=3&sn=be8ad60aa7b6c6aa5bfcdde292be12c9": "人工智能自动化模糊测试：如何自主发现汽车软件中的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NzUzNzk1Mw==&mid=2247498075&idx=1&sn=62f2e4f26c60824d2b53ff900b2481cd": "车机Android系统安全漏洞深入浅出", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493089&idx=1&sn=492f897526e45b0a0d0636778649cf6a": "漏洞预警 | FoxCMS SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529742&idx=1&sn=05006a4350851e5b33b7b94c4b210209": "华硕预装驱动软件中的一键RCE", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247511977&idx=1&sn=3de7d646fcc6d4a410d0d427fc2a83d5": "智能汽车安全-漏洞挖掘到控车攻击", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247492026&idx=1&sn=a45585cfb3c85bb1d0d2101a1ff10b41&subscene=0": "CVSS 10 满分漏洞：CVE-2025-32432 Craft CMS RCE 及未公开利用链深度解构", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247616101&idx=1&sn=60bb832f9c2aaec8fa0f28cb4f23f3e4": "赏金故事 | 挖掘Netflix Dispatch中的管理员账户接管漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610719&idx=3&sn=52c48c1babd531fb0f5c8323bc9236e3": "智能汽车安全-漏洞挖掘到控车攻击", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486428&idx=1&sn=8039e2d3e7d267a1787f63dfd9330edb": "猎洞时刻漏洞挖掘SRC培训第三期塞满干货来袭！", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497580&idx=1&sn=c77028340ad979d0182045d5796a3826&subscene=0": "命令执行不出网、无回显、连基础工具base64∕xxd都没有？极限生存下的命令执行，怎么打？", "https://mp.weixin.qq.com/s?__biz=Mzk3NTEyMzQzOA==&mid=2247485838&idx=1&sn=ae663c70dc4614970989937a04f57533": "一篇文章带小白从原理到靶场练习搞懂RCE命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247492267&idx=1&sn=c22d03fe3cbbd43b427799d5c2ec6c43": "AI自动化代码审计RCE", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493089&idx=2&sn=47f2633ec008d2ab3925fc14ec4ea6bf": "漏洞预警 | 用友U8CRM SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMTMyOTg4NQ==&mid=2247484544&idx=1&sn=e2b5fc489891d16de507cfc4810b0d43": "迅睿CMS最新SQL注入漏洞及解决方法（CNVD-2025-08495）", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506353&idx=1&sn=b111464761306e4cdef6942d7c25b2e6": "绕过公共漏洞赏金计划中的双重身份验证：6000 美元的旅程", "https://mp.weixin.qq.com/s?__biz=Mzk0MjM1MDg2Mg==&mid=2247504085&idx=1&sn=239026232f4f48370ade47ad2abc16c3": "中国信通院【首批】软件供应链漏洞管理平台能力评估开始报名！", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY2ODE1NA==&mid=2247485370&idx=1&sn=58f7ffdd233dd85a234cc68e79031668": "java代码审计之常见漏洞学习", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486722&idx=1&sn=ffcd556730cb1d6f9b0d41145d828e52": "【漏洞通告】Sourcecodester在线大学图书馆系统 SQL注入(CVE-2025-4504)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582297&idx=1&sn=5904ff9bef31b689ef0b942ff6255ef6": "DragonForce勒索团伙正有计划地扩展其他勒索软件组织", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489747&idx=1&sn=c003b000cda6831904036b5f3de74805": "【0day】Turkey Global全开源9语言交易所审计", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499641&idx=3&sn=d7f3a802ba857dfd318ec850e660210b&subscene=0": "从 .NET 代码审计看 ViewState 反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486722&idx=2&sn=1bf1055c7e8f552d6cebc52ac371f067": "【漏洞通告】D-Link DIR-605L 无线路由器缓冲器溢出(CVE-2025-4441)", "https://mp.weixin.qq.com/s?__biz=Mzg3Mzk2MzA3Nw==&mid=2247483873&idx=1&sn=01fb3cb887b2977a4e591ce31def958a": "分享一下我的漏洞挖掘经验", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524522&idx=2&sn=ca11f0d3dad8a00fffcc89d0d8a351d9": "漏洞预警：CVE-2024-26809利用nftables双重释放漏洞获取Root权限", "https://mp.weixin.qq.com/s?__biz=MzkxNjQyMjcwMw==&mid=2247487118&idx=1&sn=db8d31dd45b7f9d811c16cd6ab509875": "智能汽车安全-漏洞挖掘到控车攻击", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247520664&idx=1&sn=044f7d50080beb92c62e88acfc47a74b": "攻防实战之若依(RuoYi)框架漏洞战争手册", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491394&idx=1&sn=566d2e6354be172fb93b1dd559dd9e7a": "WordPress depicter插件 Sql注入漏洞 (CVE-2025-2011)", "https://mp.weixin.qq.com/s?__biz=MzI2NzI2OTExNA==&mid=2247518059&idx=1&sn=3bdb3d148cd8ef8323951728d871fe0a": "MiSRC 端午漏洞活动开启，等你超凡出 “粽”", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247547731&idx=1&sn=0a45937f4a2d32f62eb362020dcd4a15": "谷歌发布《2024年零日漏洞利用分析》：安全产品风险激增", "https://mp.weixin.qq.com/s?__biz=MzA3NTIyNzgwNA==&mid=2650260150&idx=1&sn=cc1d04b8599cef6f24e96a146cf79b33": "SAP NetWeaver漏洞利用进入第二波威胁活动", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495969&idx=1&sn=adbf03473c87e30cb132d3f07d091205": "CNVD漏洞周报2025年第17期", "https://mp.weixin.qq.com/s?__biz=MzU3OTAyODk4MQ==&mid=2247491295&idx=1&sn=2ce93316cb050e3d1f782d51d690f3c2": "【粽情挖洞，安全有礼】端午漏洞征集限时活动", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491404&idx=1&sn=b231b39f572b21cdd7e46610b18945db": "万户OA DocumentHistory.jsp sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503364&idx=1&sn=968cb69c0ddb2c38d3e1d4010982f52d": "安全热点周报：谷歌修复了 Android 上被积极利用的 FreeType 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490063&idx=1&sn=71ddc34040472ba7796d80bbb3c26ded": "【漏洞预警】Docker Desktop信息泄露漏洞(CVE-2025-1696)", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503405&idx=1&sn=754e4027a04e293d322951ef9459a759": "雷神众测漏洞周报2025.5.6-2025.5.11", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491413&idx=1&sn=7c487ebccfb80ebbaf53c9b38bc9cd92": "EKing-管理易 FileDownload 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODUzMjA1MQ==&mid=2247485083&idx=1&sn=cb851893d4ab208b12e467f1dfd3fd6c": "一次edu站点从前台sql注入到后台rce", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320651&idx=4&sn=ca11388befebb3d9c7b26b8d6613320c": "CVE-2024-26809利用nftables双重释放漏洞获取Root权限", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484833&idx=1&sn=d32d5cc98dc1fd66b148a04558efefb5": "安全漏洞管理的4个常见误区", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495969&idx=2&sn=09773aee69062908205a5dc12cb4e5d8": "上周关注度较高的产品安全漏洞(20250428-20250511)", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY1NTI5Mw==&mid=2247492098&idx=1&sn=ac0d7ba1223718ba00b4b15d1855f56b": "包教包会包分配项目，单月斩获漏洞赏金2.7W！", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069594&idx=2&sn=46d82e1f37361ed9ed403fbd5798d394": "【安全圈】黑客利用微软 SharePoint 版 Copilot AI 漏洞窃取密码及敏感数据", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzg3NTcxNg==&mid=2247484959&idx=1&sn=393434f787d1c695cf4d073bf971946f": "小皮面板从未授权到RCE", "https://mp.weixin.qq.com/s?__biz=MzkzNTYwMTk4Mw==&mid=2247489143&idx=1&sn=a25daaef4ea1b09e23bb13790cd43410": "PHP 静态分析漏洞挖掘：挑战、对策与研究进展综述", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320651&idx=1&sn=a9fab4722bc9ee9e63256b7a44cdc041": "包教包会包分配项目，单月斩获漏洞赏金2.7W！", "https://mp.weixin.qq.com/s?__biz=MzkzNDI5NjEzMQ==&mid=2247484552&idx=1&sn=1ee3c075f613bc32d6e16056d4853c1e": "【1day】⼤华智慧园区综合管理平台⽂件上传(CNVD2024-35419)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493104&idx=2&sn=d019beba15f5c4cfb4373427e44d1aba": "漏洞预警 | 润申企业标准化管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NjA3Mzk2NQ==&mid=2247496223&idx=1&sn=c333f310beb5f436d77f65e17750ebee": "漏洞研究(6)：XXL-JOB调度中心默认口令漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493104&idx=1&sn=f96d02a0a9d96ca7ef3f92a4308fe31a": "漏洞预警 | Kibana原型污染漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487330&idx=3&sn=9dadbeba1bf88ec5ad8599ddd24cae70": "通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MzkzNDI5NjEzMQ==&mid=2247484563&idx=1&sn=5f43362f5a4bda2e60b347f22c6f4d46": "【1day】⼤华智慧园区综合管理平台⽂件上传(CNVD2024-35311)", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487330&idx=1&sn=757d1466f645123250afe9ccd77b023c": "【Web实战】一次空白页面的“妙手回春”嘎嘎出严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487893&idx=1&sn=3350628c95693f761c25068994b7e5a6": "紧急！华硕DriverHub曝高危漏洞，请立即更新！—远程攻击者可通过HTTP请求劫持你的主板驱动管理", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493821&idx=1&sn=299f74ef185aadfca5248b900b31e27e": "研究人员发现华硕预装软件DriverHub存在\"一键式\"远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMTMyOTg4NQ==&mid=2247484549&idx=1&sn=07bd4bd7dc024f64a4458af15c61ed8e": "ECShop存在逻辑缺陷漏洞（CNVD-2025-08499）", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795069&idx=3&sn=f635741f0a1de71baccd3ad9cc1a576c": "华硕预装软件DriverHub中存在漏洞，可被利用来执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503405&idx=1&sn=754e4027a04e293d322951ef9459a759&subscene=0": "雷神众测漏洞周报2025.5.6-2025.5.11", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610735&idx=1&sn=b3aa97fa473bf7318812cad75175f53d": "中标价85万防火墙，网购仅300元？；|苹果自研 5G 基带首个漏洞被修复：可拦截流量，中国安全专家发现；", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247492263&idx=1&sn=2f28244d0617723b417f5e4557450c01": "漏洞预警 上海上X信息技术股份有限公司 堡垒机 RepeatSend 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTQ4NzE2Ng==&mid=2247495267&idx=1&sn=b3d1576e090815fc516ba4ae9ea6288f": "【文末抽奖】Springscan+：Spring未授权访问漏洞检测Chrome插件 by Lumns", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582297&idx=1&sn=5904ff9bef31b689ef0b942ff6255ef6&subscene=0": "DragonForce勒索团伙正有计划地扩展其他勒索软件组织", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247492279&idx=1&sn=3aa15192fd6959ca837f09d0747e9396": "某开源cms 0day挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491423&idx=1&sn=3e9eba64f68f802352b09c54dc4a8beb": "智邦国际ERP GetPrintTemplate.ashx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247491691&idx=1&sn=b1e831380887d4f8d2a9c1ba7e052c76": "【0day】Turkey Global全开源9语言交易所审计", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490068&idx=1&sn=e34c512c1ee126fd554c93c6301ef3f4": "【高危漏洞预警】SAP NetWeaver Visual Composer反序列化漏洞CVE-2025-42999", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524552&idx=2&sn=1b3c78c0c35609db15987d269edcab7a": "黑客利用 Output Messenger 0 Day 漏洞部署恶意负载", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247489233&idx=1&sn=7c50839d28a29f0cf1211fab734eb136": "ASUS DriverHub安全更新修复RCE漏洞，提防隐秘网络攻击", "https://mp.weixin.qq.com/s?__biz=Mzk1Nzk3MjA5Ng==&mid=2247485573&idx=1&sn=6e779f25c9be0d2740147a4ff0ac3ab5": "内存镜像分析实战：破解攻击者入侵路径，全程可复现！", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524552&idx=1&sn=0aea00fc8f9dd7c4665f46226815eb6f": "VMware Tools 漏洞允许攻击者篡改文件以触发恶意作", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484063&idx=1&sn=44021432d8c9dbc0b10b5e7bf7c7051e": "【漏洞复现】F5 BIG-IP IControl REST和TMSH 命令执行漏洞（CVE-2025-31644）", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795069&idx=2&sn=c272b3a0014dac3ee057b9c168a08291": "微软发现针对伊拉克库尔德民兵的间谍活动中存在0day漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247547731&idx=1&sn=0a45937f4a2d32f62eb362020dcd4a15&subscene=0": "谷歌发布《2024年零日漏洞利用分析》：安全产品风险激增", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503364&idx=1&sn=968cb69c0ddb2c38d3e1d4010982f52d&subscene=0": "安全热点周报：谷歌修复了 Android 上被积极利用的 FreeType 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzI2OTExNA==&mid=2247518059&idx=1&sn=3bdb3d148cd8ef8323951728d871fe0a&subscene=0": "MiSRC 端午漏洞活动开启，等你超凡出 “粽”", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524552&idx=4&sn=a17cd506867447841c65790a639c803b": "华硕DriverHub漏洞允许恶意网站以管理员权限执行命令", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512193&idx=1&sn=24be890704a835d114a01064777a9e90": "高危漏洞预警：Apache Tomcat远程代码执行漏洞曝光！", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495969&idx=1&sn=adbf03473c87e30cb132d3f07d091205&subscene=0": "CNVD漏洞周报2025年第17期", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489815&idx=1&sn=78c595c820698adedb9fc3224de34cbe": "Apache Calcite Avatica 远程代码执行", "https://mp.weixin.qq.com/s?__biz=Mzk0MzY1NDc2MA==&mid=2247484298&idx=1&sn=cee5e4998f84342eb302370bbdd76d61": "车机Android系统安全漏洞深入浅出", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651136811&idx=2&sn=c04c6f207bc50001a9e2c8ec9bd15d46": "Google因生物识别数据侵权支付创纪录13.75亿美元和解金；华硕驱动管理工具安全漏洞允许恶意网站悄然执行管理员级命令 |牛览", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495969&idx=2&sn=09773aee69062908205a5dc12cb4e5d8&subscene=0": "上周关注度较高的产品安全漏洞(20250428-20250511)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320691&idx=4&sn=e480396e735465420fa34b4a20378a10": "GNU Screen 多漏洞曝光，本地提权与终端劫持风险浮现", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727845102&idx=1&sn=450421e645d6b694ead1dc90d9a14d79": "客户端漏洞在红蓝对抗中的挖掘与利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522987&idx=2&sn=3a436a07ce8ab28ad783d9d8705ed72a": "苹果修复iOS、macOS 平台上的多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096228&idx=2&sn=d8e4dbd652645003ab441e031634eb89": "VMware Tools 存在允许攻击者篡改文件以触发恶意作漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524436&idx=1&sn=e5b469efdad9cfdb0cad7a69c8e92dd7": "【勒索防护】Mallox新变种再度来袭，正利用产品漏洞对国内企业实施攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069614&idx=4&sn=2cdeb6fe56f376c6209155e17e0eaa4d": "【安全圈】华硕DriverHub漏洞致高危攻击：恶意网站可获取管理员权限", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524436&idx=2&sn=7349fe15ed6d5371de2ad7c1fba70c08": "【漏洞通告】F5 BIG-IP Appliance 模式命令执行漏洞(CVE-2025-31644)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529772&idx=2&sn=d18c032ba92e2e4884a9e3fc32da780d": "PoC 发布：CVE-2025-31644 漏洞利用通过设备模式命令注入授予 F5 BIG-IP 的 Root 访问权限", "https://mp.weixin.qq.com/s?__biz=MzkzNDI5NjEzMQ==&mid=2247484574&idx=1&sn=9b5357394109be2207eae4f312292bb0": "【1day】⼤华智慧园区综合管理平台⽂件上传(CNVD2024-35311)", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486942&idx=2&sn=368c1989a347f75796a39d41037b6173": "猎洞时刻漏洞挖掘SRC培训第三期塞满干货来袭！", "https://mp.weixin.qq.com/s?__biz=MzA4MzgzNTU5MA==&mid=2652038813&idx=1&sn=f6826bf0a4cb730ac784ca575f2ba577": "安卓逆向 -- 分析某库登录逻辑以及协议复现", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503247&idx=1&sn=f725ae48a660d6d5f43b8dee2657652b": "【成功复现】Elestio Memos服务器端请求伪造漏洞(CVE-2025-22952)【SSRF】", "https://mp.weixin.qq.com/s?__biz=MzI5NDg0ODkwMQ==&mid=2247486256&idx=1&sn=6d54c27fcb11601360b8cd9f78378d3b": "客户端漏洞在红蓝对抗中的挖掘与利用", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520475&idx=1&sn=87c556c4efb6fbd6f7aa0aa689808816": "HotSwappableTargetSource+XString利用分析", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247491036&idx=2&sn=b28468700c3d8e0143e71992e09f9b46": "客户端漏洞在红蓝对抗中的挖掘与利用", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247486540&idx=1&sn=eb91ae30cb0ff0124a21f0cc4971d6ae": "CNVD-2024-22977 金和C6协同管理平台文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522987&idx=1&sn=dd6c1684116b2d65b1efe7c80afe5945": "华硕修复严重的DriverHub 漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320691&idx=3&sn=68ed4c2a830801d5a9cee49cec544119": "macOS远程视图服务沙箱逃逸漏洞PoC公开，攻击者可突破系统限制", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320691&idx=2&sn=de7f2bb1bb8623716a3d0a8af49cf360": "华硕DriverHub漏洞允许恶意网站以管理员权限执行命令", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488457&idx=1&sn=ff9daf871fef4edcfdb100b4990e66ea": "顺景ERP UploadInvtSpFile接口存在任意文件上传漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI0NjA3Mzk2NQ==&mid=2247496233&idx=1&sn=af205b4221083a7918d52d6f83099538": "漏洞研究(7)：XXL-JOB执行器未授权访问漏洞（RESTful API）", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487334&idx=2&sn=103f1eea080d4d9426b63198942ad6db": "【Web实战】一次空白页面的“妙手回春”嘎嘎出严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493115&idx=2&sn=e1899b18ec36c06a4bbd6b924614466c": "漏洞预警 | 上海华测监测预警系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493115&idx=3&sn=29972f15447bee7aada4615991d82681": "漏洞预警 | 灵当CRM任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247509901&idx=1&sn=82924217b6f5f44e7c144b66d583231f": "英特尔处理器“幽灵”漏洞防御机制再遭突破：分支预测竞争条件引发新型攻击", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493832&idx=1&sn=f0357d059b70ff22429fd8d12ffcddfc": "苹果发布安全更新以修复iOS和macOS中的多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDI5NjEzMQ==&mid=2247484576&idx=1&sn=0e9dde7fb3d64fabc0db98effeacd83d": "【1day】⼤华智慧园区综合管理平台⽂件上传(CNVD2024-34322)", "https://mp.weixin.qq.com/s?__biz=MzIxOTk0ODY0NQ==&mid=2247485467&idx=1&sn=f733e694ff74b3dbb331c09986535628": "【0day漏洞复现】某华智慧园区综合管理平台文件上传漏洞(CNVD2024-35311)", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487334&idx=4&sn=b3346ca5192aa5b3e889435ad246be82": "通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655278705&idx=1&sn=616ce013a80dd8a9c8492c7fe57592f2": "100页PPT Web漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069614&idx=4&sn=2cdeb6fe56f376c6209155e17e0eaa4d&subscene=0": "【安全圈】华硕DriverHub漏洞致高危攻击：恶意网站可获取管理员权限", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651136811&idx=2&sn=c04c6f207bc50001a9e2c8ec9bd15d46&subscene=0": "Google因生物识别数据侵权支付创纪录13.75亿美元和解金；华硕驱动管理工具安全漏洞允许恶意网站悄然执行管理员级命令 |牛览", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727845102&idx=1&sn=450421e645d6b694ead1dc90d9a14d79&subscene=0": "客户端漏洞在红蓝对抗中的挖掘与利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522987&idx=1&sn=dd6c1684116b2d65b1efe7c80afe5945&subscene=0": "华硕修复严重的DriverHub 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519305&idx=1&sn=191abe19580685bafe70e3ddb0f2ec74": "【海外SRC实战】一个支付逻辑漏洞，怒赚 $9000 赏金", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512193&idx=1&sn=24be890704a835d114a01064777a9e90&subscene=0": "高危漏洞预警：Apache Tomcat远程代码执行漏洞曝光！", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247488105&idx=1&sn=7cbab519421b3059382e13368679c7dd": "Yakit + xray联动探测漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNjI2NjUzNw==&mid=2247493271&idx=2&sn=8d284d83c6c6bc83ea7f91e98032b58f": "上周关注度较高的产品安全漏洞(20250428-20250511)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522987&idx=2&sn=3a436a07ce8ab28ad783d9d8705ed72a&subscene=0": "苹果修复iOS、macOS 平台上的多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247503272&idx=1&sn=663644f4dfe72e992ed6a08fef2396a0": "趁乱上位，欧洲漏洞数据库上线", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491432&idx=1&sn=8fc15615f953cb4150cbd4eac04b999c": "昂捷CRM cwsapprove.asmx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNjczNzgzMA==&mid=2247484526&idx=1&sn=122fb57b1d99235f9a53cec6301e1504": "漏洞挖掘—利用查询功能获取敏感信息", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247520719&idx=1&sn=aa96ad3991ce24b9467de17cfacbbf73": "小迪VPC1红队内网渗透靶场-PHPRCE-永恒之蓝-防火墙上线-密码喷射-DC域控提权-weblogic", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247491102&idx=1&sn=400dbb1d0204edf7e84c370d6c2451af": "能信安：漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493115&idx=1&sn=c6eb1e1604d1458fb33d362903411604": "漏洞预警 | 致远OA代码注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497445&idx=1&sn=3869ce186823523050c2ae745032deac": "2025年5月微软补丁日多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503390&idx=1&sn=4dffd20f4e491d1a2f9f00c19b3a6075": "Ivanti Endpoint Manager Mobile 多个漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg4MTA2MTc4MA==&mid=2247493940&idx=1&sn=c57275d60a7e624be71dd6089520a8de": "swagger-api未授权访问漏洞及防治方法", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523008&idx=1&sn=12a019a9d94970b49208b306f026f931": "Ivanti 修复已用于代码执行攻击中的两个 EPMM 0day 漏洞，与开源库有关", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490392&idx=1&sn=10c6648ae3683387f181a5eba7f7d429": "【风险通告】微软5月安全更新补丁和多个高危漏洞风险提示", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485614&idx=1&sn=0d220c2d95b21b9b8d2ec7a23720a22c": "JNDI注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247502210&idx=1&sn=7ac38b3015aa5bd309dadd5a8b9b0681": "【CTFer成长之路】命令执行RCE", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320874&idx=3&sn=65c96cd2b5e47e2dc143515a30adbf3c": "英特尔CPU曝新型漏洞，特权内存敏感数据面临泄露风险", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247525083&idx=1&sn=ad2dc629a1ec0c3a257554084bf70cb4": "2025-05微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320874&idx=4&sn=02300abd352f8d0be63a8220ffeb2a77": "欧盟新漏洞数据库上线，定位CVE计划补充而非竞争者", "https://mp.weixin.qq.com/s?__biz=MzkwMjIzNTU2Mg==&mid=2247484298&idx=1&sn=7b44b97a32416ee337fcdc8d180dee74": "【水文】聚合漏洞情报平台（新增推送服务）", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651136834&idx=2&sn=2a8979ba8eb9cbf2c9d9ce1c99d746cc": "迪奥确认中国客户信息遭泄露；欧洲漏洞数据库正式启动，CVE动荡中的新选择 | 牛览", "https://mp.weixin.qq.com/s?__biz=Mzk0MDYwMjE3OQ==&mid=2247486597&idx=1&sn=1a28d06e49724358ef5ac0e57ab8f234": "美国 CVE 计划深陷混乱，欧盟火速上线新型漏洞数据库", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788563&idx=1&sn=b342ee39e53f84204ba881a7b078f5ed": "“欧洲版CVE”上线，EUVD释放漏洞治理新信号", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523008&idx=2&sn=4dc3d8241d26767577bbed984b1b88b2": "Fortinet修复已遭利用的严重0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523008&idx=3&sn=9a842c823e7d8913c5cc1c0f69a9cda4": "微软5月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247486568&idx=1&sn=8ebc60c066a4e4f22aaa4379aaddcde6": "逆向专题分析 - Strcpy缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501065&idx=2&sn=17282f8ef6d8567adc8ad152838beac7": "【漏洞通告】微软5月多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524570&idx=3&sn=4d7ba3841ee1fb55e572a55e404156cf": "Microsoft 警告 AD CS 漏洞允许攻击者拒绝通过网络提供服务", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462863&idx=1&sn=8eb58c985548eaa20261e919dcd81bf2": "2025年度（第一期）CNNVD漏洞奖励评选结果公告", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484838&idx=1&sn=709fb77ea9e14db226b4d14226f2ea27": "安钥®「漏洞防治标准作业程序（SOP）」征文启示 [2025年第19期，总第37期]", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489821&idx=1&sn=827c829c0a70cd6f62a3c8cba5135cd9": "3个月测一站！漏洞挖掘纯享版", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462863&idx=2&sn=39d388aa783b02d11da1ec185bf0ee06": "信息安全漏洞周报（2025年第19期）", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499888&idx=1&sn=11b8b60336132398b93d3517060f9f4a": "漏洞挖掘小工具 - SeeMore", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247491071&idx=1&sn=44e17b4412591a6d368f8d643463d041": "Yakit + xray联动探测漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490076&idx=2&sn=d434a7266c6894233bf273b980f0df72": "【漏洞预警】F5 BIG-IP IControl REST需授权命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524570&idx=1&sn=a738a378ed2afb2a4d728ca1f3858253": "英特尔CPU新型漏洞可泄露特权内存敏感数据", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524570&idx=2&sn=9fb4955b9ea23730e89e2a02fbed891a": "Windows 远程桌面漏洞允许攻击者通过网络执行恶意代码", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593996&idx=2&sn=1adc8a5b4dcf09069ae8a01ef9cb1186": "微软修复78个漏洞，5个零日漏洞被利用，Azure惊现满分漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488468&idx=1&sn=0936bafacba6d0e8c19685261ec2c800": "Laravel Framework 8到11版本存在敏感信息泄露漏洞CVE-2024-29291 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492778&idx=1&sn=05a8cc166439396e85322a00a6f68a2c": "严重的 Erlang∕OTP SSH RCE 漏洞现已公开，请立即修补", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320874&idx=2&sn=9bc6fc40d0c509c0f8350ee1b767056c": "FortiVoice零日漏洞遭野外利用，特制HTTP请求可执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490076&idx=1&sn=7657f918594505daaecaa1220c2914f0": "【漏洞预警】Apache IoTDB远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwNjczOTQwOA==&mid=2247494605&idx=1&sn=f089ad9b91ff71fc033ef5fc95538d43": "工具推荐 | 最新开源若依Vue漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487375&idx=5&sn=06b1c836ac9f843bad093659c48b3b36": "通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493126&idx=3&sn=ea590191b96df3c5627f73c6c13e4b59": "漏洞预警 | 泛微E-Office任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4Njc1MTIzMw==&mid=2247485851&idx=1&sn=1c82a0bf8e73ec70b37bb06bd27e8a2b": "欧盟漏洞数据库（EUVD）正式上线：技术架构、协同生态与行业影响深度解析", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493843&idx=2&sn=3928077a391eadb2a6c17a8b0fc91eb1": "Fortinet修复了已被积极利用的FortiVoice零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247512622&idx=1&sn=8973c3c5b0df83394bdf8eabcff59d54": "CVE-2025-4076 BL-Link远程代码执行漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493126&idx=1&sn=a82a65609829035d058046e4297e3e31": "漏洞预警 | 飞企互联FE业务协作平台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493126&idx=2&sn=8b7e76c6216fa0b82a01b16b457bfdf5": "漏洞预警 | 汉王e脸通智慧园区管理平台任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487375&idx=3&sn=f9346226f0683b32257c788094d72cf8": "【Web实战】一次空白页面的“妙手回春”嘎嘎出严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487908&idx=1&sn=f63da7d2667a17aee320d949035ee354": "Fortinet紧急修复零日漏洞CVE-2025-32756：远程代码执行风险威胁FortiVoice系统", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247616156&idx=1&sn=5d04e1241f313c3afc585df07cd88345": "漏洞赏金故事 | 挖穿全球最大航空与酒店积分平台", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485073&idx=1&sn=05bd26674ee6fec3d58cf76a4ffe52db": "腾讯云安全中心推出2025年4月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247491695&idx=1&sn=cf4b7e1ba13e9801c14c9e7df8eade2b": "某GPS定位系统存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247490291&idx=1&sn=7daaec7346e99f780fb344eb656361e2": "突破浅层测试桎梏：多维度漏洞挖掘突破与实践探索", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493843&idx=1&sn=8549e962d265a0c81e4f0979dbe07666": "微软2025年5月\"补丁星期二\"安全更新修复了5个已被积极利用的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900536&idx=1&sn=bb4f1cb2997f99dce650af738ebb23be": "微软5月安全更新：78漏洞深度透视，5大零日实战利用链及Azure DevOps CVSS 10漏洞攻防策略", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900537&idx=1&sn=573044c78e9776fde63049ccb62fd980": "OttoKit插件CVSS 9.8“幽灵连接”提权漏洞(CVE-2025-27007)遭闪电利用，深度技术剖析与防御指南", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484069&idx=1&sn=699376c17af88ea04131750ccdc81566": "【在野利用】Fortinet 系列产品 未认证远程代码执行（CVE-2025-32756）", "https://mp.weixin.qq.com/s?__biz=MzU3MDA0MTE2Mg==&mid=2247492827&idx=1&sn=56d71af1f4ba16d789e34d7228296643": "安全快报 | 国际APT威胁组织利用SAP NetWeaver严重安全漏洞入侵全球581个关键基础设施系统", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529809&idx=3&sn=8f925e14873beeeee8ef8ac6925c8846": "利用浏览器漏洞绕过 Windows Defender 应用程序控制 (WDAC)", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247492271&idx=1&sn=492927911ca4b639d0b7b68767d61ec9": "漏洞预警 Salia PLCC check_req.php 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261079&idx=1&sn=80fafddace85154176f62cf1ec5a1b84": "漏洞挖掘之 FOFA 语法技巧", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529809&idx=1&sn=fec7a393bf95a45338335c5a508b69b3": "CVE-2024-55030：NASA fPrime 队列溢出导致 DoS 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMTMyOTg4NQ==&mid=2247484565&idx=1&sn=c4cdbb7fa3bd22449b49dc8d0f6a554f": "用友U8 CRM最新SQL注入漏洞及解决方法（CNVD-2025-09018）", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247496402&idx=1&sn=3a56b5246cbb92c3c2f1c90631df8e13": "2025年4月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501071&idx=2&sn=aaea46e520b4251f03208f3f8587a564": "【漏洞通告】Apache IoTDB UDF远程代码执行漏洞 (CVE-2024-24780)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320917&idx=1&sn=ae2655402bb29f301a8745613a7758ad": "Bitpixie漏洞攻击路径曝光，5分钟即可绕过BitLocker加密", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487913&idx=1&sn=0db1eec755d8ba897d36b6f2251802ef": "如何从漏洞POC或者EXP代码中学习漏洞原理？", "https://mp.weixin.qq.com/s?__biz=MzU5Njc4NjM3NA==&mid=2247496579&idx=1&sn=2b6a6405c0de361cc29cd59b890bd3d0": "Node.js 高危漏洞警报(CVE-2025-23166)：可导致远程系统崩溃", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320917&idx=4&sn=e813092fa38d4b90bd470e4aeab2cd08": "Windows远程桌面网关曝双高危漏洞，可触发拒绝服务及远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503385&idx=1&sn=e4a89b9ed57857e64d2954baf50808b5": "微软5月补丁日多个产品安全漏洞风险通告：5个在野利用、11个紧急漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491441&idx=1&sn=5dabd391edb7a3464fe39024cf3b6287": "原创先锋 后台管理 存在未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNTU1NjYwNA==&mid=2247488052&idx=1&sn=f5105862005e6f09ee6b4eeb447e14aa": "2025攻防演练必修组件漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247554835&idx=2&sn=b9c7cb6e4f22e9ff0ff4a87b68990359": "附下载 | 小米科技杨一帆：智能汽车渗透实战：从漏洞挖掘到控车攻击", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512203&idx=1&sn=261e280f9fb9f188798ae97dfdb7d562": "微软2025年5月补丁日重点漏洞安全预警", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247491061&idx=1&sn=8add20c0788395e325bc41e91aceaa2c": "创宇安全智脑 | 灵当 CRM Playforrecord.php 任意文件读取等107个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503400&idx=1&sn=a3ed07a0c534855161deb71b6a0642e4": "【已复现】Google Chrome 跨源数据泄露漏洞(CVE-2025-4664)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462992&idx=2&sn=8bd082f51f27793a8fcd335bd8be4120": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490084&idx=1&sn=7e06db1fcffc8b5ff6e56d3c33d756d4": "【漏洞预警】Node.Js 异常处理不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503400&idx=2&sn=80467da7de6cbd94b86630f8ee95874a": "Fortinet FortiOS 身份认证绕过漏洞(CVE-2025-22252)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242573&idx=1&sn=4809b1ead0dc8205687720e92040922f": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486686&idx=2&sn=d5c362cb087ced538a1c6b14d7297b3b": "【漏洞预警】Google Chrome 访问控制不当漏洞(CVE-2025-4664)", "https://mp.weixin.qq.com/s?__biz=Mzk0Mjc2MzQ0Ng==&mid=2247484553&idx=1&sn=76ac840bd43c005468a6a364354f7bc0": "F5 BIG-IP rce漏洞 CVE-2025-31644", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490084&idx=2&sn=8eb8b4bc9a85efa06b803690074b1d62": "【漏洞预警】Google Chrome访问控制不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486686&idx=1&sn=3275924bc00806abd77ad46c738de75d": "【漏洞预警】Node.js 异步加密错误处理不当漏洞(CVE-2025-23166)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491410&idx=1&sn=6e5c3611d0e086e67c618589db7a16a9": "WEB漏洞扫描器Invicti-Professional-V25.5（自动化爬虫漏洞扫描）更新", "https://mp.weixin.qq.com/s?__biz=MzkwNjM5NTkwOA==&mid=2247483973&idx=1&sn=05fb82ad7c28fa6a91ebfb193e16535d": "CVE-2025-30406 CentreStack ViewState 反序列化漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242573&idx=2&sn=f1be9e890284eca3672fb480d44410d3": "CNNVD | 关于Fortinet多款产品安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519311&idx=1&sn=6e0d226f8520843b8b9111e1f0d94147": "【SRC实战】一次空白页面的“妙手回春”变严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462992&idx=1&sn=e9898910f13788c2c16cd5c59071484f": "CNNVD关于Fortinet多款产品安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247554844&idx=1&sn=f29d864ecb40ac7fe2ff282ba1462edb": "从XSS到\"RCE\"的PC端利用链构建", "https://mp.weixin.qq.com/s?__biz=MzkwNjczOTQwOA==&mid=2247494623&idx=1&sn=7e704834297972659a95a52b35a944e4": "工具推荐 | 临兵漏洞自动化扫描系统", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493849&idx=1&sn=cb6f29682b6c7c5721e10042cec1eea8": "Ivanti修复了两个在有限攻击中被利用的EPMM漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247492321&idx=1&sn=521382f8a9c33edb1bbd758d080c167a": "某云盘系统 API 端点无限制上传漏洞解析", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247512045&idx=1&sn=ebc266e0342548555e31bca22d7d84e7": "邮件服务器安全检查工具 | 一个用于检查邮件服务器安全配置并识别潜在漏洞的综合工具。", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493142&idx=1&sn=8417737fe3dd9c336408bfecd239c79c": "漏洞预警 | 用友U8Cloud XXE漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037703&idx=1&sn=ee99198595f09647e07a388d40761561": "基于Drozer框架对安卓四大组件的漏洞挖掘总结", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499677&idx=1&sn=b5f2f213d5a79e9f0428f8d073d5f374": "红队视角下的 .NET 安全审计，记一次 .NET 程序的漏洞发现之旅", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487917&idx=1&sn=e50f82713e625ef841448aa09706327a": "紧急预警！新Chrome漏洞（CVE-2025-4664）致跨域数据泄露，请立即更新", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247485315&idx=1&sn=202d3a34420423624dd4749bc04b8710": "当单个ID失败时，成对ID可能通过！越权漏洞就这么简单", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795118&idx=1&sn=ac271afd0d4c9989d955552c446b0add": "俄黑客组织 APT28 利用 MDaemon 0day漏洞攻击Webmail 服务器", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487402&idx=1&sn=483b638ac2cba6a68bcb8633c1375c09": "泥煤的，又一次RCE", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493142&idx=2&sn=1e6477655b8d35c631618cae1a19e496": "漏洞预警 | 帆软报表目录遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491447&idx=1&sn=62d0d1d5d519b3e8110257ee76aa9b05": "【1周年庆】致Nday Poc全体成员的一封信", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610772&idx=3&sn=7cdf87bd56ec29f6bc9408ebd458100d": "攻防实战之若依(RuoYi)框架漏洞战争手册", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524590&idx=4&sn=6fe7ad2714f7e5f2f6ac54bcecda6ae8": "Node.js 高危漏洞警报（CVE-2025-23166）：可导致远程系统崩溃", "https://mp.weixin.qq.com/s?__biz=MzkzNDI5NjEzMQ==&mid=2247484595&idx=1&sn=6feefaf85c986e4dfe7b354020d7d52e": "【漏洞预警】某华DSS系统存在命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499902&idx=1&sn=92ef5a9638f17d80e724ac3c867101a7": "PHPRCE-永恒之蓝-防火墙上线-密码喷射-DC域控提权-weblogic", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493142&idx=3&sn=47422e3c46960e1f7335a34d5196bbce": "漏洞预警 | 用友NC SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTc2MDE3OA==&mid=2247486659&idx=1&sn=0321d9126f471ded2828af33bd4fe6a2": "DeFiVulnLabs验证——利用Coze进行自动化复现和测试及坑点", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487402&idx=6&sn=c271da6713b076314c2fd474e7365fd3": "通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247489105&idx=1&sn=4d26a119df5deef7a14e446b93678848": "安全资讯|英特尔CPU曝分支权限注入重大安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503407&idx=1&sn=bc577b527b31ff7b989f2b804f447771": "【已复现】Ivanti Endpoint Manager Mobile 多个漏洞安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524590&idx=3&sn=5ce5215f6a03a6bbcbf2bc01760cd628": "利用Bitpixie漏洞（CVE-2023-21563）可在数分钟内绕过BitLocker加密——概念验证揭示高风险攻击路径", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247491697&idx=1&sn=4fc952a1c58793c94def3b994ee657be": "某短视频矩阵营销系统前台RCE漏洞审计", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247490339&idx=1&sn=011dccb887d48892ba1c826730b44ec9": "Webpack源码泄露漏洞批量探测", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489287&idx=1&sn=8c9f37d9f49eabc32f86c61032e9ce2a": "【漏洞通告】Ivanti Endpoint Manager Mobile身份验证绕过与远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524448&idx=1&sn=6217de2f915a55b24e03100e3d3ab00f": "【漏洞通告】Ivanti EPMM 未授权远程代码执行(CVE-2025-4428)", "https://mp.weixin.qq.com/s?__biz=Mzg2NDcwNjkzNw==&mid=2247487509&idx=1&sn=f96c312faca3501d7b93298b6abafab8": "我在马路边，捡到两年前的RCE了", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529836&idx=2&sn=aa217719d6409db30c80beeabeb5bdef": "Jenkins 插件漏洞暴露严重风险：CVE-2025-47889 漏洞 CVSS 评分达 9.8，存在身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489834&idx=1&sn=2419e66fdc2faf39c3bcfcf23bd2e729": "多功能BurpSuite漏洞探测插件—TsojanScan", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491469&idx=1&sn=8e20f6c97b44d8d68781eb1ff4a0fae0": "致远互联FE协作办公平台 addUser.jsp SQL注入(CVE-2025-2030)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490089&idx=1&sn=6b1860a17c9b2a8d1ea405b92acaaa03": "【高危漏洞预警】Fortinet多款产品缓冲区溢出漏洞(CVE-2025-32756)", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484077&idx=1&sn=17a24bab60b34123c63194e6c89eb39f": "【已复现】Ivanti EPMM 认证绕过∕代码执行漏洞 (CVE-2025-4427∕CVE-2025-4428）", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242670&idx=1&sn=ef65bd56ddce36543499892b52b62bc0": "聚焦 | 国家信息安全漏洞库（CNNVD）2024年度工作总结暨优秀表彰大会成功举办", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501079&idx=3&sn=c60869994f50fba08d87b4853de6d126": "【漏洞通告】FortiOS TACACS+身份认证绕过漏洞(CVE-2025-22252)", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524590&idx=1&sn=975a2bbedabadddaa1a9b1328b6c8886": "Windows远程桌面网关漏洞可被攻击者利用触发拒绝服务条件", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY2ODE1NA==&mid=2247485388&idx=1&sn=41c66e99136de139308d373fae0b8957": "Apache Roller高危漏洞CVE-2025-24859深度解析：会话劫持威胁企业安全", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788573&idx=1&sn=3cd1ca51bc4ac24f73596c96d8c28484": "黑客发起全球间谍行动，政府邮箱被利用XSS漏洞入侵", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489287&idx=2&sn=02ea85647c8292cb4410e35f90b12ff8": "【安全更新】微软5月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486688&idx=1&sn=75f519098b5ec8f6c3615719e2290902": "【漏洞预警】Apache IoTDB 远程代码执行漏洞(CVE-2024-24780)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069664&idx=3&sn=ce9e58eb83ca29b12fe8053876e1d3a4": "【安全圈】网络安全事件周报：勒索组织与国家级黑客同时盯上SAP漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069664&idx=2&sn=80a74a8e1cddf0a974dca42fb8b9cc6e": "【安全圈】新Spectre变种攻击曝光：英特尔CPU存在特权分支注入漏洞，内存数据或遭窃取", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247987&idx=1&sn=29534ea825a239f625eb903a24f1ae7b": "发现网络攻击后立即关闭系统？错！| Bitpixie漏洞攻击路径曝光，5分钟即可绕过BitLocker加密", "https://mp.weixin.qq.com/s?__biz=MzU3MDg2NDI4OA==&mid=2247491125&idx=1&sn=cc28f1cd5e0286af9d09afab81ab612b": "我在马路边，捡到两年前的RCE了", "https://mp.weixin.qq.com/s?__biz=MzI5MDcyODIzNg==&mid=2247485064&idx=1&sn=d85845f1286127f8a6f52957bef948be": "900人选择的SRC漏洞挖掘课程，带你踏上漏洞挖掘之路，共同成长", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY3OTc5Mw==&mid=2247485059&idx=1&sn=a390ae32a65fad7f877be099a0ef3929": "【免杀现】白加黑也不一定是exe+dll哟", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064153&idx=1&sn=9e81e1a670596fc708f06d33dfceef2a": "信息安全漏洞周报【第022期】", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512206&idx=1&sn=ad2141c2128b2f8528b26d3a1057ee93": "Apache Roller高危漏洞（CVE-2025-24859）曝光，用户需立即采取行动！", "https://mp.weixin.qq.com/s?__biz=MzI0NjA3Mzk2NQ==&mid=2247496246&idx=1&sn=13504d1d456d9883672e9ac62eef522c": "漏洞研究(8)：XXL-JOB调度中心后台日志查看SSRF漏洞 CVE-2022-43183", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247486125&idx=1&sn=5a77bc1e5cbec31ee8123a012c212633": "突发！APT组织利用零日漏洞，竟对伊拉克库尔德武装展开 “隐秘监视”！", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523031&idx=1&sn=40bc8fad7dc229f984420d3f6109a0b9": "Chrome修复已遭活跃利用的0day", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497600&idx=1&sn=1969c3c056630d43062c8ba9092c06da": "一次获取RCE以及提权到root权限的渗透过程", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247491104&idx=1&sn=4d720b1891187d32013cfeafe3970571": "能信安：漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516636&idx=1&sn=b6f314f0ad1fc3ec3d30099af4ec510e": "Nacos Derby命令执行漏洞利用脚本（5月15日更新）", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501079&idx=2&sn=0a1737e00deeeeee9536c2f371d6891a": "【漏洞通告】Tornado日志解析器拒绝服务漏洞 (CVE-2025-47287)", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520530&idx=1&sn=2052449f26addaab7e037d9f26b33721": "漏洞预警：CVE-2025-31258 macOS远程视图服务沙箱逃逸漏洞PoC已公开", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651133083&idx=1&sn=aad61191d926b74c39a98c30856badc6": "国安部提醒警惕智能穿戴设备泄密，英特尔CPU曝漏洞|一周特辑", "https://mp.weixin.qq.com/s?__biz=MzkwMzUyMjk2MQ==&mid=2247484411&idx=1&sn=793231a073b0d6a68e7a23f89f0f4f40": "WordPress前台任意文件读取漏洞POC（CVE-2025-2294）", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487459&idx=5&sn=51a05095079246f1e682beaf5a476e5f": "【Web实战】一次空白页面的“妙手回春”嘎嘎出严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487459&idx=2&sn=6bf840a27e811f0e056ff746147d3efd": "泥煤的，又一次RCE", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487459&idx=7&sn=f2d18c5fe0a7872ee25e3377576080cd": "通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650468640&idx=1&sn=430490ae575574d3530583fedd91f8aa": "绿盟科技荣获国家信息安全漏洞库（CNNVD）多项认可", "https://mp.weixin.qq.com/s?__biz=MzIwNjYwMTMyNQ==&mid=2247493234&idx=1&sn=cdb1e53279f782a48681a06484e23fa5": "2025微软漏洞报告：数量再创纪录，应对更复杂", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503256&idx=1&sn=f7f3674b803a38389694bddfb6e9c62e": "【成功复现】JeeWMS系统SQL注入漏洞漏洞(CVE-2025-0392)", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487459&idx=1&sn=088123af3e042983d3735e1a4da6c61e": "任意用户登录漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247486227&idx=1&sn=a7cb99a790cd4e12144fc49d256a1f3e": "上讯信息技术股份有限公司运维管理系统RepeatSend命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247549991&idx=1&sn=4234354954eb9ecdd3e47fada2c4af6f": "某校园解决方案提供商智慧校园通用漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652115790&idx=1&sn=8da50ee2e0135385f3cec02219d6fbd0": "微软2025年5月份于周二补丁日针对78漏洞发布安全补丁", "https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247485526&idx=1&sn=2b2f5d8ffbefc83cafbe955e301a1200": "Pwn2Own 2025 柏林赛day2，VMware ESXi被攻破，漏洞价值15W刀", "https://mp.weixin.qq.com/s?__biz=MzI2MDI0NTM2Nw==&mid=2247490619&idx=1&sn=a2db644808c77a0b45b82c37d60e7632": "Centos添加漏洞扫描", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458594141&idx=3&sn=dc75ea15ec1eaf8b4e9a86bf5d62e006": "英特尔CPU曝新漏洞：每秒偷走17KB数据！新型芯片漏洞有多可怕", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610790&idx=1&sn=42e4e254f90a15e7869f27de69f90594": "一包包免费纸巾骗走老人们2亿元;|谷歌Chrome曝高危漏洞，可导致账户接管与MFA绕过", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247572783&idx=1&sn=498f1d3073cac37c2bf4439b34edfaae": "一个漏洞挖掘小工具 - SeeMore", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610790&idx=4&sn=2c66c67e34c2642084e2a26e39b55a28": "邮件服务器安全检查工具 | 一个用于检查邮件服务器安全配置并识别潜在漏洞的综合工具。", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491478&idx=1&sn=45307902cab80959cdbf15462748ce9f": "装盟科技-家装ERP管理系统 Public.asmx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096235&idx=2&sn=ce6afa07cb19b00599fa4bde6294c4d5": "多个 Ivanti Endpoint Mobile Manager 存在远程执行代码漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529870&idx=1&sn=f630cffc3eca33694ae38e9cc51b90d6": "CVE-2025-4427∕4428：Ivanti EPMM 远程代码执行 - 技术分析", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491486&idx=1&sn=d76973114389135c7d046bbe6caf0788": "装盟科技-家装ERP管理系统 Budget.asmx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519329&idx=1&sn=2ba90bbfa7582d6ef495b5b3bbf3ef82": "攻防实战之若依(RuoYi)框架漏洞战争手册", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610790&idx=3&sn=92609abd1542c3029ec590f577cba88c": "某OA代码审计之挖掘0day，未公开poc", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247499948&idx=2&sn=2b76d6e4e5a52b74a200b0541969554e": "新漏洞影响过去6年内所有英特尔处理器", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492780&idx=1&sn=9bd9be62e1ba7da954f1cc3396ce9d42": "华硕警告使用 AiCloud 的路由器存在严重的身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651321008&idx=1&sn=ae791b0b8818b8c209b687df9a2fd5b1": "2025年Linux内核补丁管理：漏洞防御新策略", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247490318&idx=1&sn=74428d2959f342f6ff6ac261fe9b0a4c": "工具集：Fiora【漏洞PoC框架图形版的Nuclei】", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247490419&idx=1&sn=f6b7aaec4d6701d21a500eb2b6ebbd6e": "ruoyi系统 4.8 后台RCE漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491505&idx=1&sn=84eec4161e98e58aec50bd9fecbf5396": "SysAid On-Prem XML注入漏洞 (CVE-2025-2776)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491496&idx=1&sn=2d48823e684397a854cefe1dd038c7f0": "妖气山视频管理系统 get_media_list_by_filter.json SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247550042&idx=1&sn=604860dbff6fda380161cf44215eec8d": "重生HW之利用邮箱漏洞寻找突破口打穿目标内网", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487437&idx=1&sn=cbff3bf4a41066854aa33d6262681406": "CVE-2025-3102 WordPress 任意用户创建", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486456&idx=1&sn=f64fd15960ac4cab2aa9ba2cf4ae110d": "一次任意文件下载漏洞审计-JAVA", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486962&idx=1&sn=7d411d01c29567321608375b3e7d1549": "猎洞时刻漏洞挖掘SRC旧一期公开课四节！！", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492106&idx=1&sn=944ae874c1f157a21032f3515b82448e": "一次任意文件下载漏洞审计-JAVA", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069693&idx=3&sn=79db367c018e907ae1f542e9117a3227": "【安全圈】​​Linux 漏洞数量一年激增 967%​", "https://mp.weixin.qq.com/s?__biz=MzI0NjA3Mzk2NQ==&mid=2247496253&idx=1&sn=14e5b2e6452bb240a492d5caa2de3c96": "漏洞研究(9)：XXL-JOB调度中心后台任务执行SSRF漏洞 CVE-2024-24113", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247491096&idx=4&sn=bb0a679ce027e9696dc5380453a6bb65": "上讯信息技术股份有限公司运维管理系统RepeatSend命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655279104&idx=1&sn=fc0d2ad017e5ed4cbcaa2258802dcc1f": "政府邮箱被利用XSS漏洞入侵；2024年微软披露漏洞增长11%", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247491096&idx=3&sn=300469656724bbb606d05dedb933e58d": "重生HW之利用邮箱漏洞寻找突破口打穿目标内网", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247491096&idx=1&sn=b4444827d62782ba53af7e8db6a0d40c": "一次任意文件下载漏洞审计-JAVA", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492781&idx=1&sn=12942c4e6827005e4836c231a65a4873": "Windows NTLM 哈希泄漏漏洞被利用来针对政府进行网络钓鱼攻击", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247506066&idx=2&sn=e0cf069161dc63c1d309efabe7083b19": "2025年漏洞统计报告附下载", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487486&idx=1&sn=ba311501aea1738fee819c57be6d8fb8": "你来你也能RCE", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499696&idx=1&sn=fe88643789efacfd6935788441f31d33": "XBAP 绕过终端防护，通过 Sharp4XbapShell 实现 PowerShell 命令执行", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487486&idx=2&sn=5f6cc2e7c15eaedaeee640db0de55211": "任意用户登录漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzkyNDYwNTcyNA==&mid=2247487767&idx=1&sn=c108e8c587da407711041361c00a93b4": "【代码审计】命令执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900550&idx=1&sn=526bb13bc04d12e468dddee443750f21": "三星MagicINFO严重漏洞CVE-2025-4632：从路径遍历到Mirai部署的技术细节与企业应对之道", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487486&idx=3&sn=b1a886e267100e64534156c33ef90cf8": "泥煤的，又一次RCE", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247512208&idx=1&sn=fb980855429312b7df8e91c68c4ae82a": "若依(RuoYi)框架漏洞战争手册", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247490438&idx=1&sn=68526a59f2dd824a09143399bb9644d5": "记一次某OA渗透测试有意思的文件上传漏洞挖掘经历以及分析", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487931&idx=1&sn=619675b41f1728c3b4c80174458886fc": "英特尔CPU再曝高危漏洞！新型内存泄漏与Spectre v2攻击卷土重来，全球数亿设备陷风险", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795139&idx=3&sn=b778c50dbe57ec7066741e4845436a97": "英特尔新漏洞：Spectre 和 Meltdown 问题以新面貌重现", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247492334&idx=1&sn=c5ffc39a73e459eb12fe56edc031abd0": "一个漏洞挖掘小工具 - SeeMore", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247492284&idx=1&sn=875e75a2f1e03dc7730882f221ffbe21": "漏洞预警 西部数据 NAS chk_vv_sharename.php 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497482&idx=1&sn=9edef1806d3d5a33f39a791c117051b1": "【漏洞通告】Tornado日志解析器拒绝服务漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497482&idx=2&sn=c4323bf9b8cda0593c734ced7ac81e19": "【漏洞通告】FortiOS TACACS+身份认证绕过漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652251875&idx=1&sn=9a043be40ff683ba496f06b8b7751a0d": "全球政府邮件系统沦陷：黑客利用XSS漏洞发起大规模间谍活动", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487486&idx=6&sn=ca5cfa1a13553a7ca1e6275272df5480": "【Web实战】一次空白页面的“妙手回春”嘎嘎出严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493151&idx=1&sn=c7bbbfb0fef994b47cac641836483e73": "漏洞预警 | Apache IoTDB远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493151&idx=2&sn=6c55c91bfdbdbe5d7acda8f94b544575": "漏洞预警 | 金和OA XXE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493151&idx=3&sn=10037ca1fbd8c7838d112015fa3f790a": "漏洞预警 | Tornado日志解析器拒绝服务漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3OTYxNDY1NA==&mid=2247485450&idx=1&sn=dd0751e325f02ecd7aada09b208840e7": "Src捡钱6，为什么大佬总能挖到你挖不到的漏洞（可自定义参数版jsonp、cors）", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493865&idx=1&sn=ab72cfaaef6a0440b47f2283c17311d7": "谷歌修复了可能导致账户完全被劫持的Chrome漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503412&idx=1&sn=8f8313d3cfa03a94be6998f6c304de66": "雷神众测漏洞周报2025.5.12-2025.5.18", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506397&idx=1&sn=58e38d3ae77e44376fa837ad9099a059": "入侵我的车，甚至你的车——大众汽车应用程序存在安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247492198&idx=1&sn=cad62031ef7ee2bd2f307232c09abef9": "山东大学 | MiniCAT：了解和检测小程序中的跨页面请求伪造漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247499088&idx=1&sn=c4a90fdea61d8a9d2f7ef91d73d10f06": "poc | Windows 远程桌面网关 (RD Gateway) CVE-2025-21297介绍", "https://mp.weixin.qq.com/s?__biz=Mzk3NTIxNzEzNA==&mid=2247491401&idx=1&sn=fa3e959a55bb17dc4f2084e820af9475": "【漏洞挖掘案例】从XSS到\"RCE\"的PC端利用链构建", "https://mp.weixin.qq.com/s?__biz=MzI0OTIwMjE2NA==&mid=2247485943&idx=1&sn=dbecf68b3773ff21ac6c9ab455ef6eb4": "爱奇艺SRC暂停漏洞测试活动公告", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651136889&idx=2&sn=c7432e13630d9efef7be4061833da185": "英特尔CPU曝重大安全漏洞，可导致内存泄露；美国议员以安全为借口呼吁禁售TP-Link网络设备| 牛览", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489846&idx=1&sn=df694489db4ad9de1d2a39ba6c5b3684": "Kali实战：安全漏洞一网打尽", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247548030&idx=1&sn=881b572138f84344fc12533b1b8678a4": "网络安全20年：从漏洞破解到AI防御的生态跃迁", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247492550&idx=1&sn=5d99ff16c3e149c4423f1197748e51f1": "Linux 内核补丁管理：漏洞防御新策略", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY1NTI5Mw==&mid=2247492241&idx=1&sn=fa7d625f24c0e34719f1ff525f13ff0e": "推荐一个专为新手打造的漏洞挖掘实战圈", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069708&idx=4&sn=21c7295802162aa16f8b54670e5a4c13": "【安全圈】glibc漏洞使数百万Linux系统面临代码执行风险", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495987&idx=2&sn=e622c43d6da910f8fc0ddd92ba8042f8": "上周关注度较高的产品安全漏洞(20250512-20250518)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529902&idx=2&sn=f713e875bb3bf68bb2fe57894c044751": "Zyxel USG FLEX H 系列 uOS 1.31 权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk3NTEyMzQzOA==&mid=2247485956&idx=1&sn=a9af193167f80c63701522ddd5c41e18": "Jboss反序列化漏洞(CVE-2017-12149)漏洞复现nc与javaDeserH2HC反弹shell", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512208&idx=1&sn=764625667fa8c9d62423b2d8f4ff7c13": "黑客眼中的NFC：Mifare安全漏洞大揭秘", "https://mp.weixin.qq.com/s?__biz=MzkzMTYyMDk1Nw==&mid=2247483832&idx=1&sn=ea46c8f3ea361b02418e27a68c36cfb3": "WHMCS 7.x 存在恶性漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495987&idx=1&sn=796fe8469ee615c3dd62613886f006b7": "CNVD漏洞周报2025年第18期", "https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247526917&idx=2&sn=52a64842485dfa4957954d7bf7157672": "2025年4月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651321137&idx=4&sn=82946ed1a6eb79ec67accaf8a487ab2d": "Windows远程桌面网关UAF漏洞可导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503417&idx=1&sn=e3066a86595352998f8e826f3a2435cf": "安全热点周报：Fortinet 修复了 FortiVoice 攻击中利用的关键零日漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458594242&idx=2&sn=a1d093e798d1c33be4ce0d793de7964b": "高危WordPress插件漏洞威胁超1万个网站安全", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506362&idx=1&sn=a448e7af31b543bfe00e841f0a1c708d": "每周网安资讯 （5.13-5.19）| Siemens SIMATIC PCS neo漏洞预警", "https://mp.weixin.qq.com/s?__biz=Mzk0MzYyMjEzMQ==&mid=2247487617&idx=1&sn=5876a6a3fbb1b810133e786da2badaa5": "CVE-2020-1472NetLogon权限提升", "https://mp.weixin.qq.com/s?__biz=MzkyNjcyODI1OA==&mid=2247484765&idx=1&sn=b9a2b63ae4870eaa17509553d1d15a2a": "Java代审&后台计划任务中的RCE攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497614&idx=1&sn=e6277cb245dd6b2a5691854377357140": "逻辑漏洞中一些自己总结关于验证码的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg4NzAwNzA4NA==&mid=2247485216&idx=1&sn=17314e6e6088de7b43fa8fd275de137a": "原创—中国乃至世界进入后门时代，挖漏洞该怎么挖", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516652&idx=1&sn=35138d273cf5a0924a961337315fdb87": "红队资产发现工具 -- ICPAssetExpress（5月19日）", "https://mp.weixin.qq.com/s?__biz=Mzk0MDYwMjE3OQ==&mid=2247486627&idx=1&sn=e2683b56e8df633164681dd09a46657d": "​​新型 CPU 漏洞曝光！英特尔芯片陷内存泄露风险", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490098&idx=1&sn=904da7408fb841188b7ceee5ba2756f6": "【AI漏洞预警】huggingface transformers拒绝服务漏洞(CVE-2025-2099)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651321137&idx=3&sn=4af04e70e04676869165146646aff900": "Pwn2Own大赛：黑客利用JavaScript零日漏洞攻破Firefox的技术细节", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491514&idx=1&sn=2750735b9efbf0d315335bce4609eaf3": "DocsGPT 远程命令执行漏洞 (CVE-2025-0868)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651321137&idx=1&sn=85d1a5323f8b408b84356624a99f4290": "推荐一个专为新手打造的漏洞挖掘实战圈", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487577&idx=4&sn=2b3bbda702b95680bb8469041a55a91f": "【Web实战】一次空白页面的“妙手回春”嘎嘎出严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMDU5MzY0NQ==&mid=2247484646&idx=1&sn=beff017a744912f0d5e8202ca0494fa8": "当漏洞成为“数字战争”的弹药，谁能改写攻防规则?", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487940&idx=1&sn=ed7c9a4905f62eeeec22d209bba65844": "Firefox紧急修复两大零日漏洞！Pwn2Own柏林大赛黑客斩获$10万奖金", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490098&idx=2&sn=477c546c495a1d59f2a34d685c7e88cc": "【漏洞预警】Invision Community themeeditor远程代码执行漏洞CVE-2025-47916", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503311&idx=1&sn=17cd63a2dc5bb1c0a1bbcf1dc7d0fd9a": "【成功复现】WordPress plugin Kubio AI Page Builder路径遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493169&idx=3&sn=3651274bf140c0b87299a7ee5ced3a89": "漏洞预警 | 飞企互联FE业务协作平台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247485139&idx=1&sn=3539268a1eb3de11e87f268ebedcbd11": "关于账号相关漏洞的一次测试", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247494312&idx=1&sn=fae73d6e67898ee15bb7fb2ba7df7b11": "一个高性能的目录扫描工具，专门检测和验证 Web 中的路径遍历漏洞。通过异步并发扫描和智能 WAF 绕过技术，快速发现漏洞，", "https://mp.weixin.qq.com/s?__biz=Mzg2MzkwNDU1Mw==&mid=2247485691&idx=1&sn=c6cdd8256b68d350a4402fa121501d81": "kafka未授权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzM2MjM0OQ==&mid=2247496619&idx=1&sn=cef5546181d6f6ba22d6e75da46caf4d": "SRC实战案例分享-验证码漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487935&idx=1&sn=0fd72220a31b600e0c52b18be2d3e2eb": "年薪30W+的秘密：网络安全\"挖漏洞\"必备的4类工具与漏洞复现指南", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795151&idx=2&sn=fbe72b2822bdbe8de6113691b2162b1b": "大众汽车应用程序漏洞可致车主信息和服务记录泄露", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795151&idx=3&sn=293aecf04fcabee81298a4fbcda70c1f": "GNU C（glibc）漏洞可以在数百万 Linux 系统执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzkzNDI5NjEzMQ==&mid=2247484612&idx=1&sn=9ad84b9e19875df2e023e58224b89502": "若依4.8.0后台rce漏洞复现及内存马利用", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493169&idx=1&sn=c05c9a489dc07f3b2ddfdd8da6607b89": "漏洞预警 | FortiOS TACACS+身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493169&idx=2&sn=7541877a92fcd02d5022cd061a332eb4": "漏洞预警 | 泛微E-Office SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MTUwMjQ5Nw==&mid=2247488386&idx=1&sn=b9796901565c32f9f5e18643c53c5977": "PDF 生成器漏洞利用：查找 PDF 生成器中 SSRF 漏洞的完整指南", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487577&idx=6&sn=0d1f02515f463f5488a8ace5e841d877": "通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655279355&idx=1&sn=48be8d46daba1f043071df066861692a": "2025年4月企业必修安全漏洞清单；Nmap网络安全审计技术揭秘", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650183840&idx=2&sn=0af114301702b4ae7a8abbb1292f6b31": "微步再获评CNNVD“高质量漏洞优秀贡献奖”、“年度优秀技术支撑单位”", "https://mp.weixin.qq.com/s?__biz=MzkzOTIwOTkxMQ==&mid=2247484065&idx=1&sn=80efa6ce84afb40f4fbefc74569e4e41": "Clash Verge 1-Click RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyMDEzMTA2MQ==&mid=2651168480&idx=1&sn=50dcda92c002bd51ea2737f3532de5c6": "印度阿三安全研究员，欺骗漏洞赏金全过程！", "https://mp.weixin.qq.com/s?__biz=Mzg2NDcwNjkzNw==&mid=2247487511&idx=1&sn=26c6c9c168d84586c8478f7b2dedd2d1": "CNVD-2023-04620 金和 OA XXE 漏洞分析复现", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610809&idx=2&sn=186c2134c645104b6d44da9bb54bd25e": "文末赠书|当漏洞成为“数字战争”的弹药，谁能改写攻防规则？", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900559&idx=1&sn=0a7c9fe1e7debd1234cb5693b067a809": "SAP漏洞风暴升级：BianLian、RansomExx及更多团伙利用组合拳攻击NetWeaver", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499864&idx=1&sn=0ac97ac6631f4bed37dc9d65de527d8d": "CNVD漏洞周报2025年第18期", "https://mp.weixin.qq.com/s?__biz=MzU0MjE2Mjk3Ng==&mid=2247489110&idx=1&sn=bd7f08bd623117ea3652505c80ba5da9": "英特尔CPU再曝高危漏洞，新型内存泄漏与Spectre v2攻击卷土重来", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247550119&idx=1&sn=c25a8b23e5ef7622e645d208c419b59f": "EDUSRC | 两个证书站小程序漏洞挖掘思路及方法", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247490386&idx=1&sn=69a3eb83c41266c5d0ebd2e3c0558e2e": "IDOR_detect_tool【API越权漏洞检测工具】", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610809&idx=3&sn=d60cac29d0d8c32877b922b55df29182": "高危WordPress插件漏洞威胁超1万个网站安全", "https://mp.weixin.qq.com/s?__biz=MzU3MDg2NDI4OA==&mid=2247491153&idx=1&sn=b45e5f6c7bba1d0d1d9a973478640211": "CNVD-2023-04620 金和 OA XXE 漏洞分析复现", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493874&idx=1&sn=66206ef8b1b21a6d4d0f75b5f2bb1e87": "Mozilla修复了在Pwn2Own Berlin 2025上公开演示的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582421&idx=2&sn=4d652cfed9e7b0c3f05bb935d717f71f": "安全动态回顾|65款违法违规收集使用个人信息的移动应用被通报 微软5月补丁星期二修复72个漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247495058&idx=1&sn=9ba60513d1aedc46385f088671127de5": "2025攻防演练必修高危漏洞集合（1.0版）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069726&idx=4&sn=6e0326f5a7bbfaabc1fb97d20777862b": "【安全圈】CISA最近将Chrome漏洞标记为被积极利用", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501089&idx=2&sn=1ebe4873b80d78327d69e54c096a745c": "【漏洞通告】glibc静态setuid程序dlopen代码执行漏洞 (CVE-2025-4802)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651321374&idx=3&sn=6a3bba25915e6ce2b498ef03970fc4e8": "ChatGPT漏洞允许攻击者在共享对话中嵌入恶意SVG与图像文件", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487438&idx=1&sn=ef49a682ff862cf1972a2c7917274ba1": "Ghost Route 检测 Next JS 中间件绕过漏洞 (CVE-2025-29927) 的攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069726&idx=2&sn=c20c0d51d02d13694b5fc4bca2f03dd4": "【安全圈】黑客在Pwn2Own柏林大赛中利用28个零日漏洞斩获107万美元奖金", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651136902&idx=2&sn=5c62a5d8b7822d419bd155094dfa73a3": "大众汽车应用程序再曝安全漏洞，泄露车主敏感信息；410GB TeleMessage泄露数据被DDoSecrets收录 | 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651321374&idx=1&sn=e9577cbfc42d88f3379443abc9ae10f7": "HackProve国际漏洞狂飙赛来袭！奖金翻倍、积分冲榜，全球开启！", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514384&idx=2&sn=fcfc80f16f102b6fec2c364408384b51": "Pwn2Own 2025柏林黑客大赛：发现28个0day 斩获百万美元奖金", "https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651135729&idx=1&sn=d51040d6c10c0666031d7f8dcaf25fb4": "行业实践｜电力行业数字化转型，应用风险漏洞谁来防？", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489854&idx=1&sn=1e0a63504777786c01f77ea4604a9551": "Mongoose 搜索注入漏洞复现与修复", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458594279&idx=2&sn=bba65c83cfc13e29b1d3bcebbe562ed2": "Pwn2Own 2025柏林赛落幕！29个零日漏洞曝光，百万奖金花落谁家？", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490103&idx=1&sn=432278ec94ada797568108539241ac0b": "【AI漏洞预警】Infiniflow Ragflow账户接管漏洞CVE-2025-48187", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491589&idx=1&sn=24950336ac9f53aa1ec1584c73a58f5c": "BurpAPI越权漏洞检测工具|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502414&idx=5&sn=7162f099562c67bb40635cb4eb23f583": "SysAid SysAid On-Prem 未授权 XML外部实体注入(XXE)漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1NTM4ODIxMw==&mid=2247501349&idx=1&sn=59bf10bba063b60bdb410a2b2227295e": "漏洞速递 | CVE-2025-29927漏洞（附EXP）", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502414&idx=3&sn=edae5292526e0e40d7c0ade7557df90e": "Apache IoTDB 需授权 代码注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497628&idx=1&sn=61a9e680026304bda5658427d781b52b": "RCE", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502414&idx=2&sn=e08d06704ad18be109b3687efc5c973a": "Ivanti Endpoint Manager Mobile 需授权 代码注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502414&idx=1&sn=e436f090f20203dae2788470d2e830f7": "Gnu Glibc 逻辑缺陷漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502414&idx=4&sn=a35a1079fd3a884216dc28f8d3af5297": "Fortinet FortiOS 身份验证缺陷漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497487&idx=1&sn=e40cf31a2c927023db8183d1175e2705": "【漏洞通告】glibc静态setuid程序dlopen代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487591&idx=7&sn=f7d37a10fbe119e782c7c4c2abf36665": "通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493178&idx=1&sn=0d4028eaae2e2be533e9e2773f0d5df7": "漏洞预警 | Optilink管理系统注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502414&idx=7&sn=72b2561ef284f3206a5cbf4f54eba279": "Google Chrome 访问控制不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487591&idx=5&sn=e28dd77522b9412f1e50fad4a4c40318": "【Web实战】一次空白页面的“妙手回春”嘎嘎出严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493178&idx=2&sn=5c4ca05702c3759560ca3f920b04e29b": "漏洞预警 | 力软敏捷开发框架远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493178&idx=3&sn=e9da86edd858bb077c5e6134e069540a": "漏洞预警 | NetMizer日志管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTYyOTQ5NA==&mid=2247487145&idx=1&sn=c089110d0633e7f0798f8191da30eaef": "商用漏洞扫描器的盲区：为什么越权漏洞总被漏检？", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247518934&idx=1&sn=597eb63142bac29bc6e2b8799d93c038": "30个云安全漏洞的发现与利用技巧，非常有用！", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655279619&idx=1&sn=c2e1e6d269e4a7a134eaed7013d7c6fd": "2025 HVV必修高危漏洞集合", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247489290&idx=1&sn=a19bddad3e733eb6b68ee4c010a45571": "Hazy Hawk DNS漏洞攻击：知名机构云资源被劫持，网络安全警报高涨", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491536&idx=1&sn=e08651804979dee3ed4ad293816140a0": "美特CRM upload3.jsp 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502414&idx=6&sn=ff90534f91198265ab19c5d635974345": "SysAid SysAid On-Prem 未授权 XML外部实体注入(XXE)漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTU2ODQ4Mw==&mid=2247487296&idx=1&sn=4a1242ec620fb15daa80efad6cf99ae6": "基于路由转发导致的权限认证绕过漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502414&idx=8&sn=5608f451446d34b3c8f6f699ea83c692": "Nodejs Node.Js 异常处理不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795169&idx=1&sn=d29b06d7eb3b372dd4945ba1c3820d05": "俄 APT 组织利用0day漏洞和擦除器加强对欧洲的攻击", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247492295&idx=1&sn=f6fe03aa31417ece81388366d75a5ef2": "漏洞预警 美特CRM mcc_login.jsp SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1NTM4ODIxMw==&mid=2247501350&idx=1&sn=ebf4178a51e69ff7028825f78d0fb3d0": "漏洞速递 | CVE-2025-0868 RCE漏洞（附EXP）", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493883&idx=1&sn=7dedce75c1a1e0e52ab06db60c0770a7": "4G通话（VoLTE）漏洞致仅需拨号即可定位任何O2运营商用户", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523071&idx=1&sn=8d8429be1cebb442aaca091ca13012be": "火狐修复Pwn2Own大会上利用的2个0day漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247491121&idx=4&sn=15052ca758a156db9fc23f0994da5c90": "30个云安全漏洞的发现与利用技巧，非常有用！", "https://mp.weixin.qq.com/s?__biz=MzkyNTYwOTMyNA==&mid=2247485405&idx=1&sn=beb431317f63213a3b1ce3caf311a704": "当漏洞成为“数字战争”的弹药，谁能改写攻防规则？", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582436&idx=1&sn=12b06818505f402adb0a43d0f8fed169": "黑客在Pwn2Own利用VMware ESXi和Microsoft SharePoint零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651463062&idx=2&sn=b4a9cf80bd7a6eebe34ae2ff379c6f1b": "信息安全漏洞周报（2025年第20期）", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261150&idx=1&sn=9f9b5e82296ea4a4ccb98a8c4d178877": "【CVE-2025-40634】缓冲区溢出 EXP 公布", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247545758&idx=1&sn=bb67c0afeb1a3252328109616e458ff4": "【漏洞预警】全球数万设备受影响！Clash用户小心：暴露Web控制端口=门户大开！", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247492458&idx=2&sn=d9dee6fdd77f7958e4c1c7017d219fcf": "HackProve国际漏洞狂飙赛来袭！奖金翻倍、积分冲榜，全球开启！", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489294&idx=1&sn=f072386155370c5ef7445d8624b8be07": "【漏洞通告】VMware vCenter Server命令执行漏洞 (CVE-2025-41225）", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524452&idx=1&sn=51c19d60867376f7f41d34025b31b63a": "【漏洞通告】VMware vCenter 认证后命令执行漏洞(CVE-2025-41225)", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489775&idx=1&sn=3ed3caadde8d55b8bc21e59f7074c953": "某礼品卡电子券收卡系统存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458594290&idx=1&sn=8c9c75889765c142a9cadf01dc6feaec": "Redis 漏洞分析——lua 脚本篇", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490108&idx=1&sn=437c672c043c061be53714a52ae1cc38": "【漏洞预警】FortiOS TACACS+身份认证绕过漏洞(CVE-2025-22252)", "https://mp.weixin.qq.com/s?__biz=MzIyMDEzMTA2MQ==&mid=2651168499&idx=1&sn=4796889b109dc91d051a195eb002e9c4": "2025年十大最佳漏洞管理工具", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247485022&idx=2&sn=90f73f6b0dac3ec07c2eb4bff9c96f3f": "CVE-2025-47916：Metasploit模块开源", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523082&idx=2&sn=4d5a25d58482d98bdb3b13320e03bb92": "NIST、CISA联合提出漏洞利用概率度量标准", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529982&idx=2&sn=83dfd9aa76d03b4d22e22c2638cad422": "突破限制模式：Visual Studio Code 中的 XSS 到 RCE", "https://mp.weixin.qq.com/s?__biz=MzU2NjI5NzY1OA==&mid=2247513025&idx=1&sn=8995ce6d3df8a1b9090755df52be6729": "OPC UA协议与漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484855&idx=1&sn=fbd0408fe1e921d65adf6f736435cfa6": "安钥®「漏洞防治标准作业程序（SOP）」征文启示 [2025年第20期，总第38期]", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523082&idx=1&sn=1ddbeb4f3e454706eafa9900777eed09": "VMware 紧急修复多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490397&idx=1&sn=d297b27606dab7d510399b202924f348": "【AI风险通告】vLLM存在远程代码执行漏洞（CVE-2025-47277）", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506411&idx=1&sn=f203edbcf801302cc15cf12841f0ab3b": "我的第一个漏洞赏金计划：我如何赚到 1,000 美元", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096252&idx=1&sn=2f0f81d26d721040020ceab8d5bdf46e": "VMware ESXi & vCenter 执行任意命令漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247497345&idx=1&sn=ce91a7ca3849f39847a2580b90e00d1d": "一个高性能的目录扫描工具，专门检测和验证 Web 中的路径遍历漏洞,通过异步并发扫描和智能 WAF 绕过技术，快速发现漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491604&idx=1&sn=5c9fdbe2381fa02b0b113c2d4d1946e8": "AboutSSRF一款基于Burpsuite MontoyaAPI的黑盒SSRF漏洞自动化检测插件", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486690&idx=1&sn=1edf88a3285d6b7f9ce75f4029eadb8e": "【漏洞预警】VMware VCenter Server 命令执行漏洞(CVE-2025-41225)", "https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247544884&idx=1&sn=82fe2afa774e253e020af6d28ecf0d9e": "【渗透实战系列】|54-小程序渗透记录 通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MzkyNjczNzgzMA==&mid=2247484547&idx=1&sn=6e16e54e1a96a10f763626e990d0c081": "漏洞挖掘—利用查询功能获取敏感信息（2）", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529982&idx=3&sn=cd0ae68d9599ac5c66a1868fa35a2305": "发现与 IXON VPN 客户端相关的三个新漏洞，可导致本地权限提升 (LPE)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492979&idx=1&sn=9a26d330e98f20f99a943d09bff5dbe7": "黑客在柏林 Pwn2Own 漏洞竞赛中凭借 28 个零日漏洞赢得 1,078,750 美元", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651321451&idx=3&sn=821456f16440650fb03a4c3b61a55746": "vLLM 曝高危远程代码漏洞，AI 服务器面临攻击风险", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484855&idx=2&sn=8e23287c2d5da0a9ea4574bc7fb17b8f": "【漏洞处置SOP】飞致云DataEase未授权访问控制不当漏洞（CVE-2024-30269）", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247554991&idx=1&sn=349b4d22b12fcd3a515d02f35327005e": "车载网络通信“CAN总线”的安全与漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651136952&idx=2&sn=69e69672adb30bdae6830130589359c4": "攻防技术观察| 试验性攻击工具利用Windows系统信任机制屏蔽Defender；可精准预测漏洞被实际利用概率的评估指标体系发布", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488490&idx=1&sn=a31e9acc3c762519b05168b72ae96024": "SpringBlade api∕blade-system∕menu∕list接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900577&idx=1&sn=c7f08fd41d1333cccb324baacf6a8b5d": "Samlify SSO 签名绕过 (CVE-2025-47949)：从XML签名本质到纵深防御", "https://mp.weixin.qq.com/s?__biz=MzU0MDI1MjUxMg==&mid=2247533628&idx=2&sn=44ccb79264efbbd0254cff57b4c4a08a": "2025攻防演练必修高危漏洞集合（1.0版）", "https://mp.weixin.qq.com/s?__biz=MzkwNjczOTQwOA==&mid=2247494686&idx=1&sn=1e20b9324dc3599560e8064fd4f47aa5": "工具推荐 | RCE命令无回显利用工具", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490120&idx=1&sn=ad898403409d5bc4b04695a8210c42a3": "【高危漏洞预警】VMware VCenter Server 命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MDI1MjUxMg==&mid=2247533628&idx=1&sn=9cc7fec6b77c1987729a9c01de53e3dc": "漏洞安全亦是国家安全|斗象晋级CNNVD国家漏洞库首批“核心技术支撑单位”", "https://mp.weixin.qq.com/s?__biz=Mzg3Mjg4NTcyNg==&mid=2247490453&idx=1&sn=a2248851ef6d20228658802b570c5d56": "漏洞复现|无垠智能模糊测试系统实战复现OpenSSL高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530046&idx=1&sn=2eaab2ebd8595d1d3ddb332557c83a59": "CVE-2025-26147：Denodo Scheduler 中经过身份验证的 RCE", "https://mp.weixin.qq.com/s?__biz=MzU5Njc4NjM3NA==&mid=2247496599&idx=1&sn=9cdd2833b203dbc756228948f6be0fad": "ChatGPT漏洞允许攻击者在共享对话中嵌入恶意SVG与图像文件", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247491702&idx=1&sn=cc0ac523b86b876c52a60d18ec785bc4": "某礼品卡电子券收卡系统存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523092&idx=2&sn=a5febb5cf97d5b007d31e1d71c58244a": "满分严重漏洞导致 MB-Gateway 设备易受远程攻击", "https://mp.weixin.qq.com/s?__biz=MzkzMTYyMDk1Nw==&mid=2247483853&idx=1&sn=e0efcfaf5be3978ccf6ebc28bde77a73": "代理工具 Clash Verge 客户端出现新的 1-Click 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247499166&idx=1&sn=b24591342347f5a63206029ea9b03872": "Microsoft Telnet 客户端 MS-TNAP 服务器端身份验证令牌漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503322&idx=1&sn=f502a2413a0ef8a73683a55f569d135d": "【成功复现】Gladinet CentreStack反序列化漏洞(CVE-2025-30406)", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490402&idx=1&sn=0be91c0559fd74fdaa7e1d690ce0605d": "【风险通告】VMware vCenter存在命令执行漏洞（CVE-2025-41225）", "https://mp.weixin.qq.com/s?__biz=Mzk1Nzg3ODkyNg==&mid=2247484099&idx=1&sn=658a1b6d2a58a76b2c10a229e1596104": "KEDACOM phoenix监控平台upload_fcgi任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490120&idx=2&sn=d9f4eab74bad4582854138a17f05b0a9": "【严重AI漏洞预警】vLLM PyNcclPipe pickle反序列化漏洞（CVE-2025-47277）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523092&idx=1&sn=53658193138b944b76bad2de5c9801f5": "Setuptools 漏洞导致数百万 Python 用户易受RCE攻击", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096259&idx=2&sn=d8d2730e6657e88318f2e82adfe92123": "多个 GitLab 漏洞使攻击者能够发起 DoS 攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247497351&idx=1&sn=dbd0b485f6a94cd50d1e7225916730ce": "一款专为安全研究人员和白帽子设计的漏洞赏金工具", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491545&idx=1&sn=15d26045141557b049c60a4f0198973d": "Ivanti EPMM 未授权远程代码执行漏洞(CVE-2025-4428)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491624&idx=1&sn=d3d39952455d901dbe67aa71b6c396da": "渗透工具箱V8 集成Web扫描、漏洞利用、抓包、免杀等等|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501099&idx=2&sn=33695589e4a03b131b18ffb1a4373bdb": "【漏洞通告】VMware vCenter Server认证命令执行漏洞(CVE-2025-41225)", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516677&idx=1&sn=8bd54d9cb3ad82b65bcf77877a9bf7f4": "漏洞赏金工具 -- BBtool（5月21日更新）", "https://mp.weixin.qq.com/s?__biz=Mzg2MjgwMzIxMA==&mid=2247485153&idx=1&sn=df4a9596cf936fe6efbd34bb4cd75520": "JWT原理及常见漏洞详解", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519372&idx=1&sn=50db0c7ee25f800969366f8c73e9e310": "PDF 生成器漏洞利用：查找 PDF 生成器中 SSRF 漏洞的完整指南", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247554886&idx=1&sn=b92b2a11c128532122d5ca74de178e49": "域0day容易利用吗", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497634&idx=1&sn=0365b5a0a464632f064e7d4224b145b7": "src漏洞挖掘必备利器", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247488640&idx=1&sn=41e022b30064dc14da381bd803fe3c13": "前瞻对抗｜这大概是首次，AI挖出了Linux内核可利用0day", "https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651207157&idx=1&sn=7756328ed7d6b73c0e9d042ccf620f64": "朱雀实验室协助vLLM修复CVSS 9.8分严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484085&idx=1&sn=e447afc95940697dfe60767d5170f6ad": "【漏洞预警】vLLM PyNcclPipe pickle反序列化漏洞（CVE-2025-47277）", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506453&idx=1&sn=1ba9bb6c10d82cb7347e6c5d5f3c4411": "Deep Recon 发现未经身份验证的上传和 IDOR 漏洞 — 获得赏金 $$$", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516684&idx=1&sn=ad218936b1c1986fd8805f5cd5d7c9c6": "某若Y Vue漏洞检测工具（5月16日更新）", "https://mp.weixin.qq.com/s?__biz=MzA3NzE2ODk1Mg==&mid=2647796499&idx=1&sn=b7283c7a51235fe2e3c43d4fe4f742e2": "SAST国标分析︱灵脉AI深度兼容GB∕T 34943∕34944-2017源代码漏洞测试规范", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247500026&idx=1&sn=992c5ad912c8e9fa7a9ddbf86876feeb": "浅谈src挖掘中——文件上传和XSS漏洞的组合拳", "https://mp.weixin.qq.com/s?__biz=MzU4Mzc4MDQyOQ==&mid=2247484786&idx=1&sn=4e9778c996104c01de488b160caa5358": "Clash Verge 客户端 1-Click RCE 漏洞与蜜罐利用分析", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484091&idx=1&sn=3e944b94f1673ef22c24744564aa4aa6": "【漏洞复现】Grafana XSS &SSRF & 账户接管（CVE-2025–4123）", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247491112&idx=1&sn=af7acbe749b1944b9066bcfac6a77e06": "能信安：漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU2MzY1NjU3Ng==&mid=2247485927&idx=1&sn=9db456328bbea7bde15e5f127405dc36": "企业内部安全漏洞修复流程的建立与思考", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064169&idx=1&sn=803b3b6b86b1bf480ceaca8bb9dabf2f": "信息安全漏洞周报【第023期】", "https://mp.weixin.qq.com/s?__biz=Mzg3MTU1MTIzMQ==&mid=2247497184&idx=2&sn=bf66200c70e5ee156d8588806cf02fc6": "等保测评中漏洞扫描：筑牢网络安全防线的关键利器", "https://mp.weixin.qq.com/s?__biz=MzIyMjQwMTQ3Ng==&mid=2247491417&idx=1&sn=91d65e10514e6fcaf5d6ac79e6a89331": "【国际视野】美国国家标准与技术研究院推出识别IT漏洞利用的公式", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490126&idx=1&sn=607c8cc65f9c89318775ac76f0b30de8": "【漏洞预警】Grafana未授权跨站点脚本攻击XSS&SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523102&idx=2&sn=3eb6fe83ca06d69dbd0a16a7c73dcde3": "Grafana 紧急提前修复已被公开的XSS 0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514405&idx=2&sn=95d5bbef875789924cf08280da99f6fe": "美国NIST、CISA联合提出漏洞利用概率度量标准", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523102&idx=1&sn=13f091a5db5a8f5cb5088945cf935fee": "BadSuccessor 漏洞究竟有多严重？Akamai 和微软意见不一", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499721&idx=1&sn=05d535e772a6012e657bcb94e57321dd": ".NET WebShell 绕过 EDR 监控，不调用 cmd.exe 也能实现命令执行", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492644&idx=1&sn=e8e146f8565e64702729b69dad2a78f4": "疑似俄罗斯APT28组织在全球攻击活动中利用0Day漏洞——每周威胁情报动态第223期 （05.16-05.22）", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261177&idx=1&sn=73668e9ea66320d7b0d76167ac1dfd2c": "【CVE-2025–4123】：Grafana SSRF 及帐户接管利用", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247488245&idx=1&sn=04eeae4a62701ab731c6f9e5bc6df6c7": "漏洞还是功能：MCP安全与逆向工程实践的权衡", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247490390&idx=1&sn=051b605eb42fcf605c275e5dba3a8d73": "XunFeng【适用于企业内网的漏洞快速应急，巡航扫描系统】", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247485541&idx=1&sn=80f90e21aa20e4e81632597c68ebabe5": "全网震颤！黑客利用文件上传漏洞化身“虚空主宰”，百万服务器集体沦陷！", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247517193&idx=1&sn=94bdf0006218aee0a2723c1c48d159ff": "漏洞预警｜Clash Verge 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795216&idx=1&sn=1d1b623d8520b78ff09b21f3fad1d925": "ViciousTrap 威胁组织利用思科漏洞用 5,300 台受感染设备构建全球蜜罐", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487971&idx=1&sn=e1c2e9da1dc3b83253e0ac336a42060c": "ViciousTrap利用思科漏洞构建全球蜜罐网络：5300余台设备沦为监控工具", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487813&idx=8&sn=305b1ec9ee245a70aee3824b0c92a73c": "通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795216&idx=2&sn=d7cde799c6ed900c2698161c0c56e9e6": "因不满漏洞分级，发现者公布WinServer2025 0day细节", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247485423&idx=1&sn=d9bde7cd03a3dc78b49d5fea5db6ef8f": "代码审计| U8 FileManageServlet 文件读取漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520685&idx=1&sn=2148af7e1e40d55f1ed68fc0748a6e17": "Apache Httpd 常见漏洞解析（全）", "https://mp.weixin.qq.com/s?__biz=MzIzMDQwMjg5NA==&mid=2247507223&idx=1&sn=b55962eb35d5b103d92307f7e2f0b138": "【一周安全资讯0524】《2025年深入推进IPv6规模部署和应用工作要点》印发；英特尔CPU曝重大安全漏洞，可导致内存泄露", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491626&idx=1&sn=f55c457d659713b518df8651942f1537": "渗透工具箱V8 集成Web扫描、漏洞利用、抓包、免杀等等|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530109&idx=1&sn=75ff148b005e2bce0789e1879e64c919": "Linux内核漏洞利用CVE-2025-21756：Vsock 攻击", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487813&idx=6&sn=82b64fad1360284dfe652b3f1df2aea8": "【Web实战】一次空白页面的“妙手回春”嘎嘎出严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491565&idx=1&sn=b56914958f73bce32eb0443897986322": "杭州九麒科技 BigAnt-Admin uploadMultipleFile.html 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYwMTY5MA==&mid=2247522496&idx=1&sn=03908f5716152bca098c167b96452dd1": "翻倍回归，实物好礼。端午挖洞，漏洞必“粽”！", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506454&idx=1&sn=b4531761caf101bef0abf29b9897baca": "Grafana CVE-2025-4123：SSRF 和账户接管漏洞完整解读", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487813&idx=1&sn=c8f2fc003c6b314c308c9b2c966f62db": "全网首发！CVE-2025-24813 Tomcat 最新 RCE 分析复现", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247489320&idx=1&sn=f7ef174c29d419e8e8eb311fe56b09b3": "黑客利用Cisco路由器漏洞建立大规模Honeypot网络，全球感染5300多台设备", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247490577&idx=1&sn=5caabf72c585d8dfee19437414939fee": "【src】SRC漏洞挖掘｜优惠券叠加思路分享", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487871&idx=1&sn=931747ed01161c8355ec47b3b1450df2": "经典华为路由器漏洞复现详细分析(包括整个漏洞链)", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485719&idx=1&sn=80c65694743eb5e5397583d0620d9b99": "通过隐藏接口发现ruoyi和druid漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530175&idx=3&sn=ed3f3dfe8ff9ec12404b9144c9d870e5": "Windows Server 2025 漏洞（BadSuccessor）暴露 Active Directory 帐户", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096267&idx=2&sn=8244bc202073633729ee396fd62547de": "Canon 打印机存在获取管理员权限漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520697&idx=1&sn=51ca3d136ea125c1f8234233268645d9": "PHP漏洞在白盒审计中的技巧（1）——PHP弱类型特性", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491575&idx=1&sn=0be139de91d844441cd7997712973fd0": "万户 ezOFFICE govdocumentmanager_judge_receivenum.jsp SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096267&idx=1&sn=d22225f6ef431db6c818763e332e5630": "Apple XNU 内核提权漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651321719&idx=3&sn=26247fefa30803d1ea9eb6b0bf5265bf": "GitLab Duo AI编程助手漏洞可让攻击者通过隐藏提示劫持AI响应", "https://mp.weixin.qq.com/s?__biz=MzI0MTUwMjQ5Nw==&mid=2247488480&idx=1&sn=8afdd1d2cfe9f2e9f4658c8ea95d2469": "XXE：高级 XXE 漏洞利用完整指南", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU1MjgwNA==&mid=2247487407&idx=1&sn=b0189ed709faf9ebae19ae93fbff7191": "Java代码审计 | Alibaba Sentinel SSRF漏洞代码审计", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652115887&idx=1&sn=b4d3b673f74438831977b77e70d5fcf1": "汉堡王备份系统RCE漏洞被4000美元售卖", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491658&idx=1&sn=76946720de56c1de24e078e3b915fce0": "从 SSRF 到 RCE：一次众测Fastjson<=1.2.68反序列化RCE过程|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652115889&idx=2&sn=db33013e07459b07eef08fde86cce8db": "某医院小程序系统存在水平越权漏洞被约谈", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491585&idx=1&sn=52371eb8c1d25ba8b609667758a65c0c": "宏景eHR searchCreatPlanList.do SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247497458&idx=2&sn=83b3d6b176b026d4e3dd7f6ad53ca91f": "文件包含漏洞：一场网络安全的“谍影重重”？", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247526395&idx=1&sn=279a519e4641fc56d846eada10848a35": "BurpSuite插件 | 告别手动测试，快速挖掘漏洞！", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247486722&idx=1&sn=2836d5e911cdf2aa4fc1475c3d04ebeb": "漏洞挖掘 | 简单的弱口令到垂直越权思路分享", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247487021&idx=1&sn=5a6ba91dcddd6ea6ee05af338654b86b": "记一次拿下全校信息的漏洞+垂直越权", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247497368&idx=1&sn=3601f98d7f63a8be5b429802b5b2d26d": "一款功能强大的通用漏洞扫描器-Sirius！", "https://mp.weixin.qq.com/s?__biz=MzkwNjczOTQwOA==&mid=2247494692&idx=1&sn=684617c4357b88abab49bc9ffcaf9a76": "工具推荐 | Swagger API漏洞自动化填充参数利用工具", "https://mp.weixin.qq.com/s?__biz=MzA5NDI0NzY3Mg==&mid=2247484887&idx=1&sn=85b0924c6702a9cdaedf8f3b651a8771": "crAPI - 存在漏洞的API项目", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492983&idx=1&sn=3e2ccbfad6e42c1a2476834c0dce0e29": "英国电信服务提供商 O2 UK 修复了通呼叫定位用户位置的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NDk4MTk5OA==&mid=2247485572&idx=1&sn=f138b97c3132aa5a0806897a72b12cd2": "Ai + burpsuite@漏洞自动化检测搭建", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900583&idx=1&sn=8ebdfbb9576a61b04f7c64facaa10bcb": "APT利用SaaS零日漏洞(CVE-2025-3928)攻陷Azure云！Commvault事件剖析M365数据安全与防御体系", "https://mp.weixin.qq.com/s?__biz=MzkxMzIwNTY1OA==&mid=2247512147&idx=1&sn=9471a118a3ce4d78f68a22710993cdd9": "一款开源免费的漏洞扫描工具-Sirius", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795228&idx=1&sn=6e01605f34eba5d585ca6b69e0b73160": "APT组织利用 Ivanti 漏洞攻击关键部门", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485756&idx=1&sn=d9a887e689e231310571669ec835b2ff": "任用账号密码重置漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493213&idx=1&sn=fbb80feb41193cbffbc16c9aeef6ad20": "漏洞预警 | VMware vCenter Server认证命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493213&idx=2&sn=b03ad893449bbbdba54c70468c32496e": "漏洞预警 | 上讯信息运维管理审计系统注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487889&idx=2&sn=1fda19011d2dc80b33f1c56c4b52d025": "经典华为路由器漏洞复现详细分析(包括整个漏洞链)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493213&idx=3&sn=0e5148e388ecd76a2f82a33b155dc8bf": "漏洞预警 | 妖气山视频管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610861&idx=4&sn=8d58deaa3f6602b6e48d52bda5f9d2cb": "一款专为安全研究人员和白帽子设计的漏洞赏金工具", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520709&idx=1&sn=676ba7b4e5166fdb4039f80f1288888c": "PHP中的session漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247507055&idx=1&sn=f87c3e85fc53e0b53da2054598728cda": "Web3 漏洞眼: Cetus AMM 2 亿美元被黑事件", "https://mp.weixin.qq.com/s?__biz=MzkzNzQyMDkxMQ==&mid=2247488187&idx=1&sn=e139a99381ec99c5c0ea6edbe1d75512": "【两万字原创长文】完全零基础入门Fastjson系列漏洞（基础篇）", "https://mp.weixin.qq.com/s?__biz=MzkzMTYyMDk1Nw==&mid=2247483863&idx=1&sn=0be008eb5656674456686070d3870748": "AI 赋能漏洞变种分析：从已知到未知，Hacktron 发现 Ivanti EPMM 新攻击向量的启示", "https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247484806&idx=1&sn=be2659279b030eef5e06feca6531b7ad": "【漏洞预警】Grafana未授权跨站点脚本攻击xss和SSRF漏洞（CVE-2025-4123）", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496002&idx=2&sn=85d90003c5777cda7d6cdc539c3b982d": "上周关注度较高的产品安全漏洞(20250519-20250525)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069834&idx=1&sn=335db8c1f2b23d140ba49e50ec855ed0": "【安全圈】ViciousTrap 利用思科漏洞操控全球 5,300 台设备构建蜜罐监控网络", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247519543&idx=1&sn=1a444807e71915e56cc6ce6ba82aa495": "工具 | 漏洞挖掘小工具-SeeMore", "https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659211870&idx=1&sn=e5eb84aa661afeffb2798381b6d15335": "浅析SpringBoot框架常见未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651321761&idx=4&sn=8aa3eb79d0743637147049e31344da8e": "黑客组织ViciousTrap利用思科漏洞入侵84个国家，构建全球蜜罐网络", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506384&idx=1&sn=d41497eacbe57bb1d5fa6beafb7f122a": "每周网安资讯 （5.20-5.26）| Poedit 安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491599&idx=1&sn=165d0ffc3c03a14a2d0a30a5801c2a54": "Pichome 任意文件读取漏洞 (CVE-2025-1743)", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651136993&idx=2&sn=24ab2dba798f4bcf2ce2dab974ee8d55": "地盘战打响，DragonForce争夺勒索软件市场主导权；AI助手DIANNA首次成功识别大语言模型生成的恶意软件 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496002&idx=1&sn=42ceff19e40ee69f47921352b4acc3b9": "CNVD漏洞周报2025年第19期", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247496855&idx=2&sn=19a9d8e0672c21ea10d987febab0d279": "历史首次！o3找到Linux内核零日漏洞，12000行代码看100遍揪出，无需调用任何工具", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507761&idx=1&sn=ef3242ad509ed6a12634f21f802dcd5d": "漏洞通告 | Grafana 开放重定向与服务端请求伪造漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932190&idx=1&sn=c30630174b2223f93458c6ee9e77de2b": "OpenAI大语言模型漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788619&idx=1&sn=7edd031550c18e5bc06975a63cc61a90": "AI首次独立发现Linux内核可利用0Day漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MjcwMTgwOQ==&mid=2247492400&idx=1&sn=b6a3819edf4e9dfeb14515aab465825a": "618 领券 | 稍后读软件 Pocket 即将关闭，这个更强的工具能担起重任！", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538917&idx=1&sn=73d4461f6b7ff10643dc088854fec577": "关键基础设施遭受攻击：漏洞成为黑客首选武器", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514421&idx=2&sn=cce953e1f93937d286c85ab93f963865": "首次利用OpenAI o3模型发现Linux内核零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900594&idx=1&sn=49967bc1a632a5d21d61181929a64604": "Windows Server 2025 “BadSuccessor”漏洞解析：dMSA 新特性反成“权限赠予后门”，域控一击即溃", "https://mp.weixin.qq.com/s?__biz=MzI0MTUwMjQ5Nw==&mid=2247488481&idx=1&sn=b98bf997e66b4d0f1196ca7c19b0dfd0": "查找高级文件上传漏洞的完整指南", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491671&idx=1&sn=c5f692e69aee368494586d30ac95d47b": "全新下一代目录爆破扫描工具，一个全方位的目录爆破的解决方案|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490133&idx=1&sn=ddd170b9cadad60d41c6581c82f3c8ac": "【漏洞预警】新华三Gr-5400ax缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503427&idx=1&sn=68e2ee9124e84ee0b05694b0952cec7f": "安全热点周报：Ivanti EPMM 远程代码执行漏洞已被利用于有限的攻击中", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486487&idx=1&sn=3889ebfbd2f4edc0c3901392d6ce9585": "白盒Sign加密到前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMTIyMjg0NQ==&mid=2247495770&idx=1&sn=bf9b4d19d561f3a167dd614346a65b4f": "当漏洞成为“数字战争”的弹药，谁能改写攻防规则？", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651248030&idx=1&sn=1843664c0aeac8f18ff074f0e9ec2092": "首次利用OpenAI o3模型发现Linux内核零日漏洞 | Palo Alto公布千亿营收冲刺计划，网络安全迈向平台化寡头竞争", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247490772&idx=1&sn=91e17e7d01c13ca1a0cb4f15eccf1d69": "实战SRC挖掘｜微信小程序渗透漏洞复盘", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247518969&idx=1&sn=7783174861ed4ff1671378b9289992b8": "等保测评10大高频漏洞：谁将SQL注入挤下神坛？", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795241&idx=1&sn=8c0be31950ee1caba4515bd8c6e78567": "黑客利用 0day 漏洞通过 Commvault 入侵美国云平台", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247550223&idx=1&sn=080537e5dae12585a760656d296060ee": "挖洞日记 | 记一次轻松拿下统一小通杀漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247495068&idx=1&sn=0103937e748038484a8b0477280bfba1": "2025攻防演练必修高危漏洞集合（2.0版）", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499748&idx=3&sn=f1d9403b08dbf8776ad839cb85b4a94f": "WebShell 绕过 EDR 监控，不调用 cmd 也能实现命令执行", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795241&idx=2&sn=1d6d27a7a4709b3fe42e178e6a36ca8f": "Apache Tomcat 9.8分RCE漏洞曝光，PoC 已经公开", "https://mp.weixin.qq.com/s?__biz=MzkzMTYyMDk1Nw==&mid=2247483869&idx=1&sn=2d72368d0c27aad90b94fc523069a699": "研究者利用OpenAI o3模型发现Linux内核远程零日漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU1MjgwNA==&mid=2247487425&idx=1&sn=b463a6fd6d2a6b341874eeb038c16044": "Java代码审计 | JFinalCMS 5.1，通过反射调用 FastJson 漏洞触发点，有趣。", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652251917&idx=1&sn=c14ea2340b3bf7692b029ded8d2084cc": "西班牙汉堡王备份系统遭遇RCE漏洞威胁，黑客4000美元叫卖访问权限。", "https://mp.weixin.qq.com/s?__biz=MzU4OTg4Nzc4MQ==&mid=2247506144&idx=1&sn=0c45651d114b0ae75e3c28b22524ef6a": "漏洞挖掘必备利器推荐", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247491219&idx=1&sn=971cf60237ff3d69e0428ef50a39f2fc": "白盒Sign加密到前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491608&idx=1&sn=2dfeb11acdab967374f23e43c25dcc1c": "WordPress Madara 本地文件包含漏洞 (CVE-2025-4524)", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247526415&idx=1&sn=99f277b93b1a927837ff376f50d001af": "记一次实战小程序漏洞测试到严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk1Nzg3ODkyNg==&mid=2247484110&idx=1&sn=0d12f8dc81d838679c88fcd84e2cad8e": "PagerMaid-Pyro run_sh-rce命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247486753&idx=1&sn=3abdaa3b245cc30c92e6322dcc3f1c70": "黑客发起全球间谍行动，政府邮箱被利用XSS漏洞入侵", "https://mp.weixin.qq.com/s?__biz=MzkyOTQ0MjE1NQ==&mid=2247499635&idx=1&sn=cca778a3a8b5c545de9edc8d2a4f2c92": "【漏洞与预防】Microsoft Windows 文件资源管理器欺骗漏洞预防", "https://mp.weixin.qq.com/s?__biz=MzkyNzg4NTU0NQ==&mid=2247485589&idx=1&sn=308a44fe96ac6e8ca80a8e1f5d0f5b56": "Zer0 Sec团队-某SRC任意文件读取漏洞挖掘案例", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530229&idx=3&sn=70f3209757ed00e0906074d10d488d38": "发现与 IXON VPN 客户端相关的三个新漏洞，可导致本地权限提升 (LPE)", "https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650468805&idx=1&sn=3b1ae29229283c236d11a6e8d149bc7e": "十四年连冠｜绿盟漏洞扫描与管理产品再获佳绩", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY1NTI5Mw==&mid=2247492421&idx=1&sn=899c37a36234e4c8668f3f56303615fe": "2个月荣登字节SRC年榜第一，云上漏洞秘籍首公开！", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486382&idx=1&sn=77eaf3570de212554a2bdba0e7f1d755": "若依Vue漏洞检测工具 - ruoyi-Vue-tools", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523124&idx=2&sn=11426f6aaac01c747218a552ac6e5129": "GitLab Duo 漏洞可导致攻击者通过隐藏的提示劫持AI响应", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096281&idx=2&sn=eacfc63c8ed2750785941e88c3fd39d7": "Apache Tomcat 允许远程执行代码漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523124&idx=1&sn=1a8e46e871f1fae51bb1c752be774842": "CISA提醒注意已遭利用的 Commvault 0day漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247521136&idx=1&sn=e6e3e3b78b2343b548d40246af0c841f": "记某众测Fastjson<=1.2.68反序列化RCE过程", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651321929&idx=3&sn=06c0967ba8410e5a847655591077514b": "Windows Server 2025 \"BadSuccessor\" 漏洞曝光，可导致域控接管", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651321929&idx=4&sn=7c4223920cb17acbc65fb665c7da7365": "Mesh Wi-Fi存在CVSS 9.1分高危漏洞，设计缺陷可被用于数据帧注入攻击", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247491246&idx=2&sn=f2821c44d28004e6cdeda1a403564f5f": "雷神众测漏洞周报2025.5.19-2025.5.25", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503419&idx=1&sn=ec858e748fb40bf4b477958bc4ede59b": "雷神众测漏洞周报2025.5.19-2025.5.25", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096281&idx=1&sn=de29f14ed3da4e130ab8507f590898de": "Arm Mali GPU 漏洞允许绕过 MTE 和任意内核代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649173069&idx=3&sn=2d17e34234a8bcc099915e7259d98609": "通报丨ComfyUI存在多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490142&idx=2&sn=1b3a904c690bb5f4b6fcc44d8df3cdca": "【漏洞预警】DedeCMS信息泄露漏洞(CVE-2025-5137)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488502&idx=1&sn=c417e10a497251134c3d81775de5d501": "Panalog大数据日志审计系统sprog_upstatus.php存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651137007&idx=2&sn=1aaad1f68d3e1cc0bb3260721d30302c": "量子计算破解RSA加密难度降低20倍，后量子密码学迫在眉睫；国家网络安全通报中心提醒：ComfyUI存在多个高危漏洞 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652115908&idx=2&sn=367490ce902e04506aa0eeed4a4df3ab": "办公平台存在安全漏洞！某国有企业违反《网络安全法》被处罚", "https://mp.weixin.qq.com/s?__biz=MzkyNjczNzgzMA==&mid=2247484564&idx=1&sn=6fb78c41406e38426eb86081c19246cc": "漏洞挖掘—利用查询功能获取敏感信息（3）", "https://mp.weixin.qq.com/s?__biz=Mzg2OTg5NjE5MQ==&mid=2247485290&idx=1&sn=54c83a4634320e1fdb80ed018b00c8c6": "【DDDD二开】修复bug 新增指纹poc 新增功能", "https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247535924&idx=1&sn=6fb1cc1ee15c4e163ede7fc4914209e6": "独家洞察｜Mallox勒索团伙疑似继续利用产品漏洞攻击投毒国内数百个资产", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493239&idx=3&sn=e60c83d9ba5b3fa37d698e3f080ff9af": "漏洞预警 | 用友U8Cloud任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493239&idx=2&sn=ea1367c3c4f9cfecdd1cd04ded2ceccb": "漏洞预警 | 智慧校园(安校易)管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247499227&idx=1&sn=73bbfba76dd660bbc59316c7d3bfcd52": "EMQX命令执行后渗透", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247485063&idx=1&sn=4fd13821611ba0fa4db6c3c5dda51a33": "新手也能学会的安卓漏洞！手把手教你查出 App 数据泄露！", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490142&idx=1&sn=208226258cd185a7acfbdbfd55481e6d": "【高危漏洞预警】Wing FTP Server安全漏洞CVE-2025-5196", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247497264&idx=1&sn=a416851315173135e64299b51984541c": "CVE-2024-45436:Ollama ZIP文件解压导致的命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610894&idx=4&sn=a4799ef6807263051f8dcfca295fb4e9": "一款开源免费的漏洞扫描工具-Sirius", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487440&idx=1&sn=008313c2fd51c8b9e0470334e5ac0513": "通达OA OfficeTask前台RCE、SQL注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610894&idx=1&sn=af94a6c952aa9508a50dd00de20f2126": "涉案151人、4300余万元 警方侦破一起侵犯公民个人信息案；|阿迪达斯数据泄露事件：第三方服务商漏洞致客户信息外泄", "https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247497468&idx=2&sn=508b2f0a56e3aeacd8f66a472486cf32": "网络安全漏洞扫描：别再迷信工具，先搞懂这些事儿！", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493937&idx=1&sn=fd643ae0b90716be724efc591b46e96a": "DragonForce操作者利用SimpleHelp漏洞链式攻击某MSP服务商及其客户", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491617&idx=1&sn=6644d7a7e9a8a5e5201ceacfd085c46a": "InvisionCommunity 远程代码执行漏洞 (CVE-2025-47916)", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247490813&idx=1&sn=3d883c634ebd693977d0d5a25a6ec412": "渗透测试 ｜ 分享某次项目上的渗透测试漏洞复盘", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651248034&idx=1&sn=e62faedf047a36698e7e4968415855ad": "“开盒”，坚决打击！| Windows Server 2025 \"BadSuccessor\" 漏洞曝光，可导致域控接管", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652251924&idx=1&sn=351ee525acf88eca45f1ceefe54feb57": "国家网络安全通报中心提醒：ComfyUI存在多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655280643&idx=1&sn=d29834cc9689633efe690b4732ccb92b": "2025 HVV必修高危漏洞集合2", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651463074&idx=1&sn=85acc3cb8d7a6d3136d4804cef124728": "信息安全漏洞周报（2025年第21期）", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247624639&idx=3&sn=8cb76c24e331ca965cf8085ec68d31a0": "人工智能自动化模糊测试：如何自主发现汽车软件中的漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664243080&idx=2&sn=f3ace9c6fac492cbef8ab21825036bda": "关注 | ComfyUI存在多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247489213&idx=1&sn=d4e4580e77b79aa9d7736bcd79a22ecc": "实战EDUSRC挖掘｜微信小程序渗透漏洞及getshell复盘", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493239&idx=1&sn=2ad4c6a9c3df1465a9ebfccfff088411": "漏洞预警 | FoxCMS SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMDE5MDI5Mg==&mid=2247509231&idx=2&sn=0a6f372871ff311926ba91a8708e3f2e": "SAST国标分析︱灵脉AI深度兼容GB∕T 34943∕34944-2017源代码漏洞测试规范", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514434&idx=2&sn=19b30608f4a701f991edf166024d4d6f": "北京警方通报：境外黑客组织利用ComfyUI漏洞对我实施攻击", "https://mp.weixin.qq.com/s?__biz=MzA5NDI0NzY3Mg==&mid=2247484912&idx=1&sn=7868ebacb71e9eb162686ab99cf03d8d": "Retire.js - 检测JavaScript依赖漏洞的安全工具", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538958&idx=2&sn=609ff480e7b89259dea2743f02dd9059": "已公开漏洞的认知“真相”", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247488566&idx=1&sn=02dcbc079feef0474efaac6fef9f91fc": "逐帧分析：Kernel Streaming 持续暴露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk1NzMwNTM5NQ==&mid=2247486150&idx=1&sn=cfa0a2b0886e123f79b42eb813ba429e": "自学黑客技术多长时间能达到挖漏洞的水平？零基础入门到精通，收藏这篇就够了", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485317&idx=1&sn=0b31c80b87f34af3ab33021b8697920c": "紧急预警！Samlify SSO 签名绕过漏洞（CVE-2025-47949）解析与防御指南​", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530246&idx=3&sn=bf5fc5129373658b9aeb7e2260f705d1": "Mimo 回归：CVE-2025-32432 被用于加密货币挖矿和代理软件活动", "https://mp.weixin.qq.com/s?__biz=MzA3NzgzNDM0OQ==&mid=2664995100&idx=3&sn=3e84ad389f64c458d97638e803adceef": "【业界动态】ComfyUI存在多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485317&idx=2&sn=04447863a12ee6db59848d6d73655902": "Vite开发服务器任意文件读取（CVE-2025-30208）", "https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247600035&idx=2&sn=b9b9043eddaa948747563c1262352a9b": "北京警方通报：境外黑客组织利用ComfyUI漏洞对我实施攻击", "https://mp.weixin.qq.com/s?__biz=MzkzMTY0MDgzNg==&mid=2247484490&idx=1&sn=1108796cd3681ad4d71bf145929026e2": "GitHub MCP Server漏洞：通过MCP访问私有仓库", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651137030&idx=2&sn=466072b21f20a9efd87f6114ce1557f8": "NASA开源软件被曝存在多个安全漏洞；提示注入威胁：GitHub MCP服务器漏洞允许攻击者访问私有代码库 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488513&idx=1&sn=bf90fe02d66ceea05dd6891a66f0aff2": "PagerMaid-Pyro run_sh接口存在远程命令执行漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069865&idx=1&sn=e29ae988e9c671b37c0b95f70beaf6d5": "【安全圈】全球互联网因BGP协议漏洞出现大规模路由震荡", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484860&idx=1&sn=8706853bda9e4ff3820f973f4c1a10af": "安钥®「漏洞防治标准作业程序（SOP）」征文启示 [2025年第21期，总第39期]", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651321972&idx=4&sn=e255487c860340a366b40b36be9e271d": "阿迪达斯数据泄露，第三方服务商漏洞致客户信息外泄", "https://mp.weixin.qq.com/s?__biz=MzkxMDcxODg2OQ==&mid=2247483849&idx=1&sn=f364a8c62bb78c55eb2a58bdcbcea380": "AI 安全｜DIFY 大模型平台漏洞预警（已复现）", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651321972&idx=1&sn=a781cae82004337aa46c61fb54bf864c": "GitHub MCP服务器漏洞使攻击者可访问私有代码库", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523133&idx=1&sn=bf9dda6dcef75f6de012aa77866b6072": "DragonForce 勒索团伙瞄准MSP，发动供应链攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NDUxMTI2NA==&mid=2247485130&idx=1&sn=32e88952742937670334c31a559fe750": "【漏洞复现】dify任意密码重置", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247542435&idx=1&sn=eac5973134804eb38d96bdfc769093ab": "官方通报ComfyUI存多个高危漏洞：已被境外黑客利用对我国网络实施攻击", "https://mp.weixin.qq.com/s?__biz=Mzk0NDM1MDkyNw==&mid=2247547141&idx=1&sn=716b2754bca3bbf8cb1051766ccb7350": "MVS系统漏洞检测产品亮相OpenHarmony安全委员会，展示终端安全实践成果", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727845584&idx=1&sn=c13de1d950bf86c3b5650e4f98717c8d": "Netfilter Tunnel 之殇：CVE-2025-22056分析", "https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932200&idx=1&sn=ead3dc6e3d8a36b05a1a74ecc1ddf4fc": "AI工具ComfyUI惊现多个高危漏洞，已有境外组织发起网络攻击", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247492603&idx=2&sn=013df9f9a54c65cd271466572626705e": "Windows Server 2025 \"BadSuccessor\"漏洞可导致域控接管（PoC已公开，暂无补丁）", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484102&idx=1&sn=c379f685fa4de8feb2eae15f399a0df1": "【漏洞复现】vBulletin replaceAdTemplat 远程代码执行漏洞（CVE-2025-48827∕48828)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490153&idx=1&sn=b13f80c9c3dae8d161d3dcdcb7883cfe": "【严重漏洞预警】vBulletin replaceAdTemplat远程代码执行漏洞（CVE-2025-48827）", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651321972&idx=2&sn=30484ea29b1059a42eff9d3d3ccddf3a": "2个月荣登字节SRC年榜第一，云上漏洞秘籍首公开！", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485857&idx=1&sn=68c4871e03965c933cea638f4dd70fc0": "英飞达影像存档与通讯PACS系统 WebUserLogin.asmx 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247640068&idx=3&sn=3df2ba81a343350bbe1f28027c22b625": "Salesforce 将以 80 亿美元收购 Informatica", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490153&idx=2&sn=17860b8ad80dd13fe51616ba590c72c2": "【AI高危漏洞预警】LLama-Index CLI命令执行漏洞(CVE-2025-1753)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491712&idx=1&sn=5f83947a4b5ac349589e70690d137f4f": "Windows10 Penetration渗透系统，一套环境通吃内网、Web、APP全渗透，工具包实战指南|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900623&idx=1&sn=994a88126abfed4b2bd10627e80437d3": "【APT与高危漏洞追踪】国家级黑客UNC5221利用Ivanti漏洞，关键基础设施安全再敲警钟", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651248038&idx=1&sn=730bfd35d652c9f7d2a1e99a6be3e26b": "北京警方通报：境外黑客组织利用ComfyUI漏洞对我实施攻击 | GitHub MCP服务器漏洞使攻击者可访问私有代码库", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493251&idx=1&sn=01de37e5ce0198bc0d581cb625824c0a": "漏洞预警 | 上讯信息运维管理审计系统注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247624653&idx=1&sn=28db6c14f3591b8196eed1340c58a523": "AI用于软件安全和漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485328&idx=1&sn=7a0a77977a9916697db3f91f6372d3cd": "CVE-2025-24054的漏洞深度解析与 PoC 利用指南", "https://mp.weixin.qq.com/s?__biz=Mzg2OTU3MzI1OQ==&mid=2247486137&idx=1&sn=fee3318906ff4908ee48a1f0dec231eb": "《AI黑客时代：用DeepSeek构建智能渗透机器人，让漏洞验证自动化飞驰》", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487999&idx=1&sn=7c8f914e1ab77f146c33404799bb8db6": "紧急警报！Mimo黑客利用Craft CMS高危漏洞发动双重攻击：挖矿劫持+流量窃取", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493251&idx=3&sn=b1787bd3b9aea2069a2ce3a456c5aa7d": "漏洞预警 | 满客宝后台管理系统任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493251&idx=2&sn=82ac86f0154f844c3b70f60d2d65ac4a": "漏洞预警 | JEEWMS任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610910&idx=4&sn=2bf195e4c5cd6efeedf8043455f7ed0b": "BurpSuite插件 | 告别手动测试，快速挖掘漏洞！", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247519554&idx=2&sn=763611f710fb28ec096e6967fe96f2e9": "ofcms的XXE漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkzNDI5NjEzMQ==&mid=2247484699&idx=1&sn=7a8e7cd8363e5d05fa489ccf54dd75af": "攻防演练连个Nday都扫不出？你只是Nday的打开方式不对！", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247486223&idx=1&sn=0e857a26fc61584767ec53eff5c40121": "突发！土耳其关联APT组织利用零日漏洞，监控伊拉克库尔德武装！", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506544&idx=3&sn=36333804dd8cbb762618db1e2489b7e1": "我如何利用错误配置的 CORS 漏洞赚取 $$$", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487445&idx=1&sn=d783a258afbc17943c5187c0cd1efd9b": "CVE-2024-6235 PoC NetScaler 控制台漏洞可导致管理员访问", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYxMjk0Mw==&mid=2247490564&idx=1&sn=b21020d985bae3bd807b1e3a8eb8d14a": "成都朗速ERP系统高危漏洞曝光！任意文件上传（附修复方案）", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610910&idx=1&sn=b2d51a5eeaf6c9d65136ea6e51ab56c2": "公安机关将公开通缉台黑客；|全球互联网因BGP协议漏洞出现大规模路由震荡；|苹果五年拦截90亿美元欺诈交易；", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491626&idx=1&sn=ab258a801fb340c4bc6ec9acad02f31e": "申瓯通信 在线录音管理系统 index.php 存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk1Nzg3ODkyNg==&mid=2247484116&idx=1&sn=8f852e246034721c5f5767262550e80e": "成都朗速ERP系统WebDwgDefault.aspx任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MTUwMjQ5Nw==&mid=2247488861&idx=1&sn=36092d38e428c6737bfc7a2291f944c2": "逻辑漏洞-使用 SSO 登录进行帐户接管", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485328&idx=2&sn=d8fcb14e80a40517b3c3d4a7f6a9a3be": "​​CVE-2025-21333 漏洞深度解析与 PoC", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247491713&idx=1&sn=35eb54f2e0199e3f7f5de84f67709c3e": "白盒Sign加密到前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzQyMDkxMQ==&mid=2247488205&idx=1&sn=07a9e01c17f5cfb38760b833ca7154e5": "ofcms的XXE漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247499234&idx=1&sn=302778f0d6709a3b6ba6e7002fe7ed2a": "EMQX后台插件命令执行", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486510&idx=1&sn=7a0166be0ab7a08b67e8717c0a493179": "端午活动开启！白盒+黑盒双修来袭！知名小朋友（代码审计）联手地图大师（企业SRC漏洞挖掘），端午节限时大放价！", "https://mp.weixin.qq.com/s?__biz=MzA4MzMzOTQ4Mw==&mid=2453672669&idx=1&sn=71417cae2e7bee44452d6b0b59147419": "漏洞致命主义已经结束：为什么身份威胁预防是网络安全的未来", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485328&idx=3&sn=e9f38cccf7a23f748be4b9a79a4fe179": "​​CVE-2025-24813 Apache Tomcat RCE 漏洞深度解析与 PoC", "https://mp.weixin.qq.com/s?__biz=MzkxNjc0ODA3NQ==&mid=2247483959&idx=1&sn=c804f2123e5364505e6d5b5ce8c556c2": "如何通过一个SSRF漏洞挖出百万用户数据", "https://mp.weixin.qq.com/s?__biz=Mzk0MzYyMjEzMQ==&mid=2247489499&idx=1&sn=5c212d09a83dfe975227bc478b0114df": "不容忽视的威胁：探索与JWT相关漏洞（另类的越权）", "https://mp.weixin.qq.com/s?__biz=Mzk0MzYyMjEzMQ==&mid=2247489500&idx=1&sn=59a42b9399b76744b3f91a726a0a112b": "SSRF漏洞详细讲解：攻击者是怎么“骗”服务器发起请求的", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501121&idx=2&sn=50940420fb1e9fde2dce1f8f6a5226ae": "【漏洞通告】Google Chrome V8越界写入漏洞(CVE-2025-5280)", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247503379&idx=1&sn=88acd40380c32f491190c22bcf675915": "美国宇航局开源软件中爆出大量严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247491176&idx=1&sn=42c85804ebaac536b5d7e05b29a97a4f": "创宇安全智脑 | vBulletin远程代码执行（CVE-2025-48827∕CVE-2025-48828）等84个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=Mzk3NTk1NjM1MQ==&mid=2247487891&idx=1&sn=f5a635e1b59af1e7fa79da35637b1d98": "ByteSRC全域3倍积分！单个漏洞最高15w！送Apple全家桶！", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247489351&idx=1&sn=62a05afe4fae8a7a497cdb2a52eb4047": "微软OneDrive严重安全漏洞：OAuth权限滥用，数据泄露风险高", "https://mp.weixin.qq.com/s?__biz=MzUzNDMyNjI3Mg==&mid=2247487449&idx=1&sn=e45fed21e096e9ff0f6a128f16bf1ef9": "java代码执行(eval)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247503765&idx=1&sn=c91971d705c969009f7e9fd460725ad0": "“粽”享礼金，挖洞必“粽”，端午0DAY竞渡挑战赛开启！", "https://mp.weixin.qq.com/s?__biz=MzI5MDcyODIzNg==&mid=2247485094&idx=1&sn=5e7af24dd9b1174661c3d7553be194bd": "端午活动开启！白盒+黑盒双修来袭！知名小朋友（代码审计）联手地图大师（企业SRC漏洞挖掘），端午节限时大放价！", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530275&idx=4&sn=8a7efa98d4a382f0144297742ff568e2": "入侵我的车，甚至你的车——大众汽车应用程序存在安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU1MjgwNA==&mid=2247487427&idx=1&sn=4e665affb10589b165c61a022f5a37ea": "不同视角学习Java代码审计之文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523149&idx=1&sn=0298267a08369cc3ea9bdbdec81eb788": "看我如何通过 OpenAI o3 挖到 Linux 内核远程 0day", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489911&idx=1&sn=e62b6002552b1ab6dba42242d593c2ed": "线上支付漏洞：开启 “ 0元购 ” ？", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247555294&idx=3&sn=09075eb75bc68c89437d35c5ddb10181": "利用验证框架 JAIST揭示开源自动驾驶系统的安全漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651137040&idx=2&sn=3409a0e99c9697da8ecb4c7742ca1399": "恶意软件藏身AI模型，专门针对阿里巴巴AI实验室用户；OneDrive文件选择器漏洞让应用获取用户云存储完整访问权限 | 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651322005&idx=3&sn=d6c7633db1eb521d22d9cebac3887e7e": "留言赠书 | 《攻击网络协议：协议漏洞的发现+利用+保护》免费送", "https://mp.weixin.qq.com/s?__biz=Mzg5MDk4MzkyMA==&mid=2247484579&idx=1&sn=d63ab9b5f7fbe189c2a020ffb04d6e7a": "代码审计Sign加密到前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490158&idx=1&sn=17f120cec84cc5ab344e5298683be964": "【高危漏洞预警】Apache Commons BeanUtils远程代码执行漏洞CVE-2025-48734", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520801&idx=1&sn=bad2cedc1a8020024460f7f56dd36323": "小程序渗透记录：通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261237&idx=1&sn=5780326bb0e2c921f00c3199b93ec86e": "一处价值 $2500 的 DOM XSS 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491737&idx=1&sn=a4f727ba13cde3a317fdbf6711e10111": "Sirius 一款开源通用漏洞扫描器（Docker版）|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069879&idx=1&sn=2b0d058ac337d26093a5ae849717e3dd": "【安全圈】微软OneDrive文件选择器漏洞曝光：网站可窃取用户全部云存储数据", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492987&idx=1&sn=971a25f5792cacbcea29955536f4eb2e": "黑客利用 OttoKit WordPress 插件漏洞添加管理员帐户", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485861&idx=1&sn=05f3030231f775fe4410e25733c538c0": "Panalog大数据日志审计系统sprog_upstatus.php存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514445&idx=1&sn=6f6043b769f9bed3eb4ff2904556f776": "美军工巨头押注AI赋能网络攻击，超21亿元收购漏洞利用厂商", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069879&idx=4&sn=457158cecc79f277656b8bad13f79e3f": "【安全圈】WordPress TI WooCommerce Wishlist 插件漏洞使 100,000+ 网站遭受网络攻击", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493266&idx=3&sn=914afcabd8edcc167e4b033e85e3b45e": "漏洞预警 | 万户ezOFFICE SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493266&idx=2&sn=6230f92f0d41acbeee78849f7bcbecf9": "漏洞预警 | 朗速ERP任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NjAzMTk3MA==&mid=2458860603&idx=1&sn=3f138383a35ce7cfbe9c538da4af941e": "在Windows强跑Docker，8GB内存都喂不饱漏洞扫描神器？", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493266&idx=1&sn=de829eb3c1e29e04102463d8eeab8237": "漏洞预警 | 银达汇智智慧综合管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247506513&idx=1&sn=6e00e60bc051e20d313ebd7d41019761": "当漏洞成为“数字战争”的弹药，谁能改写攻防规则？", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795277&idx=3&sn=4946fecf57e0352b5f735171deca723c": "Windows 11 文件资源管理器漏洞（CVE-2025-24071）POC发布", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652251946&idx=1&sn=dcddbfbfeafc956cfe3d93380c79bda2": "Ivanti漏洞被利用进行链式攻击，英国NHS医疗数据面临风险", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247488578&idx=1&sn=1c4b4a1e5f29731aea07d04ad731b665": "任意文件读取&下载漏洞的全面解析及利用", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488525&idx=1&sn=20d1abb7ff5745d3093f6b089f6a4187": "vBulletin replaceAdTemplat接口存在远程代码执行漏洞CVE-2025-48827 附POC", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247494388&idx=1&sn=1d26ade4f0031585db8697d373cda55d": "ExploitDB 一款轻量级用于抓取、展示和导出 Exploit-DB中的漏洞数据的工具", "https://mp.weixin.qq.com/s?__biz=MzIzNDIxODkyMg==&mid=2650086413&idx=1&sn=d20c43c1c81c5c2963f188f540ef56a4": "微软OneDrive文件选择器漏洞曝光：网站可窃取用户全部云存储数据", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491645&idx=1&sn=157a465373fcfaf72051bc1154c58206": "金华迪加 现场大屏互动系统 ajax_act_set_bgmusic.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512289&idx=1&sn=48c4fb2f47eec32325185a611bd32558": "IBM Power HMC漏洞披露：受限Shell突破与权限提升", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795277&idx=2&sn=c13a6632f6952677d33342a4e5c8776c": "AyySSHush：利用华硕已修复漏洞组建僵尸网络的间谍技术", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491636&idx=1&sn=9aa9917155b1eedfbe7e73a85b3b0fbf": "用友NC expertschedule SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664712266&idx=1&sn=e34c30404d96ca13434abd914eed3a21": "aws漏洞利用框架系列之一：pacu简介", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069908&idx=3&sn=a14a5bbf691eddc51b2cdf4e1f604678": "【安全圈】苹果 Safari 全屏模式曝中间人攻击漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMzUyMjk2MQ==&mid=2247484435&idx=1&sn=34d2645c029628322e82edb23c28b580": "vBulletin远程代码执行漏洞复现（CVE-2025-48827）附POC", "https://mp.weixin.qq.com/s?__biz=MzkxNjc0ODA3NQ==&mid=2247483972&idx=1&sn=a90126cfcc2ef8350d469f7b5f4fcc62": "预接管漏洞挖掘：条件竞争与逻辑缺陷的组合利用", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530309&idx=2&sn=1b87e582acb182c7249a8cd723a9617c": "GitHub MCP 漏洞：通过 MCP 访问私有仓库", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247502501&idx=1&sn=aeaae16a4b401d08bf2af6cfe32bedd6": "【攻防实战】ThinkPHP-RCE集锦", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064186&idx=1&sn=07847eae4bea58c92f7d7b685aa3c998": "信息安全漏洞周报【第024期】", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523160&idx=1&sn=e6700c85073b35c5140da4fff0e4d9f0": "苹果Safari 漏洞使用户易遭全屏中间浏览器攻击", "https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247535985&idx=2&sn=ad6a797aa1ac561e3875afbf6114878f": "聊热点｜国家安全部发布使用AI应用保密安全指南、OpenAI o3模型单挑Linux内核，竟揪出一个0-day高危漏洞……", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247554998&idx=1&sn=6691793afdd1d819140ff1e43e7b135a": "指纹识别+精准化 POC 攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069908&idx=2&sn=f99594f728b498a9c7094b2331893ba4": "【安全圈】微软 OneDrive 被曝安全漏洞：文件选择器权限过宽恐致数据泄露", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497667&idx=1&sn=54a41bdf17408e8804207e4246162573": "海外SRC漏洞挖掘｜助力成为百万赏金猎人", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247496910&idx=1&sn=584999d1f25820d6025e9c93c55a9392": "GitHub MCP服务器漏洞使攻击者可访问私有代码库", "https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247533384&idx=2&sn=11a6c5fe842ff1ce8e02a9784a1124d9": "荐读丨连锁反应：海上网络的安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492652&idx=1&sn=d0f0f05d9d44c122c3ba9b344800665e": "Oracle TNS协议漏洞允许攻击者访问系统内存数据", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651133221&idx=1&sn=3040271f1fd3fc85096d998d0e21c08d": "阿迪达斯曝数据泄露事件，NASA开源软件发现安全漏洞|一周特辑", "https://mp.weixin.qq.com/s?__biz=Mzg5NDU3NDA3OQ==&mid=2247491239&idx=1&sn=b27d7a0f459598f6daba035f0a5afea1": "短信验证码漏洞利用技巧总结&&端午社区活动", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247488614&idx=1&sn=21a4902c98991897ceb84d8be6a3eea1": "突破浅层测试桎梏：多维度漏洞挖掘突破与实践探索", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247488620&idx=2&sn=6d2e7297bd61a2b100e43046c8973c60": "Pwn2Own 爱尔兰 - QNAP SQL 注入 RCE", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485965&idx=3&sn=9f0e131ae68dc2c05596c0e8e8b663f6": "CVE-2024-26809｜Linux提权漏洞（PoC）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485965&idx=1&sn=2c5e56f8ac01bcec1470c9404078f910": "CVE-2025-22252｜FortiOS TACACS+身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069919&idx=1&sn=3b5e129ed6ee7e222faa7957c06b833e": "【安全圈】国家网络安全中心发高危漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491654&idx=1&sn=ea4cb7c04e047b1d77707e8f9e5c34d8": "Meteobridge template.cgi 远程命令执行漏洞 (CVE-2025-4008)", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900649&idx=1&sn=718dad314e61f76d421045f8db0b5170": "WordPress热门插件TI WooCommerce Wishlist曝致命漏洞！CVSS 10.0，无需认证即可攻击！", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485965&idx=2&sn=7232cafb03fec2e869598e3a44b90dc9": "CVE-2025-41225｜VMware vCenter Server认证命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MzAzMzk3OA==&mid=2247485137&idx=1&sn=a2324f1d887b407e5a5c378699172fa5": "作业四 web安全assert()漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485872&idx=1&sn=e8c6a248f0321285efde17d965c6bf62": "地大信息-基础信息平台 GetImg 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503344&idx=1&sn=47318095da170602a78b16e9007566c9": "【成功复现】Grafana开放重定向&服务端请求伪造漏洞(CVE-2025-4123)", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247502586&idx=1&sn=daab1ab0ddbfd7ec9d7e171b91da3cf1": "【攻防实战】Redis-RCE集锦", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247489309&idx=1&sn=864847316fc192abf5f5e40335561587": "【儿童节快乐】CVE-2025-4664：单个标头泄露敏感数据", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610944&idx=3&sn=9de6823533b7c81787188772ad659886": "记某众测Fastjson<=1.2.68反序列化RCE过程", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610944&idx=1&sn=b65519e4ba185ad6ae0031556576681a": "国家网络安全中心发高危漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247488659&idx=2&sn=098f93f509ee7d88c5c6bda227c86154": "任意文件读取&下载漏洞的全面解析及利用", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900650&idx=1&sn=7482c6fc3609162a06181413aad71af9": "Mimo黑客利用Craft CMS漏洞(CVE-2025-32432)！挖矿、流量劫持，更演变为勒索软件威胁！", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc2MDQyMg==&mid=2247486548&idx=1&sn=c0d672fad264d6de3bc4380097dc7e60": "某校大数据管理后台Docker API未授权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486532&idx=1&sn=9c17c6009d678589e7adc36ae3518748": "某平台白盒JAVA权限绕过到RCE审计流程", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488023&idx=1&sn=761a3beceb05cc041a4a78dcd11befa7": "AI绘图工具ComfyUI爆高危漏洞，境外黑客已发起攻击！", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530349&idx=2&sn=784deada10b94c1531046ed0aa5a15e9": "通过 JScript.dll 中的 UAF 漏洞执行远程代码（CVE-2025-30397）", "https://mp.weixin.qq.com/s?__biz=MzkxNjc0ODA3NQ==&mid=2247484000&idx=1&sn=6209b588e47c15b6bb5648ad0fbf3387": "价值12000美元 的GitLab 中的 Git flag注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247502774&idx=1&sn=f7262ac03c15933af92a0d4a7ac437fd": "【攻防实战】ActiveMQ漏洞集锦", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247515358&idx=1&sn=7685c3953d21b06e259c41e0b8e22ebd": "这12个API漏洞赏金技巧，你一定要在目标上试试！", "https://mp.weixin.qq.com/s?__biz=MzU1NTQ5MDEwNw==&mid=2247485111&idx=1&sn=be23f1163c26c43f14f961394ecc01fc": "Supermap iServer任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516738&idx=1&sn=88872ecc81acaaafa9838d99b3359fa1": "目录浏览漏洞统计脚本 -- web_director_viewer（5月28日更新）", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485877&idx=1&sn=8b1dd823a7b97c930529e2ba76284f93": "Grafana开放重定向&服务端请求伪造漏洞(CVE-2025-4123)", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499790&idx=1&sn=91fc65c817ed18dfb8198f2b5af72aa9": "技术精华 | .NET 四种方法上传 web.config 绕过限制实现 RCE", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247485554&idx=1&sn=824dd27c139e49a5431875369685ea03": "【文末护网秘籍】史诗终局：SSRF漏洞撕裂AWS防线！我从Wayback Machine炼出“弑神箭”，一箭射穿黑产帝国命门！", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247485313&idx=1&sn=247d4db6184e4b05b478be78312739d7": "文件上传操作漏洞场景挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247488661&idx=2&sn=934c606c129a3f0d86781aa7963819bd": "任意文件读取&下载漏洞的全面解析及利用", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247510481&idx=1&sn=bda61f971c6f5ebd7e65b379ff4a60a5": "量子安全警钟：外国研究者披露墨子号卫星激光同步漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488028&idx=1&sn=aac796ada6be8ef09722a2370bf46836": "紧急预警！Linux核心转存漏洞曝光，Ubuntu、红帽系统密码哈希可被窃取", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795290&idx=3&sn=38b7ca8cfa5b15a3b60557ca6177ec51": "新的 Linux 漏洞允许通过 Ubuntu、RHEL、Fedora 中的核心内存转储窃取密码哈希值", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247492045&idx=1&sn=4aa5d92ab474e19ac263cf91acdef793": "CVE-2025-31644 F5 BIG-IP iControl TMSH 接口命令注入漏洞深入分析", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530349&idx=1&sn=7d8850145d9d66641c6ffba5a2c8c7eb": "CVE-2025-5277：AWS MCP 服务器中的命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247550254&idx=1&sn=942bb44202f3367a714ac4391ed57ea7": "简易短信轰炸漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg2NTgzMDg1NA==&mid=2247484205&idx=1&sn=bd0d9135fb8a77ecb1a10a022c3432ca": "某园区0day代码审计", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247489373&idx=1&sn=e6f109cf43353dbc8175d922bdedb62a": "Linux系统安全警报：Ubuntu和RHEL发现信息泄露漏洞，CVE-2025-4598被评为Moderate", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530392&idx=4&sn=f69b52a15a10f1ee3d9ee170ba468a0f": "Evertz SDVN 上的远程代码执行 (CVE-2025-4009)", "https://mp.weixin.qq.com/s?__biz=MzkwMzY2MTcwMw==&mid=2247484883&idx=1&sn=5f24f041519c073a4a195cb4e17604d0": "AI 安全 近日大模型推理引擎 vLLM 暴出CVSS 9.8高危rce", "https://mp.weixin.qq.com/s?__biz=MzkzMDY2MDA2Ng==&mid=2247486046&idx=1&sn=ef5ca8771a343763de51286f0d4b13ea": "【两万字原创长文】完全零基础入门Fastjson系列漏洞（基础篇）", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096296&idx=2&sn=e36e823e735c1b506cae71c3c20866d5": "关键 Linux 漏洞暴露了全球数百万个 Linux 系统上的密码哈希", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651322307&idx=1&sn=4063f0cef12989b63bd8d0d3cd998454": "严重Linux漏洞致全球数百万系统密码哈希值泄露", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491664&idx=1&sn=a8865cbc68fb7086352d521ea2eb1119": "WordPress suretriggers 权限绕过漏洞 (CVE-2025-3102) 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491791&idx=1&sn=ff5e4a045c8585d5b404ed420d49d4c0": "突破常规！文件上传漏洞的6大隐蔽攻击面（多个高危场景剖析）|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485884&idx=1&sn=b127b788e9aada865a9653b23919fb67": "国产 Web 框架 Solon v2.5.11 RCE && nginxWebUI RCE", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493973&idx=1&sn=c1c4477aa71c8c5ec31746683788cc6b": "专家发布了关于思科IOS XE WLC漏洞CVE-2025-20188的详细分析", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247488688&idx=2&sn=ce63f1c9f51187b003ff38f7df255576": "突破浅层测试桎梏：多维度漏洞挖掘突破与实践探索", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247490549&idx=1&sn=41c95e54595d2a93aeead92a7d3ccfaf": "分享一款图形化的 .DS_Store文件泄露、.git目录泄露、.svn目录泄露漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493973&idx=4&sn=83f48d8ebe0933c0775806b72338737c": "vBulletin论坛软件曝出两大漏洞正遭活跃攻击", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493280&idx=1&sn=dab2e1d27876d12d5663f0ae1a7d1c4d": "漏洞预警 | Google Chrome V8越界写入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493280&idx=2&sn=959893b377b1f9d3bb3d7df38ce51c70": "漏洞预警 | 银达汇智智慧综合管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247485043&idx=1&sn=c1f032c67767a91affd1e7de4abac388": "CVE-2025-40634：TP-Link Archer AX50版本 RCE！", "https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037738&idx=1&sn=5caed91973ba168620331341c348e949": "openfire鉴权绕过漏洞原理解析", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610951&idx=2&sn=7d6fed8f4199f9bb17e12f1e5fc7043c": "高通Adreno GPU零日漏洞遭利用，全球安卓用户面临攻击风险", "https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247490976&idx=1&sn=36d7bc9e1e4ac616bb517481181ebcd2": "还在用Wireshark？这款工具直接帮你提取Web攻击+复现请求全过程！", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497531&idx=1&sn=abfa9f975edcef1c644013013123b992": "【漏洞通告】Google Chrome越界读写漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg4Njc1MTIzMw==&mid=2247485855&idx=1&sn=1ee08da0b56a4bc9dc8d8c78f0c32b52": "当漏洞成为“数字战争”的弹药，谁能改写攻防规则？(文末赠书)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503432&idx=1&sn=07b94dac013b6a33369f1c15042d40ae": "【已发现在野利用】Google Chrome 越界读写漏洞(CVE-2025-5419)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247514735&idx=2&sn=5a123dd499cc133d89b213a7ca035950": "稀土掘金 x Trae 夏日寻宝之旅开启：做任务得积分兑大疆pocket3、Apple watch等豪礼", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493280&idx=3&sn=6b5f85b0b92b0523cc7326eeb3074253": "漏洞预警 | PrestaShop tshirtecommerce SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247521231&idx=1&sn=497bf82f8e4dc070256e7da622bae771": "粉丝福利*3《攻击网络协议：协议漏洞的发现+利用+保护》", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795303&idx=3&sn=c9459b810da15cd8177f4838c1d3e015": "高通警告黑客正在利用三个新修补的 Adreno GPU 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486692&idx=1&sn=6cb93ecc909a04b68dfcecff8622eec0": "【漏洞预警】Google Chrome 越界读写漏洞(CVE-2025-5419)", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247486128&idx=1&sn=f53eee0b5e39100f7c419294e03470f2": "Nacos Derby命令执行漏洞利用脚本", "https://mp.weixin.qq.com/s?__biz=MzUyOTcyNDg1OA==&mid=2247484520&idx=1&sn=b2c7479d43d432ea870909c8e2982c67": "还在用Wireshark？这款工具直接帮你提取Web攻击+复现请求全过程！", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247519560&idx=2&sn=188f5e1dd0173385a63281695c542aa3": "简易短信轰炸漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247486228&idx=1&sn=ac26bc61a4ca3c9a0877745f4468c114": "突发！朝鲜Lazarus集团突袭韩国多行业，“同步漏洞行动”掀起网络暗战！", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610951&idx=4&sn=e7b9050bc796b2985094177e56102e3a": "ExploitDB 一款轻量级用于抓取、展示和导出 Exploit-DB中的漏洞数据的工具", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261256&idx=1&sn=0a74831dec1e22b0350f5b5428d07f10": "【CVE-2025-20188】思科 RCE 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247487122&idx=1&sn=85d1305a6894dabf8e32db3149494fc0": "Edu实战记录 | 四个漏洞打包提交", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651322416&idx=1&sn=f496ad76672dc84007c77a588480096b": "谷歌Chrome零日漏洞遭广泛利用，可执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490173&idx=1&sn=4f5ff7a32aaddb7668e87502c08b810a": "【高危漏洞预警】YAML-LibYAML信息泄露漏洞(CVE-2025-40908)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491674&idx=1&sn=0f431e61e3429ce89491799a3222c337": "vBulletin replaceAdTemplate 远程代码执行漏洞 (CVE-2025-48827)", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655281264&idx=2&sn=8bfbc105cc225c87951b3fc957ea7e4c": "搭建靶场、Windows∕Linux系统安全、sql注入、XSS、代码审计∕RCE、木马免杀、暴力破解、SSRF、提权", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247555006&idx=2&sn=df42accd650c3815dec113c6066fbb05": "【免费领】智能设备安全干货：路由器0day漏洞实战大全", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496018&idx=2&sn=8e0f8b730bf80442638e1ddc4cfaa67d": "上周关注度较高的产品安全漏洞(20250526-20250601)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069983&idx=1&sn=eb2edf37f5fe485f355232db8212e7da": "【安全圈】OneDrive 文件选择器漏洞让应用程序获取用户整个云盘的访问权限", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490173&idx=2&sn=86d636b4d5e7fb36ab9a97507f549c21": "【AI高危漏洞预警】AstrBot路径遍历漏洞CVE-2025-48957", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496018&idx=1&sn=0c204e70771dbe94a5f424a8a21acb78": "CNVD漏洞周报2025年第20期", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523167&idx=1&sn=41ef09229896e2bf881d8508d57c29fd": "高通：速修复这三个已遭利用的 Adreno GPU 漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490407&idx=1&sn=59e92744084604a545c4ba90ce5b5901": "【风险通告】Roundcube Webmail存在反序列化漏洞（CVE-2025-49113）", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247492458&idx=1&sn=f2fd28cb57bd84b198896cf15b300043": "加密算法被破解而导致的漏洞，能按内部已知+通用漏洞忽略吗？", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489807&idx=1&sn=ae168d989a5d57ebb2fc40ba71f045a3": "【1day】某医药系统存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTA0MTY2Mw==&mid=2247485940&idx=1&sn=823869f1102b2f23517af096e86cea71": "Linux崩溃报告漏洞（cve -2025- 5054,4598）暴露密码哈希", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069983&idx=2&sn=aadb9b93aed958142a9ead6975be3334": "【安全圈】谷歌修复导致 AI 概览称“现在是 2024 年”的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499948&idx=1&sn=8d0a50fa3be577710f99f60e0d55b1ea": "CNVD漏洞周报2025年第20期", "https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247497545&idx=2&sn=388a1ddd29a198e2ec0aa94088e91f4f": "SRC漏洞挖掘：别再盯着那些烂大街的姿势了！", "https://mp.weixin.qq.com/s?__biz=MzkxMDY3MzQyNQ==&mid=2247484946&idx=1&sn=d5515e74135ed5faeca4b174483625eb": "SRC实战篇-还在交Druid的低危漏洞？", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247487580&idx=1&sn=c3d1340301f061e448a5c33fcf1e724e": "第125篇：蓝队溯源之burpsuite、zap、AWVS、xray扫描器反制方法与复现", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507765&idx=1&sn=9504084832ca68bdca9d43324f9d7474": "漏洞通告 | llama_Index SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512290&idx=1&sn=59f9e65046dbe616bab36f8cc905751b": "群晖DiskStation漏洞利用：从CVE-2024-10442到远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485889&idx=1&sn=6c577fda35fc0647c190200cce377544": "杭州三一谦成科技车辆监控服务平台 platformSql SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247507104&idx=1&sn=48dabeea7a2f1ec51307204a97523111": "SRC凭什么要为“废物”白帽子的真实漏洞付费？", "https://mp.weixin.qq.com/s?__biz=Mzk0NDU5NTc4OA==&mid=2247484586&idx=1&sn=61cc63ef6e7072a562ffca32d9e0498a": "java审计之下载漏洞获取到的代码如何断点调试", "https://mp.weixin.qq.com/s?__biz=MzkwMzYyNzQ1NA==&mid=2247485477&idx=1&sn=d14d0b13567a89ebdf0c7f7311643b87": "紧急预警：谷歌Chrome高危0Day漏洞（CVE-2025-5419）遭黑客大规模利用！", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650623594&idx=2&sn=120a04c661d02eabd3898c0da6d200f3": "CVSS10分！vBulletin远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900653&idx=1&sn=d8753f3adada1da31a48013b2410f1c3": "小心全屏“障眼法”！苹果浏览器曝BitM攻击漏洞，登录凭证面临失窃风险！", "https://mp.weixin.qq.com/s?__biz=MzU1NTQ5MDEwNw==&mid=2247485116&idx=1&sn=306e44f00e3fa6ac9ef562887dfe241e": "天擎终端安全管理系统getsimilarlist存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491927&idx=1&sn=8ff43a267d390da09bb09964f1c7c522": "后渗透神器AdaptixC2红队渗测试多人协作框架（附带教程）|漏洞探测", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524455&idx=1&sn=7d56f68b4a46168ba93320c07c0c6894": "Chrome 浏览器V8引擎越界读写漏洞(CVE-2025-5419)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523167&idx=2&sn=4249c8e9e0dace01810c665eda52c421": "隐秘的 npm 供应链攻击：误植域名导致RCE和数据破坏", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795315&idx=2&sn=d0015fdb76b856cd4959e7046d09c8a9": "有 10 年历史的 Roundcube RCE 漏洞可让攻击者执行恶意代码", "https://mp.weixin.qq.com/s?__biz=MzU5OTMxNjkxMA==&mid=2247489052&idx=1&sn=9f2eac8420e7671934b2adb7b5fc7147": "当漏洞成为“数字战争”的弹药，谁能改写攻防规则？", "https://mp.weixin.qq.com/s?__biz=MzI1Mjk2MTM1OQ==&mid=2247485584&idx=1&sn=6342934e6aa5ea24f539787d268c36ad": "硬件安全研究员震惊！STM32漏洞利用实现任意代码执行全过程曝光", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247512556&idx=1&sn=b112e0baa0b36ba161ef60910b3ae0ca": "xxl-job漏洞综合利用工具", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499805&idx=1&sn=a79411db28696f519f55efa6370f29fe": "基于 ViewState 反序列化漏洞，通过 Sharp4ViewStateShell 执行命令实现权限维持", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261263&idx=1&sn=509e830ca163d3c541c8824bea2e5592": "【$6,000】Firefox 高危漏洞披露", "https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650480002&idx=2&sn=402cda184dbf54409e5116fdefa8c784": "牟林：没想到，就是漏洞——特洛伊木马对中国的启示", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488038&idx=1&sn=2aef72e57e0086e4305d23d00c35d9a4": "潜伏十年！Roundcube Webmail高危漏洞让黑客随意操控你的邮箱", "https://mp.weixin.qq.com/s?__biz=MzI4NjAzMTk3MA==&mid=2458860633&idx=1&sn=5b6cc0f21b97d658225bc4e366ee3398": "6年旧镜像翻车！手把手教你用Docker部署最新版企业级漏洞扫描工具OpenVAS", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493301&idx=2&sn=f64ceabd513c7af560752897f9bc90f1": "漏洞预警 | JEEWMS SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493301&idx=3&sn=455aa6ff47c1f7ac85e74f8d8b1aba98": "漏洞预警 | 傲发办公通信专家系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520871&idx=1&sn=0706c2bac7206e0f05fdfa4bca5677e4": "谷歌Chrome零日漏洞遭广泛利用，可执行任意代码", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYxMjk0Mw==&mid=2247490611&idx=1&sn=5696e7fcac9c7646ac8fd23c5c37b1ac": "简单好用的漏洞管理工具（附下载链接）", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493301&idx=1&sn=964eaacc145b0d78dc3d84aaac8d2df2": "漏洞预警 | PrestaShop tshirtecommerce目录遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247497557&idx=2&sn=3e33ffbc2dd2d9b0fdad285363d58325": "网络安全炼金术：短信轰炸漏洞，从逆向到无限可能？", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493984&idx=2&sn=81c758ea9cbb9fea538712b2b954e868": "高通修复了三个在有限针对性攻击中被利用的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247485369&idx=1&sn=ad3ebcd655dc05dcb2d59189a2c5c626": "源码泄露审计文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU1MjgwNA==&mid=2247487453&idx=1&sn=dd70e73a6be4353a33566c323a73d682": "从 Rebuild 企业级系统代码审计 SSRF 漏洞。", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651248052&idx=1&sn=54f78fda5dc9802dddda0d47a5adbc43": "谷歌Chrome零日漏洞遭广泛利用，可执行任意代码 | 顶级大模型向警方举报用户！AI告密排行榜出炉", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247491180&idx=1&sn=b210da06b518e42b574e7a6206c75449": "【src】SRC漏洞挖掘信息收集与挖掘技巧", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493984&idx=1&sn=9ba0403347dc177e4caa30af389f631f": "谷歌修复了今年年初以来第二个被积极利用的Chrome零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795315&idx=3&sn=295593d68ae1db67020a8b1080cca5cc": "2025 年 6 月安卓安全更新修复 30 多个漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTU2ODQ4Mw==&mid=2247487354&idx=1&sn=44aee310cb9ef148d0a41a5da713e6c6": "CVE-2024-47575 漏洞分析及三种利用方式", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501135&idx=2&sn=482408cecbddba76f261d8619d97d676": "【漏洞通告】Google Chrome V8引擎越界读写漏洞(CVE-2025-5419)", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486536&idx=1&sn=9a6234de86003dce55ef80148b372a1f": "某园区0day代码审计", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247494371&idx=1&sn=3b7b2922e7fdae49adea80a9e2acc5a7": "java审计之下载漏洞获取到的代码如何断点调试", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247485051&idx=1&sn=af7709c22592ba59aa6272659d0f4772": "CVE-2025-48827：vbulletin代码执行POC", "https://mp.weixin.qq.com/s?__biz=Mzg5MDk3MTgxOQ==&mid=2247499910&idx=1&sn=df1de2e9b4b1e20a50c035217bcd298d": "【漏洞预警】llama_index SQL注入漏洞(CVE-2025-1750)", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503426&idx=1&sn=115407d3c71a09bb32a1e396ce382f5a": "雷神众测漏洞周报2025.5.26-2025.6.2", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610964&idx=3&sn=fca50e82f94f682a5a2e622dd3f26c96": "EMQX命令执行后渗透", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524681&idx=3&sn=a29e14d95783cd29e736a3f282efa03a": "谷歌紧急发布安卓安全更新，修复可导致权限提升的多项高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247555033&idx=1&sn=8b9eb9d96e81a19e599e4b06d4acd1d8": "Solon框架模板漏洞深度剖析与修复实战", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503353&idx=1&sn=2879dd13e8053ea89d8b73c643cf584c": "【成功复现】ZZCMS系统SQL注入漏洞(CVE-2025-0565)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491684&idx=1&sn=07dbb62f791af15130c9a2bbcdc77c41": "M7s UI open 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524681&idx=1&sn=58d3241abc197e40dd2a48c4e3a4633d": "联发科芯片漏洞：攻击者无需用户交互即可提权", "https://mp.weixin.qq.com/s?__biz=Mzg2NjUzNzg4Ng==&mid=2247484703&idx=1&sn=720816ecc0b5ad2912dd2a40ba854d57": "第125篇：蓝队溯源之burpsuite、zap、AWVS、xray扫描器反制方法与复现", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523177&idx=2&sn=5f49791311ee93aa1acd5a1dd56c0a88": "慧与：注意这个严重的 StoreOnce 认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458595168&idx=3&sn=1778f7b154f1be5f2139f7fdca6dc4be": "潜伏10年！Roundcube Webmail 重大安全漏洞曝光，CVSS 评分 9.9", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651137085&idx=2&sn=a1068ce13789e6cc3241c9e621774f49": "合规管理公司出现合规问题：Vanta系统漏洞导致客户数据交叉泄露：DevOps安全警报：配置错误成为加密劫持攻击新途径 | 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651322480&idx=4&sn=1305aad8febb12c5f092cba247ab1534": "谷歌紧急发布安卓安全更新，修复多项高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484865&idx=1&sn=8b1d3df35de589153681dbd36d404672": "安钥®「漏洞防治标准作业程序（SOP）」征文启示 [2025年第22期，总第40期]", "https://mp.weixin.qq.com/s?__biz=MzU0NTU5NTA4NQ==&mid=2247491726&idx=1&sn=a620064d4be426858ff4515ad6baa67d": "CVE-2020-11800 Zabbix 命令注入漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489932&idx=1&sn=ad2b365fc59ff231cc27cb2df0aab090": "NPS之Socks流量分析以及未授权复现", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096308&idx=2&sn=63481e238664f1bde33e4fa50f1ee971": "Splunk Universal Forwarder for Windows 漏洞授予非管理员用户完全内容访问权限", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069999&idx=2&sn=31032694ae0b355efabdb89fde5ebc02": "【安全圈】高通紧急发布 5 月补丁，修复 3 个 Adreno GPU 零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247496548&idx=1&sn=80b474dcabbcb2690af97241a091e02e": "【论文速读】| SecVulEval：针对真实世界C∕C++漏洞检测的LLM基准测试", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247492623&idx=1&sn=850372f429fe2877e3bc96d0d6f52967": "警惕！境外间谍借系统漏洞，直击党政科研要害！", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096308&idx=1&sn=d4d276386458934743383a476c8c2723": "新的 Safari XSS 漏洞利用 JavaScript 错误处理来执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651463091&idx=1&sn=cf5d4e1447040ab6b1b31484430e7834": "CNNVD关于Google Chrome安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491941&idx=1&sn=180a7a72b014cd3156a1f44dee242368": "最新xxl-job综合漏洞检测利用工具|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzkwMzUyMjk2MQ==&mid=2247484462&idx=1&sn=7a2f920a5bd2ec339a782f88f68fa3ed": "llama_Index SQL注入漏洞（CVE-2025-1750）POC及本地复现部署环境", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523177&idx=1&sn=6ead40fb0a70735a161f4ecd984a3f01": "谷歌悄悄紧急修复已遭利用的 Chrome 0day", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503443&idx=1&sn=763f543a4089f1b08833ccbac7059be5": "【新安全事件】vBulletin 远程代码执行漏洞(CVE-2025-48827)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519424&idx=1&sn=d2898555db99efec97a2a0bf0a748284": "CNVD通用型漏洞挖掘-app逻辑缺陷的两个挖掘案例", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491693&idx=1&sn=4f6b2b1ccf9491a261ce9ce50a700534": "M7s UI download 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664243600&idx=1&sn=a254cce915bb8018f5d4620176b69f20": "CNNVD | 关于Google Chrome安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI1NTM4ODIxMw==&mid=2247501362&idx=1&sn=01b71332a9c7c08f19fa2bd90f837ca6": "Vul情报 | CVE-2025-4123 漏洞（附EXP）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490183&idx=1&sn=8796151f4fa121bbb37bd0cbfe9f8b11": "【AI高危漏洞预警】llama_index DuckDBVectorStore SQL注入漏洞CVE-2025-1750", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493312&idx=2&sn=34a6edf72fcd14c1c0603c5e647f1f18": "漏洞预警 | 傲发办公通信专家系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485894&idx=1&sn=c532159a5a85d9939354104532ecd411": "唯德科创 IPEasy 知易通 DownloadFile 任意文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655281545&idx=1&sn=c51dacb03c32e53c22ea3c7ee12da50e": "如何快速挖掘高质量安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247546428&idx=2&sn=6f40163d3d690076a95f75e1becb1dd3": "HVV护网行动 | 分享最近攻防演练HVV漏洞复盘", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493312&idx=3&sn=181705888a549777ca5ddc60469799af": "漏洞预警 | 汉王e脸通智慧园区管理平台任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652116177&idx=1&sn=b61a279f71e939047cb92a3467d505fe": "维多利亚的秘密由于安全漏洞推迟发布收益报告", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490183&idx=2&sn=26d52c8caaf272e72f132b255994b95a": "【高危漏洞预警】Roundcube Webmail upload.php _from反序列化代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651463107&idx=1&sn=a2351a664e2c00776ed72bcaf1b17d5f": "信息安全漏洞周报（2025年第22期）", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247769&idx=1&sn=776c3d134659ab6f035cf673173655f8": "Windows RAR∕ZIP解压缩泄露NTLM哈希漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247497569&idx=2&sn=28e157ca89556fd156ed0c012068882e": "你的服务器在裸奔吗？高危漏洞、端口和弱口令，哪个才是压死骆驼的最后一根稻草？", "https://mp.weixin.qq.com/s?__biz=MzkwODMzOTA2NA==&mid=2247494382&idx=1&sn=330fbe9f024f01ab79c0d9b1adb073fb": "0Day漏洞曝光！多媒体综合业务显示系统面临严峻挑战", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512335&idx=1&sn=f2441cd275388321ab2e598a075770f8": "Windows RAR∕ZIP解压缩泄露NTLM哈希漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503451&idx=1&sn=838415cece549ae052cced3f736997b1": "【已复现】DataEase 远程代码执行漏洞(CVE-2025-49001、CVE-2025-49002)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499813&idx=1&sn=6bae33061f883e54798c04b274e0622e": "WebShell 再进化：无需 cmd.exe 实现任意命令执行", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530437&idx=1&sn=267b5a0dabb08b7c42c092b55b72eaf0": "Roundcube ≤ 1.6.10 通过 PHP 对象反序列化进行身份验证后 RCE", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247616341&idx=1&sn=f64a0740ed2b0d209cefae4d1633c3ee": "CVE-2025–4123 | Grafana SSRF和账户接管漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261267&idx=1&sn=9438b6a7fe72e186a534faca70834b0b": "赚取50000美元的5个顶级 XSS PoC", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492805&idx=1&sn=30e47869ddf47a6cb5a92b70c81c266e": "【已复现】DataEase 远程代码执行漏洞（CVE-2025-49002、CVE-2025-49001）", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491703&idx=1&sn=6775431a3523ce79579c880215420a9f": "世邦通信SPON-IP网络对讲广播系统 videobacktrackpush.php 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247491229&idx=1&sn=a9c298d3409c3f84537a599c5c171c00": "创宇安全智脑 | Cisco IOS XE 任意文件上传（CVE-2025-20188）等81个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzI4MjkxNzY1NQ==&mid=2247485866&idx=1&sn=f22b47fb7cbbdb28ea72a878b6f9d8fa": "Jenkins未授权访问-命令执行漏洞复现及修复方案", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490196&idx=1&sn=445a97e63142e9216294ebc4e1bea7ad": "【高危漏洞预警】Dataease JWT认证绕过&H2数据库远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037742&idx=1&sn=e38b2e41abe4ef5de9291947fe02ec0b": "消息中间件RocketMQ命令执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU0NTU5NTA4NQ==&mid=2247491757&idx=1&sn=e18c6ced25ae41c182a5c263e6293df1": "CVE-2024-4956 Nexus Repository 3 路径遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458595183&idx=4&sn=ac565329b10f28fb7e171969a80f9396": "更新：改造模糊测试工具 | 系统0day安全-二进制漏洞攻防（第4期）", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497691&idx=1&sn=8a21820aa197e5d11ac115da464d6a5d": "RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494864&idx=1&sn=f82c751d60028bc253ecff7eb70a40f2": "百万奖金池！ByteSRC全域3倍积分！单个漏洞赏金15万！", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497536&idx=1&sn=7318bd01d7d51cb7892c8ac62203bacb": "【漏洞通告】DataEase远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524460&idx=1&sn=7d2b4e4d60276ffcbb0e8a79d51308cf": "DataEase H2数据库远程代码执行漏洞(CVE-2025-49002)", "https://mp.weixin.qq.com/s?__biz=MzIyNDkwNjQ5Ng==&mid=2247486115&idx=1&sn=b606ab44ebe50c4968bb70b369ba0f04": "CVE-2025-49113 Roundcube Webmail反序列化漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486694&idx=1&sn=c0b1408fba02412f21d2e7d5c3078bed": "【漏洞预警】DataEase 远程代码执行漏洞(CVE-2025-49002)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491943&idx=1&sn=e84dfaf45db4b4d1cc436ecc54f3e8c9": "WEB漏洞扫描器Invicti-Professional-V25.5.1（自动化爬虫漏洞扫描）更新", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519440&idx=1&sn=2c02d7338cb44ac37b0fdcb7466ad272": "突破常规！文件上传漏洞的6大隐蔽攻击面（多个高危场景剖析）|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=MzI0MTUwMjQ5Nw==&mid=2247488974&idx=1&sn=5b2444dbfe6ced072d11a897895e3fee": "超骚逻辑漏洞-滥用自动邮件回复程序访问内部工作场所", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524699&idx=1&sn=aa6aabfcb1a711cabae2aa5b84c2e4af": "谷歌披露威胁组织攻击方式：伪造Salesforce数据加载器实施钓鱼攻击", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488552&idx=2&sn=943465d2d861698941b2f73fc679ea7f": "Smartded Meteobridg的template.cgi接口存在任意命令注入CVE-2025-4008 附POC", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485776&idx=1&sn=deb484fff8f887811d04f804566d5b5b": "Kindeditor编辑器漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488552&idx=1&sn=778857248586131ae73927608b847830": "Liferay icon.jsp接口存在跨站漏洞CVE-2025-4388 附POC", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070016&idx=3&sn=2f8103c74269e54bf6753a609066de26": "【安全圈】在VMWare NSX中发现多个存储的XSS漏洞-立即修补", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247486915&idx=1&sn=1f9e76e950e746d6c1ab9c1e3312cea4": "【信息收集】ARL灯塔搭建教程-联动vscan自动化漏洞扫描", "https://mp.weixin.qq.com/s?__biz=MjM5ODYwMjI2MA==&mid=2649793732&idx=1&sn=59278d0b2074a9c856a0700dfac2b83d": "0day漏洞量产？AI Agent“生产线”曝光", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485899&idx=1&sn=376aea6abca97546fc3a44c807047baa": "唯德科创 IPEasy 知易通 WSFM 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MzY1NDc2MA==&mid=2247484313&idx=1&sn=9b71c3e6bcb666505807374ab5dcb14a": "渗透测试与漏洞扫描：有什么区别？", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523184&idx=1&sn=f205e1639e39bac5e3d3496845db4087": "思科提醒注意严重的 ISE 和 CCP 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247485167&idx=1&sn=ef7026252c6a5848c0eb5555f96dd119": "别让广播出卖你！Android BroadcastReceiver 漏洞排查全流程详解", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493320&idx=3&sn=eb3dea720279ce737c522dec98ba1498": "漏洞预警 | 灵当CRM SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247491258&idx=1&sn=0d0e52dce93ee9f25fe7f5ebce841822": "【漏洞】飞塔防火墙漏洞深度利用及调试环境搭建", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655281664&idx=1&sn=9fb168bdaf2d0e9a644148d8866cd5d5": "中间件常见漏洞详解", "https://mp.weixin.qq.com/s?__biz=MzI4NjAzMTk3MA==&mid=2458860668&idx=1&sn=197d36812e146c81964457d9a5c735c1": "两条命令搞定！Kali原生集成GVM漏洞扫描器，比Docker省5GB空间", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493320&idx=1&sn=23fa59fe6fd3f2dbea3de0de22cd73bb": "漏洞预警 | Elber身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795343&idx=2&sn=4b0bfdc266245ab37bf0d6d95de25dc5": "Wireshark 漏洞可通过恶意数据包注入发起 DoS 攻击", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493320&idx=2&sn=ea00e80355de429de0124a3d84554ccf": "漏洞预警 | 智邦国际ERP SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493320&idx=4&sn=42c264664f00292c9dec894a64c2167a": "工具 | exploitdb", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507774&idx=1&sn=d12eb0b53d048871be85e2a2f8db6bf4": "微步情报局发现DataEase存在多个高危漏洞，可实现RCE", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247486151&idx=1&sn=ca31a24918b75ea9220a2ee821b6614d": "工具集：sqlmap Xplus 【基于 sqlmap，对经典的数据库注入漏洞利用工具进行二开】", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499819&idx=3&sn=9c87e28e0dfd967b2d7ae0af1d1eef28": "基于反序列化漏洞，通过 Sharp4ViewStateShell 执行命令实现权限维持", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491712&idx=1&sn=fcd7654701a537eecd4c655d43ada5cf": "PaloAlto-Expedition OS命令注入漏洞 (CVE-2025-0107)", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261279&idx=1&sn=3aef26c9a656d2adf263b8aad5a02852": "【$3,800】Shopify 缓存中毒导致DoS漏洞披露", "https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247488361&idx=1&sn=c11476376033a528ae2ce25bf94c52eb": "2025年离大谱的CVE-2011-10007", "https://mp.weixin.qq.com/s?__biz=MzU2MzY1NjU3Ng==&mid=2247485931&idx=1&sn=7fee859148e33e1eaf8fc15cbb996402": "企业内部安全漏洞修复流程的建立与思考（其三）", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247624932&idx=1&sn=6f75bcca06219e491efdcf1420264980": "小米：车联网安全漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261279&idx=2&sn=34a64379d3eb92a135403a71c42b4635": "CVE-2025-30397 PoC", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247497365&idx=1&sn=4ec899e26e1e52c198d80c9cacdd1184": "记某众测Fastjson<=1.2.68反序列化RCE过程", "https://mp.weixin.qq.com/s?__biz=MzU0MjE2Mjk3Ng==&mid=2247489196&idx=2&sn=c6590cb7a9b28def433bd6e8ff26eeb5": "谷歌称黑客利用修改版Salesforce应用窃取数据并勒索公司", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503369&idx=1&sn=61a37e11b0764057323dfc5fb5baf447": "【成功复现】Meteobridge命令执行漏洞(CVE-2025-4008)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503459&idx=1&sn=087027a577be1dc41e697c2c19c5b6d6": "【已复现】Roundcube Webmail 后台代码执行漏洞(CVE-2025-49113)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA3NzE2ODk1Mg==&mid=2647796528&idx=1&sn=c28536a9bfd233fe849fe92949b8dd1b": "SBOM风险预警 | pino系列投毒包开展敏感数据窃取及远程代码执行攻击", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524715&idx=4&sn=579700137876da6310dde825aee73f7a": "思科ISE关键漏洞影响AWS、微软Azure及Oracle云基础设施部署", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247515360&idx=1&sn=531525683c50094e1ba7694d49afc477": "警惕！你的 API 正在 \"裸奔\"？Swagger 安全漏洞攻防实战全解析！", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247491129&idx=1&sn=36e96af1e2874ff724083aab84b24592": "能信安：漏洞通告", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651322591&idx=1&sn=fa84e28c57c290ad80544c3a63efd1d9": "Wireshark漏洞可通过恶意数据包注入引发拒绝服务攻击", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096316&idx=2&sn=946a6059e69d462480bd4449cf5bc7d3": "Apple 的 iOS 激活允许注入未经身份验证的 XML 负载漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490206&idx=2&sn=dae3b0028a99377b65374576fd62ad24": "【高危漏洞预警】FreeFloat FTP服务器缓冲区溢出漏洞CVE-2025-5596", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247528265&idx=1&sn=1a27220513edf970c954fd0ed275e10b": "用 IRify 深入探索 WebShell 中的 Source∕Sink 挖掘", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096316&idx=1&sn=f44e5a2873e0615bf2b2c9b4df2bc31c": "VMware NSX XSS 漏洞使系统面临恶意代码注入", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490206&idx=1&sn=5a269eb8ff8e659faabedaa0aa8a4688": "【高危漏洞预警】PHPGurukul Management System代码执行漏洞(CVE-2025-5560)", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900684&idx=1&sn=55b6582945707ce3360fd839dec3374a": "【数字风险警示】从0-Click漏洞到AI“失控”：我们如何应对新兴网络威胁与治理挑战？", "https://mp.weixin.qq.com/s?__biz=MzkzMTYyMDk1Nw==&mid=2247483874&idx=1&sn=7c91c92dce650dbea638effe4cc0b091": "苹果iMessage中的严重零点击 (zero-click) 漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651137107&idx=2&sn=19c9e45394e4353f7f3b9cd5194b0896": "警惕，恶意伪装缓存插件窃取WordPress管理员凭证；VMware NSX发现多个XSS漏洞，攻击者可注入恶意代码 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247486231&idx=1&sn=e78d0606c0186e03e3dc32258335b8db": "vBulletin replaceAdTemplate 远程代码执行漏洞（CVE-2025-48827）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458595409&idx=1&sn=df257ccaa9f3bcd7348174e00218bd92": "Redis漏洞分析，ACL篇", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516756&idx=1&sn=f1267aac6ba91fac591b1b3eb4624126": "xxl-job漏洞综合利用工具 -- xxl-job-attack（6月3日更新）", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247495075&idx=1&sn=e10bf05cdb15287868abb611f48db330": "2025攻防演练必修高危漏洞集合（3.0版）", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486697&idx=1&sn=8286bc3f6b40a00154d5b7cd13c4dd8a": "【已复现】Roundcube Webmail 代码执行漏洞(CVE-2025-49113)", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247488934&idx=1&sn=0fa423fe5ba9e56f7d1ebc70b5d65fd4": "JS中的漏洞信息", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651133301&idx=1&sn=448c861d50bcae8305539a7cbca30314": "高通GPU漏洞威胁安卓生态，撞库攻击致北面资料外泄|一周特辑", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795352&idx=1&sn=a6a1439c52339f5b092bf594b17a73bc": "iMessage 零点击漏洞针对美国和欧盟的关键人物", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247485643&idx=1&sn=ec74894c3ce42e4b21fd19a407c54c24": "某景人事管理系统漏洞挖掘与分析", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492226&idx=1&sn=a5a57ba3077ab1eb8f5e4725a95a05fe": "从 SSRF 到 RCE：一次众测Fastjson<=1.2.68反序列化RCE过程|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530523&idx=1&sn=eae1159f200e68098297acb465d5d4c8": "Anthropic MCP 中的漏洞：全模式中毒 + 机密泄露工具攻击（内含 PoC）", "https://mp.weixin.qq.com/s?__biz=MzI0MTUwMjQ5Nw==&mid=2247488976&idx=1&sn=823dff2e68ba60b26f2a7c07d1c136f0": "电商网站 SSTI 漏洞利用：专业攻略", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485975&idx=1&sn=a3a96fcfeca034089636e9a89ae83d48": "CVE-2025-49113｜Roundcube Webmail反序列化漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491721&idx=1&sn=bca6974ea87562392f4e4f205edb8ece": "杭州新威数字信息-SMG网关管理软件 9-12ping.php 命令执行漏洞 (CVE-2025-1448)", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484110&idx=1&sn=e7c3b3595ccf8ca433e1a2e4c2b81c46": "【已复现】Dataease JWT 认证绕过漏洞∕远程代码执行（CVE-2025-49001∕CVE-2025-49002）", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247502951&idx=1&sn=fae4b38afc3c1eb2bfbc0e6f0c4db3d2": "【攻防实战】phpmyadmin-RCE集锦", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070055&idx=3&sn=6b9ef71bf3e0c60b87ab26c126ce970f": "【安全圈】热门 Chrome 扩展陷 HTTP 和硬编码密钥双重漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655281741&idx=1&sn=2975bc75e4e224aca1c0bfccb16aaa4e": "2025 HVV必修高危漏洞集合3", "https://mp.weixin.qq.com/s?__biz=Mzk3NTIxNzEzNA==&mid=2247492804&idx=1&sn=5258769e3eb478e47f0d9cb91d055b0a": "【JAVA代审】从0到实战：超全Java SQL注入漏洞全解析与防御指南", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485904&idx=1&sn=88ebe7b12908357268cf7bf6ff26daed": "智联云采 SRM2.0系统接口 autologin 身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485975&idx=2&sn=dbe57e94f20bc9b3f98b334b6267cffc": "CVE-2025-48827｜vBulletin远程代码执行漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519442&idx=1&sn=c589daacc1be8e90294d6c18e509d2fb": "赚取50000美元的5个顶级 XSS PoC", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651322725&idx=2&sn=a6d9bad6730f5365d0a54cf5c19b22bf": "6.11北京 | 报名FORCE原动力大会-大模型安全分会场 文末有福利", "https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247491495&idx=1&sn=28a749aa101664e76dd905dfc0081fe3": "网络安全人士必知的 AWVS 漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=MzI4NjAzMTk3MA==&mid=2458860720&idx=1&sn=700c43def3115706dbdf14b9634c3176": "16核CPU烧到100%！21节点六种漏洞扫描模式实测，这种模式让服务器暴走", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247488992&idx=3&sn=240dba489c13a8cf1abd16a7f09aa981": "JS中的漏洞信息", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503392&idx=1&sn=5292f042bdea8bb3d2fd6e87cb7a2ca2": "【成功复现】vBulletin远程代码执行漏洞(CVE-2025-48827&CVE-2025-48828)", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247491410&idx=1&sn=e4ef9713ca498412d72fd9536077c06b": "【漏洞】PHP代码审计篇 - 信呼OA 前台分析SQL注入", "https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247497601&idx=2&sn=593538deb4ffaacfce66f628dd85cb2b": "当系统崩盘，Busybox 如何成为你的“诺亚方舟”？漏洞排查的另类视角", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247492152&idx=1&sn=9880c257352e81a69012ac2327d46c1b": "潜伏十年的严重漏洞：CVE-2025-49113 Roundcube 反序列化漏洞原理与 gadget 构造深度分析", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247490554&idx=1&sn=a617e5cf9c985ea332307e9cbb40a955": "LazyHunter：自动漏洞扫描的工具", "https://mp.weixin.qq.com/s?__biz=Mzg3NTU3NTY0Nw==&mid=2247489904&idx=1&sn=1b0d39b19089398e5a3f203ac2fcb524": "还在用Wireshark？这款工具直接帮你提取Web攻击+复现请求全过程！", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247488992&idx=1&sn=7cc8813409e77f5eeae632e9d1aefe0d": "文件上传操作漏洞场景挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247624964&idx=1&sn=9fd73dd275e8e53d7e22338456f3503d": "小米：车联网安全漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486547&idx=1&sn=93d9c43f4d2dc8f85deb74ac8a811ba0": "某日志管理系统前台注入（0day）", "https://mp.weixin.qq.com/s?__biz=MzkxMzQyMzUwMg==&mid=2247486627&idx=1&sn=c0d293c64fcb84c997e3635d9f5fc033": "感谢大家的关注与支持 送两0DAY吧", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070072&idx=3&sn=d186f40156a6e7af24a1cba237357ebb": "【安全圈】黑客团伙冒充IT技术支持人员入侵Salesforce与Okta平台", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485909&idx=1&sn=ed87702eca874b67599bdd7fef6b2046": "蜂信物联 FastBee 物联网系统 download 文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070072&idx=2&sn=6568143133dcdce8e806ab5ee4c23088": "【安全圈】Play勒索团伙利用SimpleHelp漏洞实施双重勒索", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611001&idx=4&sn=2dafbc946a12493ed35083385d421118": "一款以Web与全版本服务漏洞检测为核心的辅助性主、被动扫描工具", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530636&idx=3&sn=af09ad52060addc40f7da1e8a83e2391": "CVE-2025-49223 - Billboard.js 中的原型污染", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530636&idx=4&sn=b38767bda29ea9351eaf4b549f97c267": "CVE-2025-32756 的概念证明 - 一个影响多种 Fortinet 产品的严重基于堆栈的缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491732&idx=1&sn=bcd132800c07215aff233df69aadc674": "锐捷EWEB路由器 timeout.php 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247636125&idx=3&sn=7df424bc2d1af6076a707c4e7d7171fd": "Wireshark漏洞可通过恶意数据包注入引发拒绝服务攻击", "https://mp.weixin.qq.com/s?__biz=MzA4NDQ5NTU0MA==&mid=2647690775&idx=1&sn=4897cf1429401e098228448bec6b6afe": "0041.我是如何接管 Vercel 子域名的", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247492225&idx=1&sn=cbfab9a778a335b827b9c5d1bf80f0c8": "仅靠JS审计就能捡到的漏洞 前端代码中的隐藏利用点|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=MzU1NzkwMzUzNg==&mid=2247484504&idx=1&sn=6c16443c92cec6973ef0c0f791bfa673": "云安全 - k8s ingress漏洞进一步探索引发的源码层面的文件漏洞利用特性分析（golang、java、php）", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493329&idx=1&sn=abb6622d519de74ef513a6d40dfa4e1c": "漏洞预警 | vBulletin远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489000&idx=4&sn=2066a14b4542a331149652d67e458428": "JS中的漏洞信息", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493329&idx=3&sn=e35510fd19234a17cbf9fbd026dc3fa4": "漏洞预警 | 汉王e脸通智慧园区管理平台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489000&idx=3&sn=aa512efe567bc9a4141a808092f7f1df": "文件上传操作漏洞场景挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493329&idx=2&sn=f1e9419c6425a0b7418bc51ebeb5c0d5": "漏洞预警 | DataEase身份认证绕过和远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247484814&idx=1&sn=bd0f1048a2f82f6198b6866c03094a2d": "【漏洞复现】Dataease JWT 认证绕过漏洞∕远程代码执行（CVE-2025-49001∕CVE-2025-49002）", "https://mp.weixin.qq.com/s?__biz=MzU2MjU2MzI3MA==&mid=2247484656&idx=2&sn=446b71f98850bef1c255884d2fa0ba8e": "16核CPU烧到100%！21节点六种漏洞扫描模式实测，这种模式让服务器暴走", "https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247493086&idx=2&sn=d147e432ba1c5547cdd9e986306e0e0e": "《LLM大模型越狱攻击预防与框架》第10章：未尽探索 (Unexplored Mist)", "https://mp.weixin.qq.com/s?__biz=MzkwMzUyMjk2MQ==&mid=2247484486&idx=1&sn=0634de519da9dc207551df06c344f951": "Roundcube Mail后台代码执行漏洞复现（CVE-2025-49113）及POC", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611010&idx=3&sn=e7cdd3d1ca22f06dfaf0ee03b2833a62": "突破常规！文件上传漏洞的6大隐蔽攻击面（多个高危场景剖析）|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261285&idx=1&sn=47912aa1ad8f702266e530ee82c6e700": "【$500】存在 2 年之久的 Android 锁屏绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611010&idx=4&sn=718ad8933593d0aa40f4eff70552dd83": "xxl-job漏洞综合利用工具", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491742&idx=1&sn=551a2fec606a52006536f6f8f605fe28": "博斯外贸管理软件V6.0 DCreceiveBox.jsp SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611010&idx=1&sn=b7ed772938827af615626eee649fe6f0": "“取个快递”，损失数十万！已接连有人中招；|黑客利用iMessage零点击漏洞攻击iPhone用户", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU0OTQyMg==&mid=2247484424&idx=1&sn=70f6858440edbfe773088e62f6236dfb": "【漏洞预警】DataEase 远程代码执行漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492249&idx=1&sn=3f6513fef2c2e8ffa88734793b5bce3a": "Alibaba Sentinel SSRF漏洞代码审计", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664712289&idx=1&sn=fdbee61f6496ed4530412ee877a30890": "MS12-020漏洞利用及复现", "https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247497632&idx=2&sn=8da59ee32e10a2edcda3a779f252f41b": "网络安全攻防：别再傻傻地等漏洞，主动出击，从JS里挖金矿！", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247510739&idx=2&sn=c4732cc4deb2ddd4dc84dd45a2bc3f79": "3比特币叫卖安卓0day，声称已打中以色列国防军目标", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247499478&idx=1&sn=fe921fc1658e176eadc9ea4f497308f2": "近期暗网 0day 售卖预警", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506580&idx=1&sn=4b470d46ed40b7804ed3cd7663e68383": "精品产品系列 | 捷普漏洞扫描系统", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247512691&idx=1&sn=025942d8dc5bd2aac8b53dd2d5897e0c": "某景人事管理系统漏洞挖掘与分析", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507780&idx=1&sn=fa8e5866d2ef385879919442a0d521b3": "漏洞通告 | Roundcube Webmail存在反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496034&idx=1&sn=4e44662436d0787b17b38a989dace356": "CNVD漏洞周报2025年第21期", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU1MjgwNA==&mid=2247487455&idx=1&sn=5ab5a46d96791975f41ea10de851534a": "代码审计之 XXE漏洞场景，及实战讲解！", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490211&idx=1&sn=ed866558cae0c0b4589f32f311e9b6a9": "【高危漏洞预警】VMware Cloud Foundation 信息泄露漏洞(CVE-2025-41230)", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900701&idx=1&sn=057d9271584b457c3a1359732d44af3b": "Chrome插件安全警报：微软、AVG等知名应用曝出重大漏洞，你的隐私或在“裸奔”！", "https://mp.weixin.qq.com/s?__biz=Mzg3MDk0OTc1Nw==&mid=2247488382&idx=1&sn=35b960681e424b4247b5000b170395dd": "支付漏洞案例", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247773&idx=1&sn=5d39d0d3b48e9efe0e8c9e3fd6295866": "CVE-2025-26319：FlowiseAI未授权任意文件写入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzU5MDMxOA==&mid=2247484411&idx=1&sn=f3e58ba25d5807bf8f0b3d3d2bc0e0b5": "trojan管理平台任意重置管理员密码+命令执行组合漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247487204&idx=1&sn=18346b3e0c1feb3a00b855885c33b875": "记一次实战日穿整个系统getshell-共九个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503433&idx=1&sn=59c967556e7479a42ab082a5237cbcd7": "雷神众测漏洞周报2025.6.3-2025.6.8", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247497483&idx=1&sn=b7885261baace192db72424ec6fb84d2": "CVE-2025-26319：FlowiseAI未授权任意文件写入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503464&idx=1&sn=587e0d89f4927447a4241f33a7b911b3": "安全热点周报：Google 修复了在攻击中被利用的新 Chrome 零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NDQ5NTU0MA==&mid=2647690780&idx=1&sn=77b86e8189faf46562c7d8202b33d93f": "0042.我如何发现 SMTP 注入漏洞并在短短 30 分钟内赚了 800 美元！", "https://mp.weixin.qq.com/s?__biz=MzIxOTQ1OTY4OQ==&mid=2247486724&idx=1&sn=7e6d7cd8bd43497042c7a5694c21b673": "DataEase 远程代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247500236&idx=1&sn=ba650d156368aa55c4c4830acbfce29d": "G.O.S.S.I.P 阅读推荐 2025-06-09 分享Huntr上的几个大模型框架的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxODUxMzE1Ng==&mid=2247484079&idx=1&sn=cf07fe72a4d1a5c46ee7f9b2a487f44a": "分享Huntr上的几个大模型框架的漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524736&idx=2&sn=e06dcdfe006dcd62bdda2dda950d1827": "Dell PowerScale 漏洞让攻击者能够获得未经授权的文件系统访问权限", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519450&idx=1&sn=6591917ba9a1c6fd2cde9141da32609d": "记一次某大厂csrf漏洞通过蠕虫从低危到高危", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496034&idx=2&sn=77ee859597afa06bf8155980519e08d5": "上周关注度较高的产品安全漏洞(20250602-20250608)", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485914&idx=1&sn=2821f58b6caf44cb106c661980341420": "神州数码云科信息 DCN 防火墙后台 Ping 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODQzNTU2NA==&mid=2247486369&idx=1&sn=33957214471faf3e137bb4a71db83923": "赏金SRC 某开源社区存在水平越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4OTExNTk0OA==&mid=2247485046&idx=1&sn=dfad8a66920758ce8ec4c08d36145120": "DataEase 远程代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788669&idx=1&sn=a61f1741b0e694b9f3e6c7c1106df246": "全球科技巨头隐秘监视数十亿Android用户，滥用系统漏洞跨端追踪长达八年", "https://mp.weixin.qq.com/s?__biz=MzkxNTY4NTQwMg==&mid=2247484515&idx=1&sn=426da386d99d295b7b7c6fe2618993ce": "Vite漏洞利用指南（文末附工具）", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488565&idx=1&sn=125adcaf47829f9e73f5b4fa72c02cc0": "Dataease JWT 认证绕过导致未授权访问漏洞CVE-2025-49001 附POC", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530704&idx=3&sn=59d50955f5f929cb0f489cbe2eb36b04": "利用Reverge自动化工具：提升漏洞赏金 hunting 的速度与效率", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247496441&idx=1&sn=b86d8080825684249e954e3890155c70": "2025年5月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247506582&idx=1&sn=dcd5972dc904ed507f28e03f89627aff": "漏洞赏金工具 v1.0", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247616371&idx=1&sn=e12ff003aad2f2d456a8d64b1af1d093": "最新分析 | Mirai 利用 CVE-2024-3721 攻击 TBK DVR 设备", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651463155&idx=1&sn=b6e6f751cf3e3300734697d8d00109b5": "信息安全漏洞月报（2025年5月）", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499968&idx=1&sn=c0a4acf073d44a93066277415a1b8beb": "CNVD漏洞周报2025年第21期", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247526479&idx=1&sn=4cca7247d9bb128024ac51c166779b4a": "SRC 漏洞挖掘中的绕过 WAF 技巧", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501170&idx=2&sn=e7ea349dff54c8123a16fa49b1158f9b": "【漏洞通告】Apache Kafka Connect LDAP远程代码执行漏洞(CVE-2025-27818)", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503414&idx=1&sn=ac899c057f0552dd0ecad669c0863b2a": "【成功复现】Roundcube Webmail代码执行漏洞(CVE-2025-49113)", "https://mp.weixin.qq.com/s?__biz=MzkzNTA0NzgyMA==&mid=2247484267&idx=1&sn=9acb4f45d2ea2b3cf8a88262ef691961": "CLFS cve-2022-37969", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651137136&idx=1&sn=476cddcaef4be59b5b96cf166775ebf4": "漏洞管理玩法已变，四大常见错误亟待摒弃", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458595541&idx=1&sn=ca1223787e388345e955ac4b09a7ffad": "Fuzz挖掘sudo提权漏洞：一次堆溢出如何逆向分析出提权思路", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490219&idx=2&sn=0501ee9f75de1f6f609c9c7c75b2d66e": "【高危漏洞预警】Apache Kafka Client配置造成远程代码执行漏洞CVE-2025-27818", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489303&idx=1&sn=8578d9e5018f2ca8164a6590e29414d1": "【漏洞通告】Apache Kafka任意文件读取与SSRF漏洞（CVE-2025-27817）", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247499492&idx=2&sn=151192a329acd78bab79ba17fb067d37": "KAFKA CLIENT 3.9.0 及以下版本存在服务器端请求伪造漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484871&idx=1&sn=93c960e76cecd00e2ac4a5d93e4e12b9": "【复现】Kafka Connect任意文件读取漏洞（CVE-2025-27817）风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzNTYwMTk4Mw==&mid=2247489508&idx=1&sn=0bfab3f39b28fb33bba8abd281d49b07": "Redis未授权漏洞复现汇总", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247496573&idx=1&sn=f701e4ac102fbed8f25d4461e7b75f97": "【论文速读】| VADER：漏洞评估、检测、解释和修复的人工评估基准", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489961&idx=1&sn=9ceb6db022621cae9f729d0aaecf12d6": "漏洞挖掘实战之弯道超车", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490219&idx=1&sn=acf6dce0f219c2ea5a110199ed4b8a7f": "【高危漏洞预警】Apache Kafka Client 任意文件读取与SSRF漏洞CVE-2025-27817", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247555093&idx=1&sn=fd9d6588ba43744ec9add8e7e6f99d9f": "玩转网络漏洞挖掘，实战能力弯道超车", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU1MjgwNA==&mid=2247487457&idx=1&sn=a167e6d3edc69691a44053b8b3e7a302": "实战讲解 Java代码审计之 FreeMarker模版注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTU2ODQ4Mw==&mid=2247487384&idx=1&sn=5ffca9c9cb920ef8ad92e9b37a2cb559": "CVE-2025-49113 漏洞分析与利用方式", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503473&idx=1&sn=46559985ab4d7f8502c1c9f1268ebaac": "Apache Kafka 多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU0OTQyMg==&mid=2247484429&idx=1&sn=cb4fd855f8a0f2ad59111e3ef81bcdfb": "【漏洞预警】Apache Kafka Connect任意文件读取漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512431&idx=1&sn=4629ebc541371b4e846c5f90d68b8b42": "2024年度Linux内核漏洞类型及趋势分析", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524758&idx=4&sn=0a68213306cd66c9fb6a4723562c1652": "谷歌账户恢复漏洞致攻击者可获取任意用户手机号", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524465&idx=1&sn=900b4d98a5bc47ffd6eaa0ceca281a07": "【漏洞通告】Apache Kafka Connect 任意文件读取漏洞(CVE-2025-27817)", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486700&idx=1&sn=c4141ed8747a6ddf3958888b71c5899e": "【漏洞预警】Apache Kafka Connect 任意文件读取和服务端请求伪造漏洞(CVE-2025-27817)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501170&idx=3&sn=6eb1c5ad37527cefeda8cb6557e090a2": "【漏洞通告】Apache Kafka Broker JNDI远程代码执行漏洞(CVE-2025-27819)", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485082&idx=1&sn=d864aa242dace84f433eb2fae22e0c69": "2025年5月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484489&idx=1&sn=a947eef1ac5b257d64b7afb09bdcbe3b": "AWS re:Inforce 2025 应用安全议题", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655282214&idx=1&sn=0625914fed042db42421a0970a5166c9": "2024年度全球软件漏洞与威胁情报报告", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530717&idx=3&sn=3dda2acd611a02796d17b6fed3a78683": "利用 CVE-2025-0072 绕过 MTE", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507787&idx=1&sn=1470dd59fd12731195bf46d75d0e856c": "速修！Kafka Connect爆任意文件读取漏洞，无需授权", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651463169&idx=1&sn=4657e8043045aba6ecf5bab93e343ee2": "信息安全漏洞周报（2025年第23期）", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530717&idx=2&sn=2e039d2ebc04cf71f327eb71ea092dba": "CVE 2024-43570 和 CVE-2024-43535 的报告和 POC", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492814&idx=1&sn=7fbcb92f5cf2e09c7b66163bf13863c7": "【已复现】Kafka Connect 任意文件读取漏洞（CVE-2025-27817）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523260&idx=2&sn=ea145b27a636bc95e9cf0045e0f89d03": "Ivanti Workspace Control硬编码密钥漏洞暴露 SQL 凭据", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651322893&idx=3&sn=acca4bafe06c06c3a0e8756199e46a51": "Windows WebDAV 零日远程代码执行漏洞遭野外利用", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900736&idx=1&sn=f135a3a9968b591ff7263118409a8696": "谷歌修复“幽灵”漏洞：你的手机号是如何被泄露的？", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651248079&idx=1&sn=90e56a859ad29dc05f0cc997ae73bcb6": "建行分行因存在多项网络安全问题被罚 | “取个快递”损失数十万 | 黑客利用iMessage零点击漏洞攻击iPhone用户", "https://mp.weixin.qq.com/s?__biz=MzkwNjczOTQwOA==&mid=2247494858&idx=1&sn=d1f7cfb96d00c4d43fe42465bd71409f": "工具推荐 | 高效便捷的图形化Nuclei GUI POC管理工具", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650623694&idx=2&sn=e663f63c20fc80cba9fad9941e6903f5": "涉及66个重要漏洞！微软发布2025年6月补丁日安全通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458595564&idx=2&sn=9250733f879b47dac40512814fc3dafd": "Microsoft Outlook 曝高危漏洞，仅需低权限就能实施攻击", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247485782&idx=1&sn=b30dd6f630934e592a540fd7f22a5df4": "渗透笔记：如何通过SQL注入漏洞拿到系统的管理员权限", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484900&idx=1&sn=2e1f598f96f292c5ad096f8b86321851": "安钥®「漏洞防治标准作业程序（SOP）」征文启示 [2025年第23期，总第41期]", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070121&idx=3&sn=da1822910fc81c3cd77f0bc83ba3dcd1": "【安全圈】Outlook 高危漏洞曝光：无需用户操作即可远程执行代码，微软紧急应对 CVE-2025-47176", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488578&idx=1&sn=4142428c58764503e46c884b4b84ac1c": "漏洞预警：用友NC loadDoc.ajax接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490412&idx=1&sn=cd8ec73671558d2a81a33033e8f35ac3": "【风险通告】微软6月安全更新补丁和多个高危漏洞风险提示", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516788&idx=1&sn=a8322e64eaf367a40e9b2389e32535fc": "使用异或∕或运算绕过符号过滤 -- RCE-XOR(6月11日更新)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247492338&idx=1&sn=ed081203ba8ce86934247704d9c98cb6": "一个web指纹识别工具，支持多线程、HTTP代理、批量识别、保存结果、截图展示、可自行添加指纹|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490224&idx=1&sn=15d9b3b8964b8455c3fba8dca693f4f8": "【高危漏洞预警】Autodesk Installer权限提升漏洞(CVE-2025-5335)", "https://mp.weixin.qq.com/s?__biz=MzkyMzI3MTI5Mg==&mid=2247485432&idx=1&sn=63e6601ff3509793cf189faf3a909cce": "契约锁电子签章系统RCE简单分析", "https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247527122&idx=2&sn=c1ff1f433717b608b87e76da427bada1": "2025年5月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503484&idx=1&sn=e9cb94f0ad7c963ed06257db90f92834": "【已复现】Apache Kafka 多个高危漏洞安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzkyMjE1NzQ2MA==&mid=2247490708&idx=1&sn=e4f6a9830fda07759f1e6507007bd44a": "CVE-2023-22527复现实录：沉浸式攻防体验尽在CyberStrikeLab靶场", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247548475&idx=1&sn=cf44f1ebf802541d34482ba2178ee40f": "建立一个成熟漏洞管理程序的七个步骤", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497556&idx=1&sn=7208e6194a202ec313700a4769f2d485": "2025年6月微软补丁日多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247486164&idx=1&sn=624542896280a113bc18fcfc7be7f903": "工具集：P1soda 【一款渗透场景下的内网漏洞自动化扫描工具】--2025∕6∕08更新", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247525784&idx=1&sn=baee547bc43d6c40c0f3db64c3ca2620": "2025-06微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492822&idx=1&sn=588b95206e8af7e0f4799bf62d24e037": "【已复现】契约锁电子签章系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247492651&idx=1&sn=2ecf9cc05b8618697416aaa97d1c10c6": "Windows WebDAV 零日远程代码执行漏洞遭野外利用", "https://mp.weixin.qq.com/s?__biz=Mzg4ODg4NDA2Mw==&mid=2247483849&idx=1&sn=0a3d86cea5da79e418d2a716f77139e9": "深度剖析JSONP注入漏洞：JavaScript回调函数引发的会话弹窗劫持", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070121&idx=4&sn=e69c74fd7874857df6d38295cf981b80": "【安全圈】微软警告：Windows远程桌面服务重大漏洞（CVE-2025-32710）可被远程执行代码，影响多版本服务器系统", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489139&idx=1&sn=ca0f7c5f8d92692e892609d1faed44af": "一次奇妙的降价支付逻辑漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795408&idx=1&sn=97ff557b8ea3c77ae4cb7e820b8b3db2": "微软 Copilot 严重漏洞可能引发零点击攻击", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247494376&idx=1&sn=bfac9cacc14a4968dfc10275a87819e9": "DataEase 远程代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484887&idx=1&sn=68c33f216a071877dd2d8f6ee00de324": "【复现】契约锁远程代码执行漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795408&idx=3&sn=82d287ab28956a7998831567e01e18a8": "Roundcube RCE 漏洞被迅速利用，超过 8 万台服务器受到影响", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493368&idx=1&sn=bbc610df01a58a40f278958a6b06d518": "漏洞预警 | Apache Kafka任意文件读取和远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489139&idx=3&sn=9a7bc479efa9b3428682e5117d7f301c": "智能汽车安全-漏洞挖掘到控车攻击", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493368&idx=3&sn=1d7e3c69c8fecfdf2342b4c2dd4a093f": "漏洞预警 | 金和OA任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523260&idx=1&sn=961b0c000fcef3533fc9754b82415f9a": "微软6月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493999&idx=3&sn=c093f32039ae5e0e02166b94042cc5a2": "SAP 2025年6月安全补丁日修复关键NetWeaver漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493999&idx=1&sn=425510992775377d64d1b80cae9afe43": "随着Roundcube RCE漏洞被快速利用，超过80,000台服务器受到影响", "https://mp.weixin.qq.com/s?__biz=Mzg4MzkwNzI1OQ==&mid=2247486712&idx=1&sn=277f4b4f516792ce44bd7024784afc29": "【PHP代审】记一次某海外酒店管理系统漏洞复现分析+0day挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzNDI5NjEzMQ==&mid=2247484805&idx=1&sn=041adf9e2748f03fb2222d934f9fe44f": "【漏洞复现】九思oa漏洞之SQL注入", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497717&idx=1&sn=6efe3ab6e5bb1234ee1fb95dd939bdd6": "一个$1,337的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491780&idx=1&sn=697bf76c965a98ac990b82343f7b9a58": "三汇 SMG网关管理软件 9-13pcap.php 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NjY3OTQ3NA==&mid=2247487000&idx=1&sn=5be4c11c561976988ba5b9f0fff70ccb": "客户端漏洞挖掘方法论在车机系统中的延伸：任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493368&idx=2&sn=701d5c7504e52d022769b7e6343466c1": "漏洞预警 | 百易云资产管理运营系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261302&idx=1&sn=7033acdbf40ec6570633f66664423697": "【CVE-2025-32711】全球首例 AI “零点击”漏洞：黑客可无声窃取Microsoft 365敏感数据​", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530778&idx=3&sn=166519c90934cd8fb3fd232bfae22456": "CVE-2025-33053，Stealth Falcon 和 Horus：中东网络间谍活动传奇", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489835&idx=1&sn=3fe10ef2932356b3f4289727129e56d3": "国外某数据库管理系统存在前台任意文件上传漏洞 (CVE-2025-5840)", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247487246&idx=1&sn=7a41868625893614f6da1bbdcda23a31": "当漏洞成为“数字战争”的弹药，谁能改写攻防规则？", "https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247484821&idx=1&sn=521d6f7191a4c623b04a751f998a3f05": "【漏洞复现】Kafka Connect任意文件读取漏洞（CVE-2025-27817)", "https://mp.weixin.qq.com/s?__biz=MzU0NTU5NTA4NQ==&mid=2247491785&idx=1&sn=9b23f6b5cbbaf45761d977ee905bed06": "CVE-2024-23897 Jenkins CLI接口 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486566&idx=1&sn=5457ff24c4b0aa16fcca4390504e4aa0": "攻防下帮助学员快速审计NET前台rce漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652252007&idx=1&sn=41b8469177dae3520103786696e7603e": "Salesforce PaaS平台大规模宕机超6小时，众多网站功能受损", "https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659211959&idx=1&sn=51cbfd4fb6f02aadc4647e968539a871": "谷歌账户恢复漏洞致攻击者可获取任意用户手机号：赏金5000美元", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489308&idx=1&sn=06cf92ea68b30f6d5c68df7116644ac7": "【安全更新】微软6月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487487&idx=1&sn=e7017d76417d578514aadbbcd40f83f7": "漏洞预警 |Kafka Connect存在任意文件读取漏洞（CVE-2025-27817）", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493999&idx=2&sn=46385911a4e1601f37064aba5c5a96b9": "漏洞可能导致与任意谷歌账户关联的手机号码遭泄露", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514505&idx=1&sn=df286bcbf807c8444c7f8356b70aef56": "首个AI Agent零点击漏洞曝光：一封邮件窃取企业AI任意敏感数据", "https://mp.weixin.qq.com/s?__biz=MzU5Njc4NjM3NA==&mid=2247496635&idx=1&sn=7389470e1ca637f9aa26ebaabe362b5e": "漏洞管理玩法已变，四大常见错误亟待摒弃", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503477&idx=1&sn=1410a653474bbb82b32dadab97a47c7b": "微软6月补丁日多个产品安全漏洞风险通告：1个在野利用、9个紧急漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247545790&idx=1&sn=999b6a569025905ded875ba4833d32f6": "【漏洞预警】Apache Kafka Connect高危漏洞（CVE-2025-27817）可致任意文件读取,影响核心数据安全！", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651137167&idx=2&sn=90da648f75c3d6d696f4946823f2f495": "突发！奔驰车载系统大面积崩溃；首个已知AI零点击漏洞细节曝光 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247573141&idx=1&sn=9f4853031ae957fa0ace7d99490175bd": "浅谈常见edu漏洞，逻辑漏洞，越权，接管到getshell，小白如何快速找准漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649167173&idx=1&sn=f7421efcbc4b873263935a4954985500": "揭秘最为知名的黑客工具之一：Legion （一款功能强大的自动化网络侦察与漏洞扫描工具）", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247491258&idx=1&sn=3b2f946e0199496b1cb3e1bc10f3f7b6": "创宇安全智脑 | DataEase 身份认证绕过（CVE-2025-49001）等81个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523270&idx=1&sn=34d30246787005440f76867606c6259c": "Microsoft 365 Copilot 中存在零点击AI数据泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTMxMjQ4OA==&mid=2247486106&idx=1&sn=1bea9729146539683a59af9a3d9470e8": "EchoLeak-首个导致 M365 Copilot 数据泄露的零点击 AI 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507799&idx=1&sn=c6c3a09312697bafa11f8e2f5212f32b": "漏洞通告|GeoServer SSRF和XXE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523270&idx=2&sn=cd319434730e299df36bd4ba219387e2": "Apache CloudStack 严重漏洞可用于执行权限操作", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512435&idx=1&sn=c35c2db0a565cfdacb1cb086e88a4a99": "工业自动化PROFINET协议库P-Net 高危漏洞预警", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651322946&idx=3&sn=289b6e0241356a1bdbb26f4d679825ac": "微软Outlook路径遍历漏洞允许攻击者远程执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492830&idx=1&sn=0a00dece01aa71e8b1e9e3b5066837c7": "【已复现】GeoServer SSRF和XXE漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458595569&idx=3&sn=cd7353a8ac4c73d7b9281ece95ec84bd": "Salesforce 行业云曝20+漏洞，含零日漏洞！", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651463175&idx=1&sn=e76aec19728e7bf74ec7c039ed40a84b": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487463&idx=1&sn=230ead607780050b503f02a16d4d3a5a": "CVE-2025-24071 - Windows 文件资源管理器欺骗漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247492348&idx=1&sn=441320a8e415c5b15d5bff94373be065": "Mitmproxy GUI用于解决渗透测试加解密的难题 让你的Burp像测试明文这么简单|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247510877&idx=2&sn=96d346ba4108bb4a527b458d08ee33e4": "高危漏洞打包兜售，Palo Alto、Fortinet、Linux等关键系统在列", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485930&idx=2&sn=597b6e0652540813677b77802e4ece5e": "【漏洞预警】Apache Kafka Connect高危漏洞（CVE-2025-27817）可致任意文件读取,影响核心数据安全！", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247636174&idx=4&sn=029142f90dac9e6d869184d8f7e327e0": "首个AI Agent零点击漏洞曝光：一封邮件窃取企业AI任意敏感数据", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503493&idx=1&sn=0810b8ac4e0360b1135b0ff03117cf88": "【已复现】契约锁电子签章系统远程代码执行漏洞(QVD-2025-23408)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490229&idx=1&sn=6b844c89011b2be9e981cc80fce4ad24": "【高危漏洞预警】契约锁电子签章系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNTA0NzgyMA==&mid=2247484271&idx=1&sn=bee4e651a74eda4316b37d8d05f9bda1": "CVE-2023-36802 mskssrv type confusion 提权", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247487122&idx=1&sn=bd894c86e93f53e3fde36b3016e22e07": "重生之网安小FW，某教务一体化系统任意文件写入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDI5NjEzMQ==&mid=2247484816&idx=1&sn=3a4a2007cc0f23f7da750ff52b2ec51f": "【漏洞复现】九思oa之奇怪的sql注入", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795421&idx=3&sn=56fc4b8bea6248a3aa25bf799945dc6f": "GitLab 多个漏洞可导致攻击者完全接管账户", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489167&idx=5&sn=ffc9d9d2742c9eb3dc02b07aa94ffac6": "智能汽车安全-漏洞挖掘到控车攻击", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652252014&idx=1&sn=902715f1ed8dd1c00b55490526da55ad": "SinoTrack GPS设备存在严重安全漏洞，可被远程控制车辆", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655282707&idx=1&sn=170fd31c2ce98adbb314614194200315": "任意文件上传漏洞及常见框架Getshell分析", "https://mp.weixin.qq.com/s?__biz=MzkzMDcxNzg4MA==&mid=2247484577&idx=1&sn=6d8367ef3304610b2fd669d6e843a514": "契约锁最新漏洞补丁分析", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489167&idx=3&sn=a252c3fa99bb3c13eba861594d290b86": "一次奇妙的降价支付逻辑漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651133508&idx=1&sn=a1a24531dc07e9cd843152fd14412d8e": "电力安全预警！3.5万台漏洞太阳能设备在公网暴露", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493384&idx=3&sn=ca6593532ba34812bdf9218f754c6a62": "漏洞预警 | 美特CRM XXE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493384&idx=1&sn=7869f971392716e029fab6b644477314": "漏洞预警 | 银达汇智智慧综合管理平台SQL注入和XML实体注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493384&idx=2&sn=623168715fc93b9909e495f849eab793": "漏洞预警 | 宏景eHR SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247494008&idx=1&sn=2c6fff5d5afa1e3e4bd27b375a12d3f8": "Paragon Graphite间谍软件利用零日漏洞入侵至少两名记者的iPhone设备", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524783&idx=1&sn=1230a9c3ec711c744e5355e4a173cd26": "Windows SMB客户端零日漏洞遭利用：攻击者采用反射型Kerberos中继攻击", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491789&idx=1&sn=5885e0ee1c9dd9fab4cb35ea7bbd647e": "B-LINK AC1900 V1.0.2 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247488011&idx=1&sn=db438e2b8d2a2c5a1639aac28411bc32": "漏洞预警 | Apache Kafka Connect任意文件读取与SSRF（CVE-2025-27817）", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247492793&idx=1&sn=f428edcabb86adc4cae7213fe5214e08": "漏洞赏金工具 v1.0", "https://mp.weixin.qq.com/s?__biz=Mzk0NDU5NTc4OA==&mid=2247484640&idx=1&sn=96d9b43f0787deee3e003ab7c1a6a485": "渗透测试-从下载漏洞到前端加解密+签名校验拿下sql注入", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492328&idx=1&sn=877dd3baec6be94332cc460166808bf0": "记一次实战日穿整个系统getshell-共九个漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3MDgyMzkwOA==&mid=2247491568&idx=1&sn=35c5311b89a99e2d66e3d557819a5047": "清源SCA社区版每日漏洞情报、新增CVE及投毒情报推送", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524783&idx=2&sn=134520fea73b12fe9966958e6dcf6359": "UEFI安全启动遭突破，高危漏洞CVE-2025-3052威胁数百万PC", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247488300&idx=1&sn=4a32474b0aef6f2773b86d1411080556": "java审计之下载漏洞获取到的代码如何断点调试", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488098&idx=1&sn=e93a71177440f649281a364558f31984": "微软Copilot惊现全球首个零点击AI漏洞，企业敏感数据可被无声窃取！", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492664&idx=1&sn=5c7f88a4510a8d14bd6cd23312251346": "Stealth Falcon组织利用0Day漏洞在中东发动网络攻击——每周威胁情报动态第226期 （06.05-06.12）", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486704&idx=1&sn=1e59b5cc0f1b3b36a82ca5bb0b3457b6": "【漏洞预警】Windows WebDAV 客户端远程代码执行漏洞(CVE-2025-33053)", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788688&idx=1&sn=62fe0c0fe52ec9535f10655b9c217d47": "微软Copilot曝首个零交互AI漏洞：一封普通邮件静默泄露企业敏感数据", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524783&idx=3&sn=945e6becb24f41d4dd077d47e9509f07": "Apache CloudStack漏洞使攻击者可破坏云基础设施系统", "https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247536253&idx=2&sn=afa344b3b17adafcbcd8949ea4943124": "聊热点｜国家安全部：“刷脸”时代，安全不容小觑；APT组织利用Windows WebDAV零日漏洞实施远程恶意软件攻击……", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651248091&idx=1&sn=c2d0f17071027a75a6bb6b71e565fdcf": "首个AI Agent零点击漏洞曝光：一封邮件窃取企业AI任意敏感数据 | 威胁狩猎入门指南：专家级主动网络安全策略", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582873&idx=1&sn=0b714276ab832a9ba16514a3d8bceb01": "新型Mirai僵尸网络通过命令注入漏洞感染TBK DVR设备", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512480&idx=1&sn=dcf723277dd1aec37f2aa37635844c78": "企业级VPN NetExtender任意文件删除到权限提升漏洞剖析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523281&idx=1&sn=39fe6b4ec8cebc0a362c26c8fffbd2c7": "GitLab 修复高危的账户接管和认证缺失漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523281&idx=2&sn=c4ed265127f77866bb9d4f397428f552": "Palo Alto Networks 修复多个提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489173&idx=4&sn=571a093b587c5833a8ee8be5e53c00ca": "一次奇妙的降价支付逻辑漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=Mzk1Nzg3ODkyNg==&mid=2247484121&idx=1&sn=43b7919e71e92bcdd179e089796ce428": "契约锁电子签章系统dbtest远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzA5Nzc4Njg1NA==&mid=2247489260&idx=1&sn=51ba3d6560441abb6d16005aa88ecc6d": "关于防范人工智能绘图工具ComfyUI多个安全漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651323069&idx=4&sn=77515d1b0ea03422f212c22ce648451c": "中科GPS设备漏洞曝光，可导致车辆被控制和位置追踪", "https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651733331&idx=1&sn=dd0f9132911285d65530eb73c4223cae": "实战出真知 | 安星智能体赋能实战化运营，高效应对高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497725&idx=1&sn=9acb221e666940eb40092a4f96f6dd25": "RCE再现", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096328&idx=1&sn=9f3ab73cf1559928f01fbf5e1ce41fdf": "Windows 任务计划程序允许攻击者提升权限漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NDgxMzgxNA==&mid=2247496910&idx=2&sn=f9ede51c8a4f7ac0b9b98b076c9d7acc": "每周安全速递³⁴⁵ | Play勒索团伙利用SimpleHelp漏洞实施双重勒索", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458595726&idx=2&sn=8c997ac7387fc908b287a6d0d561fe75": "苹果iOS现零点击漏洞，记者遭Graphite间谍软件入侵", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651323069&idx=3&sn=e1a2654d1eb8eb944bf1949b9ed09b40": "GitLab曝高危漏洞组合，攻击者可实现完全账户接管", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514513&idx=1&sn=67e663e82b15ccc4fb808170d7a081dc": "工信部：AI绘图工具ComfyUI多个安全漏洞已被用于实施网络攻击", "https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649173422&idx=4&sn=88e016f3aae3c6c67b79675aa556fc8e": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489173&idx=6&sn=86ac44403dba82e570f2f0f07ff3715f": "智能汽车安全-漏洞挖掘到控车攻击", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247487149&idx=1&sn=c8e2becd3ec6a5c4d7b01692cddc2b6f": "重生之网安小FW，每天蹲一手大佬的漏洞利用分析", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651323069&idx=2&sn=46c850fbda9bc82352ef57c89fdd96e8": "苹果iMessage零点击漏洞遭间谍软件利用，记者成监控目标", "https://mp.weixin.qq.com/s?__biz=MzU5MTc1NTE0Ng==&mid=2247486069&idx=1&sn=686dff0eb15fbaf6950e19c95f008dba": "【漏洞复现】Kafka Connect任意文件读取漏洞 CVE-2025-27817", "https://mp.weixin.qq.com/s?__biz=MzU3MDg2NDI4OA==&mid=2247491228&idx=1&sn=052a45b2108d847c0ec904a1c3075ce6": "两载光阴，我与0day的两次匿名邂逅", "https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448689041&idx=2&sn=726c15b4a0668113a70c2f888efe629b": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490237&idx=1&sn=dfd4f48b27c1593002da37e03645a275": "【高危漏洞预警】GeoServer未授权服务器端请求伪造(SSRF)漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485936&idx=1&sn=c8db53c1a830e5151464c1c31ff2ffd7": "同享人力管理管理平台 UploadHandler 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486410&idx=1&sn=292331c03afb3bcfa68cd2cdd35c0eb7": "漏洞管理工具 - miscan", "https://mp.weixin.qq.com/s?__biz=MzkxNTEzMTA0Mw==&mid=2247496726&idx=1&sn=cb4a63b4ce5095d221332254bd5bbc8e": "CVE-2025-33073 漏洞：NTLM 反射攻击的绕过方法及影响", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488591&idx=1&sn=c235ea6352df7f47f2fc2bd6408c05c1": "Grafan存在url重定向&服务端请求伪造漏洞CVE-2025-4123 附POC", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664244112&idx=2&sn=9428653919db114469090e0ec242111f": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247491678&idx=1&sn=0fb407eb15dc3e950860b1dbc14bb8b1": "渗透测试 ｜ 从jeecg接口泄露到任意管理员用户接管+SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MTUwMjQ5Nw==&mid=2247488984&idx=1&sn=90ec422c5c51bf0061ae125313358ac3": "PHP 类型杂耍漏洞：攻击者如何利用松散比较", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489218&idx=4&sn=fa277c4ca4189e8764162fab696c7a36": "一次奇妙的降价支付逻辑漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489218&idx=6&sn=77731b726421696f62ebfb236a653c3c": "智能汽车安全-漏洞挖掘到控车攻击", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488604&idx=1&sn=14924432f473c81796e50ec5cb00b963": "Optilink管理系统gene.php接口存在远程命令执行漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247625052&idx=1&sn=056754f27003d77ebc178a77ea0b866d": "人工智能自动化模糊测试：如何自主发现汽车软件中的漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530877&idx=1&sn=43ab9caedb1be5d8bac6e2151506458f": "NTLM反射已死，NTLM反射万岁！——CVE-2025-33073深度分析", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530866&idx=2&sn=4650a382383462fc8d35a14c62e9f839": "CVE-2025-33073 针对 NTLM 反射 SMB 缺陷的 PoC 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491809&idx=1&sn=baf7f085baf6b7b25c2165be6cc073dc": "会捷通云视讯系统 fileDownload 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651323083&idx=2&sn=542afbafc16938bf81c4a6946e67cfef": "FreeBuf周报 | Meta暗中追踪数十亿安卓用户；GitLab 曝高危漏洞组合", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070172&idx=2&sn=338cac5913731b091a4e71b214daf70f": "【安全圈】微软修复9.3分高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485986&idx=1&sn=00a861c9f71787095bc0b4811bb92b1f": "CVE-2025-30220｜GeoServer XXE漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651323083&idx=1&sn=f8c83096621ff3fb1a6ffdc75cd02146": "Windows磁盘清理工具权限提升漏洞PoC利用代码公开", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247503078&idx=1&sn=dcff53e08a56091f873b1504dbd66a57": "【攻防实战】Weblogic-RCE集锦", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485986&idx=3&sn=067d2ba7017165b5d5a11a0f55a68e26": "CVE-2025-32717｜Microsoft Word 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247489318&idx=3&sn=527642d53a41a12fa9035f80384e7bd5": "2025 最佳漏洞赏金书籍和网站", "https://mp.weixin.qq.com/s?__biz=MzIzMDM2MjY5NA==&mid=2247484243&idx=1&sn=dd3f56cb2e113d589d7e8fbdd373b32e": "金融业“解码差异”漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649173428&idx=1&sn=bf293221f360824960d0a350a4d126bc": "存在未授权访问漏洞等问题！北京市网信办依法查处两家违法企业", "https://mp.weixin.qq.com/s?__biz=Mzk1NzIyODg2OQ==&mid=2247484857&idx=1&sn=ce2a1616864a836faf7983e5c412c5b3": "分享一些漏洞挖掘的课程（附网盘直接下载 无广告）", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064203&idx=1&sn=6a9b3f9b1737e370daec30c6d4803d57": "信息安全漏洞周报【第026期】", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485986&idx=2&sn=7a87bb2da8ae173794e4a4250b47452a": "CVE-2025-32756｜Fortinet多款产品存在远程代码执行漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247493926&idx=1&sn=06ac298909e27d0e37fef90f64b205da": "疯狂星期四两本证书漏洞合集", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491800&idx=1&sn=ff9c1b0db7a32c6173824a5580985489": "WIFISKY-7层流控路由器 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247485807&idx=1&sn=f849a548f91e22fee19fce78d3285a8d": "记一次SRC漏洞垂直越权挖掘", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247521021&idx=1&sn=a0226934cfa766a45aeb4c8508e05a13": "热门Selenium库WebDriverManager曝出CVSS 9.3分的严重XXE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247490650&idx=1&sn=a3cbd318628c02db48d919f8a0c06255": "sqlmap_gui【图形界面化的 SQL 注入漏洞测试工具】", "https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247484848&idx=1&sn=0c246e7c7d0c64ac63f1f953807c0390": "【漏洞复现】契约锁远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMDM2MjY5NA==&mid=2247484254&idx=1&sn=b7b309dbe8f914abcb651cf418eef340": "金融业“解析差异”漏洞后续-POC", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247491705&idx=1&sn=aeeb5d16f0b1511b8d2413c49b170e7a": "【SRC】未授权访问漏洞的利用链：一口气到getshell的实践", "https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247509454&idx=2&sn=24ad4abc7b5dbc1d32898c87e37dc3f4": "【分析】以色列空袭伊朗事件暴露的伊朗防空体系漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489318&idx=1&sn=8dc3cbccb099dac80324305cda3f9fe9": "任意文件读取&下载漏洞的全面解析及利用", "https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650561365&idx=1&sn=d2025cd80b7752f6432cb2830b922996": "【分析】以色列空袭伊朗事件暴露的伊朗防空体系漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247497402&idx=1&sn=05b670092bd72cf9491c07b871a8aa6f": "Wavely | 高效便捷的图形化Nuclei GUI POC管理工具", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247499691&idx=2&sn=d8c9503412383552934b7d2b0ee8ed7f": "(CVE-2025-3415) 暴露Grafana Alerting中的DingDing API 密钥", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530905&idx=2&sn=d97f508faa27cf71ce0646619e5dfbd6": "CVE-2025-4123：Grafana 中通过开放重定向引发的 XSS", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652116331&idx=1&sn=c5faf7f69c14fa579cd35caa86d683a6": "存在未授权访问漏洞等问题！北京依法查处两家违法企业", "https://mp.weixin.qq.com/s?__biz=Mzk3NTU0OTAwOQ==&mid=2247483847&idx=1&sn=091150b687d6366c68918915aac717c8": "域大杀器 CVE-2025-33073 NTLM反射", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530905&idx=3&sn=e213905f649075f85f3cb74fb755521a": "DanaBleed：DanaBot C2 服务器内存泄漏漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651323140&idx=3&sn=45827901940f918a640dfd1f6b37d59a": "Windows SMB高危漏洞分析：Kerberos缺陷导致攻击者可获取SYSTEM权限", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516816&idx=1&sn=5d6d77197ef3850efacbaeceddfe1b44": "内网漏洞自动化扫描工具 -- P1soda（6月7日更新）", "https://mp.weixin.qq.com/s?__biz=Mzk3NTEyMzQzOA==&mid=2247486300&idx=1&sn=324b5ac4e2c2f68d68f44eadbf206fc7": "漏洞复现：CVE-2015-1635、CVE-2017-0144", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485941&idx=1&sn=19933a1c4ce9672ea5adef1f97618da7": "JieLink+智能终端操作平台 GetDataList 敏感信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652116334&idx=2&sn=604c4749c1de5c6874abe3fbb870e5c3": "了解运行时漏洞管理", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247506599&idx=1&sn=15c6bd921ccebd2840f9830c9e0fc2f7": "一个高性能的目录遍历漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247487164&idx=1&sn=70ef1766e7b61541d1cecdce8ff717f1": "重生之网安小FW，攻防不想挖洞怎么躺平捡漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MjgxNTQ1MA==&mid=2247488337&idx=1&sn=5db71361fd2e4da938f507c914565835": "通用型漏洞在企业中的应急响应", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247494022&idx=3&sn=bd74afe219a49604d768f1495b3bdc73": "苹果公司证实Messages应用漏洞已遭野外主动利用", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491829&idx=1&sn=f0e1ec63d977fad0aead47ea777d0182": "金华迪加 现场大屏互动系统 redpacket.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxOTk2Mjg1NA==&mid=2247487081&idx=1&sn=e1bd16a8f4cfae77801e7eabd68e18de": "客户端漏洞挖掘方法论在车机系统中的延伸：任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247494022&idx=1&sn=a40a759d04a39668dcd25191d5d9a7cd": "Palo Alto Networks修复了多个权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3MTUxNzQxMQ==&mid=2453886078&idx=1&sn=8afe4da7c70f074d8c565ddbe7938c09": "被绕过的防线与救命的配置：ACL 在漏洞攻防中的双重角色", "https://mp.weixin.qq.com/s?__biz=Mzg4NzY5NjgyNw==&mid=2247485531&idx=1&sn=dd9a0891993d265a5c836d740481c563": "CVE-2025-33073：一条命令打穿内网主机的 SYSTEM 提权漏洞【附POC】", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493396&idx=3&sn=e6333cfc3d94d4f6d2e1c601a6b79df2": "漏洞预警 | 用友NC SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1NTEzODc3MQ==&mid=2247487150&idx=1&sn=3337e826144d84e123f6d83c4cffb942": "Beyond REST：一种用于全面API漏洞模糊测试的工具APIF", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491818&idx=1&sn=9a8013bf5005169540c9bc08f03ec77a": "神州数码 DCME-320出口网关 black_list.php 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247494022&idx=2&sn=d88428fa371809299b8d83ef2353c7ed": "趋势科技修复Apex Central与TMEE PolicyServer重大漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTc2MDE3OA==&mid=2247486854&idx=1&sn=789805dc2c0ad02645cc3b83fe748f14": "SRC漏洞小技巧——文件上传垃圾漏洞之绕过上传大小", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493396&idx=1&sn=2439c6d5a5f532279cd9a9b7a9053f9d": "漏洞预警 | 云课网校系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493396&idx=2&sn=b54a19f02fe36dad012f5cb1eb4bf157": "漏洞预警 | 宏景eHR SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NDQyNzg1OA==&mid=2247494086&idx=1&sn=fecf324f9ab98512f9702308494b5877": "域内大杀器：CVE-2025-33073 NTLM Reflection攻击", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488112&idx=1&sn=eeb7a6c45256d2804fb041de9ddcdc33": "无需点击就中招！间谍软件利用iMessage漏洞监视记者，苹果紧急修复", "https://mp.weixin.qq.com/s?__biz=MzkxNDQ5MTQ2Mg==&mid=2247484008&idx=1&sn=2ace6d9b83200f6f09158527c68469e0": "若依4.8.0RCE分析", "https://mp.weixin.qq.com/s?__biz=MzkyOTc0NDY2Nw==&mid=2247485188&idx=1&sn=48ce12178a70e5b8f3ea47e79dd57e64": "PE代码执行虚拟机详解&原理&源码", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582888&idx=2&sn=29d6e96277b041d88e3d273ca73f3b6c": "安全动态回顾|FIN6黑客冒充求职者通过后门进入招聘人员的设备中 微软365 Copilot中发现零点击AI数据泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3MDgyMzkwOA==&mid=2247491571&idx=1&sn=24f12d441710a620c5747ca61caa2366": "清源SCA社区每日漏洞提早感知情报、新增CVE及投毒情报推送-20250615", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651248095&idx=1&sn=c843b5a9abdd1ba2ce1d374edf1c0124": "工信部：AI绘图工具ComfyUI多个安全漏洞已被用于实施网络攻击 | 北京2家公司个人信息数据遭境外IP窃取被罚5万元", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652252021&idx=1&sn=240b1cc1d52d6bfd65e82f1bb9507c06": "软银13.7万用户数据因外包商漏洞被泄露", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247512801&idx=1&sn=bc1390b991ab475c42a3dcf2072bf910": "记一次AMD漏洞挖掘：从文件权限配置错误到驱动权限提升", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247494380&idx=1&sn=66151c9843ee0ce1f076c7129e9fa929": "域大杀器 CVE-2025-33073 NTLM反射", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582888&idx=1&sn=02b823aa4fbe49aa681dfd78302faedf": "新型Secure Boot漏洞允许攻击者安装引导工具包恶意软件", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506602&idx=2&sn=702e08bb812e6fb8a02984fc4116548b": "每周网安资讯 （6.10-6.16）| Adobe Experience_manager存在跨站脚本漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650623761&idx=1&sn=0688a2ffab227267871422c71dffd982": "告别\"一轮游\"！亚信安全发布2025年攻防演练必修高危漏洞合集", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247492664&idx=1&sn=34327021796479c56b9f78e1d53f26e3": "Windows SMB 权限提升漏洞(CVE-2025-33073)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523297&idx=2&sn=ea60b085762fef54a56dea85a3150a40": "超4.6万个 Grafana 实例易受账户接管漏洞影响", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503502&idx=2&sn=ffe84150213eff7c9c03e074b80d7c59": "安全热点周报：黑客利用 Windows WebDav 零日漏洞来投放恶意软件", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516823&idx=1&sn=d8671ca4475900732cf71c35861bbfab": "Nuclei POC 漏洞验证可视化工具 -- Wavely（6月12日更新）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519474&idx=1&sn=27e66a7c83cd189f0b28f274424d0779": "从 Self XSS 到 RCE", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503502&idx=1&sn=0283b5ba91d5d3a06e6aae4bc462be4c": "【已复现】Windows SMB 权限提升漏洞(CVE-2025-33073)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070197&idx=1&sn=2ea19a473759ade49d28c33654512b51": "【安全圈】Windows SMB客户端提权漏洞（CVE-2025-33073）及其在未启用SMB签名环境中的攻击原理", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247493005&idx=1&sn=d8de30626c12b1ff885b2089b6a483b2": "Output Messenger 漏洞被利用作为间谍攻击的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247573270&idx=1&sn=604d3b689ad54f42bc3af950d655e5fb": "若依(RuoYi)框架漏洞战争手册", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490246&idx=1&sn=b8357c865b44476bbafa52f344dc85f5": "【漏洞预警】Grafana访问控制不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496056&idx=2&sn=18ef93b8922eb9eac576fc15cd65747f": "上周关注度较高的产品安全漏洞(20250609-20250615)", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247489466&idx=1&sn=3630915a5db00418f1e7b18541bbb73a": "渗透测试 ｜ 从jeecg接口泄露到任意管理员用户接管+SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247488033&idx=2&sn=e559d9f9268e653c143ee78bcc61baef": "漏洞预警 | DataEase JWT认证绕过漏洞（CVE-2025-49001）", "https://mp.weixin.qq.com/s?__biz=MzU2MzY1NjU3Ng==&mid=2247485933&idx=1&sn=881ac470d0f0990bb7dce2c7e0ecb769": "企业内部安全漏洞修复流程的建立与思考（其四）", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490417&idx=1&sn=73dca860bb720796610dd88e6c9767a6": "【AI风险通告】MCP Inspector存在远程代码执行漏洞（CVE-2025-49596）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490246&idx=2&sn=e25fdd6dcc4c1c4e4f8529b472db1979": "【AI高危漏洞】MCP Inspector未授权访问致代码执行漏洞（CVE-2025-49596）", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524798&idx=1&sn=6d2fd237a4660e5c5a0c0b6eb2b537c4": "Microsoft Defender for Identity 漏洞可致未授权权限提升", "https://mp.weixin.qq.com/s?__biz=MzI0MTUwMjQ5Nw==&mid=2247488986&idx=1&sn=5ed544bfa806db85622785e6ebe8ff92": "客户端路径遍历（CSPT）——深入探究被忽视的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247535205&idx=1&sn=79c060ff2a09da91f05ed22d90bb8400": "【漏洞预警】：高危警报！微软公司通报多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496056&idx=1&sn=4c39712ac7b32a3338d54e3b32153964": "CNVD漏洞周报2025年第22期", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488619&idx=1&sn=b4140b435210a6e9a18601d49439fcb4": "Apache Kafka Connect接口存在任意文件读取漏洞与SSRF漏洞CVE-2025-27817 附POC", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484451&idx=1&sn=f0448570fff9d24618290b0aad1fd5bf": "【论文速读】|基于大型语言模型的上下文增强漏洞检测", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524798&idx=2&sn=a2dcf508bc426cbf09d35addc83dacf7": "IBM 备份服务漏洞让攻击者能够提升权限", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070197&idx=4&sn=ec2e30a1b4bdbaba363c267c6b615863": "【安全圈】起亚厄瓜多尔车型钥匙系统存在严重漏洞，数千辆车面临被盗风险", "https://mp.weixin.qq.com/s?__biz=MzAxNjg3MjczOA==&mid=2247486834&idx=1&sn=fb68fb05e911038caec9275525364076": "CVE-2025-33053：立即更新Windows的充分理由", "https://mp.weixin.qq.com/s?__biz=MzkyOTQyOTk3Mg==&mid=2247485324&idx=1&sn=9459be4ffec2530bb9f7315d72100e03": "一款渗透场景下的内网漏洞自动化扫描工具", "https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247535205&idx=3&sn=638f34099ca5d39a3fe9321aa0629c4e": "数据裸奔遭境外窃取！北京网信办顶格处罚两家“漏洞企业”", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488117&idx=1&sn=3b34f82ff0a524550f1a692cb328f9bc": "高危预警！Windows曝“反射型Kerberos中继攻击”漏洞，攻击者可直取SYSTEM权限(含POC链接)", "https://mp.weixin.qq.com/s?__biz=MzkzNDI5NjEzMQ==&mid=2247484832&idx=1&sn=9a171d184af60ecce4816d36d84c0352": "【漏洞复现】九思oa-XXE", "https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652997858&idx=1&sn=b65195c1a46ab8fa149ea19f95295098": "先知通用软件漏洞收集及奖励计划第八期 正式开始！", "https://mp.weixin.qq.com/s?__biz=MzI3NjUzOTQ0NQ==&mid=2247520768&idx=1&sn=5d38e98a33103bbc9c386a357f878f50": "《2025年攻防演练必修高危漏洞合集》", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611086&idx=4&sn=4dc6be3b6793503ac045fc0d6f0219ac": "Wavely | 高效便捷的图形化Nuclei GUI POC管理工具", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530953&idx=1&sn=e656629e8557b107087e25b60413ad2c": "【威胁】GreyNoise 发现针对多个国家的Zyxel设备进行 CVE-2023-28771 的漏洞利用尝试", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499990&idx=1&sn=c8685b8d4471bb413b477e5f76d70b3b": "CNVD漏洞周报2025年第22期", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247519126&idx=1&sn=3eecd2bbc44b7080865122adb5f9b382": "实战攻防之Nacos漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247491786&idx=1&sn=bc3db3144efa9f63df5e052e54ac610f": "月薪1000 两周挖50个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795449&idx=2&sn=404c6ef81f1ab1d5139b13e0918bb13b": "SinoTrack GPS 漏洞可能允许攻击者跟踪和控制车辆", "https://mp.weixin.qq.com/s?__biz=MzIyMjkzMzY4Ng==&mid=2247510724&idx=1&sn=204a1e34d1a77f2c86c9ff3879627d96": "域内大杀器 CVE-2025-33073 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484894&idx=1&sn=ce166fe89794c77dc20e0a9e1cb74fe1": "【复现】泛微E-cology9 前台SQL注入漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512481&idx=1&sn=d403af9b610a2084cd79b961b4835b40": "佳能imageCLASS打印机RCE漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg5NDU3NDA3OQ==&mid=2247491309&idx=1&sn=6178a36525fbb6268e0ad09a12e1a80f": "Docker Registry 5000端口漏洞图形化利用工具实战指南", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490251&idx=1&sn=a80edb0d0a63cff61c6d32b4c7952a9e": "【高危漏洞预警】Apache Tomcat认证绕过漏洞(CVE-2025-49125)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070217&idx=4&sn=24357525bac3eedf8eb46ebe78022a55": "【安全圈】“Grafana Ghost”漏洞曝光，近四成公网实例仍未修复", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096336&idx=2&sn=c3e591e98ec6f4b4800be540858e1ccc": "针对 Windows 磁盘清理提升漏洞的 PoC 漏洞揭晓", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523309&idx=2&sn=d3e035c89c35c26ad0a1cad90861ac97": "CISA 将TP-Link 路由器高危漏洞纳入KEV", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492841&idx=1&sn=35527e48f4ac1c111cbc002aa26d6bb8": "【已复现】泛微 E-cology SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523309&idx=1&sn=50e822ff30e5cc7f931139cb1a288b2c": "华硕 Armoury Crate漏洞可导致攻击者获取Windows 管理员权限", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497741&idx=1&sn=c95ab3ad8c90379ea5e19a191a4afed0": "AI大模型漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494025&idx=1&sn=c65c31ec37d498ceaebb43aa278a3646": "【在野利用】Windows WebDAV 远程代码执行漏洞(CVE-2025-33053)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488631&idx=1&sn=0959127aeca102138d0d93b25dd5dc17": "AstrBot get_file接口存在任意文件读取漏洞CVE-2025-48957 附POC", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070217&idx=3&sn=95c2556df13add7b94e2b92ec3ea503d": "【安全圈】“微软修复 Windows Hello 欺骗漏洞：黑暗中人脸识别功能被禁用”", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247492478&idx=1&sn=f7c44f86be38638134d679e6fb3b8ffd": "ChkApi - API漏洞安全检测自动化工具、解析Swagger规范Bypass未授权检测等|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651323227&idx=3&sn=8d510d5113b805e0f18388a6539e982a": "MCP Inspector严重远程代码执行漏洞威胁AI开发环境安全", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485947&idx=1&sn=ba767dba115ee2c0bbfec4ae94498e0c": "CVE-2025-49001 Dataease JWT 认证绕过导致未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501194&idx=2&sn=37f99ddcaa7215ce29f34e62e2ac5eda": "【漏洞通告】Apache Tomcat安全约束绕过漏洞 (CVE-2025-49125)", "https://mp.weixin.qq.com/s?__biz=MzI4MjkxNzY1NQ==&mid=2247485905&idx=1&sn=bde9c0b7742a30ff31614872d63a3cbd": "【漏洞复现】契约锁远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524812&idx=4&sn=bdd8e81bf4090a9661e5fabf07d8ef15": "CVE-2025-49596：MCP Inspector 严重远程代码执行漏洞威胁AI开发环境安全", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487482&idx=1&sn=29b768458f613dde0a9d156c37581d15": "CVE-2025-33073 针对 NTLM 反射 SMB 缺陷", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524812&idx=1&sn=ea5a04de3ac9f9e781c22bd8c4965af3": "Apache Tomcat 漏洞允许绕过身份验证和 DoS 攻击", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497566&idx=1&sn=7ca3acd12c46d02b2e700204922bc7c2": "【漏洞通告】Apache Tomcat安全约束绕过漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655283293&idx=1&sn=43a759909d993732d05e4f089c10dfbe": "渗透测试工程师（高级）证书（终身有效）靶场+CTF赛题双演练，SQL注入∕XSS∕反序列化漏洞实战，网渗透（隧道∕提权∕免杀）", "https://mp.weixin.qq.com/s?__biz=MzkzODQzNDU5NQ==&mid=2247486337&idx=1&sn=69f06f964a96e30b88d63f2d5a4e5f2e": "【工具分享】OSS漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488122&idx=1&sn=7dd4a081bf219591dd2dbc6b337abe09": "硬编码密码“b”引发重大风险！Sitecore XP漏洞威胁全球企业安全", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493433&idx=2&sn=3fc5387da9750f0124a0ec66bb9729e0": "漏洞预警 | 用友NC任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489430&idx=4&sn=f3902e0390467757e2b77e6939daebb2": "任意文件读取&下载漏洞的全面解析及利用", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247519127&idx=1&sn=ecea8dcd3f921a456ccbddba527c8ba0": "记某众测Fastjson<=1.2.68反序列化RCE过程", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247494039&idx=1&sn=d9948d421667300e7aeab6bf61748a1b": "攻击者利用Zyxel远程代码执行漏洞CVE-2023-28771发起攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247491094&idx=1&sn=a014710ea7216eacadbc94c61f81151b": "漏洞管理玩法已变", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795462&idx=2&sn=f95519494af0be8a5c1008929290892b": "Team46 APT组织积极利用 Chrome 0day漏洞（CVE-2025-2783）针对俄罗斯目标", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MjAwNQ==&mid=2247486874&idx=1&sn=1bd11f18b1b91e3584adad042b203501": "漏洞变现金：我的31500美元Facebook漏洞赏金之旅 0x2", "https://mp.weixin.qq.com/s?__biz=MzkxOTIzNDgwMQ==&mid=2247484672&idx=1&sn=5f9214cd934f0842aa5278e163286f38": "契约锁电子签章系统dbtest RCE", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493433&idx=1&sn=cc65bcd8f82f0fd1b46fd746ecbba41e": "漏洞预警 | Windows SMB权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655283404&idx=1&sn=187c7df781065431e5dee9a956eb72ae": "2025年攻防演练必修高危漏洞合集", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493433&idx=3&sn=08058cf5a01e256b72d5aef1908c5172": "漏洞预警 | 四信通信科技有限公司设备管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NjUzOTQ0NQ==&mid=2247520801&idx=1&sn=2013891b7fd924d8bbd7bd68b0992527": "《2025HW必修高危漏洞集合（3.0版）》", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499897&idx=1&sn=649c7f9c9def0da85b8b2c0a01565914": ".NET 基于 MachineKey 一键维持权限，通过 ViewState 反序列化工具实现RCE", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507803&idx=1&sn=86dc1cb7aa276652b00ba6cfc10b35ff": "漏洞通告 | 泛微E-cology9 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MjkxNzY1NQ==&mid=2247485912&idx=1&sn=b776dcd81faed5bbc387e6e9a4b0332f": "【漏洞复现】Dataease JWT 认证绕过漏洞∕远程代码执行（CVE-2025-49001∕CVE-2025-49002）", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651463187&idx=1&sn=b6fce76866b61fca2a9d4d739e5dadc3": "信息安全漏洞周报（2025年第24期）", "https://mp.weixin.qq.com/s?__biz=Mzg3MDgyMzkwOA==&mid=2247491590&idx=1&sn=6bfe24a76d37d4ec6e48d96ef743b047": "清源SCA社区每日漏洞提早感知情报、新增CVE及投毒情报推送-2025年06月17日", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484455&idx=1&sn=8bf8fbd3974c9a431d5598daf4fca49d": "域内大杀器 CVE-2025-33073 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499890&idx=1&sn=03ae7202852a3f6cd511140924332eac": ".NET 介绍一种新型 RCE 利用点分析与漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492348&idx=1&sn=3459eb764f6bc4eef3a045f28ea47745": "【PHP代审】记一次某海外酒店管理系统漏洞复现分析+0day挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYxMjk0Mw==&mid=2247490784&idx=1&sn=03b9839ecd75272e21510ef54162c9c9": "众测攻防技术深度剖析：突破WAF、框架漏洞利用与新型攻击面", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491850&idx=1&sn=db77a285148d62fa2e546f05b9fb823e": "Apache Kafka Connect 任意文件读取漏洞(CVE-2025-27817)", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247499832&idx=6&sn=369107d65d8d91b7d758baecb6c1c41a": "Apple：多个操作系统中的安全漏洞正遭受攻击", "https://mp.weixin.qq.com/s?__biz=MzkyNzMyNjcwNQ==&mid=2247488450&idx=1&sn=34b5434a55a02c05bb35ebef8f08aa3c": "CVE-2025-33073！Microsoft SMB 客户端特权提升漏洞 漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611105&idx=3&sn=44818c48fdb0f6d90c788f8898b09b6f": "记一次AMD漏洞挖掘：从文件权限配置错误到驱动权限提升", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247487229&idx=1&sn=0ce71172eb185b6cb55ce2ff4dcbb9f0": "用友NC importTemplate方法XXE漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247488048&idx=1&sn=c22d6a5bbf0f8be3bc37e5f2f52c71ef": "基于OSI模型来挖洞的思想转变来找到那些被忽略的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NzI3ODU0Mg==&mid=2247483899&idx=1&sn=bfa971e99ccf2de2cca3003ba7451dbc": "车联网安全进阶之GB∕T 45496漏洞风险等级计算器发布", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490265&idx=2&sn=fbdfd14e660079cd2400bb3ddf8f2342": "【高危漏洞预警】Windows SMB 权限提升漏洞(CVE-2025-33073)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247583016&idx=1&sn=3779c200d5b53c656dd00799324e1aea": "超过84000个Roundcube网络邮件安装受到RCE漏洞影响", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494039&idx=1&sn=9761f150a71b2c5fb70b38b9a089006c": "【已复现】泛微 E-cology9 SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494039&idx=2&sn=434cc36cf0d74dc86fc89af3d189743f": "【已复现】Windows SMB 权限提升漏洞（CVE-2025-33073）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523322&idx=2&sn=347204929358f8a4c82b2634e62774cd": "Veeam RCE漏洞导致域用户入侵备份服务器", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503510&idx=1&sn=709598245f5b6c9c5d897727f106c25b": "【已复现】泛微E-cology9 SQL注入漏洞(QVD-2025-23834)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524831&idx=3&sn=aa81460de131a6a4c34d00340246d498": "XDSpy组织利用Windows LNK零日漏洞窃取敏感信息", "https://mp.weixin.qq.com/s?__biz=Mzg4Njk1NDg5NQ==&mid=2247483900&idx=1&sn=be8d8fa3454a2c1ca471da2c0492a994": "URL跳转漏洞-原理到实战", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247499843&idx=1&sn=4586afaa6722de8983da0a1c104db042": "Chrome 漏洞让攻击者执行任意代码 - 立即更新！", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490265&idx=1&sn=432dd1cb6769a98e401d684226627eb1": "【高危漏洞预警】泛微E-cology9 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484906&idx=2&sn=97b955ee68e3ad6b31a6b5ecc0278dcd": "入选作品公布｜安钥®「漏洞处置标准作业程序（SOP）」征文第四十期", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523322&idx=1&sn=33329d3ec49e0f180be0dcedb8cd70a4": "谷歌 Gerrit 代码平台漏洞可用于供应链攻击，18个谷歌项目受影响", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487483&idx=1&sn=3f27f6c0814b247a8d5872fbd336bbb6": "100 个 Web 应用漏洞类型挖掘", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524831&idx=1&sn=fccb308af75d0ed4e6fda2f6f3ffb43d": "Chrome 漏洞让攻击者能够执行任意代码 – 立即更新！", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484906&idx=1&sn=f34099f37ed06bb9ba3ccb49e3fe7bd5": "安钥®「漏洞防治标准作业程序（SOP）」征文启示 [2025年第24期，总第42期]", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490423&idx=1&sn=36a82489f3056c2530dd2906ac91c352": "【已复现】泛微E-cology9存在远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247493007&idx=1&sn=b20a374d3ca3b7006b0efb5ae5029fd5": "英特尔 CPU 新漏洞导致特权内存中的敏感数据泄露", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488643&idx=1&sn=b27e3aba1632dd12bad93e6c83fe107a": "契约锁电子签章系统dbtest接口存在远程命令执行漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247527275&idx=1&sn=128c0b0612fe1c9346fec2741ef0b702": "上千家政企网站沦为黑产跳板：子域名接管与文件上传漏洞深度分析", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247489365&idx=2&sn=c4c745e3b68fe39fddc6bb157e321d50": "红队终极指南：“A-poc∕RedTeam-Tools”", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247486121&idx=1&sn=0fd01996425ee4db46ec9a675851b9c7": "一次CNVD漏洞挖掘过程", "https://mp.weixin.qq.com/s?__biz=Mzg4Njk1NDg5NQ==&mid=2247483905&idx=1&sn=f5ceef3c62817cf807d41a9890fbaf34": "第六章URL跳转漏洞-原理到实战", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247492488&idx=1&sn=7c1e6f59ac98e6a9ef8a0a714166ab45": "渗透必备工具箱V9(更新) 集成Web扫描、漏洞利用、抓包、免杀等等|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493446&idx=3&sn=36633d2511379f57d133547778a390f8": "漏洞预警 | 月子会所ERP管理云平台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795477&idx=1&sn=c8cc84db69bc662ea39715896bbf0262": "Qualys 研究人员发现允许 root 权限攻击的严重 Linux 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU1MjgwNA==&mid=2247487467&idx=1&sn=30595cd79fc86138e72e6deec443615d": "代码审计系列-基础篇-SSTI-FreeMarker模版注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655283656&idx=3&sn=641843bbd3df3792d39ce6ef902c63a7": "HVV（红队蓝队资料、威胁情报、技战法）、渗透测试、漏洞、代码审计、APT、DDOS、勒索病毒、CTF、逆向", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247492959&idx=1&sn=9a1942dcd47e3a68c948162ff496ec37": "一个高性能的目录遍历漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488127&idx=1&sn=af0c6e44a295d4d99022dd201048fc66": "紧急！泛微E-cology9高危漏洞来袭，数据库大门洞开！(QVD-2025-23834)", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247546559&idx=2&sn=3e604094846f6639de3d590ec3e75b45": "Windows SMB客户端提权漏洞（CVE-2025-33073）及其在未启用SMB签名环境中的攻击原理", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652116640&idx=2&sn=dc4751da96a5482b4b5684916508100a": "医疗服务公司Episource数据泄露，影响540万人", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493446&idx=2&sn=1cc5b2e1e376e2d93d5bd3bd41d1c1b0": "漏洞预警 | 信呼OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247491912&idx=1&sn=74dd7b8a525955965457628ed711e635": "浅谈常见EDU漏洞，逻辑漏洞、越权、接管、getshell，小白如何快速找准漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247494051&idx=2&sn=80bc42dcca795e773ef2680f5648afa7": "Flodrix僵尸网络正攻击存在漏洞的Langflow服务器", "https://mp.weixin.qq.com/s?__biz=MzIzNDIxODkyMg==&mid=2650086501&idx=1&sn=ebe5f79b15dd82355295f3316ec6e9f6": "起亚厄瓜多尔车型钥匙系统存在严重漏洞，数千辆车面临被盗风险", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247546563&idx=2&sn=e3b299fc15a136e45ca0efdd0cbaf3b9": "Windows SMB客户端提权漏洞（CVE-2025-33073）及其在未启用SMB签名环境中的攻击原理", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493446&idx=1&sn=bb7af1bdae0d924f2df258a74cea48e5": "漏洞预警 | Apache Tomcat安全约束绕过漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247494051&idx=1&sn=824b2b262ccd14013ff47b1150ee5f2e": "Veeam修复了Backup & Replication产品中的一个新关键漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247494051&idx=3&sn=020fd34cd86d6d9c3aca858459a45f32": "医疗保健服务公司Episource数据泄露事件影响540万人", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492350&idx=1&sn=5586252e5859dfb692618f047c00faa2": "攻防下帮助学员快速审计NET前台rce漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499911&idx=3&sn=f75d5f4ae14d450acb3ecd640947682c": ".NET 基于 MachineKey 一键维持权限，反序列化工具实现RCE", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247499903&idx=1&sn=bd4cd23c26aac01c8dcc6ce1bab5ba63": "双漏洞链一击拿下 Root：CVE-2025-6018∕CVE-2025-6019 横扫主流 Linux", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247494556&idx=1&sn=c79aa1a66057f879b6885cd60d3cbd62": "Nuclei POC 漏洞验证可视化工具 | 更新V3.0.0", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491859&idx=1&sn=8d77eaf8aac84238abc49fe49e499497": "三汇 SMG网关管理软件 9-2radius.php 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MjE2Mjk3Ng==&mid=2247489255&idx=1&sn=6aeab11cfe4dc3b1215c81d03177d2af": "美国CISA将苹果与TP-Link产品高危漏洞列入已知利用清单", "https://mp.weixin.qq.com/s?__biz=MzkyMjU2Nzc1Mg==&mid=2247484633&idx=1&sn=991d4d622e93851617f7e085b3c8e2b8": "当漏洞成为“数字战争”的弹药，谁能改写攻防规则？", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512487&idx=1&sn=9d79e4b58281b6f0282d45507656343c": "微软2025年6月补丁日重点漏洞安全预警", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247486229&idx=1&sn=3a1d73583e193008a7a7c66f522d0567": "工具集：Wavely V3.0【Nuclei POC 漏洞验证可视化工具】--6.19更新", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247500547&idx=1&sn=19b2ea57a06109e6873e5553a867518d": "微软2025年6月份于周二补丁日针对67漏洞发布安全补丁", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247550512&idx=1&sn=600847a31bfec631b59a0c1a2a8073d3": "一次前端泄露密码送来的赏金漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247500901&idx=1&sn=2ab5b540e69020a048884ea095ed11a2": "绞尽脑汁的宝塔漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488131&idx=1&sn=47a1bd3f6af2b827fd64537d32891151": "Linux核心转存漏洞：CVE-2025-5054（POC）", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494067&idx=1&sn=ea202b33e7e5e356f3c3a9afc1ed2750": "【已复现】Linux 本地提权漏洞(CVE-2025-6018、CVE-2025-6019)", "https://mp.weixin.qq.com/s?__biz=MzkxMzQyMzUwMg==&mid=2247486686&idx=1&sn=cbd68c8179320c42afeb7e4aeb053c20": "看完这篇再挖不到漏洞，请顺着网线来砍我", "https://mp.weixin.qq.com/s?__biz=Mzg3ODkzNjkxMg==&mid=2247484021&idx=1&sn=b6f49af4c972818f134a3a18872a4d20": "契约锁RCE分析", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490273&idx=2&sn=905d7c05651aefdf13d886cdeddad3e9": "【高危漏洞预警】 libblockdev权限提升漏洞（CVE-2025-6019）", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501204&idx=2&sn=585b4c138848a45286cf7890b854cc55": "【漏洞通告】Veeam Backup & Replication 远程代码执行漏洞 (CVE-2025-23121)", "https://mp.weixin.qq.com/s?__biz=MzkzNjczNzEyMw==&mid=2247484535&idx=1&sn=8820fba10b35b6b69e053beab3552640": "宝塔RCE完整说明", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524855&idx=2&sn=d172a2662ecccc74a4853c320e8e45bf": "串联两个本地提权漏洞获取root权限：多数Linux发行版受影响（CVE-2025-6018、CVE-2025-6019）", "https://mp.weixin.qq.com/s?__biz=Mzg5MDc1MjY5Ng==&mid=2247493030&idx=1&sn=52d68896765ce5a16a09e99d394507b2": "CVE-2025-33073：域内大杀器（附复现环境）", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531081&idx=1&sn=52089fe73bfabf713e03710a33a396ce": "CVE-2025-2783 谷歌Chrome零日漏洞（沙盒逃逸）的攻击分析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070247&idx=4&sn=a9da49b7c850012e89fbee85c39fe677": "【安全圈】CISA警告攻击者利用Linux漏洞进行攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247523724&idx=1&sn=ea5d6bc9db61ae096d4660bdf0d5a676": "CVE-2025-33073：域内大杀器（附复现环境）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523333&idx=2&sn=23cefe4214956d3fbac95c79c5396243": "udisks 漏洞可用于获得Linux 主要发行版本的root权限", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458595995&idx=2&sn=74286f4ec1648653625dda192d21c28f": "CVE-2025-6018 & CVE-2025-6019：双漏洞链致 root 权限轻易失守", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484912&idx=1&sn=231332522ccc8edc4d7cd46df1c75b8c": "初识安全漏洞防治SOP", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651323331&idx=3&sn=fb387b84ee719ca1c647d97b1ce9fed3": "Linux两大漏洞可串联，无需特殊手段即可获取root权限", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490273&idx=1&sn=d48bf4bef564819f0e7b48beb5277bbd": "【高危漏洞预警】SUSE 15 PAM本地提权漏洞（CVE-2025-6018）", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261308&idx=1&sn=f169299b08c451fc44c011aaa602aaea": "​​iPhone “玻璃笼”：利用两枚零日漏洞的国家级攻击链揭秘​​", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247488862&idx=1&sn=672add026f3f250b4406a9a23d277c9e": "CVE-2025-6019: 从 allow_active 到 root 的本地提权漏洞 (LPE)", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg2NTM3NQ==&mid=2247484808&idx=1&sn=5abe422c4016fe5301be0b7b67ce939e": "关于漏洞“宝塔Linux面板存在任意命令执行”的说明", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485953&idx=1&sn=8c198027b4a8441d92fc0ca20bdcc39d": "CVE-2025-48957 AstrBot get_file接口存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTUwNTU5Nw==&mid=2247489427&idx=1&sn=7f1e28621d60874665996bfed2a5abbb": "关于漏洞“宝塔Linux面板存在任意命令执行”的说明", "https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247491061&idx=1&sn=3773fa7a546c57d53836cf0d764ac999": "漏洞管理平台VulnArk 紧急删除，备份速下！", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531136&idx=2&sn=71883f588c565f53ef733bcfcb8c5c13": "Linux 内核 OverlayFS 漏洞 (CVE-2023-0386) 被利用来提升 Root 权限", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488656&idx=1&sn=0f20df860f2ce3b09498578185b5795d": "GeoServer TestWFSpost 存在SSRF漏洞CVE-2024-29198 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247492539&idx=1&sn=250730046fc1116e0a28c8ea9e77bbb5": "Burp新利器解决请求包加密问题 CloudX自动化解密AES、SM4、DES等加密方式的接口|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523333&idx=1&sn=7293c7dd1145ab18fd71d834ad208fe0": "BeyondTrust：注意远程支持软件中的预认证RCE", "https://mp.weixin.qq.com/s?__biz=MzI1MDA1MjcxMw==&mid=2649908313&idx=1&sn=87a20fea7a0c6a7945693d4bea825696": "Chrome N-Day漏洞利用工程指南", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524855&idx=1&sn=391abd98577d6ef93a97caf66c01a1b9": "开源项目中的GitHub Actions安全隐患：MITRE与Splunk揭露关键漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxOTIzNDgwMQ==&mid=2247484679&idx=1&sn=ccaffdcd00b07f198b98052823993e9f": "用友nc saveProDefServlet SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488137&idx=1&sn=e07f4a50cf1f03d17bac8b2800bd37b4": "Windows惊现致命权限漏洞！普通员工1分钟变管理员，数亿设备暴露风险(CVE-2025-24286)", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652116672&idx=2&sn=ad75e106efc11a2a208b30168436e7d7": "微软2025年6月份于周二补丁日针对67漏洞发布安全补丁", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247492958&idx=1&sn=b73140e1a25acaeb54db8039b0103eeb": "带你走进S3存储桶中的潜在漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3MDgyMzkwOA==&mid=2247491616&idx=1&sn=d9208bcf88762ece0d2666bed4216fed": "清源SCA社区每日漏洞提早感知情报、新增CVE及投毒情报推送-2025年06月19日", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MjAwNQ==&mid=2247486886&idx=1&sn=be075071b89d614263149e7ac7ab9ecb": "从SOAP到Shell：利用SOAP服务实现完全管理员账户接管（近乎RCE的漏洞）", "https://mp.weixin.qq.com/s?__biz=MzkzMDcxNzg4MA==&mid=2247484613&idx=1&sn=81017eb66ae71f551de7318bddcf1826": "fastjson 1.2.80 springboot下rce利用链学习", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493458&idx=1&sn=c23bc486899927649e2245662abfb383": "漏洞预警 | 宏景eHR SQL注入和XXE漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486412&idx=1&sn=be56a747f065aecc4f7aff884f151e2b": "漏洞赏金工具 - BBtool", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493458&idx=3&sn=2cdc99e9e47e8c90eb4982049120fb5b": "漏洞预警 | 金和OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247491984&idx=1&sn=754ef28c3e4c30173207a484f66ddf13": "【众测】分享某SRC众测高危逻辑漏洞一枚", "https://mp.weixin.qq.com/s?__biz=MzI1MDA1MjcxMw==&mid=2649908325&idx=2&sn=06326aff0db92eb3b0cf94102cdbec84": "Chrome N-Day漏洞利用工程指南", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493458&idx=2&sn=a9ce4a72601e6e8f80da0bd87561e974": "漏洞预警 | 用友NC SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611124&idx=3&sn=697642233fb6fa80291f9cbac0fbf12b": "记某众测Fastjson<=1.2.68反序列化RCE过程", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900786&idx=1&sn=069433e028f0bbb9d5457c0d6caab415": "Linux内核提权漏洞(CVE-2023-0386)在野利用：从技术原理到业务风险与防御策略", "https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651142691&idx=1&sn=8aa8493bec0e7681c003aaac23cdbeaa": "IoT漏洞分析之模拟环境搭建", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651248129&idx=1&sn=b8aaeffedeb8b15bdb3ee6ab715b111d": "MCP服务泄露客户敏感数据，知名企业紧急下线修补| Linux两大漏洞可串联，无需特殊手段即可获取root权限", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491869&idx=1&sn=2af23c0d3c462b35a2bc5c70e4d5fc16": "用友U8 CRM SelectDMJE.jsp SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5OTMxNjkxMA==&mid=2247489083&idx=1&sn=4b87915e617cdedc45e35e07bd5e2862": "一键获取上万资料、漏洞库", "https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247484863&idx=1&sn=b145230e60dec073587ed6e332e57aa7": "【漏洞复现】泛微e-cology 未授权SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611124&idx=4&sn=901103fe591d21c3d77f6cb630a962a4": "Nuclei POC 漏洞验证可视化工具 | 更新V3.0.0", "https://mp.weixin.qq.com/s?__biz=MzU1ODk1MzI1NQ==&mid=2247492274&idx=1&sn=e9ecde35f94e0fc28479875b6aab3b29": "LLM驱动的UEFI固件漏洞智能分析实践", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247583172&idx=2&sn=ba838828e94a76da83b0d79076a0969e": "DanaBleed新漏洞使 DanaBot恶意软件即服务平台浮出水面", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247491147&idx=1&sn=96cbaf8867e8cb3d1a5dd586995a4966": "能信安：漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064207&idx=1&sn=fa2366eac8519eb7a23aefb690c81d82": "信息安全漏洞周报【第027期】", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484461&idx=1&sn=d12f4d1f914768b6f6aeb695eca84490": "小团队漏洞管理平台", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247488885&idx=2&sn=bb25cb772bed5bb954b079821a9ac205": "NTLM 反射攻击复现 - 滥用 NTLM 进行权限提升 (CVE-2025-33073)", "https://mp.weixin.qq.com/s?__biz=MzAxNDkzNjQ0Mw==&mid=2247483963&idx=1&sn=d4147631169c4f3f4d59a9a061d95188": "SVG 嵌套钓鱼溯源分析：基于可信域名 XSS 漏洞的黑产分发链追踪", "https://mp.weixin.qq.com/s?__biz=MzI4ODQzMzk3MA==&mid=2247490272&idx=1&sn=e976730cb96428843b889f6b33280d58": "美国DARPA宣布将与各军种开展武器系统漏洞红队评估", "https://mp.weixin.qq.com/s?__biz=MzkwMzYyNzQ1NA==&mid=2247485521&idx=1&sn=134e927a37122d16d95fa35deabe69b0": "漏洞扫描神器AWVS最新版2025.4", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247488885&idx=1&sn=c956b0f537a856ca365551087420ceee": "NTLM 反射已死，NTLM 反射长存！——深入分析 CVE-2025-33073", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458596037&idx=4&sn=fb4c9bd8a84e95a40a020f981c5e7885": "《CTF训练营-Web篇》更新：反序列化漏洞（四）Laravel反序列化链分析", "https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247533745&idx=2&sn=a176b8fa0297f6d311e87c46b62a9f49": "荐读丨工信部：AI绘图工具ComfyUI多个安全漏洞已被用于实施网络攻击", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524876&idx=4&sn=9d9e9b842c97da2e355156fcff3f36eb": "Apache SeaTunnel 漏洞允许未经授权的用户进行反序列化攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247517234&idx=1&sn=e76c9eba1efc0258f11058f61e600445": "漏洞预警｜契约锁电子签章系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523347&idx=2&sn=b6f02b127ba49b7fa05eec183cb4108a": "Sitcore XP中的硬编码密码 “b” 导致企业系统易受RCE攻击", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524876&idx=3&sn=24cefa58e29f9132413362fcfc5c2177": "IBM QRadar SIEM 漏洞允许攻击者执行任意命令", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487488&idx=1&sn=a07090fe47afa7fa1c9bb2f968aadd2a": "CVE-2024-55591 Fortinet FortiOS 身份验证绕过", "https://mp.weixin.qq.com/s?__biz=MzI4MjkxNzY1NQ==&mid=2247485966&idx=1&sn=502623af4e680d22ab43973a413eee69": "【漏洞复现】Kafka Connect任意文件读取漏洞（CVE-2025-27817)", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652116686&idx=2&sn=6528b7da213e0895a48a14ee1b8e27b4": "Veeam备份和复制中CVSS评级为9.9的严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490279&idx=1&sn=444e48ca2685746c17e8e59f2255a436": "【漏洞预警】DedeCMS命令执行漏洞(CVE-2025-6335)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503518&idx=1&sn=09e0cab29a0bf5cf22e300e719f2aab2": "【已复现】Linux 本地提权漏洞利用链(CVE-2025-6018、CVE-2025-6019)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIyNzc3OTMzNw==&mid=2247485927&idx=1&sn=aaae73d34c7eb96d1440870b21c03105": "工具分享 | 一款高价值漏洞情报爬取工具", "https://mp.weixin.qq.com/s?__biz=MzI4MjkxNzY1NQ==&mid=2247485970&idx=1&sn=1c7e97d2e1a8c9348506e82951046672": "【漏洞复现】泛微e-cology 未授权SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247528323&idx=1&sn=4c2813169468c082a4f51eb8eb6f1c54": "用 IRify 定位某 Admin 目录遍历及反序列化漏洞文件上传", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523347&idx=1&sn=4789a7999ec060d43881b5c1f1b8e576": "思科 AnyConnect VPN 服务器漏洞可用于触发 DoS 条件", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506752&idx=1&sn=a2fd5586e60447195a589c1eab942ce2": "破解 JWT：漏洞赏金猎人指南（第一部分）", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247492002&idx=1&sn=d74d8597c6216303c387838a840cbc56": "【渗透测试】记一次从0到1的逻辑漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247519137&idx=1&sn=f34320074a73be0fb12aebfe9de74d94": "记一次实战小程序漏洞测试到严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247521110&idx=1&sn=0b4031953de11bc1668753da586d4e3a": "PHP 静态分析漏洞挖掘：挑战、对策与研究进展综述", "https://mp.weixin.qq.com/s?__biz=Mzk0NTg3ODYxNg==&mid=2247485837&idx=1&sn=8c2e6dd6f88f7ce536eca4c50b85d3c8": "某米路由器漏洞挖掘分享", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484463&idx=1&sn=be78ef79f3a2b6e50fd0c36ea7e5a912": "高价值漏洞采集&推送工具", "https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651142703&idx=1&sn=5c22b3c4912ba8eea137c2328a707b36": "某米路由器漏洞挖掘分享", "https://mp.weixin.qq.com/s?__biz=MzkzODQzNDU5NQ==&mid=2247486368&idx=1&sn=593e0636fcc4db1bee46051ad2903fdf": "【工具分享】BurpSuite新插件-CloudX自动化解密AES、SM4、DES等加密接口助力漏洞探测", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487497&idx=1&sn=56addf0384cd792e5f5a6fa3c00ec142": "Langflow应用程序存在远程代码执行 (RCE)", "https://mp.weixin.qq.com/s?__biz=MzIxOTM2MDYwNg==&mid=2247514353&idx=1&sn=5c7d300ec9d9a430e72c274cd5bb7bac": "漏洞挖掘：巧用查询功能深挖敏感信息的门道", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247573602&idx=1&sn=77224eed21d8cda16951c6625301e580": "一次从0到1的逻辑漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491887&idx=1&sn=9ff34f6a8268dc8d3ef275b757095ecd": "用友U8 GRP listSelectDialogServlet SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491878&idx=1&sn=b19405b171f8932d27c8f7da700755cc": "用友U8 GRP obr_zdybxd_check.jsp SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk1NzMwNTM5NQ==&mid=2247486561&idx=1&sn=e6fe4afab3f974e53e0045291c01109f": "月薪从5K到13.2W，白帽子黑客到底有多赚钱？一文带你如何靠挖漏洞赚取海量收益", "https://mp.weixin.qq.com/s?__biz=Mzg4NDU4OTQ1NA==&mid=2247484712&idx=1&sn=02ff86815b2cb114cbfcea520ff2db51": "内网横行：CVE-2025-33073漏洞分析与攻击复现", "https://mp.weixin.qq.com/s?__biz=MzkxMjYyMjA3Mg==&mid=2247485489&idx=1&sn=fcc1f9e7d998433c8f71cba54982f0d6": "Se8_Sorcery(user部分)", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247492201&idx=1&sn=3a6c575e0bba0f8d05cc8af88125a412": "CVE-2025-27817 Apache Kafka Connect 任意文件读取漏洞分析与复现", "https://mp.weixin.qq.com/s?__biz=MzkzODQzNDU5NQ==&mid=2247486381&idx=1&sn=027accf79c46ae004c1443ec79150b2d": "Laoyue-自动化监控SRC赏金项目，提供多种工具集成和自动化功能，加快漏洞发现和报告流程", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488147&idx=1&sn=b7dcde65044806a8c881b16e905637ee": "高危预警：Linux本地提权漏洞链（CVE-2025-6018、CVE-2025-6019）可秒获Root权限（含POC）", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484465&idx=1&sn=d7f9a4567cfd52ae2a3cd15067b1838c": "【漏洞复现】ActiveMQ中间件漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247550528&idx=1&sn=9e081c065b2c99467ad8f4486d7fe6c6": "记新手小白初挖到的第一个越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497759&idx=1&sn=76d5def436c5e13a8d11a9514cce189b": "一个 $9000 的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491896&idx=1&sn=c52b969d0b012a6773d7ef3681533d09": "畅捷通T+ Load SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491904&idx=1&sn=18ff4be2062e7c1b0a44bbe77e253c32": "畅捷通T+ GLSyncService.asmx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611137&idx=4&sn=c96596b23eeaad179dcc02c1869813a2": "一款专为安全研究人员和白帽子设计的漏洞赏金工具", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900798&idx=1&sn=f544a5fc8f6bc1f5eccb9d9001634c4f": "从LNK到Chrome零日漏洞，揭秘高级间谍组织TaxOff的狩猎进化史", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485825&idx=1&sn=63bc1d9d12159ac55bcba9ff7c7f35f2": "某证书站邮箱轰炸漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247494081&idx=1&sn=a1421640c4cb4056f1d971c7730e3d2f": "Linux漏洞链致使主流发行版均可获取Root权限", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493465&idx=2&sn=9ae4f5cba0b14ebc31b98aebdf846040": "漏洞预警 | 汉王e脸通智慧园区管理平台任意文件读取和任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507810&idx=1&sn=5b5bc67803b368fcd38c1d67a75c6dbd": "双倍奖金！X 夏日漏洞悬赏计划启动！", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247512888&idx=1&sn=070ad5128c82043ed0e7ff0ead954060": "SRC | 一次从0到1的逻辑漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=MzU1NTEzODc3MQ==&mid=2247487193&idx=1&sn=c8a311487502fac2a3ce23003a19ecb1": "BAZZAFL：通过面向漏洞的种子分组将模糊测试活动导向漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493465&idx=1&sn=cecbfaeeb6c4bdf692ee8c983321b6c9": "漏洞预警 | 泛微e-cology9 SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMTY1MTIzOA==&mid=2247484688&idx=1&sn=266aba204fedbfcfeb75f0291b0e9cea": "【应急响应】记修复某品牌打印机FTP匿名访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795507&idx=2&sn=81a8c861f8f003d76e97b754da52a2e9": "以色列间谍软件利用WhatsApp新0day漏洞攻击传播", "https://mp.weixin.qq.com/s?__biz=MzkyMTYyOTQ5NA==&mid=2247487241&idx=1&sn=059239f7b395a167f4feb24698627aec": "什么是HOST头部攻击？那个让网站“送错外卖”的危险漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247492040&idx=1&sn=7f72175ba35b8530f51964e1090b84c9": "渗透测试｜某单位从敏感三要素泄露到接管管理员的漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247550548&idx=1&sn=5d090a175300dfc30b660bba80a88403": "EDUSRC | 支付类漏洞思路合集（包括证书，小通杀等实例）", "https://mp.weixin.qq.com/s?__biz=Mzg3NzIxMDYxMw==&mid=2247504723&idx=1&sn=c50a22432595f3381a3d022f5f0a8136": "渗透测试-从下载漏洞到前端加解密+签名校验拿下sql注入", "https://mp.weixin.qq.com/s?__biz=MzkxMzQyMzUwMg==&mid=2247486694&idx=1&sn=19f82016f2b04dd34318b52c856da802": "聊聊我眼中的\"Web漏洞挖掘\"", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488154&idx=1&sn=274b1d3fcc232865ba2005697c186e54": "紧急安全通告！RuoYi-AI框架曝任意文件上传漏洞(CVE-2025-6466)，可导致服务器沦陷（含POC）", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247485445&idx=1&sn=740e9d7bfd4478e164e11b9f3ded08c2": "分析某oa历史漏洞中捡到CNVD证书", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493465&idx=3&sn=dfdc54e9f0b7b572c6489842ee4ed79c": "漏洞预警 | 宏景eHR SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTQyOTk3Mg==&mid=2247485333&idx=1&sn=40853a58fa3f469387da554b208318a7": "轻量便捷的Nuclei POC漏洞验证可视化管理工具", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261337&idx=1&sn=2603bb64b679c5fdc5abe41a21b86361": "【$10,000】Arc 浏览器：UXSS+本地文件窃取+任意文件写入，路径穿越直通RCE！​​", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247521147&idx=1&sn=091b2248906de288c8b678376f60cf3a": "shiro反序列化漏洞原理分析", "https://mp.weixin.qq.com/s?__biz=MzkwMzYyNzQ1NA==&mid=2247485564&idx=1&sn=d11fe321c143617955c81b04f4a8ad3a": "HTB Artificial 靶场：从AI模型的RCE到NAS备份系统提权", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611143&idx=4&sn=7272666d2f3b722d3e6e8273a0263842": "【攻防利器】Tomcat漏洞批量检测工具", "https://mp.weixin.qq.com/s?__biz=Mzg3MDgyMzkwOA==&mid=2247491618&idx=1&sn=695f849907e60da17dc2e08e2f6e54e4": "清源SCA社区每日漏洞提早感知情报、新增CVE及投毒情报推送-2025年06月20~22日", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501214&idx=2&sn=ec3f0b9a7c46c481e2782ca2c12a04b6": "【漏洞通告】OpenVPN DCO驱动程序缓冲区溢出漏洞 (CVE-2025-50054)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523354&idx=2&sn=8ef63c9db7a5e73748eab7c71b2b5595": "WordPress Motors 主题漏洞被大规模用于劫持管理员账号", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497761&idx=1&sn=73936ace07b08f709da2ace40fdf3933": "由403所发现的SSRF高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247548695&idx=1&sn=a5c45ee0f5d80898eee21d5ee699f031": "Trustwave报告：酒店业成网络攻击重灾区 勒索钓鱼WIFI漏洞齐发", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651323631&idx=1&sn=cb216be48b37bb3942f40f1b6f0af4b8": "Python标准库tarfile模块存在任意文件写入高危漏洞，PoC已公开", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651323631&idx=4&sn=3fb024a33be11f2119bc8047de77f846": "逾10万个WordPress网站因MCP漏洞面临权限提升攻击风险", "https://mp.weixin.qq.com/s?__biz=MzU4MjYxNTYwNA==&mid=2247487755&idx=1&sn=69879fcde1e30553652dfd6060bc11cb": "今日起，每周更新2+基础学习文章哦！今天是CSRF漏洞学习", "https://mp.weixin.qq.com/s?__biz=MzkyMTQyMzkyMg==&mid=2247484088&idx=1&sn=f13ac7cd62bbe9b5e73a0f561c8dd6f3": "CVE-2020-9484 Tomcat Session 反序列化复现", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500057&idx=1&sn=d9dafaa4313fafd159cc06fb1835f095": "CNVD漏洞周报2025年第23期", "https://mp.weixin.qq.com/s?__biz=MzU4OTExNTk0OA==&mid=2247485051&idx=1&sn=7f9f563780eb545921d68687309b2f00": "利用解析差异复活某凌OA前台RCE", "https://mp.weixin.qq.com/s?__biz=MzIzMDM2MjY5NA==&mid=2247484336&idx=1&sn=be05aaff95bac7ab6b6560a3a207d01c": "chrome “0day”讲解一二", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070304&idx=4&sn=d05ca470ff70ce11963e9e3c7ec01d72": "【安全圈】严重安全警报：OpenVPN Windows 驱动曝缓冲区溢出漏洞，可致系统崩溃", "https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494256&idx=1&sn=bff4aabc6caa8aea8b732f3fbe017516": "窃密器数据如何“点燃”CVE-2025-49113：RoundCube的漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247485256&idx=1&sn=856da5d054aa072ae0a0a8ab75da3390": "记一次另类项目测试经历||近源测绘+知名oa漏洞审计(上)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247492621&idx=1&sn=480d4244338efa136786fb91bf7d0dad": "2025最新AWVS∕Acunetix V25.4高级版更新( AI∕ML预测功能)漏洞扫描器Windows下载", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490284&idx=1&sn=397ddf62437511be1e9a9bb1e49c0d6e": "【高危漏洞预警】Veeam Backup & Replication 远程代码执行漏洞 (CVE-2025-23121)", "https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247535298&idx=2&sn=ef61c442d5a8cbb8da9894162f54ec2e": "安利：Tomcat漏洞批量检测工具", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655284631&idx=1&sn=0f2b418860e8c2dc075739e21e9ca0cb": "DeepSeek R1技术复现和大模型的治理与安全", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247555215&idx=1&sn=6a2811d84935bd770fb0fab5ac10eb48": "渗透进阶，玩转网络漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496070&idx=1&sn=d3362c4570a2fa20dd6265ff8fe16d5a": "CNVD漏洞周报2025年第23期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496070&idx=2&sn=fbbb1aea6d677f06fb7c17d1744a6eb3": "上周关注度较高的产品安全漏洞(20250616-20250622)", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU1MjgwNA==&mid=2247487469&idx=1&sn=969aa08661d0f26aeb3b4f8d5321b200": "代码审计系列-基础篇-SSTI-Thymeleaf模版注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MjkxNzY1NQ==&mid=2247485985&idx=1&sn=77e197ee7c913ad96cdc2f038191fd99": "【漏洞复现】Apache Tomcat 命令执行漏洞（CVE-2025-24813)", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503434&idx=1&sn=536a6976c1a3e6ceaedfee30301894c3": "【成功复现】GeoServer XXE漏洞 (CVE-2025-30220)", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489509&idx=1&sn=c5820741e13804146977fd7353102d67": "百万POC实时更新", "https://mp.weixin.qq.com/s?__biz=Mzg3MDgyMzkwOA==&mid=2247491620&idx=1&sn=8917170e1628186b772f4eff20c61b8c": "清源SCA社区每日漏洞提早感知情报、新增CVE及投毒情报推送-2025年06月23日", "https://mp.weixin.qq.com/s?__biz=Mzg2MjU2MjY4Mw==&mid=2247485036&idx=1&sn=ee3a749d2edcc53ccbb3bdbbfbb4733f": "hackerone之看着大佬的漏洞流口水", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493483&idx=3&sn=4b001afef13dfb610260d65092c7a22e": "漏洞预警 | 宏景eHR SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499946&idx=1&sn=f6d83334f2b3d76da4e6c8d0a39c7284": ".NET WPF 下的新思路，通过 XAML 实现代码执行", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900800&idx=1&sn=5206926e487bdb80079965ea12d1e150": "AI开发框架成黑客新“肉鸡”：Langflow高危漏洞被利用组建DDoS僵尸网络", "https://mp.weixin.qq.com/s?__biz=MzkxMTY1MTIzOA==&mid=2247484700&idx=1&sn=3975752bd19d84f8561d610262fd94e2": "【技术分享】MQTT未授权访问漏洞利用方式", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247491161&idx=1&sn=040f03ce7d9ec307c99dfa855516ec64": "2025年攻防演练必修高危漏洞合集", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247497672&idx=1&sn=aa31b65773592f3618573abad3603b67": "F5 BIG-IP RCE：重温解析差异导致的身份认证绕过", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2NTQxOA==&mid=2247497866&idx=3&sn=d363efd42c49377e2637a4d4a0ddee08": "涉数据安全漏洞与隐私风险 中国医疗设备厂商在美国遭遇诉讼", "https://mp.weixin.qq.com/s?__biz=MzkzMDQ0NzQwNA==&mid=2247486827&idx=1&sn=a25724a950ba87c0352ab769c3f88bb2": "CVE-2021-41773 漏洞复现：从失败到成功的探索", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247515203&idx=1&sn=aa65a6a18fdb558e811f8b9c1010a23c": "台海热点诱饵！旺刺组织结合 0day 和 ClickOnce 技术开展间谍活动", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491914&idx=1&sn=35337886d7201b34709bbf6689a8a30c": "安科瑞环保用电监管云平台 UpLoadPic 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247521829&idx=1&sn=1169e429efce4626a07be6bb0bae7b52": "一次从0到1的逻辑漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493483&idx=2&sn=7928bf75a665a3f3f2320e3eae44f879": "漏洞预警 | JimuReport信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499937&idx=2&sn=be359f4df9c01e75d99bf6c17a5a38c9": ".NET 介绍一种新型 RCE 利用点分析与漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611158&idx=3&sn=ded70f18ec0a6f9ca8caba82488f97e3": "SRC | 一次从0到1的逻辑漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=MzA3NjU5MTIxMg==&mid=2650575572&idx=1&sn=b474aa1f66643dded82ef017e74f10cc": "上线前还在修漏洞？告别救火模式，试试边开发边找漏洞的国舜方案！", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247486298&idx=1&sn=44fa8b1202c28d403d448d9a89a29654": "工具集：泛微E-cology9 SQL 注入漏洞批量检测工具", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524896&idx=1&sn=6362d0f2560274fc642f792dcffaf2f6": "黑客据称在黑客论坛上出售Intelbras路由器的0-day漏洞利用", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg2NTM3NQ==&mid=2247484831&idx=1&sn=7375e6ef426b4fd5a0821baee05fcf67": "【CVE‑2025‑49144】Notepad++提权漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NDU4OTQ1NA==&mid=2247484735&idx=1&sn=af7af64dc94f3a3e03211889d55b5fb6": "内网横行：CVE-2025-33073 实战场景利用全流程指南 | 附利用工具", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531265&idx=1&sn=19e218b029466f8e4f24059b96021fae": "Notepad++漏洞 PoC 发布，可提升权限至 NT AUTHORITY\\SYSTEM", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493483&idx=1&sn=9c590617818f23d89234775a6c23dac4": "漏洞预警 | Veeam Backup & Replication远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490297&idx=1&sn=e295cee3d68a7199efefddfb2c56c791": "【高危漏洞预警】Notepad++权限提升漏洞(CVE-2025-49144)", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247500027&idx=1&sn=ada8dcbff73f3fb9ecd263cc0d15448f": "Notepad++ 存严重提权漏洞,PoC 已流出", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788722&idx=1&sn=de75400767615e978695a98613796da8": "OpenVPN驱动曝严重漏洞，可致Windows系统崩溃", "https://mp.weixin.qq.com/s?__biz=MzI3ODk3ODE2OA==&mid=2247484447&idx=1&sn=bc4dfbb6ff0e2b7d8cfb9f60918bf17a": "n8n安全：从漏洞利用到防御", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506770&idx=1&sn=b43532f3f972ae1cc74a3ac4cf9c3ff4": "破解 JWT：漏洞赏金猎人指南（第二部分）", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247512932&idx=1&sn=20365ad5978c47084a2fe90b8593d2ca": "威胁情报：Notepad++ 本地提权漏洞 | POC已公开", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503440&idx=1&sn=d8b69e0070a73f607d010c0c6158d535": "雷神众测漏洞周报2025.6.16-2025.6.22", "https://mp.weixin.qq.com/s?__biz=MzI3NDEzMDgzNw==&mid=2247485180&idx=1&sn=67de912aaaff345f53ddce1ec5491e9f": "CVE-2025-33053 网络快捷方式文件远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247492076&idx=1&sn=c161a60e6baa6ab0e5c752b83c22a82c": "EDUSRC-高危漏洞-从信息收集到后台多个越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247625266&idx=1&sn=7d747f1cb8f470b24f724c87fde28ece": "使用 UDS 自动发现 ECU - UDS是否是一个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247583238&idx=2&sn=353765459c0cc7e6976ff211a8b1eab9": "超过46000个Grafana实例暴露于账户接管漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490297&idx=3&sn=39b54018862cbe1a46157a367bcf2354": "【AI高危漏洞预警】langchain-ai信息泄露漏洞(CVE-2025-2828)", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247500027&idx=2&sn=53f5863b82d57df201da83c7c6919937": "WinRAR 存在目录遍历远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501221&idx=2&sn=4a833bc0c5b81084001551c46f420b29": "【漏洞通告】Notepad++ v8.8.1安装程序特权提升漏洞 (CVE-2025-49144)", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247500151&idx=1&sn=40e8f6ac31864ee418b3989c986172d5": "威胁情报：Notepad++ 本地提权漏洞 | POC已公开", "https://mp.weixin.qq.com/s?__biz=MzkyOTQ0MjE1NQ==&mid=2247500804&idx=1&sn=90ea09bbfd5425c07de64038416c6ec8": "【紧急补丁】Veeam 12.3.2 发布，修复 CVE‑2025‑23121（9.9分 RCE）及两项高危权限滥用漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458596239&idx=3&sn=d782404acf8421ef63b6789bd3a99a90": "WinRAR现高危漏洞，恶意文件可致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzkyNzQxMjQ4Ng==&mid=2247484252&idx=1&sn=5e962271608318dff0b47a2909cca7ea": "工具 | 泛微E-cology9 SQL 注入漏洞批量检测工具", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490297&idx=2&sn=6153fb97ede112cd135b07c48e91a27f": "【高危漏洞预警】Citrix NetScaler ADC越界读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjU5NTY2MQ==&mid=2247484380&idx=1&sn=b7fa367d77e1483cb8a5a87d1478e578": "【漏洞复现】一次不一样的逻辑绕过", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247487364&idx=1&sn=744d24f074c71851c7a36876bc42c3bc": "OA系统漏洞审计之用友NC反序列化 UserQueryServiceServlet", "https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037762&idx=1&sn=e180a260fc140e02cebd898bf1b1fead": "Android系统内核漏洞利用技术入门", "https://mp.weixin.qq.com/s?__biz=MzI1MDA1MjcxMw==&mid=2649908373&idx=1&sn=809508815394b08b8abbad379888a7f0": "微软MSRC的漏洞情报“剽窃”策略", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484473&idx=1&sn=72dbb861fc8336a1ec596800f5ed6f51": "靶场攻防|SSRF漏洞打穿内网（1）", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651248146&idx=1&sn=5ef4c9942a320bc7e46b5d456b4ec346": "Notepad++ 存在严重权限提升漏洞，PoC已发布 | 史上最大规模DDoS攻击在短短45秒内传输了37.4TB的恶意流量", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247492096&idx=1&sn=5f497b3d236bb09431d51419bebc6eb2": "【渗透测试】记录某企业存储型XSS漏洞从发现到数据外泄全路径分析", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247546728&idx=2&sn=34353d879640e19ff3199801f635895b": "OpenVPN驱动曝严重漏洞，可致Windows系统崩溃", "https://mp.weixin.qq.com/s?__biz=Mzg2OTU3MzI1OQ==&mid=2247486218&idx=1&sn=aba341fb0b861e5a70d31fb9ebcd8587": "【前沿研究】降维打击！DeepSeek AI 智能体\"碾压\"传统工具，MCP漏洞扫描效率狂飙1000%！", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611176&idx=2&sn=d245aba5b4fef5f22ba543ba93694efb": "Notepad++ 存在严重权限提升漏洞，PoC已发布", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506789&idx=1&sn=ac6c506a103f943a10d3556aaa61cd02": "破解 JWT：漏洞赏金猎人指南（第三部分）", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651463199&idx=1&sn=8b9360adb7f25f9377ced0a8e8e8eda8": "信息安全漏洞周报（2025年第25期）", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491923&idx=1&sn=0a5aad1317aad151a2b751e12641e71e": "GeoServer XXE漏洞 (CVE-2025-30220)", "https://mp.weixin.qq.com/s?__biz=Mzg4NDU4OTQ1NA==&mid=2247484740&idx=1&sn=efcc3f00d734e8b8bf6e9bf129f586d0": "内网横行：大杀器之实战场景下的 CVE-2025-33073 全流程利用指南 | 附利用工具集", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795533&idx=1&sn=72c3ca5e960d19d7c59bd5ff386a0eca": "WinRAR 目录漏洞允许使用恶意文件执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzIyNzc3OTMzNw==&mid=2247485939&idx=1&sn=03c3ffef5a2ae3b4cd0db6c79534f4a3": "工具分享 | 一款JumpServer堡垒机未授权综合漏洞利用脚本（近期更新）", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247485361&idx=1&sn=1848475721009d2894847479ed3a090c": "Notepad++ 存在严重权限提升漏洞及白加黑", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484471&idx=1&sn=cf743831abccc0a1a5cb46208a1f6ee5": "Springboot图形化漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247535332&idx=5&sn=7700ce5764c969ea25c1b48668b198fb": "多部门联手！未成年人安全漏洞整治风暴征民意", "https://mp.weixin.qq.com/s?__biz=MzkwMzUyMjk2MQ==&mid=2247484510&idx=1&sn=ff6752e79d304c2f0c105cd9d11bacc2": "Langflow远程代码执行漏洞（CVE-2025-3248）POC及一键部署环境", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247546728&idx=3&sn=64a81159f0079c1d782bad8db1000462": "信息安全工程师系列-第13关 网络安全漏洞防护技术原理与应用", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247521312&idx=1&sn=f8ca2494b32db358ea69d4f0570ef6ca": "一次从0到1的逻辑漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507815&idx=1&sn=d7d2e2bc59c6884536c20a26dfcbe559": "漏洞通告 | Gogs远程命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NTY0MjIwNg==&mid=2247486111&idx=1&sn=b7d8865b37ec95f6ad4484cd959fc3ea": "Docker API 漏洞成黑客跳板，配合Tor 匿名网络正偷走你的加密货币", "https://mp.weixin.qq.com/s?__biz=MzI4MjkxNzY1NQ==&mid=2247486005&idx=1&sn=264eaaced170be759dbfc03828c82d65": "【威胁情报】：Notepad++ 本地提权漏洞 | POC目前已公开", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651323714&idx=1&sn=84082a15d99ba5d586f57149ae21b103": "小米互联应用曝高危漏洞，设备面临被完全控制风险", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458596252&idx=3&sn=3870fcc4fac639f2b1fa7dc71dcbdf97": "NVIDIA Megatron LM 重大漏洞曝光，攻击者可注入恶意代码，用户需立即升级", "https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247533747&idx=2&sn=22b55155a4f85bf20cdba850b24115eb": "荐读丨首个AI Agent零点击漏洞曝光：一封邮件窃取企业AI任意敏感数据", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523373&idx=1&sn=046fdf8814e8311d4a31bd092804a2c2": "思杰修复 NetScaler ADC 和 Gateway 中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531318&idx=1&sn=5495b33965ce946dd8209ec865cc0978": "剖析 CVE-2024-12695：利用 V8 中的 Object.assign()", "https://mp.weixin.qq.com/s?__biz=MzkxOTUyNTg2MA==&mid=2247483982&idx=1&sn=a506515361c892f7d439c4fe16467aa6": "【淮橘AI代码审计工具v2.0】规则+AI双引擎，让漏洞无处遁形", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247550556&idx=1&sn=931c3d818653e765d82fba8af75a5de1": "手把手教你CNVD漏洞挖掘 + 资产收集", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651137321&idx=2&sn=3b273292ef01a662bff4e7e856dd6634": "美国遭遇黑客活动分子大规模DDoS攻击，与伊朗轰炸事件相关；小米互联互通应用严重漏洞允许黑客未授权访问用户设备| 牛览", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492665&idx=1&sn=9fbe571d7111030b9c4ceba172cdaa2a": "漏洞复现 || GeoServer XXE漏洞 (CVE-2025-30220)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501227&idx=2&sn=6dd4eb38653a88948107ed6a38964031": "【漏洞通告】WinRAR 路径处理漏洞导致远程代码执行 (CVE-2025-6218)", "https://mp.weixin.qq.com/s?__biz=Mzg4Njk1NDg5NQ==&mid=2247483910&idx=1&sn=213863db5a9b86c813db99bade0660e1": "Java代码审计第七章-任意文件上传漏洞（上）", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247492658&idx=1&sn=083e602f09f084017608fce4fb9b60d5": "VulnCrawler v2.0- 漏洞情报拉取工具 一键抓取最新漏洞|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247555247&idx=1&sn=a7196eceb681af8cdcbd0cb4df87f1b9": "nps之Socks流量分析以及未授权复现", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247489523&idx=1&sn=7a64c5b7c5c623d232ed0a4980cf9f10": "渗透测试｜某单位从敏感三要素泄露到接管管理员的漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494089&idx=1&sn=b9ada1dbf29cb740174d1194b7b4262d": "【已复现】Gogs 远程命令注入漏洞(CVE-2024-56731)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490307&idx=2&sn=6df93de7148487ec4029f4396726754d": "【高危漏洞预警】Pterodactyl代码执行漏洞(CVE-2025-49132)", "https://mp.weixin.qq.com/s?__biz=MzI0MTUwMjQ5Nw==&mid=2247489256&idx=1&sn=503b05e22ac55c8acc087c2ad80efcba": "利用 WebView 漏洞：绕过 SOP 访问内部应用程序文件", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247521326&idx=1&sn=eee5b7db26999c41ad137213d0d90a1c": "记录某企业存储型XSS漏洞从发现到数据外泄全路径分析", "https://mp.weixin.qq.com/s?__biz=MzkxNTY0NzgwNA==&mid=2247483980&idx=1&sn=4263cd05489194ff5d3e53a235bf3016": "CRMEB-CVE-2024-52726-任意文件下载漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247641086&idx=2&sn=7947f21af9546a6522db29daeb6323b0": "直播预告 | 攻防演练季应急自救指南-0Day∕NDay来袭，传统防护失效下该如何破局?", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490307&idx=1&sn=bac7469bf34eee680054d677b1c056ec": "【高危漏洞预警】 Gogs内部文件删除致远程命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070352&idx=3&sn=cc4501ba6fd8153a01376bad11487244": "【安全圈】TeamViewer 高危漏洞通报（CVE-2025-36537）", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247573676&idx=1&sn=e886de4de4e7bab19b5e175e478473af": "6款较流行的开源漏洞扫描工具推荐及特点分析", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492852&idx=1&sn=63aa481b46b0e2ccc42748ad0107467f": "【已复现】Gogs 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247555247&idx=2&sn=7d638163f3ed98a098b2e44a47e27120": "【免费领】社会工程权威资料：解密安全体系中的人性漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651323714&idx=3&sn=e66361c25b0dba9cb07f228b450a60c9": "WinRAR目录遍历漏洞允许通过恶意文件执行任意代码", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247493041&idx=1&sn=518361ee24bc2da2bdc44f947e1046a8": "在全球间谍活动中，政府网络邮件遭 XSS 漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247492046&idx=1&sn=01a742e4329db61125a8bb709a3c781b": "安利一款桌面应用流量拦截神器：InterceptSuite 让加密通信无处遁形", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247511358&idx=1&sn=668ea03605884eaaecd7c4d02890cc31": "Brother、富士等多型打印机曝严重漏洞，核心问题无法通过固件修复", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499955&idx=1&sn=46257e085680fe9947bc90925d324f23": ".NET 介绍一种漏洞挖掘思路，绕过 GZip 实现反序列化", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493513&idx=1&sn=1ccc756f815c32f18e26fef511666ec0": "漏洞预警 | Linux本地提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795544&idx=3&sn=bc7325dfc92703b843ccfc4f662399b4": "CISA 警告：老旧TP-Link 路由器存在严重漏洞可导致黑客攻击", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493513&idx=2&sn=f6b4bc85401b58e71cdb7aa704901f29": "漏洞预警 | 云课网校系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795544&idx=2&sn=c4b3f53fda7cbd38f267401a4b6af0eb": "新漏洞使数百万台 Brother 打印机面临黑客攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2NzkxOTQ0OA==&mid=2247484573&idx=1&sn=aceeff40c7236693b32fabb68ee8ab3b": "XDigo 恶意软件利用 Windows LNK 漏洞对东欧政府发动攻击", "https://mp.weixin.qq.com/s?__biz=Mzg3MDgyMzkwOA==&mid=2247491645&idx=1&sn=6961f6e6b2bf79b4616ac3459e85f91c": "清源SCA社区每日漏洞提早感知情报、新增CVE及投毒情报推送-2025年06月25日", "https://mp.weixin.qq.com/s?__biz=MzI1MDA1MjcxMw==&mid=2649908401&idx=1&sn=e5f24f835066c260946809fee62a5325": "[AI-VA-20250626-001] - Gogs符号链接处理不当导致远程命令执行", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MjAwNQ==&mid=2247486915&idx=1&sn=a2fcd625edc0bfec635fa313d4ad1bff": "200小时狂赚$20,300：我的漏洞赏金黑客挑战实录", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493513&idx=3&sn=e9ebcf261289a95fb9471fcac2883806": "漏洞预警 | 泛微E-Cology SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650623948&idx=1&sn=8e21d9d9ff126d57e4ccec4d7fd6b53f": "CVSS10分！Pterodactyl Panel远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531365&idx=2&sn=eeb68c24e0ebe5b144c992e1b3477757": "TeamViewer 远程管理漏洞 (CVE-2025-36537) 可导致权限提升", "https://mp.weixin.qq.com/s?__biz=MzkwMzYyNzQ1NA==&mid=2247485618&idx=1&sn=0c172c8218bd712fd7319c25ea282f8a": "速速更新！WinRAR 又又又出漏洞了！", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651248151&idx=1&sn=757d9ada4ed57f09ef720dcca0cef6a5": "实战：滥用MCP服务攻击企业AI，窃取企业内部数据 | WinRAR目录遍历漏洞允许通过恶意文件执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499953&idx=3&sn=35d070e846b8f01bd8d441b1dae2c836": ".NET 通过 XAML 实现任意代码执行", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247500129&idx=2&sn=690cd25311a206b712e9f82b871929b6": "0day漏洞攻防竞赛：东大与美国的隐秘战争", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503527&idx=1&sn=3aa5f32ac9d5200982fe5a13434d7eb8": "【已复现】Gogs 远程命令注入漏洞(CVE-2024-56731)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247583318&idx=2&sn=0ba427effcd76b16d408c7d3116a319a": "Sitecore内容管理系统漏洞链始于在设置硬编码密码时的疏漏", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247488924&idx=1&sn=fd5c369c50dfb523c63dab43e94fba98": "你检查过回收站了吗？挖掘 Active Directory 回收站中的权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070375&idx=2&sn=43a610075b530001df1d12c917a221e3": "【安全圈】Realtek 蓝牙协议漏洞允许攻击者通过配对过程发起拒绝服务攻击", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU0OTQyMg==&mid=2247484434&idx=1&sn=fdcc1421f4fe465e4fa8104b5e7ccb6f": "【漏洞预警】Gogs远程命令执行漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247500337&idx=1&sn=cf1c9b178de58a55c1e8bb36541666c2": "还在为代码安全发愁？这款“漏洞规则库”神器请查收！", "https://mp.weixin.qq.com/s?__biz=MzIyMjQwMTQ3Ng==&mid=2247491568&idx=1&sn=56bef06681cde2ce8161fa8cfaeab4db": "【国际视野】美国网络安全和基础设施安全局与国家安全局联合发布《内存安全语言：减少现代软件开发中的漏洞》指南", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247488427&idx=1&sn=9fc8ecfaa6360e9fbcf4ea5c4618a39d": "“你刷的小红书，其实在裸奔？”——黑客揭秘App开发者模式背后的漏洞发现与利用", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247494116&idx=1&sn=5076fd18e8149cf5d4485f4282758220": "思科修复了可能导致 root 级远程代码执行的关键 ISE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTYyMDk1Nw==&mid=2247483880&idx=1&sn=33c146d72d472dd3162c8ead79ed0453": "【情报】Notepad++存在高危提权漏洞CVE-2025-49144", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247581004&idx=1&sn=2f71cde362d2e5dec4e3585e1ac450be": "当分公司突遭漏洞通报……如何揪出安全管理“暗礁”？", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531390&idx=1&sn=ea0a1db7611361fced3917c01d483312": "CVE-2025-47934 – 欺骗 OpenPGP.js 签名验证", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247492672&idx=1&sn=7e12184e991333cec5e692eaa1493756": "About基于Python javalang库开发的一款轻量级Java源代码审计工具|漏洞探测", "https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247527416&idx=1&sn=d20cead60a11511749fe247e9b5294e1": "病毒入侵？漏洞暴露？腾讯 iOA 一键封杀安全威胁！", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506828&idx=1&sn=4dcc2055faf8a5122af10eb038e0e5ab": "破解 JWT：漏洞赏金猎人指南（第五部分）", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651137338&idx=2&sn=2b54725eb21fda1feeedac82b273d938": "ChainIQ遭网络攻击，影响UBS和KPMG等知名企业；IBM WebSphere高危RCE漏洞允许攻击者完全控制系统 |牛览", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523387&idx=1&sn=d337384a0eacef330ea1c9beaedf7937": "思杰紧急修复已遭利用的NetScaler ADC严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070394&idx=4&sn=aeed87696ea8fe6444b8b1cb9444bf8e": "【安全圈】Open VSX Registry 爆出严重漏洞，数百万开发者面临供应链攻击风险", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651323993&idx=4&sn=a39d5181504a9caeda8bbcff989ef625": "IBM WebSphere应用服务器曝高危远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096350&idx=2&sn=ad5be77318cdcb22396bebc1fefd8a71": "NVIDIA Megatron LM 让攻击者注入恶意代码漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MjcwMTgwOQ==&mid=2247492492&idx=1&sn=d6b757afa59be6084717104a39f36dc4": "快去升级！WinRAR 高危安全漏洞现已修复", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523387&idx=2&sn=51d9faa28849e3f10c23498b89c880d0": "CISA和FBI联合发布关于减少现代软件开发中内存安全漏洞的指南", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484925&idx=1&sn=f9370d39499273def1088c384bb7cc88": "安钥®「漏洞防治标准作业程序（SOP）」征文启示 [2025年第25期，总第43期]", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486414&idx=1&sn=0a30583b5f6863c054c3cc7d338ec2c7": "目录遍历漏洞扫描工具 - Directory-Traversal-Scanner", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247519159&idx=1&sn=0ca8c03e95dd58aca687e2d21148721d": "当漏洞成为“数字战争”的弹药，谁能改写攻防规则？", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494922&idx=1&sn=dae4e1652fe33e93bb6fd09926535156": "抖音生活服务专测上线！单个漏洞奖金15万元！", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490313&idx=1&sn=c59808dd4135c7a6d4d434f5cca727d5": "【高危漏洞预警】Elastic Kibana 原型污染致任意代码执行漏洞(CVE-2025-25012)", "https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484605&idx=1&sn=0e380428ba92aad096e73a4416c9f1b5": "信息收集之WEB页面开发架构识别从而快速发现是否有已知漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490428&idx=1&sn=4b291e73cec6a04e68da263a63257cd4": "【AI风险通告】LLaMA-Factory存在远程代码执行漏洞（CVE-2025-53002）", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531421&idx=2&sn=1d5a42294204b71b9c78d6eeb6e30e77": "区块幽灵：以太坊共识漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070394&idx=2&sn=850f2b60427de76cc6c8e91790bc0928": "【安全圈】美国顶级红队黑客竟是 AI？Xbow 机器人登顶漏洞赏金榜单", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523394&idx=1&sn=6155e41bcc07bb70bcdcdd88cc88d8de": "思科提醒注意 ISE 中的满分 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247492693&idx=1&sn=f912973994e379d3c80bed9b2187214b": "中山大学｜FORGE：驱动大语言模型自动化构建大规模智能合约漏洞数据集", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247497115&idx=1&sn=4673c140780854d180246684f5bfb049": "WinRAR目录遍历漏洞允许通过恶意文件执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzU3MDM2NzkwNg==&mid=2247486555&idx=1&sn=28d1773e6d7afa6a083204bcfa8f7416": "Brother、富士等多型打印机曝严重漏洞，核心问题无法通过固件修复", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247488952&idx=1&sn=ec5e934481be8b9760d4cf6f099da8d7": "远程 Windows 凭据转储与 Shadow Snapshots（卷影副本）漏洞利用与检测", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489317&idx=1&sn=434916a93c8677e2a4430873276124ea": "【漏洞通告】WebSphere Application Server远程代码执行漏洞（CVE-2025-36038）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523394&idx=2&sn=d589b77eb9be15ec2ad03480d601ade3": "Open VSX Registry中的严重漏洞可用于发动供应链攻击，影响数百万开发人员", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070405&idx=1&sn=afb3be158a42d504cf141b47db4215dc": "【安全圈】兄弟等742款打印机被曝存在安全漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651207187&idx=1&sn=f804f0e6e0e4ab61c441089cc007d237": "TSRC盛夏众测开启！4倍奖励+单个漏洞最高10+万赏金，挑战心跳夏天", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247497115&idx=3&sn=228ace9e52b723b17411f2f534d92f5b": "Python标准库tarfile模块存在任意文件写入高危漏洞，PoC已公开", "https://mp.weixin.qq.com/s?__biz=MjM5NDcxMDQzNA==&mid=2247489718&idx=1&sn=726cfebbf94e1c4c60e8c850fb4e3673": "CVE-2025-33053 Poc复现研究细节", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324007&idx=3&sn=ab457bbc0253d3a893c417159d3e4d10": "748款打印机存在不可修复的远程代码执行漏洞，涉兄弟、富士等品牌", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531429&idx=1&sn=bd56f81866330df6dcad06a198ba156a": "CVE-2025-32433：Erlang∕OTP SSH 服务器中的预授权 RCE", "https://mp.weixin.qq.com/s?__biz=MzIxODQ0NDEyNg==&mid=2247483975&idx=1&sn=d8c9debe6b2aa8ce6465872cba70a70e": "【漏洞通告】Apache Tomcat安全约束绕过漏洞 (CVE-2025-49125)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497783&idx=1&sn=f49fc7ca0cb8d8027c5bcdb60b1a2ac4": "$10,000的RCE！​​", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487516&idx=1&sn=0022a5911bd065644f71a5821e3a10df": "WinRAR 缺陷（CVE-2025-6218）：通过目录遍历执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788736&idx=1&sn=d928c3059c6a5c78864232be6184cb05": "Open VSX 漏洞重创扩展生态，数百万开发者面临供应链劫持", "https://mp.weixin.qq.com/s?__biz=MjM5NDUxMTI2NA==&mid=2247485168&idx=1&sn=ccdbf7b18e4e2300a6fa0d4f9aafd306": "亲测AIFuzzing与XiaYue逻辑漏洞检测插件的区别：AI赋能的安全检测工具优势解析", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324021&idx=3&sn=758ad58f02fcc6eda8eddbd10a0dcc4c": "思科两处高危RCE漏洞可致未授权获取root权限", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247499565&idx=1&sn=34fc51e56817b871ded40c91db6234c1": "记一次从登录框到前台rce", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096358&idx=1&sn=a32f0dc44801024ee9a611408348ce40": "IBM WebSphere Application Server 允许执行任意代码漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247486060&idx=2&sn=fece77b24bc457dda583f0c57bc5b5ec": "CVE-2025-36038｜WebSphere Application Server远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247486060&idx=1&sn=83ab8c76ec0db3d5080561c57c2fb5f3": "CVE-2025-4123｜Grafana SSRF漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491941&idx=1&sn=1be6e8f7856cb6fcf191a6d1858210d5": "H3C ER2200G2路由器 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247487436&idx=1&sn=be143102d776f443d8512a4f3d8684c6": "如何在日常渗透中实现通杀漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506847&idx=1&sn=4272d6c554696334581739689d4dadd8": "破解 JWT：漏洞赏金猎人指南（第六部分", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487518&idx=1&sn=43c1e5869cec472b93e9aaac6f0fc0ba": "代码审计|SpringKill如何用CodeAuditAssistant挖掘0day教程公布", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489822&idx=1&sn=ac39a8e743ae577a5588eb193172e641": "契约锁电子签章系统RCE简单分析", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493534&idx=1&sn=1c90f3038da9a0abacd8adee20d5b5d9": "漏洞预警 | Notepad++特权提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516893&idx=1&sn=4a4dc60c59e057104bc1dedabf35955f": "漏洞检测工具 -- ecology9_sqli（DVB-2025-9428∕QVD-2025-23834）", "https://mp.weixin.qq.com/s?__biz=MzkxMzQyMzUwMg==&mid=2247486716&idx=2&sn=922373703dcf59975e7e70f3a5ec6934": "看完这篇再挖不到漏洞，请顺着网线来砍我", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486744&idx=6&sn=6a59a46fd131c08c41257806d77fa1e2": "【漏洞通告】MIB3整数溢出导致MTU旁路", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611207&idx=1&sn=40ed5bd422bc36c920b02a4fdd6a6c89": "Facebook 要求用户上传手机照片启用 AI 故事功能；|748款打印机存在不可修复的远程代码执行漏洞，涉兄弟、富士等品牌", "https://mp.weixin.qq.com/s?__biz=MzI4MjkxNzY1NQ==&mid=2247486073&idx=1&sn=01c4536bc2ab3231c17c61e0880f5a5d": "【安全风险通告】vBulletin远程代码执行漏洞 (CVE-2025-48827) 在野利用通告", "https://mp.weixin.qq.com/s?__biz=Mzg3MDgyMzkwOA==&mid=2247491688&idx=1&sn=f34db0c8462b5e66e6157efe6cf31283": "清源SCA社区每日漏洞提早感知情报、新增CVE及投毒情报推送-2025年06月27～29日", "https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650629923&idx=2&sn=973a47723a6fed8a91a69bf6e1fdce7a": "《2025年攻防演练必修漏洞清单》重磅发布，助您筑牢安全防线", "https://mp.weixin.qq.com/s?__biz=MzkwMzUyMjk2MQ==&mid=2247484532&idx=1&sn=8c5ab3be35fdf036e9844cdeeabada0b": "Notepad++提权漏洞POC及一键部署环境（CVE-2025-49144）", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652252114&idx=1&sn=18ba1076a6a1ad2035075708a6da3c91": "CISA警告D-Link路由器路径遍历漏洞正被积极利用，无补丁可用", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247583407&idx=2&sn=35c3e8e7c3d51d50a86d12456ac1b819": "安全动态回顾|工信部对57款存在侵害用户权益行为的APP（SDK）进行通报 Brother打印机在689款型号中存在漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247500308&idx=2&sn=5892f8b52a771f2d914c832127c90ab4": "Synology Active Backup for Microsoft 365 高危漏洞剖析", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496088&idx=1&sn=418faa9a83a09f3cdee7545462a61fa1": "CNVD漏洞周报2025年第24期", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507825&idx=1&sn=c8163fc109580e2fd0b793a34118ae75": "微步情报局再次发现DataEase存在多个高危漏洞，可实现RCE", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494128&idx=2&sn=84fbc29915f49915f2acbdee7c978011": "【已复现】DataEase 多个远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496088&idx=2&sn=06d53998d9241762baedba11484d462b": "上周关注度较高的产品安全漏洞(20250623-20250629)", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788743&idx=1&sn=e35ebfc8a2f78e9033198fdd30536501": "拖拉机也能被黑？全球4.6 万台农机曝远程操控漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247486063&idx=2&sn=a3d57d6619d987a8d64a725f1bc82373": "CVE-2025-6218｜WinRAR目录遍历远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458596319&idx=1&sn=6ada3aaf69b4180a2d163d1405b5cca5": "最高3倍漏洞奖金，百万奖金等你来挖！华为终端安全奖励计划运营活动已重磅开启！", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247492722&idx=1&sn=2eb58866b8e1479105ea7019b94ea417": "多家互联网企业因三大漏洞遭处罚，650万条患者信息裸奔", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494128&idx=1&sn=2db6b38b631e2ab23f15f65f29f75b13": "【已复现】WinRAR 目录遍历漏洞(CVE-2025-6218)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247583407&idx=1&sn=3b90b3f97f49200853b4f780d12d0288": "Instagram 广告利用AI换脸漏洞欺骗银行客户", "https://mp.weixin.qq.com/s?__biz=MzI4MjkxNzY1NQ==&mid=2247486072&idx=2&sn=d8ec0d298fa5cdf2eec24a47363cad59": "网络摄像头漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247546847&idx=2&sn=9b0673dd296bbe07d675025dfa319c78": "蓝牙零日漏洞：数百万耳机变身隐秘窃听站", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506878&idx=1&sn=646896e03d930c8c4ed7eb5db4c3f087": "NASA开放公开的漏洞赏金计划", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247492309&idx=1&sn=971b6609659bdf8e5a1c6cd2c264177b": "SRC 视角下：渗透测试中的逻辑漏洞思路博弈", "https://mp.weixin.qq.com/s?__biz=MjM5ODYwMjI2MA==&mid=2649794356&idx=1&sn=1807d8a8e309d53363046e89b71a51fe": "悟空Agent实战：LLaMA-Factory高危0day漏洞挖掘与修复", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247496737&idx=1&sn=370c593f1bce328f065b2ee3561a83bb": "【论文速读】| FuncVul——基于LLM与代码块的高效函数级漏洞检测模型", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247494660&idx=1&sn=aa557759e534cc95f47181c56432377b": "PassGuard是一个轻量级安全工具，专为防护Linux系统中的脏牛(Dirty COW)内核漏洞而设计。", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503538&idx=1&sn=5439ec7c9b1446ac237be77feab8fcd0": "【已复现】WinRAR 目录穿越漏洞(CVE-2025-6218)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499979&idx=1&sn=e62c7b512a2e3f57f702c815e19235da": "实战级权限维持，从配置到命令执行一键部署 ViewState WebShell", "https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491736&idx=1&sn=c058b634e9bf320f603b91d1de78ff2a": "Chrome在野CVE-2025-6554漏洞poc公布", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247489170&idx=1&sn=3748f66988afa0fa303cbba4baa2bc5a": "漏洞通告：Sudo chroot 权限提升漏洞（Elevation of Privilege）", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503447&idx=1&sn=2a7f45d6621139fb1c9bb7364fe7dce5": "雷神众测漏洞周报2025.6.23-2025.6.29", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324079&idx=3&sn=23330a41d753210c404f022f9a91115e": "谷歌紧急修复已被利用的Chrome高危零日漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651207230&idx=1&sn=be1b2877b624966bf5393397469e9f94": "悟空Agent实战：LLaMA-Factory高危0day漏洞挖掘与修复", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531505&idx=1&sn=ef6e5a16657ad393b2f33a8fd5a20296": "如何在 Django 应用程序中链接目录遍历和 CSV 解析器滥用以进行 RCE", "https://mp.weixin.qq.com/s?__biz=MzIwNDYwMDcyNQ==&mid=2247489022&idx=1&sn=69b96ddf5e6b92e1c401efa186d2f1f4": "【必查漏洞】Sudo Host_Alias 权限提升漏洞 (CVE-2025-32462) 检测手册", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247490104&idx=1&sn=bfc287009021abce228aa120eb7673cc": "【0day】泛微OA前台登录绕过+后台组合拳RCE", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247489169&idx=1&sn=12e8f36dd27a550376215017f2cf31bd": "漏洞通告：Sudo Host 选项本地权限提升漏洞（Elevation of Privilege）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523414&idx=1&sn=af483917f833027e64a5dc3b05e6f56a": "谷歌紧急修复已遭利用的 Chrome 0day漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247521959&idx=2&sn=7d995c11b35283ee1e76812768d2151c": "记一次某大厂csrf漏洞通过蠕虫从低危到高危", "https://mp.weixin.qq.com/s?__biz=MzU3MzU4NjI4OQ==&mid=2247517267&idx=1&sn=15af7e76cfcf20622dd19551e3a1bf78": "6款较流行的开源漏洞扫描工具推荐及特点分析", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506883&idx=1&sn=a804d3cfee44d12ed64fb529af00d8f3": "终极漏洞赏金猎人清单：从侦察到报告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070451&idx=4&sn=1ae1f2640c97ff21fa27bdfc9eefb3dd": "【安全圈】危险警告！D-Link 多款路由器曝出严重漏洞，建议立即停用", "https://mp.weixin.qq.com/s?__biz=MzIwNDYwMDcyNQ==&mid=2247489022&idx=2&sn=53623527ace09a34e233e4c555c6c6f8": "【必查漏洞】Sudo chroot 权限提升漏洞(CVE-2025-32463)检测手册", "https://mp.weixin.qq.com/s?__biz=Mzk0MDY2NTY5Mw==&mid=2247485685&idx=1&sn=3291d434ce662ab723d4ae8346bdd9fb": "sudo chroot权限提升漏洞(CVE-2025-32463)", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516905&idx=1&sn=900d3adbb01a34ee0615ded711105778": "网站API挖掘提取与漏洞探测工具 -- Super-API-Finder(6月30日更新)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501255&idx=2&sn=d6e9b21552f7237cbd8e87489840aae7": "【漏洞通告】Wing FTP Server 远程代码执行漏洞(CVE-2025-47812)", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247486372&idx=1&sn=acde1e9a58f0d96700cec463b162ab2f": "工具集：z0scan【新发布：Web 与全版本服务漏洞检测的主、被动扫描工具】", "https://mp.weixin.qq.com/s?__biz=MzkyNzg4NTU0NQ==&mid=2247485804&idx=1&sn=aac724da59eb2431e4883e1384ba7310": "重生之hw 0day出自我的cnvd", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488217&idx=1&sn=c37e1bd4e8179e029ebf65dbab89e0b8": "HW（2025-7-2）漏洞信息收集汇总", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501245&idx=2&sn=b69280406515cfaba0f0b36bce7ecbcd": "【漏洞通告】Citrix NetScaler ADC和Gateway拒绝服务漏洞 (CVE-2025-6543)", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499989&idx=1&sn=8f5d60702d8764a873e0a41789698fef": ".NET 介绍一种隐蔽的命令执行方式，通过 LINQ 投影执行动态加载", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501255&idx=4&sn=756d8698b6aaf9d39b62171e4a466b15": "【漏洞通告】Google Chrome V8 类型混淆漏洞 (CVE-2025-6554)", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484934&idx=1&sn=d44f4e774becd54bfe1a4ab0577e5e3f": "安钥®「漏洞防治标准作业程序（SOP）」征文启示 [2025年第26期，总第44期]", "https://mp.weixin.qq.com/s?__biz=Mzk1NzMwNTM5NQ==&mid=2247486706&idx=1&sn=b26a94a4d38e3bd58c87867369340cae": "国内白帽子能赚多少钱？有多少白帽子全职挖洞能养活自己？零基础兼职挖漏洞收藏这一篇就够了", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491980&idx=1&sn=0425e1ac6aba4303cd7fb98b6307bc55": "红帆OA MobileOA.asmx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519515&idx=1&sn=f30efcb700f7338573925ec983993cec": "SRC漏洞挖掘之“嫂子开门，我是我哥”", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324079&idx=1&sn=c11acae8f7897f7fa528977c559d8c05": "Linux高危Sudo漏洞，可提权至root并绕过限制，PoC已公开", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096366&idx=2&sn=0bc84ccadfed7c9c2ab6818255f637c7": "IBM WebSphere Application Server 允许远程执行代码漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0NDI5NTY4OQ==&mid=2247486422&idx=1&sn=1950ae508c495b4f902accb605b1908e": "从0到1大模型MCP自动化漏洞挖掘实践", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503443&idx=1&sn=ac58ea5dade899a4310c5f8e8bdcaf76": "【成功复现】WinRAR目录遍历漏洞(CVE-2025-6218)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490353&idx=1&sn=c5470fd58355538b2dbea6a82e14b61a": "【高危漏洞预警】sudo < 1.9.17p1 host&chroot本地提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664712371&idx=1&sn=7f8436b06ea91d58fe0d1e3ca12933f2": "CVE-2025-32462&CVE-2025-32463", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247487449&idx=2&sn=dcd17b82a2b767da4a0245d2549452fc": "如何在日常渗透中实现通杀漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzk0MDYwMjE3OQ==&mid=2247486896&idx=1&sn=43defdb17bf801bce12e5cc72250945f": "10 米内就能窃听你的耳机！知名音频芯片曝漏洞，索尼、Bose 等大牌耳机受影响", "https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247490527&idx=1&sn=38615bfc7507a4ef985d194745d2df4c": "广联达远程代码执行代码审计", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458596362&idx=2&sn=851d02e396bd4ad0b2e18607c221d2cf": "最高3倍漏洞奖金+单漏洞最高价值百万，开源鸿蒙安全守护者即刻集结！", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492002&idx=1&sn=b6880866102aa41c8fbb56a6d73544e8": "Optilink upgrade.php 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247546866&idx=1&sn=efc6e9e0da5cb112c035c0489e1f580c": "Nessus严重漏洞允许覆盖任意本地系统文件", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247502397&idx=1&sn=ba68750f81dfaf2beb069dfb38aef163": "Nessus严重漏洞允许覆盖任意本地系统文件", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503550&idx=1&sn=403675d7942468c56b29a05e37f625fc": "【已复现】Google Chrome V8 类型混淆漏洞(CVE-2025-6554)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYxMjk0Mw==&mid=2247490802&idx=1&sn=102c4f427b3434196bc45fac750ee05e": "插件前台任意文件读取漏洞复现与分析 (CVE-2025-2294)", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795612&idx=1&sn=bd2ec5afa78de18935e0be3b142b5f54": "Houken 黑客组织利用 Ivanti 0day漏洞安装 Linux Rootkit", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324107&idx=1&sn=f89429997e0347cfe1580cc8ca6e858b": "Nessus严重漏洞允许覆盖任意本地系统文件", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490433&idx=1&sn=6ea78f033857836e66b0fa5bb027102e": "【已复现】Linux sudo存在本地提权漏洞（CVE-2025-32463）", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514631&idx=1&sn=fd5a357122fb4f7943b832c639bc9e1a": "MCP工具链首个严重漏洞？一个钓鱼网页，远程劫持开发者电脑", "https://mp.weixin.qq.com/s?__biz=Mzk0MjU5NTY2MQ==&mid=2247484397&idx=1&sn=02ae9d7fb38d1998b6e39568727b16de": "【0DAY漏洞复现】某款网络设备存在命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499995&idx=3&sn=afa5da2f0b688c70a82e89e06a22e9c4": ".NET 介绍一种隐蔽的命令执行方式，通过 LINQ 投影执行动态加载", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247492212&idx=1&sn=d5b473f62fc06b60c4bf8a71d3bd2de1": "JAVA常见漏洞复现", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261384&idx=1&sn=4f91cc15ac8ab344b7d926dd5c872297": "【星球专享】手把手复现 Apache Airflow 漏洞指南-(CVE-2022–40604)", "https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650850595&idx=1&sn=372e11108972c7b8fce6574e03d9b7fd": "青藤RASP入选CCIA首批 “网安三新”，攻防演练中抓0day神器再获官方认证", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664712380&idx=1&sn=7700a12a66238c5693b4b3853877b1fa": "绿盟网络入侵防护系统users.json敏感信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651248176&idx=1&sn=0ecdc3615a9a83848b91db8b1861589a": "德国全面封杀DeepSeek，中欧数据冲突升级 | Nessus严重漏洞允许覆盖任意本地系统文件", "https://mp.weixin.qq.com/s?__biz=Mzk0MjU5NTY2MQ==&mid=2247484404&idx=1&sn=210b67f6dbbe6f2f49edb18417cdb516": "【厂商不承认的漏洞】某设备接口未授权实现任意密码修改", "https://mp.weixin.qq.com/s?__biz=MjM5NDE1MjU2Mg==&mid=2649877221&idx=1&sn=d02a91e885c7dfadf6de05fbab190268": "“Sannu, Lagos”（你好，拉各斯）！飞天诚信闪耀Digital PayExpo 2025", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523425&idx=1&sn=d86d65a64846ff68a79a294116423c60": "CISA 提醒注意 Microsens 中的多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NTY4OTM3Nw==&mid=2247484003&idx=1&sn=6ca85c68883c94d0e914bf8d9fd9fe5f": "夏日狂欢 | 限时漏洞翻倍悬赏活动", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501261&idx=2&sn=b4d3e1f7d10b28534202f323f0507ccc": "【漏洞通告】IBM WebSphere 远程代码执行漏洞(CVE-2025-36038)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523440&idx=1&sn=82defa4f95ee18fec7fd809f7f565f7a": "思科 Unified CM 中存在满分漏洞，可用于获得root权限", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531579&idx=1&sn=8aeb22f983426b00e76b8eb31fada17a": "我如何通过 NGINX Off-By-Slash 配置错误获得远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247492743&idx=1&sn=6d15d49d30e47caad5876dd8ce93f3cb": "Google紧急修复Chrome零日漏洞（CVE-2025-6554）", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247489163&idx=1&sn=1e008afd0c76a101b63097cd15c89645": "漏洞预警|多家主流蓝牙耳机曝出可被监视漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484499&idx=1&sn=8990d10a757c9fdb5cfde304a9632624": "【在野利用】Chrome V8 引擎类型混淆漏洞(CVE-2025-6554)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523450&idx=1&sn=fb41027f31142b3eef6b9494edc4b71e": "微软 Edge 修复两个高危RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727846792&idx=1&sn=622536f639aa4976d47ddfc18e65de3e": "LazyValue下的Parcel漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531649&idx=1&sn=64834d89e32ec56e08e86ecd3aafc82b": "攻击者通过滥用暴露的 Java 调试线协议 (JDWP) 接口实现远程代码执行，部署挖矿", "https://mp.weixin.qq.com/s?__biz=MzI1MDA1MjcxMw==&mid=2649908515&idx=1&sn=9dd45778d480828d43ccc3465239a217": "如何调试Microsoft Defender for Endpoint (MDE) 发现 CVE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070509&idx=1&sn=6cf6b923bca528cc5cc03d57ebcc2bf6": "【安全圈】你的耳机在被偷听！20+音频设备曝出漏洞：索尼、Bose、JBL等沦陷", "https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247492633&idx=1&sn=05be5fe8eaa8c8ef60c074abf2f1e958": "伪装成漏洞检测工具样本分析", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247641383&idx=1&sn=3b2c19de6851d8fb8cfd37d6abda9929": "在看 | 周报：南阳某机械有限公司网站遭黑客攻击；742款打印机被曝存在安全漏洞；虚假WPS安装程序暗藏远控木马", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324483&idx=2&sn=7b7840a855c25cff444583b7d7681c6f": "FreeBuf周报 | Linux高危Sudo漏洞可提权至root并绕过限制；Lucee应用服务器曝高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MjkxNzY1NQ==&mid=2247486277&idx=2&sn=888640822418c3ba152b62a62e185814": "742款打印机存在不可修复的远程代码执行漏洞，涉兄弟、富士、理光等品牌", "https://mp.weixin.qq.com/s?__biz=MzIzMDQwMjg5NA==&mid=2247507548&idx=1&sn=85978c0c88e548f7680254b6e0af985b": "【一周安全资讯0705】三部门发文：进一步加强电子病历信息使用管理；谷歌紧急修复已被利用的Chrome高危零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMDc0MTc5Mw==&mid=2247483878&idx=1&sn=161132aec1e0f816d558679852c2866c": "Notepad++提权漏洞POC及一键部署环境【CVE-2025-49144】", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247500923&idx=1&sn=7eb27e3f909442571fa32be3a1dab150": "【2025护网漏洞POC速存】吃苕皮喝挪瓦，HW轻松拿捏", "https://mp.weixin.qq.com/s?__biz=MzIxNTM4NDY2MQ==&mid=2247517899&idx=1&sn=c0642ae4e349fb6d21361b4ffb239b55": "OSCE³认证指南：高阶渗透与漏洞挖掘专家的职业通行证", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247521558&idx=1&sn=8ace6c1b9ba3c75bd1d77c68810fd128": "护网 | xxl-job漏洞综合利用工具", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492040&idx=1&sn=a2365a44429fd8ac844dbaefe647210a": "安科瑞环保用电监管云平台 UploadNewsImg 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxOTM2MDYwNg==&mid=2247515053&idx=1&sn=f675480d14e309b4e61f55e56bd32b66": "蓝牙零日漏洞大揭秘", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247487623&idx=1&sn=1d8479b2fa702e596e21d8f2015d7ac4": "第128篇：Struts2全版本漏洞检测工具19.68版本更新", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497813&idx=1&sn=c778ad6a4bffd7a0a72a900144ea90ca": "如何利用ai辅助挖漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTc5MjM4Nw==&mid=2457389175&idx=1&sn=b8a393aea1447997a2db250a2aefcf59": "不容小觑的威胁：CVE-2025-32463 Linux提权漏洞，轻松利用却要紧急修复", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492050&idx=1&sn=25241e12d8fd7b7a7d959aebea062c21": "JieLink+智能终端操作平台 DeleteIpPool SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324483&idx=1&sn=a5a6d0f5b93f52732649237949b05bd9": "夜鹰APT组织利用微软Exchange漏洞攻击国内军工与科技领域", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489900&idx=2&sn=979cd2b43277c825490a986e33c78693": "逆天提权漏洞，CVE-2025-32463，嘎嘎好使，速来复现", "https://mp.weixin.qq.com/s?__biz=MzI3NzcxMDQwMg==&mid=2247487105&idx=1&sn=fc2288177dd8544ef2ccab2411d6bd15": "从路径遍历到远程命令执行（RCE）", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531708&idx=1&sn=5eb58ebd3099c52207add98ed4461dce": "[漏洞利用开发] 0A- 与内存守卫共舞：打破 Canaries∕Cookies、DEP∕NX 和 ASLR", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531708&idx=2&sn=4a6933ad20a93e82115716b907fedd14": "利用 DLL PEB 模块结构操作的代码执行∕注入技术", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611281&idx=2&sn=0b13a7fa48b99eb7891098356636b07b": "联想Windows目录可写文件漏洞可隐秘绕过AppLocker防护", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492423&idx=1&sn=11c5751ce8c00ae8ea6046da3c250e20": "QVD-2025-23408：契约锁电子签章系统未授权RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900878&idx=1&sn=0628d7321b119b7ef88e12c8bf037f86": "深度剖析CVE-2025-49596：一次网页浏览，如何让你的AI开发环境彻底沦陷？", "https://mp.weixin.qq.com/s?__biz=Mzg2MTg4NTMzNw==&mid=2247484336&idx=1&sn=a0934eb54b52c4ab1d0f4be169d78a19": "25HVV最新0day更新，各单位自查...", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096374&idx=2&sn=0db1104436ef7e1f9d8ce2148c89f9f2": "Next.js 允许攻击者通过缓存中毒触发 DoS漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247494179&idx=1&sn=1997151095977260707894ec476cabe6": "严重Sudo漏洞使主流Linux发行版面临本地提权攻击风险", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247550746&idx=1&sn=7e546ceb9adf9b333ab5ef6388d86387": "EDUSRC | 证书站小程序漏洞挖掘思路及方法", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247546963&idx=2&sn=f6b0b39f61c938cbe033753539c56b22": "紧急！本周【护网】必看3大高危漏洞：Sudo提权漏洞，你中招了吗？", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484501&idx=1&sn=d382e52bf88d07f6596b7426acf7f730": "第128篇：Struts2全版本漏洞检测工具19.68版本更新", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070540&idx=4&sn=6fe8ab50588c2035d0ee523bcf26b3ea": "【安全圈】Cisco 紧急修复 Unified CM 中存在的严重 Root 账户漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490446&idx=1&sn=726652b172d33357d42447129dcee18a": "【7∕7特辑】今日捕获大量漏洞！", "https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247485878&idx=1&sn=a4d4e1f8a75fc5cd7a0ad2c856557a55": "WordPress Forminator插件漏洞暴露60万网站面临完全接管风险", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070525&idx=1&sn=7b6337e89711c9e9f413dd1cb303bd76": "【安全圈】Linux“sudo”严重漏洞：任何用户均可接管系统", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247492233&idx=1&sn=6972c3d85da8e41bb31f6f59be71350b": "Prometheus 未授权访问漏洞处理", "https://mp.weixin.qq.com/s?__biz=Mzg3MDgyMzkwOA==&mid=2247491712&idx=1&sn=e2d5206def5474dacc15a2dd6c6969cc": "清源SCA社区每日漏洞提早感知情报、新增CVE及投毒情报推送-2025年07月04~06日", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497824&idx=1&sn=d05e05ef9f38616d66fc34d888663358": "作为一名不具备天赋的普通人，如何在漏洞赏金计划中取得成功", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487547&idx=1&sn=33033a7415fe3aabffa5f5711e51030a": "PHP 漏洞 CVE-2025-1735（SQLi∕崩溃）", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500084&idx=1&sn=38b270f2be6c4a876c14b613950e4899": "CNVD漏洞周报2025年第25期", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247492761&idx=1&sn=74dceba6e96dc5542167e58b17b22472": "分享Jeecg-boot中的Nday漏洞汇总打法", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492070&idx=1&sn=a76b100b910f393235352f1b7824dc12": "汉王EFaceGo upload.do 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247500929&idx=1&sn=dee2bdaa182554616ea85ceef4775672": "汉王e脸通综合管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247489168&idx=1&sn=931ea8f0161289c6d7003a69fb820de6": "Linux “sudo”关键漏洞允许任何用户控制系统", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503563&idx=1&sn=09169a0ba263b129a115d0fa708b0d02": "【已复现】Redis hyperloglog 远程代码执行漏洞(CVE-2025-32023)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500089&idx=1&sn=34735acc4543857c99268d52e2e5b501": "2025年人工智能大模型产品漏洞众测活动启动公告", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487548&idx=1&sn=7b0fb2f3107df101675679504bbb0c10": "PHP 漏洞 CVE-2025-6491（SOAP DoS）", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503557&idx=1&sn=b46dcfec1d66e735b4c53d7ae9633c0c": "安全热点周报：超过 1,200 个 Citrix 服务器未针对关键身份验证绕过漏洞进行修补", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247489664&idx=1&sn=df572e4cbef72a5ed6c4de877b52b935": "【SRC】某选课小程序任意用户登录漏洞深度剖析", "https://mp.weixin.qq.com/s?__biz=Mzk0MjU5NTY2MQ==&mid=2247484416&idx=1&sn=d4ca2b0c863b7ac03f1c479a4455648d": "【漏洞复现】锐捷 RG-EW120路由器存在密码重置漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247526738&idx=1&sn=198681d077860153b253b1e29ce8bede": "Redis hyperloglog 远程代码执行漏洞(CVE-2025-32023)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501277&idx=2&sn=4281534d703a4bbc63efa979f6383778": "【漏洞通告】Redis hyperloglog命令越界写入导致RCE漏洞 (CVE-2025-32023)", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247547053&idx=1&sn=ab425df27b630dfa1c1d59759bf1ad37": "【更！】25HVV热点攻击漏洞含0day，各单位自查...", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503454&idx=1&sn=4a486edbf229f8614fc4bfaa37270d4a": "雷神众测漏洞周报2025.6.30-2025.7.6", "https://mp.weixin.qq.com/s?__biz=Mzk0MjU5NTY2MQ==&mid=2247484421&idx=1&sn=5c3724f0c2d78efe44c29769c0a54860": "【漏洞复现】南昊网上阅卷系统∕exam∕monitor∕index.jsp接口未授权访问", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458596945&idx=3&sn=ce5a42d0da3011db31e51a6b4c67cb24": "Redis曝高危漏洞，认证客户端可致服务中断", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324554&idx=1&sn=bdeb8779451111167a89a91cea7654df": "Redis被曝三大严重安全漏洞，PoC代码已公开", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490456&idx=1&sn=d62d1062414385b7f829b9ad9c765da1": "【7∕8特辑】一线最新漏洞情报来袭", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492498&idx=1&sn=3ea95ef3ff9e6b9f97bfcd9b2a1a756b": "用友NC最新SQL注入 | CNVD-2025-06710漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg4Mzg4OTIyMA==&mid=2247485898&idx=1&sn=6159060cdb84760163b161be61b31d42": "【工具推荐】0Day挖掘机-“Rotor Goddess”", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247486429&idx=1&sn=1122596685f8cc2619332467ebe13ffc": "Unauthorized-Vul【最全未授权访问漏洞批量检测工具】", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484942&idx=1&sn=baf5d858e68af91f045b6c4cc52c65b5": "Linux单服务器漏洞处置SOP框架——最小化应用系统运行环境安全风险", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651137680&idx=2&sn=44072684925a2b63f6aade28880606fd": "最高奖金可达15万元！2025年人工智能大模型产品漏洞众测活动启动；美国防部因网络安全隐患切断部分NOAA卫星数据连接 | 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324586&idx=1&sn=edaf868c5c5e19239d5ddd9a4a9e7b99": "Linux启动漏洞可绕过现代Linux系统的安全启动保护", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501277&idx=3&sn=3c9b51451f5763c003d384a08f8ec50e": "【漏洞通告】Redis 未认证连接导致拒绝服务漏洞 (CVE-2025-48367)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497828&idx=1&sn=3edecf58ac99722cc6db88b124495ed3": "SRC漏洞挖掘之“嫂子开门，我是我哥”", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496107&idx=2&sn=71bebd5f56bafd09a7b0d3e2b1d3c056": "上周关注度较高的产品安全漏洞(20250630-20250706)", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488244&idx=1&sn=01a64335c638438a54a0ead3790c9789": "HW（2025-7-8）护网漏洞信息收集汇总", "https://mp.weixin.qq.com/s?__biz=MzU2MjU2MzI3MA==&mid=2247484705&idx=1&sn=49fad1f3e7c910efc380ae3f1895f0fc": "漏洞预警 | Redis hyperloglog 远程代码执行漏洞(CVE-2025-32023)", "https://mp.weixin.qq.com/s?__biz=Mzg3MDgyMzkwOA==&mid=2247491716&idx=1&sn=56c0e2eca58ac6a391038825ae1a1e81": "清源SCA社区每日漏洞提早感知情报、新增CVE及投毒情报推送-2025年07月08日", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247641440&idx=1&sn=cd0ded48c2d71cd4e57deae91254b1c9": "「限时免单」安全漏洞防治工作标准化的必要性：抵御不断演变的威胁之盾", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492081&idx=1&sn=894a554f87721dca1ce2c4cbcb622ae2": "信呼OA uploawAction.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247515396&idx=1&sn=cd3c577b9492d4197fee6394c426a21a": "QaFuzz：关于测试域名的漏洞挖掘工具", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490389&idx=1&sn=a4b381c2318fb8f2925676474ebc9324": "【高危漏洞预警】Redis hyperloglog远程代码执行漏洞CVE-2025-32023", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458596966&idx=2&sn=e31bcd83bed515a47986bdc1cb110940": "CISA 将谷歌 Chromium V8 漏洞纳入必修补名单，7月23日前须完成修复", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664245296&idx=1&sn=9a5b71c761dc2b049f6fa30dde2ff1cc": "专题·人工智能安全 | 大型推理模型的安全性：挑战、漏洞与未来", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493665&idx=3&sn=1221ce55fb0740963a6b753ce6508465": "漏洞预警 | WebOne劳动力与考勤管理软件任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493665&idx=2&sn=b13a0fe888ba0def887c35071df5aa2b": "漏洞预警 | 深信服运维安全管理系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxOTUyOTc0NQ==&mid=2247493555&idx=1&sn=4df91360f16f4d814717187b7abce6f8": "蜜罐捕获一个自动化漏洞攻击的机器人程序", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070569&idx=1&sn=6d82b7ddc4c8cc451bc8ab54f4420e78": "【安全圈】Zoom Windows 客户端曝出中危漏洞，可能被用于发起拒绝服务（DoS）攻击", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247486239&idx=1&sn=8e885ab19cba7e27c6d24a33dcb6de17": "某堡垒机 set_port 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494163&idx=1&sn=ef3a94f06cd0f1e50ff400b0fd0c78ba": "【已复现】Redis HyperLogLog远程代码执行漏洞(CVE-2025-32023)", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503452&idx=1&sn=2a1a3a5acd88ac7d56b6249129a61d52": "【成功复现】Pichome路径遍历漏洞 (CVE-2025-1743)", "https://mp.weixin.qq.com/s?__biz=MzI1NTE2NzQ3NQ==&mid=2247487271&idx=1&sn=ca68dccf9a1028de25f8717fd5c4b585": "【工具推荐】听说这个工具挖0day有一手", "https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247484898&idx=1&sn=8398d7bfb2fa31deb03c63d073a09293": "【漏洞复现】汉王EFaceGo upload.do 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490456&idx=2&sn=0f0fc3ed9e30015967af0b71ee9eb511": "【已复现】Redis hyperloglog存在远程代码执行漏洞（CVE-2025-32023）", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652252169&idx=1&sn=47e985b033077e98cd528abb15e1a47f": "国际刑事法院遭零日漏洞网络攻击，敏感数据岌岌可危", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501285&idx=3&sn=b6133575e41cd87ecbd05db8fb74fff0": "【漏洞通告】微软7月多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490463&idx=1&sn=1b48b2ce233b26f5a8ec414b28fce49b": "【已复现】泛微E-cology9存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYxMjk0Mw==&mid=2247490818&idx=1&sn=b8b5e7f8dc6be896a96fc042718d0e5f": "【SRC】某平台毕业季开房优惠卷逻辑漏洞（红姐邀请你进房间）", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324666&idx=3&sn=ee5583eca517c2e940909cfa2b32ad1e": "Git项目修复三大漏洞：远程代码执行、任意文件写入与缓冲区溢出", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484507&idx=1&sn=bdd96d70bb0af4746b561264f05e1d2c": "【已复现】泛微 E-cology9 SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247494211&idx=2&sn=4be1bcd1c4123271a7bf8f72da7e7e4d": "日本制铁解决方案公司遭遇零日漏洞攻击导致数据泄露", "https://mp.weixin.qq.com/s?__biz=Mzg3MDgyMzkwOA==&mid=2247491720&idx=1&sn=18f6d4ace8786e4d6c4f0ed0caf3d0b8": "清源SCA社区每日漏洞提早感知情报、新增CVE及投毒情报推送-2025年07月09日", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523530&idx=1&sn=df2ccc1c3c4a214c1b1a95b51694da62": "微软7月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489945&idx=3&sn=fef11090d9dfd6c566185dcf5f5af6c0": "一个集成的BurpSuite漏洞扫描插件", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795670&idx=2&sn=5a43c62fd78188c6e942755268c937ef": "微软修复 Windows 和服务器中可蠕虫的远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492872&idx=1&sn=90db05effb93a6cd8efb63c5fa4dfa0d": "【已复现】泛微e-cology 前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489945&idx=7&sn=88d1aad32efce95a42eff434157efe29": "逆天提权漏洞，CVE-2025-32463，嘎嘎好使，速来复现", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492090&idx=1&sn=d3730d112f227a6e2220302b76ba7ea4": "金盘移动图书馆图书管理系统 tabShow 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489945&idx=1&sn=fa39dab26fa7889aa2d78f6bfc2cc882": "一款以Web与全版本服务漏洞检测为核心的辅助性主、被动扫描工具", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523530&idx=2&sn=e19607b9a1bbf6bc70c902e40f0de1d3": "Fortinet 修复FortiWeb 中的严重SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjIxNDQyMQ==&mid=2247498199&idx=1&sn=f4175317ea154b19d2967a61ba9f6778": "【已复现】泛微e-cology 前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247490153&idx=1&sn=f4e566d0f34c146c4e9d3b9d348e2812": "某朋克风NFT数字藏品存在前台文件上传漏洞【0day】", "https://mp.weixin.qq.com/s?__biz=MzkxMjYxODcyNA==&mid=2247486256&idx=1&sn=e695f0ac5253981b19b466c133364824": "【0day挖掘】怎么用“Rotor Goddess”轻松爆出过万资产的漏洞，以及其他小洞的出货方式与流程", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070569&idx=2&sn=190752ffac23d6be9ddec582d3384a58": "【安全圈】Linux启动漏洞可绕过Secure Boot：攻击者仅需物理接触即可植入持久木马", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507834&idx=1&sn=cb2a5fffe56db189abdb84f8cf483df4": "酌情处置 | Redis hyperloglog 命令远程代码执行漏洞利用条件较多", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597040&idx=2&sn=cdca0a3babe6585f09000478395ba7bf": "Windows 系统曝 wormable 级 RCE 漏洞，CVSS 评分 9.8", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484948&idx=1&sn=8a4dc616eb151ed17485aaf84fc0b481": "安钥®「漏洞防治标准作业程序（SOP）」征文启示 [2025年第27期，总第45期]", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503463&idx=1&sn=6ef0546654e72e110fb0e22dc6c2a065": "【成功复现】LlamaIndex SQL注入漏洞(CVE-2025-1750)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664245407&idx=2&sn=13edbb43d857ccee5d8e4bb9ad8106be": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247547132&idx=1&sn=cd484270f0cd9ed5dc17fdeafb2e76dd": "微软紧急修复高危蠕虫级RCE漏洞，威胁全网Windows系统", "https://mp.weixin.qq.com/s?__biz=Mzg3MTY3NzUwMQ==&mid=2247490613&idx=1&sn=bf728f4cff492892dae89570b62f83db": "2025-7-10日漏洞情报汇总", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494180&idx=1&sn=b0353fe95161dbbe5a133dd5fa564d22": "【已复现】Git 远程代码执行漏洞(CVE-2025-48384)", "https://mp.weixin.qq.com/s?__biz=MzI5MDE5NDcxMA==&mid=2650936291&idx=1&sn=c538ba31126da0a3fc74f6d7ae3694e6": "Windows Update 服务权限提升漏洞-CVE-2025-48799", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247539547&idx=2&sn=4c734f8837fb9bb5024190ecd4460790": "资产维度分类之全球操作系统漏洞大盘点", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487556&idx=1&sn=d4ee665f5777a19061830dbb847479f5": "Git 远程代码执行漏洞预警(CVE-2025-48384)", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486434&idx=1&sn=7915ee874f143a14d82291212af62ca0": "Web与全版本服务漏洞检测工具 - z0scan", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247489367&idx=1&sn=084efb7db8b14482e6e9abdf2072363b": "CVE-2025-1729 - 使用 TPQMAssistant.exe 进行权限提升", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651463249&idx=1&sn=37c15dcc38445d804dd90e07aa94db96": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324737&idx=1&sn=8f0843cf1d51ac50bd1eae4a5f0e4c87": "微软紧急修复高危蠕虫级RCE漏洞，威胁全网Windows系统", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247488444&idx=1&sn=5b0a8866a42e54f258089ecfd7d729f3": "项目推荐 | WebGoat8.X代码审计大全，全文均可复现，适合刚学完JAVASE准备开始代码审计的师傅", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488265&idx=1&sn=5d4f61665320ae84e621d43683817245": "高危警报！mcp-remote漏洞可完全控制你的电脑，43万次下载受影响", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490408&idx=1&sn=e246a7cc4126803185f77f25ef5eab14": "【高危漏洞预警】Git远程代码执行漏洞(CVE-2025-48384)", "https://mp.weixin.qq.com/s?__biz=MzkxNjc0ODA3NQ==&mid=2247484056&idx=1&sn=a9e16c53606bd1cea08b46898a9fd5e2": "逻辑漏洞之皇帝的新衣", "https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247545194&idx=1&sn=f6a13541555121a7cef45a689b02e08d": "清华大学招聘漏洞挖掘工程师（清华大学正式合同）", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493681&idx=3&sn=71864d3dda485948b5ca497a40f94e12": "漏洞预警 | 东胜物流软件任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795684&idx=3&sn=af7946160c8fdf6d2793640386d7a4a4": "BlueSDK 蓝牙堆栈存在严重漏洞，可能允许在汽车系统上执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247500953&idx=1&sn=616ebafdcd78c30f209b3f5ed9a2a080": "用友U9 DynamaticExport任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493681&idx=2&sn=d49ffc0a79a9d40fdd6d3805e5cfee49": "漏洞预警 | 汉王e脸通智慧园区管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247493241&idx=1&sn=0f2c4d9cbd033f0a5a9761c270351162": "最新Nessus2025.7.10版本主机漏洞扫描∕探测工具Windows∕Linux下载", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652117073&idx=1&sn=8abdeb5423f80a892f9830ac759cca49": "西门子、施耐德、菲尼克斯电气修复漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247497185&idx=1&sn=5c7e29e397956f997d6e19486e1be0fc": "微软紧急修复高危蠕虫级RCE漏洞，威胁全网Windows系统", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489860&idx=1&sn=a10a66519fd9c578f8c2792f582bdf19": "【已复现】契约锁电子签章系统 pdfverifier 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507841&idx=1&sn=cfa2847a732b4051019158b1f166e27f": "泛微E-cology9 前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247489375&idx=1&sn=b195a66251f8d745a9b694d84fc322ca": "滥用 Windows、.NET 特性和 Unicode 规范化漏洞攻击 DNN (DotNetNuke)", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247526752&idx=1&sn=323ade965e504a92cfa97f8cd939be3b": "契约锁电子签章系统 pdfverifier 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1MDA1MjcxMw==&mid=2649908542&idx=1&sn=83623032b333f88591df7b0a6e59b3b9": "十年博弈 - ViewState RCE的前世今生", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324803&idx=3&sn=a328e0d32ba8414355872528a04b0823": "Linux内核NFT子系统曝高危\"双重释放\"漏洞可致本地提权", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523555&idx=2&sn=04a84283c9d2100a95736c652525dcd8": "开源项目mcp-remote 中存在严重漏洞可导致RCE", "https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247492149&idx=1&sn=0049b56198aaeb2be7adf60b3a8a13f4": "某制造业公司：30 分钟速通 2025 高危漏洞排查 + 推修实战", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490470&idx=1&sn=76647e3cbc939582e3fa73101fc442f4": "【已复现】契约锁电子签章系统存在远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247547154&idx=1&sn=ed18dc2a48d5baf054db84d47279fb1b": "【新！】CNNVD通报微软多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488270&idx=1&sn=b758c728658c0d5610a24330df60ebc4": "HW（2025-7-11）护网漏洞信息收集汇总", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490408&idx=2&sn=1ab2864da7b5b373a007528c90bfc21f": "【高危漏洞预警】泛微E-cology9 前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTQ0OTYxOQ==&mid=2247484091&idx=1&sn=b77edc5018db3aeebe5d057fe6020255": "【0day】紧急提醒！你的Telegram私密群组∕频道可能被未授权访问！", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324803&idx=4&sn=f6f6b55650aaba7bab0138c6e9c8c663": "麦当劳AI招聘工具漏洞导致6400万求职者数据泄露", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064273&idx=1&sn=845aeae7b4441413e1363328a4634569": "信息安全漏洞周报【第030期】", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247486475&idx=1&sn=47fc16336a3d0170e93bf669cd202a8c": "Struts2VulsScanTools【Struts2全版本漏洞检测工具】", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503591&idx=1&sn=d2d745e2f4f838c527281205db85b1b4": "【已复现】泛微E-cology9 前台SQL注入漏洞(QVD-2025-26680)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512504&idx=1&sn=0443e083b652bc8d4300fa3968d26870": "微软2025年7月补丁日重点漏洞安全预警", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501295&idx=2&sn=1c50a343f89ffc932f66bb703f8abada": "【漏洞通告】Citrix NetScaler 内存泄漏漏洞 (CVE-2025-5777)", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494222&idx=1&sn=7cce5793717ad1b863f654e0fdb795ed": "【已复现】契约锁电子签章系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NDQ5NTU0MA==&mid=2647690866&idx=1&sn=4a721e43a083294d91530414cbf72330": "0046.从图片上传到账户接管——真实渗透测试中上传、存储和 CORS 漏洞的串联", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247547158&idx=1&sn=3cf79ed603597648e4ebc012f1dd387d": "【暴】麦当劳招聘平台 | 安全漏洞致 6400 万份求职申请信息暴露", "https://mp.weixin.qq.com/s?__biz=MzI4MjkxNzY1NQ==&mid=2247486522&idx=1&sn=a01569e808d3475b13fe5f2b04268a76": "Struts2VulsScanTools【Struts2全版本漏洞检测工具】", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488275&idx=1&sn=7c7debf288cf110429d8a634fb1402b5": "一键入侵你的爱车！PerfektBlue漏洞威胁数百万辆汽车安全", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523555&idx=1&sn=caf9ee84b43c4fc81ee51bfbe2c7d11d": "蓝牙漏洞PerfektBlue 可用于实现RCE，影响多家汽车厂商", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788781&idx=1&sn=148a363ff5ef9b1e0e3fddf8321a100e": "数十亿手机可被监听，eSIM漏洞牵动全球通信生态", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484917&idx=1&sn=af0cf86fe3943f11fba7eb4847c0d2da": "【复现】契约锁文件写入致远程代码执行漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247547158&idx=2&sn=6590b74b0b9a26bac77f815dfde586e6": "半导体巨头AMD新型漏洞影响多款CPU，计时攻击可导致数据泄露", "https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247497974&idx=2&sn=ed4f47f1e5616b011ef2b5371b1c1566": "你的服务器在裸奔吗？高危漏洞、端口和弱口令，哪个才是压死骆驼的最后一根稻草？", "https://mp.weixin.qq.com/s?__biz=Mzg2NTA4OTI5NA==&mid=2247521456&idx=1&sn=205c24044197361741632e9f3e4f57e4": "JS扫描与漏洞挖掘利器推荐—Rotor Goddess", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247491912&idx=1&sn=17f6f3f0b90b29e022a81ea8c8b28cdb": "如何在日常渗透中实现通杀漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg5NDg4MzYzNQ==&mid=2247486552&idx=1&sn=41c4e4a40fd104f53e22f5a7143c88ad": "记一次企业src漏洞挖掘连爆七个漏洞！", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247493023&idx=1&sn=33bd188ed20d88bbe2bf0b5dc2b834dd": "某211高校从一个文档到十八万条sfz泄露和命令执行", "https://mp.weixin.qq.com/s?__biz=MzIyMDEzMTA2MQ==&mid=2651168678&idx=1&sn=ca4103b2ea097dfda3fc23c85d5c9f5e": "Linux高危Sudo漏洞，可提权至root并绕过限制，PoC已公开", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247489423&idx=1&sn=f3712506893025290c1cd8f1459d5d32": "Win32k 的漏洞利用 - CVE-2023-29336 详细分析", "https://mp.weixin.qq.com/s?__biz=Mzg3MTY3NzUwMQ==&mid=2247490620&idx=1&sn=24772cd1ce3d8e6c26f1f7468208eb76": "2025-7-11日漏洞情报汇总", "https://mp.weixin.qq.com/s?__biz=MzU2MjU2MzI3MA==&mid=2247484711&idx=1&sn=c2c06fac608791fac01832eab95ab674": "紧急预警：Linux曝高危Sudo漏洞，普通用户秒变root管理员！（附POC）", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492119&idx=1&sn=5929fda702d2ffc81cd8d0ceb6d517f5": "金蝶云星空 BusinessDataService.BatchLoad.common.kdsvc 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651134313&idx=1&sn=1c8d8e158614cebc484d9e9c60110620": "麦当劳泄露求职者数据，新漏洞威胁大众等汽车品牌安全|一周特辑", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247488451&idx=1&sn=a4ca5878e9febbc5fb079a6dbd862c55": "从Top20开源组件漏洞浅谈开源安全治理困境", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492110&idx=1&sn=5c85ce32f439145754b97e4e8aaafbc6": "锐捷EWEB路由器 ipam.php 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247517301&idx=1&sn=9d85a91e393af6ddcb3b5ea522d72c76": "漏洞预警｜银河麒麟桌面操作系统V10本地提权漏洞（CNNVD-2025-28344653∕KVE-2025-0603)", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900919&idx=1&sn=1f4322c0e6cd6bc7effa9d36a0a183f2": "澳航600万用户数据泄露背后的“供应链攻击”与“人类漏洞”", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611404&idx=4&sn=f4ff1d606e1d6f8ff505f82837b16d16": "Struts2全版本漏洞检测工具更新！V19.68", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597083&idx=3&sn=5ed9d81521495a3efbc2a3afe6aedaf8": "PerfektBlue漏洞危及梅赛德斯、大众和斯柯达等多款汽车信息娱乐系统", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611404&idx=1&sn=47775667d01e7eaeee082dd967296fa9": "数十亿手机可被监听，eSIM漏洞牵动全球通信生态", "https://mp.weixin.qq.com/s?__biz=MzIxOTM2MDYwNg==&mid=2247515236&idx=1&sn=fc3c5c6dbf3b2cbc32405070170609d6": "2025某新版诈骗双端APP通讯录前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492135&idx=1&sn=7bcedb196331e9addb1b70f3be0ea04e": "金蝶云星空 InOutDataService.GetImportOutData.common.kdsvc 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324804&idx=3&sn=859f6647543d5b23c0064c147c9cec34": "FreeBuf周报 | Redis被曝三大严重安全漏洞；AMD新型漏洞影响多款CPU", "https://mp.weixin.qq.com/s?__biz=Mzk5MDYxODcwMA==&mid=2247483889&idx=1&sn=49db58752bf20b6e1a322dc5c9a9e614": "东胜物流软件GetDataListCA接口存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492596&idx=1&sn=a50b7b65f5e4064042180aab1032775c": "分析某oa历史漏洞中捡到CNVD证书", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247500966&idx=1&sn=88491b4e0826eff5e55d75c27ea04ec3": "微信出了XSS漏洞？？？点击自动发送消息", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247503982&idx=1&sn=0b4f5d87ce51350878b046afc4d40c31": "挖SRC必须知道的25个漏洞提交平台", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247493127&idx=1&sn=70d0c3a1f601eb58a3674596ba2aad54": "EDUSRC-高危漏洞-从信息收集到后台多个越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMDMyNzk5NQ==&mid=2247484884&idx=1&sn=4db22793b7eb8e943f0dbcbd42102bd1": "【已复现】mcp-remote 远程代码执行漏洞(CVE-2025-6514)", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494231&idx=1&sn=108ce757a60b9c8454839dc15a6c7df4": "【已复现】Fortinet FortiWeb SQL注入漏洞(CVE-2025-25257)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503602&idx=2&sn=e1e4339c66bfeef7053ebf82a7b737eb": "【已复现】契约锁电子签章系统 pdfverifier 远程代码执行漏洞(QVD-2025-27432)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzk3NTIyOTA0OQ==&mid=2247485223&idx=1&sn=7cadef856d0360ed2983ea9bd473a955": "Solrs搜索&Shrio鉴权&Log4j日志&CVE历史漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247489439&idx=1&sn=2a7b9da658dc0f6481886eef74bd95ac": "日志中的秘密：利用一个存在 20 年的 NTFS 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247490169&idx=1&sn=1c03eca279db12aecea40a2a46eafd9a": "某新版诈骗双端APP通讯录存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247487647&idx=1&sn=0568c440e430ad84c661d9862760d84d": "漏洞利用 | 用友NC IMetaWebService4BqCloud数据源SQL注入", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247487511&idx=2&sn=8d2f6557da638b43fa93a032bbb453a8": "众测实战 | 一次正负叠加导致的支付漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655286633&idx=1&sn=00bc865514cb320914e0d3d577c2cacf": "渗透测试：漏洞类型、原理、危害、检测思路和利用方式", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247486079&idx=1&sn=79828c12688c4daf8723f32f2877dc05": "CVE-2025-5777｜Citrix NetScaler ADC和NetScaler Gateway内存泄漏漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493700&idx=2&sn=7a27ce9d8f9c38ab8ded8423985240d6": "漏洞预警 | Git远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488291&idx=1&sn=c43fdc1546c3145467292ca96f853d05": "HW（2025-7-14）上网护网漏洞信息收集汇总", "https://mp.weixin.qq.com/s?__biz=MzkyNTU3MjA3OQ==&mid=2247485148&idx=1&sn=280d1d4f4a5c5819b526819228c350bf": "这是微信XSS漏洞吗？", "https://mp.weixin.qq.com/s?__biz=Mzg2MjIzODI3Mw==&mid=2247493065&idx=1&sn=a81d56cc98a5e170e167459c7a00a7fa": "仲夏狂欢！指定类型漏洞翻倍奖励、加成奖励buff叠满！", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486601&idx=1&sn=c46a906e9e767159a1953d41fbf8e368": "某项目后台RCE漏洞审计分析", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795697&idx=1&sn=d95257c858f5e767abdabe510f3bac8d": "黑客正在利用 Wing FTP 服务器中的关键 RCE 漏洞(CVE-2025-47812)", "https://mp.weixin.qq.com/s?__biz=MzI4MjkxNzY1NQ==&mid=2247486533&idx=1&sn=12d91dccb932998fec348e17760ef684": "工作中遇到的几个常见场景下的xss漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247492236&idx=1&sn=8d8564b4b92621d0ce1783198a801077": "手把手教你如何挖洞：CVE-2025-25257 Fortinet FortiWeb 匿名 SQL 注入漏洞动态调试实战", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492614&idx=1&sn=2d05e9cc7f905932ff7bd4632366746b": "关于打高版本java,cc6复现", "https://mp.weixin.qq.com/s?__biz=Mzk2NDkyMjUxMA==&mid=2247483689&idx=1&sn=0aa653b5743553d1825b5947385aed22": "一个面板的RCE方式", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247494731&idx=1&sn=e8b10030b95eeeb908be3ace5b5a2b04": "xxl-job漏洞综合利用工具", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788788&idx=1&sn=c7fa538499e5b03daa0e74f470f92434": "3.5亿辆汽车、10亿设备暴露于一键蓝牙RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070655&idx=3&sn=7ccd92ac4dd522bb9216323ef93d3402": "【安全圈】Google Gemini 被曝安全漏洞：AI 邮件摘要功能可被诱导生成钓鱼信息", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484960&idx=1&sn=758111b66d24a67e66a0aeeab9bb191c": "安全漏洞防治工作标准化的必要性：抵御不断演变的威胁之盾", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324846&idx=4&sn=f1d0bf41e03a0e999487db8bcdacbf1a": "600余个Laravel应用因GitHub泄露APP_KEY面临远程代码执行风险", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487565&idx=1&sn=1f8f19fa59f52f8098ffe19d836e1b57": "JS扫描与漏洞挖掘利器推荐—Rotor Goddess", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501314&idx=2&sn=5e35621925a6305ddbf83e56547a4491": "【漏洞通告】Fortinet FortiWeb Fabric Connector SQL注入漏洞(CVE-2025-25257)", "https://mp.weixin.qq.com/s?__biz=Mzg3MTY3NzUwMQ==&mid=2247490640&idx=1&sn=da5d674ee073569e95a71021aadb5e17": "2025-7-14日漏洞情报汇总", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492144&idx=1&sn=a97ed21e2e7bc3d25299fec618723370": "金蝶云星空 DevReportService.GetBusinessobjectData.common.kdsvc 远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496126&idx=2&sn=ccf97af76f2a431d483b41df127f0530": "上周关注度较高的产品安全漏洞(20250707-20250713)", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506665&idx=1&sn=d776fe3468df87da311794720e5bea05": "每周网安资讯 （7.8-7.14）|Ibm Concert_software存在将系统数据暴露到未授权控制的范围漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3MDgyMzkwOA==&mid=2247491762&idx=1&sn=29ab889867f7d639faaa54a3dfc2ef2e": "清源SCA社区版｜每一次漏洞判定皆有代码为证", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247489173&idx=1&sn=3530ac4fe1631d177d454d6c931baebd": "Kigen eSIM 漏洞导致数十亿物联网设备面临恶意攻击​风险", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795710&idx=3&sn=52208912e929c701e1fe746d0a6cbada": "WinRAR 0day漏洞在暗网以 8 万美元的价格出售", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247493266&idx=1&sn=411c7e0604d139facf2cd75ca77cd465": "图形化POC+资产扫描+漏洞验证Yscan让 Web 安全扫描更简单高效|工具分享", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247489466&idx=1&sn=646d70b5560716e42a7b10a2c982817a": "SQL 注入到 RCE - Fortinet FortiWeb FabricConnector (CVE-2025-25257)", "https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247490678&idx=1&sn=2bc385ae9c50e43f2cb6a1d804168153": "【工具】afrog 高性能Web漏洞扫描器", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611424&idx=2&sn=7dd51707667ecc850b3d142362d694b3": "投资回报率最高的AI应用：漏洞猎人", "https://mp.weixin.qq.com/s?__biz=Mzg4ODg2MjQ5Mg==&mid=2247484142&idx=1&sn=b7b1520274e05a7c03c144e80761199c": "Fortinet FortiWeb SQL注入 CVE-2025-25257", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247550983&idx=1&sn=ad9b1e11354dac3d5d34a5516f979560": "记一次某学校AKSK泄露拿下中危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488300&idx=1&sn=6a3f92ca1b192c239d2e4cd802c483b3": "HW（2025-7-15）上午护网漏洞信息收集汇总", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523565&idx=1&sn=bb6888cc84ad4eba9d87a3ed0137acd8": "APP_KEYs遭暴露，超600款Laravel应用易遭RCE攻击", "https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247497998&idx=2&sn=a3695a50b149bb30767ea7822c21c3b0": "漏洞扫描工具：渗透测试的左膀右臂，还是华而不实的鸡肋？", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503607&idx=1&sn=44581e3d24968215d02fb7b63ed254d6": "安全热点周报：Fortinet 公开 FortiWeb 中的严重预身份验证 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247511953&idx=3&sn=7bf0f19feec09a686fcc5fd88fbadc29": "软件定义的无线电可远程刹停火车：一个拖延20年的致命漏洞及其行业警示", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523565&idx=2&sn=3cc3fd02d7bb4c8d993138dce7afa3f6": "Wing FTP严重漏洞已遭在野利用", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507845&idx=1&sn=ba7dab99c2bbcdc4ee180575e33e2add": "漏洞通告 | 用友U9 Cloud 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531762&idx=2&sn=99867009f3948281421488758c28df39": "探索“search-ms” URI 协议漏洞：深入分析复杂网络攻击", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247583802&idx=1&sn=c914497a8cef5d31d229e7ce9ad87e00": "蓝牙漏洞可能会让黑客通过麦克风窃取信息", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247490018&idx=1&sn=ec2976fde305b530d4b85fb570f334aa": "【神器合集】漏洞挖掘效率翻倍！武装你的burpSuite", "https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650470013&idx=1&sn=bd91de134dcbad0a5c5482ada536bff4": "配置错误与大模型应用漏洞交织，云上数据安全防线持续承压｜全球云上数据泄露风险分析简报 （第六期）", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488681&idx=1&sn=409ec540f7d8b3a760b67e55ed9993f1": "用友U9 DynamaticExport.aspx接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494273&idx=1&sn=cfef3d7b85d52177a5027daf3e4fabf8": "【已复现】Linux Kernel AF_UNIX UAF漏洞(CVE-2025-38236)", "https://mp.weixin.qq.com/s?__biz=Mzk1NzE0ODUyOA==&mid=2247492306&idx=1&sn=c92f48d0555e82759ea928557ad0efef": "施耐德EcoStruxure™ IT DataCenter Expert漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324943&idx=2&sn=f92e83da511bb4652e239c42897f2491": "一键获取上万份资料和漏洞情报的资源情报网站", "https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651733722&idx=1&sn=2a5cc95ac03a82d96334bb722b65da1f": "攻防演练利器：启明星辰天镜漏扫精准狙击高危漏洞！", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324846&idx=3&sn=7a22c6935abca7bdf46bf166aa5bb5d8": "技嘉UEFI固件SMM漏洞使系统面临固件植入和持久控制风险", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490480&idx=1&sn=aedd535f601272923435b2dcbc06a9f0": "【已复现】Fortinet FortiWeb存在SQL注入漏洞（CVE-2025-25257）", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324943&idx=1&sn=93d35c2bec5a8151f80c28ab1ae8258c": "20年历史漏洞可让黑客远程控制列车制动系统", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247493293&idx=1&sn=3ab43e73480497e2f567c4f022e8754c": "【SRC】分享某单位众测中的一次高危——逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494273&idx=2&sn=b8f964af67c9b2e67292e2498926bc29": "【已复现】用友U9 Cloud远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531762&idx=1&sn=a08fcb7bff9afed48f07cc4dd51fa8df": "漏洞爆料！微软SharePoint又被高手秒杀，Pwn2Own单招就破防！", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503462&idx=1&sn=0f722394919e6b8af1e3bb654383e66c": "雷神众测漏洞周报2025.7.7-2025.7.13", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484961&idx=1&sn=bfaf22c6ec6cb4e04c5ab3f6f05098dd": "软件依赖似套娃，漏洞修补路在哪？", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490480&idx=2&sn=72f9ba58728459766a57f577c2d117bb": "【已复现】用友U9 Cloud存在远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247555471&idx=1&sn=70206928fcf4dcff0f7d8c7eb7aa9e46": "浅谈代码审计+漏洞批量一把梭哈思路", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070668&idx=2&sn=ce0182339a28bea5592baa50de5cc5e7": "【安全圈】起亚车机系统曝安全漏洞！黑客竟能远程操控", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247494758&idx=1&sn=799938b39cc81cae7a6738f86eb77758": "Yscan 是一款集 Web 资产扫描、图形化 Nuclei POC 管理、漏洞验证与数据整理于一体的实战型安全工具。", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494290&idx=1&sn=3a91fb3c0b5f85fce1d7dbffc4e55ff9": "【已复现】存在20年的Windows虚拟硬盘权限提升漏洞(CVE-2025-49689)", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247489561&idx=1&sn=38afd7424219c9e5561316f486e4cc9f": "Out of Band Exploitation (OOB) 利用技术速查表", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494290&idx=2&sn=a02c958b20179cf6beb420d4491d6a11": "【风险提示】VMware多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247583845&idx=1&sn=c90ced34d21a579bc3a5cc0f1a4541ff": "谷歌 Gemini 漏洞劫持电子邮件摘要进行网络钓鱼", "https://mp.weixin.qq.com/s?__biz=MzkxMzYzMTE5OA==&mid=2247484350&idx=1&sn=aa3db900309caf2a179befd3484960f2": "GeoServer存在默认口令admin:geoserver 附POC", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492884&idx=1&sn=06c9c888b83ac5f3d08b8dc4cc2548e0": "【风险提示】VMware ESXi、Workstation、Fusion及Tools多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506998&idx=1&sn=52801a9414af3059d542caf9da05aa53": "我如何在 TikTok 漏洞赏金计划中赚到 3000 美元", "https://mp.weixin.qq.com/s?__biz=MzkwOTQ4MzQ4Ng==&mid=2247484210&idx=1&sn=522f16f64c49ddd7f300f95fd8b33ef4": "【0day挖掘】怎么用“Rotor Goddess”轻松出洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247494279&idx=1&sn=932e75f14dcf30d997a865d551100152": "CVE-2025-6554标志着谷歌在2025年修复的第五个被主动利用的Chrome零日漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTUwNTU5Nw==&mid=2247489632&idx=1&sn=cfd0fe4074ceae03eff8238fbf7b26ce": "【相关分享】关于网传HVV中的WPS漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531773&idx=2&sn=87c094ebed1fc43d49cbe8426e57d36b": "探索 Node.js 中的零日漏洞：CVE-2025-27210", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484513&idx=1&sn=132993e0a497be205789753df204de55": "【0day挖掘】怎么用“Rotor Goddess”轻松爆出过万资产的漏洞，以及其他小洞的出货方式与流程", "https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247532377&idx=2&sn=8675b7e1c0b2211c3c1b5d4a22d28fa9": "数十亿手机可被监听，eSIM漏洞牵动全球通信生态", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324992&idx=4&sn=202ab52532231d393da9f3e3e9320e01": "Node.js路径穿越与哈希拒绝服务攻击漏洞威胁Windows应用", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503612&idx=1&sn=ad04ed392ff95d7f165eeab36a14bac3": "Oracle 2025年7月补丁日多产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523592&idx=1&sn=399b4d7dd5399d33772e13913c35200b": "思科：满分ISE漏洞可导致未认证攻击者执行root 代码", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490488&idx=2&sn=6c76da8465450c3c79d79e472919de4f": "【风险通告】VMware多产品存在高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247526818&idx=1&sn=94387d1e5ab9647a7dd70aa9f62aa3f0": "VMware ESXi、Workstation、Fusion及Tools多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247581312&idx=1&sn=16b534f5f8dc330cce051c4c5e419a78": "独家 | 360联合清华大学发布全球首份智能体安全报告，曝光20+漏洞！", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247489680&idx=1&sn=37eee459a55b76471119db69d6b93f58": "【转子女神更新与0day挖掘】浅谈用转子挖掘0day的思路式", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503624&idx=1&sn=efb918e1db57c9ad9b7deb875cb26da5": "【已复现】LaRecipe 服务器端模板注入漏洞(CVE-2025-53833)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496130&idx=1&sn=f9bf39ffb23c2b16744cffcc11b43ccd": "关于Google Chrome V8存在类型混淆漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=Mzk0NzI3ODU0Mg==&mid=2247483901&idx=1&sn=584c0ed15e48cd1b6b2844170a747f22": "【CVE-2024–31317】提权漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzg3MTY3NzUwMQ==&mid=2247490661&idx=1&sn=bdb612384cfb0e926f9418a23abe4ea4": "2025-7-17日漏洞情报汇总", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501334&idx=2&sn=c11ce042dbc5e02e25cdeaa2e8f4c5df": "【漏洞通告】VMware VMXNET3整数溢出漏洞(CVE-2025-41236)", "https://mp.weixin.qq.com/s?__biz=Mzg5NDg4MzYzNQ==&mid=2247486562&idx=1&sn=a00c80480f832a5f80b14fafdaa68a42": "代码审计-Java项目-组件RCE代码执行漏洞审计", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519526&idx=1&sn=37208f0ff625ea825f473f210671c887": "几个常见场景下的xss漏洞案例", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247488062&idx=1&sn=459cb7ef4a17d8e49db48010e6c6badf": "漏洞预警 | Linux sudo本地提权漏洞（CVE-2025-32462、CVE-2025-32463）", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg2NTM3NQ==&mid=2247485014&idx=1&sn=b1a1d176fc53260b695a2462ac585079": "【吃瓜】内推\"红队\"当内鬼 | 网传wps漏洞为Nday | HV奖励吃大粪", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597312&idx=3&sn=2ffef8173d9075cd1afc387bf35860d1": "谷歌 AI Big Sleep 立大功！成功阻止 SQLite 零日漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650278663&idx=1&sn=913f8c22fe39ceb1c95a3181faf1b602": "安全自检，快人一步！—— 近期攻防演练热点漏洞合集", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490457&idx=1&sn=65722e141134d410b44b7a3bb6536ff5": "【高危漏洞预警】Oracle WebLogic Server 未授权访问漏洞(CVE-2025-30762)", "https://mp.weixin.qq.com/s?__biz=MzU5Njc4NjM3NA==&mid=2247496792&idx=1&sn=1a89dc1a57debe1bcc662fc35fb66c99": "中科天齐团队参加FSE 2025，提出基于多对象类型状态分析的重复漏洞检测新方法", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597312&idx=2&sn=45995d7633ae08c6ed2c67558e2810f8": "安卓旧系统 OTA 包分析与漏洞提权适配", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531828&idx=3&sn=ec3d214c56ba8b74d11fd852ec1a4271": "CVE-2025-1729 - 使用 TPQMAssistant.exe 进行权限提升", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490457&idx=2&sn=b4484c612e2941a3be416a7542dd457d": "【高危漏洞预警】VMware产品多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247486523&idx=1&sn=1690be9fbd7ae4c115ce9cf881fca562": "Windows Exploit Suggester - Next Generation【Windows漏洞检查工具】", "https://mp.weixin.qq.com/s?__biz=Mzg4NDkwMDAyMQ==&mid=2247487706&idx=1&sn=9349f46f0975d7d1ea8b8a818f6e839c": "【转子女神更新与0day挖掘】浅谈用转子挖掘0day的思路式，末尾有免费的交流圈", "https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649872029&idx=1&sn=3f2cad8fa6bfba155a6765e8608d58d1": "高危漏洞预警！私有化部署的WPS云文档系统存在远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651463279&idx=1&sn=ed9a3d6766250120a7b315fdcbf9a117": "CNNVD关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247583863&idx=1&sn=247a5ef8a5281ed71aa75625259ef035": "黑客正在利用Wing FTP服务器的关键RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651325085&idx=3&sn=3fdc985551c6f7ef9efd22161d1894bc": "Windows Server 2025黄金dMSA漏洞使攻击者永久获取访问权限", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247526106&idx=1&sn=9781b8699615f28887ac43f49d7bc1a7": "微信安全漏洞复现：无感执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070714&idx=3&sn=bbdd11d7e9a7fce59dacff4dec6304db": "【安全圈】230万次下载面临威胁：LaRecipe漏洞可能让服务器被完全接管", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247488477&idx=1&sn=bfde8c4971f0b8b052a8eb97550e957a": "Hutool路径遍历漏洞（CVE-2018-17297）分析报告", "https://mp.weixin.qq.com/s?__biz=MzA4NTAxMjA5Mg==&mid=2247484495&idx=1&sn=4f565a89e230b4cfbbfb7df78fa9706a": "CVE-2025-23267挖掘报告: GPU容器逃逸再现", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900981&idx=1&sn=7193267d6a1eda3a431e9274ea71b2ad": "一个字符引发的血案：Wing FTP服务器漏洞(CVE-2025-47812)正被全球利用", "https://mp.weixin.qq.com/s?__biz=Mzg2MTg4NTMzNw==&mid=2247484497&idx=1&sn=e16cdc5c6ab692d33c57e2a5ae01e722": "某信RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NDc3NDQ3NA==&mid=2247485298&idx=1&sn=3d314c96442d84fd8ec632d9e5fa0288": "微信3.9 RCE - 补档", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247574036&idx=1&sn=d5ebf7d79a401f316d47e289ace1f87f": "【SRC实战】支付逻辑漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523602&idx=1&sn=3ec9fd59b332276a13eb21d88cdd9217": "Vmware 修复 Pwn2Own 柏林大赛上遭利用的四个 ESXi 0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500101&idx=1&sn=b23db40f233deddedec40faa521a9637": "红队视角：.NET Web.config 漏洞实战挖掘与利用", "https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649173841&idx=3&sn=c3cb03f8fe3770b9b6ce0283b205d676": "CNNVD通报Oracle多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096397&idx=2&sn=e7fec28c9a1dbdde9d1dde9ddb08c222": "NVIDIA 容器工具包允许攻击者执行特权代码漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650211641&idx=1&sn=ff2dc976a59a468983e558afa92a912f": "安天智甲终端防御系统（EDR）产品升级通告：紧急防护微信PC版远程代码执行（RCE）漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070714&idx=2&sn=49209de3fb35fbb8e54342a5c92305c5": "【安全圈】美政府用的“Signal 替代品”TeleMessage SGNL 爆出严重漏洞，堆内存泄露已被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490465&idx=1&sn=798252ff23b627acb67f5d6d67f927ec": "【高危漏洞预警】NVIDIA Container Toolkit 容器逃逸漏洞CVE-2025-23266", "https://mp.weixin.qq.com/s?__biz=Mzg3ODk1MjI5NQ==&mid=2247484806&idx=1&sn=f3f4e653ec05b15bd9f075a811b43f8e": "微信3.9 RCE漏洞 听说已有受害者", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247492628&idx=1&sn=6328dbcbf1e55c176f7181178a068c63": "【吃瓜】今日热传：微信客户端3.9版本 1click RCE的TSRC最终处置结果", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523602&idx=2&sn=c7cc15872799f6b7c9dcee62f1ced6e6": "谷歌AI “Big Sleep” 提前阻止严重的SQLite 漏洞遭利用", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493785&idx=3&sn=91850abc2376b8b501446d5d75e94086": "漏洞预警 | 东胜物流软件SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247492816&idx=1&sn=6eb49110f0c5c62383b27221af9580ae": "Oracle云代码编辑器曝RCE漏洞，允许攻击者上传恶意文件", "https://mp.weixin.qq.com/s?__biz=MzU3OTYxNDY1NA==&mid=2247485543&idx=1&sn=27fdaf09140f5ed6a76e8b2a56de657f": "微信安全漏洞，可实现无感上线", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138069&idx=2&sn=535ea85e8092f28f192814ef324c3286": "研究显示：四分之三的美国青少年不顾风险使用AI伴侣；CNNVD关于Oracle多个安全漏洞的通报 | 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650630794&idx=1&sn=f4129ab9edd27f2f2db8d6ec901dfe84": "微信安全漏洞引关注｜安恒终端安全以原生防护筑牢微信 RCE 防线", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247498996&idx=1&sn=a52abe5d42325669cf592bee26abf77a": "2025 Verizon DBIR解读 | 供应链攻击30%+勒索软件44%：边缘设备漏洞与AI滥用催生新风险", "https://mp.weixin.qq.com/s?__biz=Mzg3MzUxNDQwNg==&mid=2247483998&idx=1&sn=1fc9a29ab6682685a8fa8f63c3c5fe97": "手把手教你学会代码审计之命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247486091&idx=1&sn=556ca88745998628df79a141223c15f3": "CVE-2025-25257｜Fortinet FortiWeb SQL注入漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247491976&idx=1&sn=f20af65d96b6110fb508b76ef107652e": "【吃瓜】今日热传：微信客户端3.9版本 1click RCE的TSRC最终处置结果", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493785&idx=1&sn=ce2b54456146391c0e5277a33022645d": "漏洞预警 | 金和OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650184321&idx=1&sn=8e7db09c9c1be0781a68a45bef949c91": "微信3.9版本RCE漏洞，OneSEC紧急缓解、检测方法", "https://mp.weixin.qq.com/s?__biz=MzU4MjYxNTYwNA==&mid=2247487834&idx=1&sn=ab354dd326ae72b7c8f31e4dc3c183e7": "新手练习向——基于文件上传漏洞获得网站shell权限", "https://mp.weixin.qq.com/s?__biz=MzkzNTUyMzUwOQ==&mid=2247483842&idx=1&sn=69c0b569ec4687a0bf953ab0268817eb": "微信 3.9 版本RCE漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651134417&idx=1&sn=1c647891bc2a1a3fc76593fb82274590": "美国铁路关基系统曝漏洞，英国零售商650万数据遭窃取|一周特辑", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651325149&idx=4&sn=def91ead440f78d348db5fd03eb51f18": "SonicWall SMA设备零日RCE漏洞遭利用，部署OVERSTEP勒索软件", "https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247524382&idx=1&sn=b3949b61e1b5f733191292af2213769c": "OSWE = 白盒审计 + 漏洞武器化", "https://mp.weixin.qq.com/s?__biz=Mzg2MzkwNDU1Mw==&mid=2247485850&idx=1&sn=f495ab99b95b02c18a410789c7a25244": "nacos漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzI4MzI4MDg1NA==&mid=2247485300&idx=1&sn=12af35651ea2aa886ca0cb33d243f0b1": "【LYSRC漏洞挖掘大赛】夏日攻坚行动，双倍积分+现金奖励等你拿！", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247493495&idx=1&sn=791bebc6faa651cc3c585c2f5f481d21": "渗透测试 ｜ 分享某次项目上的渗透测试漏洞复盘", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651325149&idx=1&sn=a96d58d36336bf2c82920a7e1f872749": "NVIDIA Container Toolkit漏洞可导致权限提升任意代码执行", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247489623&idx=1&sn=35978a7efb9a7ed2dffcccade99bc7e2": "你从未听说过的最流行调查软件中的远程代码执行漏洞 (RCE)", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247501013&idx=1&sn=420fc5b4e581e4d2936021ed3fd6c4ee": "【严重漏洞】微信客户端远程代码执行漏洞，陌生聊天记录不要点击", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494392&idx=1&sn=7ee67506322648e0494c2c8f39467044": "【稳定复现】微信客户端目录穿越漏洞 (可导致远程代码执行)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597375&idx=3&sn=932fa7865bd708b7031df174772567e5": "BIND 9 DNS解析软件漏洞，可能引发缓存投毒与拒绝服务攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5NDg4MzYzNQ==&mid=2247486568&idx=1&sn=38979e7c71e92a748fe6c50d174e5ed3": "代码审计-Java项目审计-SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247490046&idx=3&sn=b390a5c60517ade78f56f92d1edb5ea1": "一个实时更新的漏洞裤", "https://mp.weixin.qq.com/s?__biz=Mzk5MDYxODcwMA==&mid=2247483934&idx=1&sn=d5857143ae8cc3a4efc5a0e53ced58cf": "东胜物流软件 WmsZXFeeGridSource.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485894&idx=1&sn=537a76c2aafc5a26acbaa4f8e9d500bf": "【翻译】严重 NVIDIA AI 漏洞：NVIDIA 容器工具包中的三行容器逃逸 (CVE-2025-23266)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493785&idx=2&sn=b6d7880ae3a645643d60d6269ee37cb3": "漏洞预警 | 汉王e脸通智慧园区管理平台任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247521940&idx=1&sn=ab4615dac27fd52572ce9863ff1803c9": "麦当劳AI招聘工具McHire漏洞导致6400万求职者数据泄露", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492192&idx=1&sn=2204c560a0d68d9237131513a57b33ab": "汉王EFaceGo updateVisitorMapConfig.do任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531904&idx=1&sn=a6e51b35fcb2e9e06f4f4895864fe053": "预授权 SQL 注入至 RCE - Fortinet FortiWeb Fabric 连接器 (CVE-2025-25257)", "https://mp.weixin.qq.com/s?__biz=Mzk5MDYxODcwMA==&mid=2247483950&idx=1&sn=970c288f654adcdc1315375a64c0b374": "汉王e脸通综合管理平台 exportResourceByFilePath.do 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNTM4NDY2MQ==&mid=2247518061&idx=1&sn=e5c993ddd41593392c3fadfe8f8fae8a": "OSED = Windows 漏洞利用 + 逆向工程", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070749&idx=2&sn=04105f8ddc32460791073712282f5bbf": "【安全圈】黑客正在利用 Wing FTP 服务器的关键 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247581322&idx=1&sn=baf9027c193bf64dd369e81724d98582": "无需升级！360终端安全智能体全面防护微信PC端路径穿越漏洞威胁", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795773&idx=1&sn=f49a825a2f60f834388ce0837639989b": "SharePoint 遭受攻击：微软警告0day漏洞遭野外利用", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650184307&idx=1&sn=7caac1a81cfffb4dba7ed37940420255": "新漏洞又扎堆？AI：已锁定资产！", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247519647&idx=2&sn=968500d0280ea39cbb9b9f8288c939b4": "实战 | 记一次某学校AKSK泄露拿下中危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NDg4MzYzNQ==&mid=2247486586&idx=1&sn=a64429cb46676df4b223b1e98cd3ad4b": "代码审计-thinkphp历史漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247487755&idx=1&sn=72978a3fb406810d856d46411a32217c": "Jeecg-boot v2.1.2-v3.0.0 SQL注入漏洞+敏感接口分析", "https://mp.weixin.qq.com/s?__biz=Mzk0NDcyMjU2OQ==&mid=2247484819&idx=1&sn=8cdfd3c0549e4a8395b9b6cc4ba0cca9": "高危！MCP工具曝远程代码执行漏洞，超43万次下载受影响", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506732&idx=1&sn=b6d8eed0bf81bd876e27a35c9f4208b4": "每周网安资讯 （7.15-7.21）|Microsoft SharePoint服务器欺骗漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651325214&idx=4&sn=423efc0dc6144bdfef13a5837b03e1ae": "HPE Instant On设备存在硬编码凭证漏洞，可获取管理员权限", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247490236&idx=1&sn=39ed76d3bfcabdd4def2ba2bd953ba5c": "某诈骗微盘存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247549049&idx=1&sn=a9888999b1ca98221bbf60a15eb7564c": "企业最易遭遇的十大IT安全漏洞解析", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487598&idx=1&sn=ea41e76ec767e519046d6ce0caf0f8d1": "FortiWeb CVE-2025-25257", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651325214&idx=2&sn=751d846f97b99cfd0a5db9b0943b2a0c": "全球活跃利用中的微软SharePoint新型零日RCE攻击链", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247497483&idx=1&sn=09869705c50afddbeffd230575a11f95": "一款面向安全运维场景的集成化利器，融合了资产管理、资产测绘、漏洞检测、配置核查、弱口令检测、批量运维、漏洞跟踪以及日志审计等功能", "https://mp.weixin.qq.com/s?__biz=MzA3NTIyNzgwNA==&mid=2650260356&idx=1&sn=8c35649fee80bddd9924b08f386bdcaf": "为何必须突破工具漏洞清单思维，照亮安全盲区", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651325214&idx=3&sn=da164a902b33bab2a35b77a492bae665": "7-Zip曝出两个可致内存损坏和拒绝服务的漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247494434&idx=1&sn=f85a9125e3a2b4c7eb1bf4c737ee71d2": "契约锁pdfverifier RCE攻防绕过史", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096406&idx=1&sn=37ee7dab851324ca4ecb1e2e32c41326": "Sophos Intercept X for Windows 支持任意代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2NTQxOA==&mid=2247498183&idx=4&sn=c6af42bb31bf4a81149823c3a900f7f1": "微软服务器软件被曝严重安全漏洞 黑客借此在全球发起攻击", "https://mp.weixin.qq.com/s?__biz=MzI1NTE2NzQ3NQ==&mid=2247487287&idx=1&sn=342b33e6f39c88a34c3500ee4986c9c9": "【漏洞速报】联想管家RCE？速速关机下班", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652252247&idx=1&sn=bf74fd5e8745a26a605f4c8df984203f": "火绒安全：微信 Windows客户端3.9及以下版本存在远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwNjczOTQwOA==&mid=2247495401&idx=1&sn=47e2b01157d168775fb74106c8f7523c": "安全测试效率翻倍！自动化资产测绘+漏洞扫描", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247493415&idx=1&sn=0a6c89c645cd322031111cb9ac6001f8": "若依系统前台+后台漏洞总结：RuoYi框架九大高危漏洞攻防指南|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247484960&idx=1&sn=ad43cab8df06b479660c3c71137eb642": "【漏洞复现】大华智能物联网综合管理平台 receive 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk3NTE3MjU4Mg==&mid=2247484302&idx=1&sn=42e0113f5e72ddc92f84826671500353": "【JAVA安全笔记】ClassPathXmlApplicationContext利用链 有参构造对象RCE打法", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493794&idx=1&sn=23458646401be62b9d63135180ab883d": "漏洞预警 | LaRecipe服务器端模板注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NDg4MzYzNQ==&mid=2247486588&idx=1&sn=4c73c6313fbabb62e51901d399c7a8e6": "WAF绕过-漏洞利用篇-sql注入+文件上传-过狗", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070764&idx=2&sn=d05638243e08a279721358efe3e21bb0": "【安全圈】英伟达漏洞致AI与机器人平台面临远程代码执行和数据泄露风险", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492737&idx=1&sn=491604d0f55fcdd1d0f55633eaad86d2": "若依前台漏洞总结", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597663&idx=1&sn=34418dc2e46f79efadfa931f71df0600": "CVE-2023-4069：Maglev图建立阶段的一个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484521&idx=1&sn=9ee8b714f11d357e001eb697832c9521": "AI 自主调用 BurpSuite 完成漏洞自动化检测", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488342&idx=1&sn=13c7a552f3f257e728b02b065e002ba2": "HW（2025-7-21）护网漏洞信息收集汇总", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247486451&idx=1&sn=f44225b916411ae0b00384f443fafb35": "俄罗斯APT组织加剧欧洲攻击：零日漏洞与数据擦除器齐上阵", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611495&idx=2&sn=3d0e35264169c731d967995d18dd84e9": "7-Zip曝出两个可致内存损坏和拒绝服务的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MTYyNTg3Mg==&mid=2247493021&idx=1&sn=2986e19ca3445c37cdd06a577ae7faea": "【星闻周报】起亚车机系统曝安全漏洞！黑客竟能远程操控", "https://mp.weixin.qq.com/s/kT3nzepRzYaxzYPRPk3mfA": "记一大型商超小程序漏洞挖掘", "https://mp.weixin.qq.com/s/9NljSSkisfL0hq71Xr0iCA": "漏洞预警 | 红海云eHR SQL注入漏洞", "https://mp.weixin.qq.com/s/gUWKXlRuzIcSMNJldacGBw": "【工具推荐】多云存储桶配置漏洞浏览器检测插件", "https://mp.weixin.qq.com/s/0HWJaupNP-zZRVgdZ1VyrA": "大商创多用户商城系统 SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s/Bhoew2W09ywXd0MgfKxbDA": "476万损失背后的平台漏洞：17岁少年诈骗获刑，电商业务漏洞安全敲响警钟", "https://mp.weixin.qq.com/s/HazuZTizoW5Tk6tWBa1rRw": "【接口漏洞第三章第一节】告别依赖文档！实战演练：无文档API渗透测试入门", "https://mp.weixin.qq.com/s/fjdC-4oZn7oPda9vBw0Xeg": "QNAP修复高危SQL注入和路径遍历漏洞", "https://mp.weixin.qq.com/s/vq6GHn-TgHtEdWN3X0UClw": "手把手CVE漏洞编号获取&漏洞提交", "https://mp.weixin.qq.com/s/E_4D6KLZrzqdIJNu41Sneg": "金融SRC各场景漏洞挖掘技巧", "https://mp.weixin.qq.com/s/cJvGFMCvRPvJh2qmS_C7gw": "内推 | 上海某公司红队方向漏洞挖掘与渗透测试岗火热招聘中", "https://mp.weixin.qq.com/s/qiITLmf2MO8r9_oHnQupwQ": "Shiro漏洞利用工具，更新V0.2！", "https://mp.weixin.qq.com/s/oLyGPOXsK09A4qqK-ummOQ": "漏洞预警 | 东胜物流软件SQL注入漏洞", "https://mp.weixin.qq.com/s/rXV5eumRHNypwY2a9EqQ8w": "CISA提醒注意 WHILL Model C2 电动轮椅中的严重漏洞", "https://mp.weixin.qq.com/s/28gaTuhQkVq09eFfEswPyQ": "Monsta FTP CVE-2025-34299 RCE 浅析", "https://mp.weixin.qq.com/s/ethfaXMXzByAAwIgiG56Rg": "【接口漏洞第三章第一节】告别依赖文档！实战演练：无文档API渗透测试入门", "https://mp.weixin.qq.com/s/zTZHhstJIrgrVX7-CS2GZg": "CVE-2025-66518：Apache Kyuubi 中的高危漏洞暴露本地服务器文件", "https://mp.weixin.qq.com/s/d9qapPG7bDpOPlwg8daAhQ": "《不用漏洞也能拿下 Root？DC-2 靶机完整攻击链实录》", "https://mp.weixin.qq.com/s/5wTYYxE-5wPRygMRaRvirA": "RCE哨兵 - 哨兵系列第一弹", "https://mp.weixin.qq.com/s/AQOiLKFRH1BoIU_fnAw4Hw": "漏洞预警 | RustFS认证绕过漏洞", "https://mp.weixin.qq.com/s/amcK4lonVyG5jWhbcQ9gpw": "存在了五年的 FortiOS SSL VPN 漏洞已在野实际利用", "https://mp.weixin.qq.com/s/t8HcCzLYKDHggG0z8YbMNw": "推广漏洞的特殊思路 | 通杀国内主流互联网厂商的推广漏洞思路分享", "https://mp.weixin.qq.com/s/Sm9IKBikHGTTZ3gP4KIx2Q": "端口扫描 + 指纹识别 + POC 验证｜cscan 一站式资产安全扫描平台", "https://mp.weixin.qq.com/s/QdSTNHb3XgCUbyMqo1ucfw": "CVSS 评分 10.0！满分高危漏洞 React2Shell 来袭，你的 Next.js 服务可能正在挖矿！", "https://mp.weixin.qq.com/s/9guK9gL82gdb7nI3FTxVxw": "漏洞复现 | B-LINK AC1900 V1.0.2 命令执行漏洞", "https://mp.weixin.qq.com/s/j9Z-OCPlBxwK0vv_DD_42w": "vCenter图形化漏洞利用工具", "https://mp.weixin.qq.com/s/2AkHznQlN5LfMmQKos561w": "【已复现】jsPDF 曝高危漏洞：可窃取服务器密钥及配置文件 (CVE-2025-68428)", "https://mp.weixin.qq.com/s/n2b-fMLDoy_mQE0WvnY3aA": "SQL Server数据库，漏洞利用与数据勒索风险急剧增加", "https://mp.weixin.qq.com/s/7N0LqDINUbL-32-__fUH_A": "汉王e脸通综合管理平台 getFirstEmp.do SQL注入漏洞", "https://mp.weixin.qq.com/s/R6mb4g1jwcUDZFvju-GEPg": "Shiro漏洞利用工具 -- ShiroEXP（1月4日更新）", "https://mp.weixin.qq.com/s/wh3DzY9jEZIuor4AUNl-NQ": "【高危漏洞预警】Dify API密钥明文暴露漏洞CVE-2025-67732", "https://mp.weixin.qq.com/s/1Tn8oNvlozv9ebsoZbelbQ": "漏洞挖掘实战系列（第2期）：Web专项（上） 注入类+文件类漏洞，吃透60%分值", "https://mp.weixin.qq.com/s/cGGJ0ezy1Ee6HhvvkR0lKw": "【首发POC】n8n Python代码节点沙箱绕过导致系统命令执行 (CVE-2025-68668)", "https://mp.weixin.qq.com/s/PgWDOBPchd7uYQvKaWzYPg": "React2Shell 的 CVE-2025-55182 深入技术分析", "https://mp.weixin.qq.com/s/hPnr3ktQtL4VHZ8zAOrHyA": "帆软bi反序列漏洞利用工具", "https://mp.weixin.qq.com/s/adAQQHIeCpBuwzeGAVdeFg": "2025年度十大 Web 应用系统高危漏洞盘点", "https://mp.weixin.qq.com/s/NHyWqcCC9CENaU3rUBnhrA": "CTF Pwn模块系列分享（三）：溢出基础与ret2text漏洞利用", "https://mp.weixin.qq.com/s/OAbMbfwecclbLUKizAHJdw": "edu漏洞挖掘：某985证书站挖掘&通杀任意文件读取漏洞", "https://mp.weixin.qq.com/s/ZSUItIm5nopWZcmOVTl9dQ": "JAVA代码审计-XXOA 上传0day挖掘", "https://mp.weixin.qq.com/s/r8QzXm8XsAEsVtK3pnsz5w": "【已复现】jsPDF 本地文件包含∕路径遍历 (CVE-2025-68428)", "https://mp.weixin.qq.com/s/Fy_RRF4nm0Cvtd1vNytQbA": "【论文分享】从噪声到信号：如何在千万级软件包中精准定位漏洞影响?", "https://mp.weixin.qq.com/s/9Fi2WawMDNR48P0rmDs3zA": "CVE-2026-21440 – AdonisJS 高级检测概念验证", "https://mp.weixin.qq.com/s/WK1WhqDW7BtGF8y2p0S25g": "Yakit复现fastjson漏洞", "https://mp.weixin.qq.com/s/7s5OxEG3oBQIsmrlD0_ZKQ": "信息安全漏洞月报（2025年12月）", "https://mp.weixin.qq.com/s/nzCUuMAkdgfcDgtEelAtsg": "AdonisJS 9.2 框架存在严重漏洞，可导致任意文件写入和RCE", "https://mp.weixin.qq.com/s/3wevJhBoQDRSvtq778Ig1Q": "JNPF快速开发平台存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s/OJ1d5fhiQglTYSOXxbRxbw": "【已复现】Apache Kyuubi存在目录遍历漏洞（CVE-2025-66518）", "https://mp.weixin.qq.com/s/BqANmEaByskImgF74an8vg": "赛普EAP企业适配管理平台Download.aspx任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s/_Q8-EcMrlMFC6oz4o3K4aw": "【安全圈】威胁行为者声称泄露 NordVPN Salesforce 数据库及源代码", "https://mp.weixin.qq.com/s/IQ4tVm7C4retnqGZG_CrVQ": "【复现】GNU Wget2 目录穿越漏洞（CVE-2025-69194）", "https://mp.weixin.qq.com/s/xY5WyLnusFNipKEglJdKww": "0113.Java 应用程序中的 ZIP 滑移导致远程命令执行", "https://mp.weixin.qq.com/s/NywdadLoz5K_vCrAuuadBQ": "自证安全，聊聊 Spring Framework 鸡肋漏洞 CVE-2024-38816∕CVE-2024-38819 的破局之道", "https://mp.weixin.qq.com/s/8bv5hyDFkN4SV6F2lHnJnQ": "周六开课！OSCE³ 之 OSED 漏洞利用实战，错过再等半年", "https://mp.weixin.qq.com/s/sA007cm0KmkfpinrXvjXPg": "攻击者利用FortiWeb漏洞部署Sliver C2进行长期访问", "https://mp.weixin.qq.com/s/4_BbRVq7jC-cOrfuaCsTlQ": "Shiro漏洞利用工具，更新V0.2！", "https://mp.weixin.qq.com/s/LNNSpvpz2n8rcGcOKazrSg": "无法修补的漏洞：PS5 BootROM密钥遭泄露，索尼安全防线崩塌", "https://mp.weixin.qq.com/s/cBCBE3Y1HEL_EutIEWwT0Q": "盘点 2025 年度重大安全漏洞", "https://mp.weixin.qq.com/s/I1_2E9OyxySwWy0KqQdJXg": "ComfyUI-Manager 远程代码执行漏洞通告", "https://mp.weixin.qq.com/s/32RDUxdOPp30dZXjbfN4OQ": "盘点 2025 年度重大安全漏洞", "https://mp.weixin.qq.com/s/0zrePFJB2PcKMC9k2AstYA": "edu漏洞挖掘：任意密码重置管理员账户&getshell", "https://mp.weixin.qq.com/s/5hFAYMoPZmJgEd8BqBP41w": "【安全圈】WhatsApp 漏洞泄露用户元数据，包含设备操作系统信息", "https://mp.weixin.qq.com/s/i98edy4KN8qXhAXyTnhSxQ": "【接口漏洞第三章第二节】解锁API漏洞宝藏：从请求方法与内容类型切入", "https://mp.weixin.qq.com/s/7-OzLX5aYHzcriDXh-LTuw": "邀测&直播|安全知识智能体应用与AI 漏洞猎人更新", "https://mp.weixin.qq.com/s/ckKhjpaay-QY1BZlLMTLSQ": "CISA KEV 清单共收录1048个已遭利用漏洞，2025年增长20%", "https://mp.weixin.qq.com/s/253yXeH8FmulA8ay2UI_yg": "【漏洞通告】jsPDF 本地文件包含与路径遍历漏洞(CVE-2025-68428)", "https://mp.weixin.qq.com/s/H1uz4SeNiB-7ME_H2YUAUA": "谷歌在安卓一月更新中修复了杜比解码器的关键漏洞", "https://mp.weixin.qq.com/s/T-P3x8qdqp3SVR596ifiDw": "「赏金」轻松赚外快：一个漏洞带来的500元赏金实录", "https://mp.weixin.qq.com/s/EEmZGosm8vYf_sqoF8ct4g": "2025年十大野外利用的高危漏洞", "https://mp.weixin.qq.com/s/E4GTAs8LTaGti3aGXgyZ0w": "看完本文再也不怕网安通报“明文传输” “TLS版本低”漏洞了", "https://mp.weixin.qq.com/s/fSToZr5YWFFC78f0oCeMlQ": "1day | 东方通TongWeb ejbserver 远程代码执行漏洞", "https://mp.weixin.qq.com/s/LX-j70AqTHn_77iaLjBi0A": "漏洞预警 | LangChain序列化注入漏洞", "https://mp.weixin.qq.com/s/b6ni0QVYvC1CpL2dzUVjXg": "漏洞预警 | 天锐绿盾审批系统fastjson反序列化漏洞", "https://mp.weixin.qq.com/s/aU_lECDINaGEtnVi_ktAlA": "n8n 最新严重漏洞允许攻击者执行任意命令", "https://mp.weixin.qq.com/s/TSsGqGVoaapzGditijepig": "邀测&直播|安全知识智能体应用与AI 漏洞猎人更新", "https://mp.weixin.qq.com/s/7DuolL50JXhmro4SKY0oFg": "漏洞预警 | 金和OA SQL注入漏洞", "https://mp.weixin.qq.com/s/xDcynTtmWq0z6zs_b0dwiA": "漏洞情报(已验证) | 时空智友企业流程化管控系统formservice 存在 XXE漏洞", "https://mp.weixin.qq.com/s/yHFE8yAi-L_BSx8Or889eA": "如何避免被割韭菜之快速获取0day漏洞详情", "https://mp.weixin.qq.com/s/SPhOwdWh8k1DGQELZW4uKg": "先知通用软件漏洞收集及奖励计划第十期 正式开始！", "https://mp.weixin.qq.com/s/B4zmWyT2OG_VCL22QWoscw": "一次“简单的信息收集”如何挖出了一个微软高危漏洞，并获得 MSRC 漏洞奖金", "https://mp.weixin.qq.com/s/kjqGeqUr0xpstWoIoCQU2A": "信息安全漏洞周报（2025年第53期）", "https://mp.weixin.qq.com/s/fOHrg6yFudYwGUAaH6WhKw": "【已复现】n8n Pyodide 命令执行漏洞(CVE-2025-68668)", "https://mp.weixin.qq.com/s/7SP3D14bsH625rD7Tvm4zA": "挪威Xplora儿童手表曝“万能钥匙”漏洞，黑客可监听通话与篡改定位", "https://mp.weixin.qq.com/s/pOVuTLkag3mgMQs7LnjYzA": "漏洞挖掘实战系列（第3期）：Web专项（下） 权限类+新兴漏洞，拿下剩余40%分值", "https://mp.weixin.qq.com/s/vPFMF7IJgp_3Di2wI55mYg": "零日 Chronomaly 漏洞利用可获取易受攻击的 Linux 内核的 root 权限", "https://mp.weixin.qq.com/s/1FZadgK2TOsHh7KknZgqGw": "PHP数组漏洞实战", "https://mp.weixin.qq.com/s/kqxNGA1X0XTdj8SV60UfNg": "ShiroEXP - Shiro漏洞综合利用工具 - 2.0版本发布", "https://mp.weixin.qq.com/s/zoQ2buJoOD-GnsaODbiLqw": "高危漏洞威胁情报合集 (2026-01-05~2026-01-07）", "https://mp.weixin.qq.com/s/z1NfdvfyHk0xilT7n1mkiw": "【免费领】新手必备！Web安全漏洞挖掘实战入门教程", "https://mp.weixin.qq.com/s/1Uehdvvgni1_AyF6mlj-nw": "苹果新型TCC绕过漏洞，macOS面临自动化攻击风险", "https://mp.weixin.qq.com/s/0QccRGPznspVX_qjpTxNrQ": "【接口漏洞第三章第三节】API漏洞挖掘实录：从GET到PATCH，我是如何实现“0元购”的", "https://mp.weixin.qq.com/s/_R_8SRppwuKjsTU2w4xFDQ": "零人工干预！全球首例 AI 智能体锁定 CVSS10 分高危 RCE 漏洞", "https://mp.weixin.qq.com/s/fxONDnqt1O99jrVXBdarKA": "【已复现】jsPDF目录穿越导致本地文件包含漏洞（CVE-2025-68428）", "https://mp.weixin.qq.com/s/obVVDvYaLdOL_s29SHoLbg": "【漏洞通告】Apache Kyuubi 目录访问控制绕过漏洞(CVE-2025-66518)", "https://mp.weixin.qq.com/s/4sAXdiYhp6t1SCDeJtoOQg": "【已复现】ComfyUI-Manager 远程代码执行漏洞(CVE-2025-67303)安全风险通告", "https://mp.weixin.qq.com/s/5oXvc-2_RZ8D1iNjP4GV4g": "全球首例！AI智能体自主发现满级评分RCE漏洞", "https://mp.weixin.qq.com/s/Arbdt-3erdFjj2-dcGxQvw": "攻击面大迁移：从网络漏洞到身份漏洞的变化", "https://mp.weixin.qq.com/s/gcX6BkC-x3f_lNSJ7PhYng": "【安全圈】0Day漏洞Chronomaly可获取Linux内核root权限", "https://mp.weixin.qq.com/s/WvzY4wIJkN8esNhjgMi7ZA": "【安全圈】D-Link 多款老旧 DSL 网关路由器被曝命令注入 0day，已遭野外利用", "https://mp.weixin.qq.com/s/Irh0jVBK_sHmpnRSTLIIMg": "自动化漏洞探测工具 -- MCP-GraphQL（1月5日更新）", "https://mp.weixin.qq.com/s/Wnkc6clygIcIkvU181f-zQ": "【已复现】GNU Wget2存在目录穿越漏洞（CVE-2025-69194）", "https://mp.weixin.qq.com/s/NBEo3GMKdGBxWjeK0oYPDg": "jsPDF 本地文件包含∕目录遍历 (CVE-2025-68428)", "https://mp.weixin.qq.com/s/YW_Mqx_QepBTFMWMjCSEsQ": "D-Link：遗留 DSL 路由器中存在已遭利用漏洞，速修复", "https://mp.weixin.qq.com/s/RQPNqUdLF3_7OlbjS86WEA": "携手护程 感恩有你 | 携程SRC 2025年度漏洞贡献值排行榜奖励揭晓", "https://mp.weixin.qq.com/s/8iMo3jDtX2BHpdeY7fY9-w": "CVE-2025-6389 — WordPress 严重零日漏洞（远程代码执行）", "https://mp.weixin.qq.com/s/Pz5CsfFzKMp7S5pgt_FBJQ": "安卓音频解码组件曝高危漏洞，可致恶意代码执行，谷歌紧急发布补丁", "https://mp.weixin.qq.com/s/M76PZ6lwInelr_bIiRJUBQ": "【接口漏洞第三章第三节】API漏洞挖掘实录：从GET到PATCH，我是如何实现“0元购”的", "https://mp.weixin.qq.com/s/06uaTTcW9QZaNjQqbXA6Xw": "【接口漏洞第三章第二节】解锁API漏洞宝藏：从请求方法与内容类型切入", "https://mp.weixin.qq.com/s/qHwAQd4YXnoSj6y8XZzs6g": "VulnHunter AI - 漏洞猎人：一款颠覆性的AI智能漏洞扫描工具", "https://mp.weixin.qq.com/s/bcaHmWkL7Q5zaoWVBJEYpw": "CVE-2025-55182 - Next.js-Exploit-Tool 图形化综合利用工具", "https://mp.weixin.qq.com/s/LgAI6Ccnk0ZWzecEDzSSJQ": "国内用户需警惕黑客正积极利用老款D-Link DSL路由器中的关键远程代码执行漏洞", "https://mp.weixin.qq.com/s/-nghD_fOJ0cQX6Q4UVOAIA": "【高危漏洞预警】jsPDF本地文件包含漏洞CVE-2025-68428", "https://mp.weixin.qq.com/s/_vYf3RjwlWDXRfklmFXx3w": "漏洞预警 | 金和OA SQL注入漏洞", "https://mp.weixin.qq.com/s/tN7dMFQtJBZjct4rS6E-CA": "从 JavaScript 到 BurpSuite 的高效漏洞挖掘实战指南", "https://mp.weixin.qq.com/s/6U78YnlP7S8oacRS7bELQg": "漏洞复现 | 东方通TongWeb upload接口存在任意文件上传漏洞", "https://mp.weixin.qq.com/s/RgAsNu94e-QIFmRh-GbnlA": "漏洞预警 | 东胜物流软件SQL注入漏洞", "https://mp.weixin.qq.com/s/7muIh50w79vyXwXT2W02jg": "【高危漏洞预警】ComfyUI-Manager远程代码执行漏洞CVE-2025-67303", "https://mp.weixin.qq.com/s/9fBFQxdUxFoRMJNDe-l2Lw": "安全测试效率翻倍！自动化资产测绘+漏洞扫描", "https://mp.weixin.qq.com/s/MZ6mO1t439N2OM5vbKTUAQ": "漏洞预警 | PublicCMS命令注入漏洞", "https://mp.weixin.qq.com/s/dvh7HGKH_6FVmn03LEQoMg": "「攻防演练」某采购系统1day任意文件下载到RCE", "https://mp.weixin.qq.com/s/oLifiaCiKhBqRT3YQS4N8g": "某次漏洞排查引起的漏洞", "https://mp.weixin.qq.com/s/0ODnsyttQICtXtzakj7DYw": "CVE-2025-60262：H3C无线设备严重配置错误，黑客可控制该设备", "https://mp.weixin.qq.com/s/6Y2Q9oZ9IS9mWTC9iEOQRw": "昂捷CRM系统存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s/J5iqZMu3rYfDynpIKO6QFw": "Ni8mare高危漏洞曝光：n8n自动化平台面临未授权全面接管风险", "https://mp.weixin.qq.com/s/Vufw1SzvJNa9ArLecqnlAQ": "漏洞挖掘实战系列（第 4 期）：Pwn 专项（上）——从看懂到 getshell", "https://mp.weixin.qq.com/s/yeH3xhTDwP-s1NzxnUJjkg": "【高危漏洞预警】n8n远程代码执行漏洞CVE-2026-21877", "https://mp.weixin.qq.com/s/PFAwt0BJGitiV6j5Rojk7w": "未授权漏洞渗透技巧总结分享（十）", "https://mp.weixin.qq.com/s/qnXWZ7Dj7arOg5SVG-xBFg": "蓝队利器、溯源反制、NPS 漏洞利用、NPS exp、NPS poc、Burp插件、一键利用", "https://mp.weixin.qq.com/s/NH1SQHsOvlHhtpxOjqegEw": "我是如何发现一个 Windows RCE 的", "https://mp.weixin.qq.com/s/mJtd8lPrU15Pt-aBvmX1UQ": "京东云路由器曝严重漏洞，黑客可直接获取 root 权限", "https://mp.weixin.qq.com/s/hfJGax9hV3BG9dOKIQOqtQ": "D-Link老款DSL路由器被曝在野利用漏洞", "https://mp.weixin.qq.com/s/gCVLDBcv3A6cHnm62pdyTg": "驰骋BPM低代码开发平台 RichUploadFile 任意文件上传漏洞", "https://mp.weixin.qq.com/s/gRI-G36OS3FbAffFnkvCTw": "Veeam 修复备份恢复软件中的一个9分高危RCE漏洞", "https://mp.weixin.qq.com/s/WgT1-3_DfwGOJ-EZx12s4A": "jsPDF 高危漏洞可窃取服务器密钥及配置文件", "https://mp.weixin.qq.com/s/72-wGfQNZT7hmZ_v8ccnQg": "【已复现】CVSS 10.0 满分漏洞，n8n 未授权文件访问漏洞可远程代码执行(CVE-2026-21858)", "https://mp.weixin.qq.com/s/738H_a30VQZJ5fq7V_LoIA": "M-SEC 漏洞社区福利活动重磅来袭！", "https://mp.weixin.qq.com/s/QGJOtU2xDxIG8UZuzdFpsw": "CVE-2026-21877：n8n 存在认证远程代码执行漏洞", "https://mp.weixin.qq.com/s/C0Uy2ebKB7IyGoDQfoTlzg": "Nacos 漏洞利用总结", "https://mp.weixin.qq.com/s/8n4fLjpA7BydcLjPA_bjtA": "【已复现】n8n 远程代码执行漏洞(CVE-2026-21858)安全风险通告", "https://mp.weixin.qq.com/s/E3pSbQBXpa7TVIZwhf-vfw": "网安实验干货每日分享Tomcat任意文件上传（CVE-2017-12615）-0108", "https://mp.weixin.qq.com/s/L64Q_Rf1ZC_vM4U6skeqng": "【扩充版】“任意用户漏洞”全景手册 20+ 实战案例", "https://mp.weixin.qq.com/s/ezMAgrMG82zFRfm1E-MO5Q": "【风险提示】MongoDB高危漏洞爆发！速查！！！", "https://mp.weixin.qq.com/s/Q2siDO0_xGYbvwPzbOaP_Q": "蓝凌OA漏洞利用总结", "https://mp.weixin.qq.com/s/OT_eiXOGfDf2l7D6fq-pIQ": "【已复现】n8n 前台远程代码执行漏洞（CVE-2026-21858）", "https://mp.weixin.qq.com/s/AU9RXBp44RhMTV904AcRKA": "【安全圈】安卓 ∕ Linux 内核高危漏洞 CVE-2025-38352 验证性利用代码已公开", "https://mp.weixin.qq.com/s/NBUe4Dd_wtmcqdx4WBnkJw": "【安全圈】GoBruteforcer 僵尸网络全球攻击 Linux 服务器，5 万台公网服务器面临风险", "https://mp.weixin.qq.com/s/SW0lK1tkMKy4kZp75QCOQg": "自动化平台n8n曝高危漏洞CVE-2026-21858，10万服务器面临接管风险", "https://mp.weixin.qq.com/s/c5B5ZoxefiBiXe508mJUig": "RuoYi-4.6.0代码审计之SQL注入漏洞", "https://mp.weixin.qq.com/s/pJUqfDpIlO2W_EjpsoS0FQ": "指纹识别+精准化 POC 攻击", "https://mp.weixin.qq.com/s/SDB4K0KqBlLAU9XKa45LJQ": "2025年12月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s/Ad6eB5A_OqdHTb5lnI8yPQ": "n8n 满分漏洞 Ni8mare 可导致服务器遭劫持", "https://mp.weixin.qq.com/s/9cJkv84S0QsPngqElYpr3Q": "Veeam 修复备份服务器中的RCE漏洞", "https://mp.weixin.qq.com/s/-N1zflcEp9hrdPxEBk7oIA": "【安全圈】三星 SSD 管理软件曝高危漏洞", "https://mp.weixin.qq.com/s/ZH8WqVbJkrbJdGvD5E_rSQ": "2025年12月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s/uc2NAhKIHqc5XHfcy4U5dg": "【高危预警】Veeam备份软件曝出 CVSS 9.0 远程代码执行漏洞，勒索软件可利用其破坏备份数据", "https://mp.weixin.qq.com/s/RkoaOPT2SHSLU1qLHgO-tg": "黑客利用0Day漏洞工具包在野攻击VMware ESXi实例", "https://mp.weixin.qq.com/s/4Y3mPSZ0hBmlLyni7xjVKQ": "【已复现】ComfyUI-Manager存在远程代码执行（CVE-2025-67303）", "https://mp.weixin.qq.com/s/cJ_wE479L1ASzLrW9ojZWA": "高危漏洞威胁情报合集 (2026-01-08）", "https://mp.weixin.qq.com/s/fXWXAQePehmW8wCHTWIjXA": "ByteSRC开年首测｜火山引擎AI业务单个漏洞赏金10万元！", "https://mp.weixin.qq.com/s/xtGFMRLNafQ27jLNRRDPeA": "DLL 劫持复现记录（显式加载）", "https://mp.weixin.qq.com/s/sbqRMy26Ep11ToJpgVV4Ag": "【接口漏洞第三章第四节】进阶实战：如何用 Burp Intruder “暴力推理”出隐藏的API端点？", "https://mp.weixin.qq.com/s/bDfdME5ie6Nmwz2S7Ao_dg": "【附POC及复现环境】n8n双CVE漏洞利用链可致远程代码执行漏洞（CVE-2026-21858+CVE-2025-68613）", "https://mp.weixin.qq.com/s/8XdsB9mCjaoxjL9PtZzYag": "【安全圈】黑客利用0Day漏洞工具包在野攻击VMware ESXi实例", "https://mp.weixin.qq.com/s/5GRQbN_ZqpiiOGKib41FsA": "【论文速读】| 用于软件供应链安全自主防御的Agentic AI：从溯源到漏洞缓解", "https://mp.weixin.qq.com/s/M3euwAuL5jBaPTPTc8RBYg": "【漏洞通告】n8n Webhook 请求处理不当导致未经身份验证的文件访问漏洞(CVE-2026-21858)", "https://mp.weixin.qq.com/s/U8qYF4Y3SmTPARPEJjFSVA": "【已复现】ComfyUI-Manager 远程代码执行漏洞（CVE-2025-67303）", "https://mp.weixin.qq.com/s/jlBpcZBdlq_P_tQZZCQZDA": "【已复现】n8n任意文件读取到沙箱逃逸 RCE（CVE-2026-21858）", "https://mp.weixin.qq.com/s/u5lm3LJFVihrD5LjZy1ASw": "【漏洞通告】n8n 远程代码执行漏洞(CVE-2026-21877)", "https://mp.weixin.qq.com/s/dWmRxao4XEsljlnAy9CTvg": "最新Nessus2026.1.8版本主机漏洞扫描∕探测工具Windows∕Linux下载", "https://mp.weixin.qq.com/s/GPFRhF3sg7RbC8DrGl_uGA": "本地电脑没有PIN密码也可以实现文件窃取? Windows11WinRE权限控制绕过漏洞演示", "https://mp.weixin.qq.com/s/VC9B3Jg5EKFQWV4RhTk3PQ": "JeecgBoot积木报表getDataSourceByPage接口存在敏感信息泄露漏洞 附POC", "https://mp.weixin.qq.com/s/XjIhvLLOTEtWmVeKBMqkYg": "2025年十大高风险漏洞及其在实际攻击中的应用", "https://mp.weixin.qq.com/s/It_8VnOhiNNAYzesd46gdw": "Apt_t00ls：Java 开发的OA设备高危漏洞集成利用工具", "https://mp.weixin.qq.com/s/bPbE8xXw4URxpDUIQiNE0Q": "MongoDB高危漏洞已被积极利用", "https://mp.weixin.qq.com/s/Np_-ztLJOq__mGmJjygvRA": "n8n Ni8mare - 未经认证的任意文件读取到远程代码执行链 (CVSS 10.0)", "https://mp.weixin.qq.com/s/BOVBEHDQRESrN7W4UWcCbw": "详析 n8n 超危漏洞（CVE-2026-21858）如何从文件上传一路打到服务器沦陷", "https://mp.weixin.qq.com/s/iMW2TJ6EBiYZWbh-ryjwqw": "漏洞预警 | 天锐绿盾审批系统fastjson反序列化漏洞", "https://mp.weixin.qq.com/s/n9452S8b-YHHXDgY8BmXQA": "【梆梆安全监测】安全隐私合规监管趋势及漏洞风险报告（1207-1220）", "https://mp.weixin.qq.com/s/ImWkdpZqw_g1FA3HG5k2WA": "【首发POC】n8n Python代码节点沙箱绕过导致系统命令执行 (CVE-2025-68668)", "https://mp.weixin.qq.com/s/AApuS7Q0rehhB0tBYYfTyw": "【已复现】n8n 前台远程代码执行漏洞（CVE-2026-21858）", "https://mp.weixin.qq.com/s/SmuxnPtTdB96ts4DzHYE0A": "黑客利用0DAY漏洞利用工具包攻击 VMware ESXi 实例", "https://mp.weixin.qq.com/s/p38IHTQNF-8KP2Efb7sLJw": "漏洞预警 | Zimbra本地文件包含漏洞", "https://mp.weixin.qq.com/s/448_eq5z7NCC6E08ORpRBA": "如何挖掘SRC中的支付漏洞", "https://mp.weixin.qq.com/s/CMgG-lUg4xwBCsuSbBAyYQ": "漏洞复现 | Samsung MagicINFO 9 Server 路径遍历导致任意文件写入漏洞（CVE-2025-4632）", "https://mp.weixin.qq.com/s/Q2Rdiwgz2bxGEZwtA_HxCg": "东胜物流软件 FileExport.aspx 任意文件读取漏洞", "https://mp.weixin.qq.com/s/jsKOyPq22TGjnSlAb-KvJQ": "n8n Ni8mare - 未经认证的任意文件读取到远程代码执行链 (CVSS 10.0)", "https://mp.weixin.qq.com/s/k8iNMmUY3uVpe-yW0Ns1fw": "最高级别的 n8n 漏洞允许随机用户接管服务器", "https://mp.weixin.qq.com/s/8sOwQ3_-XWC84JOoRQjCuw": "Linux电池实用程序漏洞允许绕过身份验证和篡改系统", "https://mp.weixin.qq.com/s/5GqRvclnjNh67egnYibZGQ": "Linux脏牛提权漏洞复现", "https://mp.weixin.qq.com/s/E-Y5ggi63OBlL9-dQ2YgNQ": "网安实验干货每日分享IIS6.0文件解析漏洞特殊符号\"∕\"–0109", "https://mp.weixin.qq.com/s/Ki-fPXPBNUFWxqQgAD-qcQ": "漏洞预警 | 金和OA SQL注入和XXE漏洞", "https://mp.weixin.qq.com/s/a_2doPRjkA4aB6dsXmRA6g": "【已复现】SmarterMail存在文件上传漏洞（CVE-2025-52691）", "https://mp.weixin.qq.com/s/CiMdkibcYiyYrQ5P_dCBPQ": "某赛通Nday漏洞分析", "https://mp.weixin.qq.com/s/kR7hgM6g1hXU2CS0MtMuMw": "【已复现】SmarterMail 邮件服务器任意文件上传漏洞(CVE-2025-52691)安全风险通告", "https://mp.weixin.qq.com/s/47eKj7vlfpUnzO3-9j5wvw": "【0day预警】ComfyUI-Manager CRLF注入导致远程代码执行漏洞", "https://mp.weixin.qq.com/s/4SngbeUncM3lZ31vbXnt3A": "【一马当先，洞见金甲】微众银行SRC新春专享漏洞挖掘激励计划", "https://mp.weixin.qq.com/s/h2G0STVzVlsv43n_Nw1s7w": "【已复现】ComfyUI-Manager 远程代码执行漏洞(QVD-2026-2759)安全风险通告", "https://mp.weixin.qq.com/s/ic_1TCloI5b8hdGh5zD1Ng": "n8n RCE 101：CVE-2025–68613 漏洞分析", "https://mp.weixin.qq.com/s/G8_DI-HJqe8GuB0zTLDnGg": "Webpack打包js.map泄露导致的通杀0day", "https://mp.weixin.qq.com/s/g0mfL12GusM5L-9dkmcGLQ": "周日20点直播 | FART14秒脱海外加固厂商dexprotector加壳app", "https://mp.weixin.qq.com/s/1MKJ7rDMWKrjjQmTJ7w-hQ": "【玄域靶场】漏洞报告里挖思路，玄域靶场中练实操-实战漏洞报告板块已上线！", "https://mp.weixin.qq.com/s/ZAqKEmc_j1VurL4d-DM1xA": "海湖庄园的秘密：委内瑞拉行动中的国家安全漏洞", "https://mp.weixin.qq.com/s/3N-2AyhPAUa3zckkXXMKGA": "【在野利用】Cursor命令执行漏洞", "https://mp.weixin.qq.com/s/f5bLH6n9V_-oSedvH_QvSA": "攻防场景Cursor实战化挖掘漏洞--从2天到20分钟", "https://mp.weixin.qq.com/s/zKxDRzdWGHHbSWlW1yVfNg": "【附POC及复现环境】SmarterMail未授权任意命令执行漏洞复现（CVE-2025-52691）", "https://mp.weixin.qq.com/s/RBfSscMqiQh4_HsAFrvLXg": "通用 | 春节第三趴，提交几个漏洞能拿万元奖励金∕大疆运动相机？（文末抽奖）", "https://mp.weixin.qq.com/s/xPDUHApz5a82Cq9OmM4JVA": "漏洞通告｜n8n远程代码执行漏洞（CVE-2026-21858)", "https://mp.weixin.qq.com/s/VoJOaP_A909qRPBO1Z0s_g": "JWT安全解析：从设计哲学到致命漏洞", "https://mp.weixin.qq.com/s/7fPL8gnvt4X0loaJ1qzPgA": "RuoYi 后台SQL注入漏洞系列2", "https://mp.weixin.qq.com/s/gI-FeyGB6lqjwl_oxCVd8A": "【漏洞通告】n8n 远程代码执行漏洞(CVE-2026-21858)", "https://mp.weixin.qq.com/s/shTMNLrCeSsSopiXlr0gpg": "【已复现】SmarterMail 路径遍历漏洞可导致未授权远程代码执行，EXP 已公开（CVE-2025-52691）", "https://mp.weixin.qq.com/s/XKaWRWSjITR_gAmEicCXNg": "警惕跨境暗雷！韩国漏洞微基站遭改装，悄然流入中国窃隐私", "https://mp.weixin.qq.com/s/T2aLxuN0qYCmEOzvA3kX1Q": "【安服水洞系列】Dify API密钥明文暴露漏洞", "https://mp.weixin.qq.com/s/Rp8EFclSWfusZB_oz6111g": "[漏洞复现]ComfyUI-Manager(CVE-2025-67303)", "https://mp.weixin.qq.com/s/iphfIov5Xh5b9_1jtb7row": "漏洞挖掘实战系列（第6期）：Pwn高阶实战 格式化字符串+ROP进阶，拿下CTF高分题", "https://mp.weixin.qq.com/s/o7MKM0mkuwf8-A_HmRbAQw": "用友漏洞综合利用工具", "https://mp.weixin.qq.com/s/RS65vp0q2j0BJo04lYosiw": "【三星】固态硬盘管理软件高危漏洞CVE-2025-57836", "https://mp.weixin.qq.com/s/crn9SrQjYFXTVoNudu4u3g": "ChatGPT“僵尸代理”攻击：新型零点击漏洞如何窃取你的邮件、记忆与一切", "https://mp.weixin.qq.com/s/eR9gg79sMVp29TgI89b3dQ": "【安全圈】思科交换机DNS客户端漏洞事件", "https://mp.weixin.qq.com/s/vYZMkiZTH10OTJENxdbU8w": "n8n远程代码执行高危漏洞-最高严重性漏洞", "https://mp.weixin.qq.com/s/UFsv2FqD2J6kzSZtv7LlKw": "【在野利用】HPE OneView 远程代码执行漏洞(CVE-2025-37164)", "https://mp.weixin.qq.com/s/CAp7sX2hp_uUPucKyAy_gA": "ChatGPT漏洞可致攻击者窃取Gmail、Outlook和GitHub敏感数据", "https://mp.weixin.qq.com/s/G43e90kO_ZHL_xf3cHsAhQ": "GitLab 代码仓库平台中的 XSS 漏洞分析 $35,000", "https://mp.weixin.qq.com/s/ECGxZ46xSlwXJ-LSXwCoVA": "Jeecg综合漏洞利用工具", "https://mp.weixin.qq.com/s/viMlZCrDomoVLS-_fpv5yg": "【原创情报】IDA Pro MCP远程代码执行漏洞(CVE-2025-67117)", "https://mp.weixin.qq.com/s/eyn-2IgbYGj9QirZAkpfhQ": "2025年度十大云∕虚拟化高危漏洞盘点", "https://mp.weixin.qq.com/s/fCqFm2Y1y6Satmi2VYjHxA": "某学院找回密码逻辑漏洞测试案例", "https://mp.weixin.qq.com/s/1aMHuHb2-q_8pCeCn0kDQg": "Apache SIS XML外部实体（XXE）漏洞预警（CVE-2025-68280）", "https://mp.weixin.qq.com/s/xHdEhX88wiKrjfTHpFqnmQ": "漏洞复现 | 东方通TongWeb selectApp.jsp 存在任意文件上传漏洞", "https://mp.weixin.qq.com/s/PoN_pEQ8LjuPga3CjUTanw": "科汛新职教网校系统 checkPayStatus SQL注入漏洞", "https://mp.weixin.qq.com/s/jjUdwk5w2P7vAFHWZ3wPdg": "又是n8n！CVSS 10.0致命漏洞详解：从文件读取到RCE的“一条龙”攻击链", "https://mp.weixin.qq.com/s/hJb_D_r1s1oQwJG0uJOc9Q": "moodleRCE 独特的bypass思路", "https://mp.weixin.qq.com/s/VttDCTBhZUGlyJDh6WzTgQ": "Web篇 | 手把手拆解：小程序∕Web端加密鉴权绕过案例全复现", "https://mp.weixin.qq.com/s/my2C9M_XkSpEiasWVhmpGw": "美军最神秘、最精锐特种部队：三角洲（Delta Force）部队全景解析", "https://mp.weixin.qq.com/s/HlsbSb7qz20y8K71V7g91w": "【AI安全】核弹级漏洞！n8n 曝出“噩梦级”漏洞链 CVSS 10.0 满分", "https://mp.weixin.qq.com/s/Kv4KF5AEOPzQgVCqz0Yyiw": "僵尸网络攻击全球Linux服务器、ChatGPT曝高危漏洞|一周特辑", "https://mp.weixin.qq.com/s/845EVdBSVBJHLNSJT71W-g": "2026年需重点关注的3类高价值漏洞", "https://mp.weixin.qq.com/s/cHl07XF_Tjc-_pERgNJDsw": "Shiro漏洞利用工具，更新V0.2！", "https://mp.weixin.qq.com/s/L0yYNvi0E2o45Q4WGwCSiQ": "复现pgAdmin4 <= 9.10(CVE-2025-13780)漏洞利用", "https://mp.weixin.qq.com/s/2QiGOOH1Szw6YT3cl1qFcA": "Ruoyi单应用版本漏洞合集", "https://mp.weixin.qq.com/s/YnS9HNox5fCx8O-4MPCCrw": "GitLab 代码仓库平台中的 XSS 漏洞分析 $35,000", "https://mp.weixin.qq.com/s/sxctmnTyRF4Zix0mr7LUNg": "TikTok 账户恢复机制中的身份验证绕过漏洞分析 $12,000", "https://mp.weixin.qq.com/s/lpcWYaMZCRQCIoCU_D_1gw": "一个价值7万美刀的谷歌漏洞", "https://mp.weixin.qq.com/s/ahBCyjs25I6W5KqNaLEYCw": "【黑客】App如何抓包？玄域App漏洞靶场实操演示", "https://mp.weixin.qq.com/s/4chQzbF0T_9ta9jiCnWmLQ": "漏洞复现 | 汉王e脸通综合管理平台 uploadMapFile.do 任意文件上传漏洞", "https://mp.weixin.qq.com/s/8DHGJbxxLlReA4LND_7_Rw": "揭秘 SmarterMail 沉寂三个月后才公开的“满分”RCE 漏洞", "https://mp.weixin.qq.com/s/r1spDPzYcMvyE6yvUfNIbg": "【接口漏洞第四章第二节】隐藏参数挖不动？可能是你的 Param Miner 没配置对", "https://mp.weixin.qq.com/s/9D-6Lg91Mb1rx0mGGbhlPA": "CVE-2026-21440｜AdonisJS远程代码执行漏洞（POC）", "https://mp.weixin.qq.com/s/kp7S_tLBtyWhwJTpWOnuxQ": "2025年微軟Windows系統最為嚴重的十大漏洞回顧", "https://mp.weixin.qq.com/s/sWeCFIPxGL-J6QutTF46dQ": "漏洞挖掘实战系列（第 7 期）：跨场景移动端与物联网漏洞挖掘", "https://mp.weixin.qq.com/s/hIMFJhm7vCIoAxMatILLEg": "CVE-2025-54068｜Livewire组件远程代码执行漏洞（POC）", "https://mp.weixin.qq.com/s/QIXURLRau9_4Si4u33FSMA": "Chrome WebView 漏洞（CVE-2026-0628）可绕过安全限制", "https://mp.weixin.qq.com/s/J0TGMVzeK7dN7Bi3iFAyCw": "2026开年第一漏洞！赶快检查Chrome浏览器（CVE-2026-0628）", "https://mp.weixin.qq.com/s/20H4sC5T2-FcfA4jPh70QA": "每周PDF资源：工业互联网渗透实战记录；12月企业必修安全漏洞；揭秘黑灰产AI的潘多拉魔盒；渗透测试行业术语扫盲", "https://mp.weixin.qq.com/s/LkenoQ5faJgHR-rctXp4jw": "东胜物流 GetDataList sql注入漏洞", "https://mp.weixin.qq.com/s/vz1WAaS17dhkSz6TsxaNfg": "高危漏洞威胁情报合集 (2026-01-11）", "https://mp.weixin.qq.com/s/8s-CXV14Bs_RAJQ5xjVJnQ": "【已复现】IDA-PRO-MCP 远程代码执行漏洞（CVE-2025-67117）", "https://mp.weixin.qq.com/s/80D0SdHgeQyTJGOuPY9IaQ": "Burpsuite插件：autorize实现抓包实时越权漏洞检测", "https://mp.weixin.qq.com/s/6npbcVqeOckA3v3fsl1rYQ": "新的UEFI漏洞使得针对技嘉、微星、华硕和华擎主板的预启动攻击成为焦点", "https://mp.weixin.qq.com/s/s6Lx1HQxSsrnTV756_nLlw": "缓解Web应用程序漏洞从了解OWASP Top 10开始", "https://mp.weixin.qq.com/s/B5GzGbRF9b3wNTNlSMR-Sg": "战报 | 常态化漏洞挖掘演习第一周已结束", "https://mp.weixin.qq.com/s/eJ_u0qKb2REo0LwJhT8pIg": "效率提升90% | 这款资产收集工具让漏洞挖掘更轻松", "https://mp.weixin.qq.com/s/U4gV259Ib4GImp-eqJq5Uw": "2026 年该挖什么漏洞", "https://mp.weixin.qq.com/s/L6E-CNUjVMlv0V43mVHKCw": "0115.意外泄露高危 ASP.NET 漏洞：一次咖啡休息如何导致他人个人身份信息泄露（以及 600 美元赏金）", "https://mp.weixin.qq.com/s/KoRZn7rDK8d1g0GMOaEKUQ": "漏洞预警 | 大华ICC智能物联综合管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s/a8424iGq9NXBjBwi2J3NJw": "企业SRC赏金漏洞挖掘实战-多个奖励条件绕过漏洞", "https://mp.weixin.qq.com/s/z5U8xKmwlWH6OJ3DbJtK2g": "一个功能强大的 Docker 远程 API 漏洞利用工具", "https://mp.weixin.qq.com/s/pdKBJ8xumh3bCOkjm0Xn9Q": "nOAuth风险追踪：漏洞或致Microsoft 365沦陷", "https://mp.weixin.qq.com/s/CAUmWPTKAGgw0kEw90j2Pw": "从入门到“被黑”？Coolify 这一波 Command Injection 教科书式漏洞解析", "https://mp.weixin.qq.com/s/5C8BWSqSDk2ZgEROpRSssg": "漏洞预警 | 金和OA SQL注入漏洞", "https://mp.weixin.qq.com/s/6ASsRbXNEWaJZ1NaBHXQyQ": "溯源实例-从OA到某信源RCE攻击", "https://mp.weixin.qq.com/s/8pBKz9PNCzi9edMmrwUVVw": "记一次漏洞挖掘经历", "https://mp.weixin.qq.com/s/EAaNPniqFtCuXKGWLVZHIg": "【漏洞专项】存储桶相关漏洞记录", "https://mp.weixin.qq.com/s/jJCueg1erODOlK2yep6Ydg": "漏洞预警 | SmarterMail文件上传漏洞", "https://mp.weixin.qq.com/s/2RoIhsFa20ev6kMjwLuRLg": "【黑客】App如何抓包？玄域App漏洞靶场实操演示", "https://mp.weixin.qq.com/s/560JUOm9pRT-8YKvi0nrtQ": "感谢支持！｜地图大师 100+ SRC 靶场漏洞狩猎实录将于本周开课！末尾优惠上车！", "https://mp.weixin.qq.com/s/5W5QNCZL4lKd6yS9mOaDJA": "CVE-2025-68637：Apache Uniffle 严重漏洞使集群易受窃听", "https://mp.weixin.qq.com/s/xwiSH9SFnyWLNaxaoxnkWw": "用友时空 richclient.openForm XXE漏洞", "https://mp.weixin.qq.com/s/v7q1B3YOeTGy9hKcNNYvfw": "漏洞挖掘实战系列（第8期）：CTF赛事实战策略 8小时高效得分指南", "https://mp.weixin.qq.com/s/EC64VtTDBHhFnJFF2MoorQ": "AI智能体常见漏洞挖掘与修复方法", "https://mp.weixin.qq.com/s/hBSY_2nwupnmfnwOqyC0AQ": "2025年度十大工业控制系统安全漏洞盘点", "https://mp.weixin.qq.com/s/geQUq3Ur3WqGMgTjqvNL_Q": "漏洞复现 | Letta-ai letta代码注入漏洞(CVE-2025-51482)", "https://mp.weixin.qq.com/s/kErXWJ8b1fKVRCD9TqAe4w": "WEB漏洞扫描工具HCL AppScan Standard", "https://mp.weixin.qq.com/s/e3bFJQodEh8IOg1VsoaJRg": "漏洞通告 | Apache Struts S2-069 XXE漏洞", "https://mp.weixin.qq.com/s/WtRrCRISddbHiKLu8PZvkw": "Ruoyi单应用版本漏洞合集2", "https://mp.weixin.qq.com/s/0ay3PYjDHDDGYN3o7IXgGQ": "GGML_GGUF 文件格式漏洞深度解读与挖掘思路", "https://mp.weixin.qq.com/s/-bzV4JijR9KnLNXIr0Ra1g": "泛微emobile6.5 6.6前台SQL注入漏洞分析", "https://mp.weixin.qq.com/s/YlgEO621i98D1R9foFPrBg": "【已复现】腾讯 WeKnora MCP服务命令注入漏洞(CVE-2026-22688)", "https://mp.weixin.qq.com/s/mKW4_gwhOW4aOphOFmwUeQ": "趋势科技：速修复这个严重的 Apex Central RCE漏洞", "https://mp.weixin.qq.com/s/rBJtZpLLZEvFQdzm5OiFcg": "网安实验干货每日分享IIS6.0文件解析漏洞特殊符号\";\"–0112", "https://mp.weixin.qq.com/s/J5Hm9nv8cJzz0xRfAxdZLg": "漏洞验证-大华ICC智能物联综合管理平台 ars∕list SQL注入", "https://mp.weixin.qq.com/s/7qYw0sxCut5e4EJbh4ujHw": "上周关注度较高的产品安全漏洞(20260105-20260111)", "https://mp.weixin.qq.com/s/-WuhwU3UumBOz7YiW80wgQ": "2644 万美元被盗背后：Truebit Protocol 合约漏洞分析", "https://mp.weixin.qq.com/s/TnBZP_CMD6O6_o9Lxlbk_Q": "CNVD漏洞周报2026年第1期", "https://mp.weixin.qq.com/s/V7HC4tki8NGSGgYTOIpGIw": "Ni8mare高危漏洞来袭 黑客可远程劫持n8n服务器", "https://mp.weixin.qq.com/s/Oo7tNm0Pe18oNjPalp9tJg": "推广漏洞的特殊思路 | 通杀国内主流互联网厂商的推广漏洞思路分享", "https://mp.weixin.qq.com/s/DvGT6wLRI6WI4rhCRUR7eg": "盘点 2025 年度重大安全漏洞", "https://mp.weixin.qq.com/s/3OFcdQi6cKQrvcV2vyKbUQ": "【漏洞分析】LlamaIndex SQL2RCE漏洞分析(CVE-2024-11958)", "https://mp.weixin.qq.com/s/74CNvcldCWskbjUBJF0xdw": "Java Apps 严重漏洞可用于劫持会话", "https://mp.weixin.qq.com/s/EV0ozNPsX5GBNBYp-TtNEA": "CVE-2026-22184 (CVSS 9.3)：zlib 严重漏洞导致全局缓冲区溢出", "https://mp.weixin.qq.com/s/EFjLvjF7nPW7ioMDCkEYWg": "一次基础漏洞复现：布尔值篡改与业务参数校验缺失分析", "https://mp.weixin.qq.com/s/svzVjtLzvKpbZqEL-Tl4LA": "注意升级|Struts2曝高危漏洞S2-069（CVE-2025-68493）", "https://mp.weixin.qq.com/s/PDbvdItuv0O2S_MROJfIlA": "CNVD漏洞周报2026年第1期", "https://mp.weixin.qq.com/s/jm38WkUfXDzx6Ng-xhDxPg": "【高危漏洞预警】WeKnora命令注入漏洞CVE-2026-22688", "https://mp.weixin.qq.com/s/O0797gUJdM5e50pPDV3Gmw": "安全热点周报：D-Link 老旧 DSL 路由器曝新漏洞，正遭黑客活跃攻击", "https://mp.weixin.qq.com/s/1023cg9IvJXWb1MY_-TLTw": "撕开edu防线：前端的一次密码判断到3个高危漏洞", "https://mp.weixin.qq.com/s/lA10M7cBWZIEBCX2GJBsvA": "【520】【有靶场】【已复现】n8n双CVE漏洞利用链可致远程代码执行漏洞（CVE-2026-21858+CVE-2025-68613）", "https://mp.weixin.qq.com/s/q3t2ev3NGuQDqELXEpWTPw": "【工具推荐】Shiro漏洞综合利用工具-v2.1版本更新", "https://mp.weixin.qq.com/s/ca1zjXlmUEZIIIn6Oyg0IA": "【案例】通达OA任意文件上传绕过+Udf绕过RCE的故事", "https://mp.weixin.qq.com/s/wB3uv8vnBUcRnlVYTSj_Og": "【敬请期待】记下来会更新几期常见的人性漏洞有哪些", "https://mp.weixin.qq.com/s/egjnrCAH-mtzj_kR1tHFew": "游戏工具变后门？InputPlumber高危漏洞曝光，Linux游戏玩家面临劫持风险", "https://mp.weixin.qq.com/s/gv7k6uDIkciFoAXdlIolQw": "【漏洞通告】Apache Struts XWork 组件 XXE 漏洞(CVE-2025-68493)", "https://mp.weixin.qq.com/s/4bDn2N9oKAgvBMCHqSiZHw": "高危漏洞威胁情报合集 (2026-01-12）", "https://mp.weixin.qq.com/s/bY4X_NbToiE36oXSVFrqPw": "【玄域】App系列漏洞靶场已更新-新增3个App版本的JWT系列靶场", "https://mp.weixin.qq.com/s/zJaHUYFOuo0qs_QAHCks_g": "【接口漏洞第五章第一节】当API“过度热心”：批量赋值漏洞的狩猎笔记", "https://mp.weixin.qq.com/s/-KHeodmYpguuA34OstX4kw": "CVE-2025-68428_PoC", "https://mp.weixin.qq.com/s/_3rgR74lYIoxdgu-RbMuRw": "n8n Ni8mare - 未经认证的任意文件读取到远程代码执行链 (CVSS 10.0)", "https://mp.weixin.qq.com/s/dR-8ycJ3Ws-b9tKgJprNnQ": "漏洞预警 | AdonisJS路径遍历漏洞", "https://mp.weixin.qq.com/s/JQ2OOqsz2jZThLgO0B--vg": "CVE-2025-52694 (CVSS 10)：研华 SQL 注入漏洞严重，物联网设备面临风险", "https://mp.weixin.qq.com/s/TDfAcmrHqRDY5aKBJLW8Cg": "黑客利用0Day漏洞工具包在野攻击VMware ESXi实例", "https://mp.weixin.qq.com/s/PJzyTgExzP10ox6NTRKviA": "漏洞预警 | 金和OA SQL注入漏洞", "https://mp.weixin.qq.com/s/xfUsH8kbI17P6gfzMbpPyg": "ComfyUI-Manager RCE链组合拳", "https://mp.weixin.qq.com/s/1qTDnP6CcY3sud0d0pGJnQ": "Apache Struts 2严重漏洞可能让攻击者窃取敏感数据", "https://mp.weixin.qq.com/s/7kAJRKLVmiONrSCjVZF2vg": "【好靶场】存在逻辑漏洞-导致评论区消失且用户无法评论", "https://mp.weixin.qq.com/s/i7fdsk7xfQz7QEqMGK6TEw": "千万罚款预警！AI安全纳入法治监管，ZoomEye Pro助力企事业单位识别AI资产和漏洞！", "https://mp.weixin.qq.com/s/gI2wDmhiQCv0XJkyBVvz5g": "低成本玩转SDN：实测OpenDaylight资源消耗仅1.1GB，完美纳管华为设备，开源方案真香！", "https://mp.weixin.qq.com/s/0FDgQC5oRj_aakIGDBIsBA": "漏洞预警 | 天锐绿盾审批系统fastjson反序列化漏洞", "https://mp.weixin.qq.com/s/yONzIqDvVGjtOZkiwBpSOw": "2025 龙信杯复现 WP", "https://mp.weixin.qq.com/s/XlUofotbXqt9pIhEKLtwFg": "jeecgBoot漏洞利用工具", "https://mp.weixin.qq.com/s/VOhHgm_Cndza2O1g0w-5CQ": "React Router严重漏洞可用于访问或修改服务器文件", "https://mp.weixin.qq.com/s/qcCts4XcvV8XbHFdyEMdYA": "漏洞挖掘实战系列（第9期）：职业进阶篇 从CTF选手到网络安全工程师，技能转化+求职指南", "https://mp.weixin.qq.com/s/eB14Ff6ZYbTZLsVK1gcYZA": "【漏洞预警】Sangfor 运维管理系统 文件上传漏洞", "https://mp.weixin.qq.com/s/oHi69_f0zSwM-pRBGH0hqQ": "jsPDF 本地文件包含∕目录遍历 (CVE-2025-68428)", "https://mp.weixin.qq.com/s/bliXS7yoVPR-tes0HllI1w": "SmarterMail邮件服务器任意文件上传漏洞", "https://mp.weixin.qq.com/s/NSVmnPrjpvTLFhddsf-8Fg": "漏洞复现 | 致远OA ∕seeyon∕sursenServlet 命令执行漏洞", "https://mp.weixin.qq.com/s/DYMoAA3_G33Ee0yB_IXOZQ": "网安实验干货每日分享IIS7.5文件解析漏洞-0113", "https://mp.weixin.qq.com/s/6eULBGWhLPM4ZmQ0vSDeWw": "【重金悬赏】全网白帽集结！金融众测开启，漏洞猎手速来挑战！", "https://mp.weixin.qq.com/s/ZtY6gaTvAl2h3zkOjKrg5w": "Apache Struts 2 严重 XXE 漏洞可用于窃取敏感数据", "https://mp.weixin.qq.com/s/ha6RN_TS-0JGq2V_tE2RdQ": "【已复现】深信服运维安全管理系统 protocol_session 远程代码执行", "https://mp.weixin.qq.com/s/n3NC1i_iN3wGi4OHcd1dPQ": "XML陷阱：Struts 2关键漏洞CVE-2025-68493暴露数据", "https://mp.weixin.qq.com/s/fIhVItQfbmGM2pfo4I909Q": "大华综合漏洞利用工具", "https://mp.weixin.qq.com/s/A9qpwwOtNG1kR61kUSPskA": "Telegram曝隐藏漏洞,1次点击绕过代理暴露用户真实IP, Android和iOS均中招", "https://mp.weixin.qq.com/s/TSn6Sk4UxDPmsWqOCwYGgQ": "CVE-2025-60188-Atarim-插件-漏洞利用", "https://mp.weixin.qq.com/s/Levm38wrO1O5h500bUPCQA": "一款专为安全测试人员打造的 Web 化被动漏洞扫描平台", "https://mp.weixin.qq.com/s/oiySAV0HRvnuVXkSsEyMRg": "Telegram 的一个漏洞即使使用代理也能泄露您的 IP 地址", "https://mp.weixin.qq.com/s/jyEEtCvDxbruvBrcg2k7GQ": "雷神众测漏洞周报2026.1.5-2026.1.11", "https://mp.weixin.qq.com/s/pFEbUmXwcnh08IwNVxP16g": "智能电表远程抄表设备命令注⼊漏洞逆向分析", "https://mp.weixin.qq.com/s/QNnlrSZ8jLheyN8jxQ4FWQ": "DudeSuite 漏洞播报 全网漏洞早知道 20260113", "https://mp.weixin.qq.com/s/tPZg2oQe7OpOP0Iw28tVbQ": "帆软 excel SQL注入漏洞复现", "https://mp.weixin.qq.com/s/Xz_VUYIhYGQSu5QTi7MMGA": "【漏洞预警】Sangfor运维管理系统文件上传漏洞", "https://mp.weixin.qq.com/s/cIm3JQiCYfHysKIYRSRNjA": "【漏洞通告】Apache Struts外部实体(XXE)注入漏洞S2-069（CVE-2025-68493）", "https://mp.weixin.qq.com/s/WX94jMVBNGzryBTSpxHPAA": "SRC漏洞挖掘2", "https://mp.weixin.qq.com/s/qUyq1dq-SUiBgWRDCUJ_AQ": "【已复现】Apache Struts XML外部实体注入漏洞(CVE-2025-68493)安全风险通告", "https://mp.weixin.qq.com/s/hp43SW11A2JjNQiT8O9wgg": "Apache Struts 2曝高危漏洞：攻击者可窃取敏感数据", "https://mp.weixin.qq.com/s/gcntBfKjy-kMGlCkXkwXoA": "《Linux Pwn 番外篇》重磅上线！6大架构全覆盖，异构漏洞利用5h学透", "https://mp.weixin.qq.com/s/ZeTithhtRYzWMzDu3RNVaw": "证书站一个系统八个漏洞：直接getshell ！！!", "https://mp.weixin.qq.com/s/L9aD6pvm5li-fOE9_h3UoQ": "回顾 2025：通过漏洞赏金赚到 4300 美元，并参加 SABF（南美商业论坛）", "https://mp.weixin.qq.com/s/Dq2ytIz3qjk5naK4qVX5gw": "Burp Suite 还能这么用？明动插件让漏洞挖掘快人一步！", "https://mp.weixin.qq.com/s/0Bg6aTiSrDTPu8y-zcSOjQ": "【接口漏洞第五章第二节】API批量赋值漏洞实战：以电商折扣参数篡改为例", "https://mp.weixin.qq.com/s/6iQjol9GyDitfNqj-gcZqQ": "漏洞预警｜Apache Struts S2-069 XML外部实体注入（XXE)漏洞（CVE-2025-68493)", "https://mp.weixin.qq.com/s/ZCEmaXbbKvCGxyiftrzvgw": "Nginx CRLF注入漏洞解析", "https://mp.weixin.qq.com/s/QFdrMNkQpHUzCv6CuKlNJA": "【已复现】MindsDB 未授权路径遍历漏洞(CVE-2025-68472)", "https://mp.weixin.qq.com/s/viB-17BBXdRJezVWBDgUWg": "SRC漏洞挖掘3", "https://mp.weixin.qq.com/s/grMMYrfGjOIoHLEU5XegpA": "Struts2 S2-069 XXE漏洞 (CVE-2025-68493) 来袭，腾讯云主机安全RASP可自动防护", "https://mp.weixin.qq.com/s/JimFtzbF_y8qYZyEQ-L4bw": "【安全圈】GoBruteforcer 僵尸网络利用弱凭证攻击加密货币项目数据库", "https://mp.weixin.qq.com/s/GW9QZwVLC7WAsZ8aD5wVqA": "2个由注册点导致垂直越权的漏洞案例", "https://mp.weixin.qq.com/s/LnLN0qZoNCzXqTCoPggRdw": "G.O.S.S.I.P 阅读推荐 2026-01-13 十三年零漏洞的密码学算法库，翻车了？", "https://mp.weixin.qq.com/s/c9xsOVTI7ENkB6KXQtULzA": "【高危漏洞预警】Apache Struts外部实体（XXE）注入漏洞S2-069(CVE-2025-68493)", "https://mp.weixin.qq.com/s/2N2uaINgV3fFAKNWu1ConQ": "【复现】n8n表达式注入可导致远程代码执行漏洞（CVE-2025-68613）", "https://mp.weixin.qq.com/s/5ZIYXqljUjGEFCLkIlhXzg": "SRC漏洞挖掘1", "https://mp.weixin.qq.com/s/T3EB0nqxrR-GjClrTOVjhQ": "工具推荐 | 开源Shiro图形化漏洞综合利用工具", "https://mp.weixin.qq.com/s/GbmIyGNB3Gd16n9RCCyPCg": "大华智能物联管理平台evo-apigw∕evo-arsm∕1.0.0∕ars∕list接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s/9bN76uwbuVx6Eubt0eJ4ag": "【安全工具】从底层突破WAF：自动化发现协议级漏洞，绕过Web防火墙", "https://mp.weixin.qq.com/s/x0IfVdTtl1MR0mtui-U7Hw": "SpringBoot-Scan：针对Spring Boot的漏洞扫描和渗透工具", "https://mp.weixin.qq.com/s/1VV5prc9RuR50vofXJm-CA": "【已复现】Apache Struts XML外部实体注入漏洞(CVE-2025-68493)", "https://mp.weixin.qq.com/s/lsolNeaCSoJSBIKjj-RhlA": "黑客利用浏览器内嵌漏洞劫持Facebook账号", "https://mp.weixin.qq.com/s/6BxQCqsuHm7XrmRaFGc9nA": "漏洞预警 | n8n沙箱绕过、请求处理不当和远程代码执行漏洞", "https://mp.weixin.qq.com/s/Qa2ZUsXdbhKPWY7Ynsfy5A": "一款集成各大漏洞检测的burp插件", "https://mp.weixin.qq.com/s/LvHrdh2Qn-oM99O6hzwjCA": "CVE-2026-22718：已停止维护的 Spring CLI 工具（适用于 VS Code）被发现存在命令注入漏洞", "https://mp.weixin.qq.com/s/9LbweukWUB_FJ1WNRukY8Q": "云存储桶漏洞检测浏览器扩展", "https://mp.weixin.qq.com/s/WPqyRdw6Vt1kN9UYyFw00w": "漏洞预警 | 金和OA SQL注入漏洞", "https://mp.weixin.qq.com/s/ILYftCZzycAe4wW0NFZbdg": "漏洞预警 | 东胜物流软件SQL注入漏洞", "https://mp.weixin.qq.com/s/q8UrZb82gmCQn7F3njNcxA": "Fidelity充电桩AI量化理财系统存在前台任意文件上传漏洞", "https://mp.weixin.qq.com/s/-b-jZJ0FjhdGLc7DwC27iw": "基于代码相似性的软件漏洞检测研究进展", "https://mp.weixin.qq.com/s/4S6_d2xWMTLZ9FIp2X6j2A": "微软1月补丁日多个产品安全漏洞风险通告：1个在野利用、8个紧急漏洞", "https://mp.weixin.qq.com/s/HJRgndF4AQea8RhYWvXT2g": "漏洞挖掘实战系列（第10期）：网络安全实战工具包 10款高频工具从入门到进阶用法全解析", "https://mp.weixin.qq.com/s/tiEV8NdyhAY5Z_Pf-Jod5w": "东胜物流软件 DsWebService.asmx sql注入漏洞", "https://mp.weixin.qq.com/s/ykM-IfNtefsG1ECL2Inw_Q": "SBSCAN是一款专注于spring框架漏洞扫描与验证的综合利用工具。", "https://mp.weixin.qq.com/s/zsXdExrrBN4wJeJd2vNrUg": "关于防范MongoDB数据库内存泄露高危漏洞的风险提示", "https://mp.weixin.qq.com/s/kIfa5d6r-MUXJOClfUMBGw": "成果分享 | 智能体漏洞检测 [ASE'25, Security'25∕26, BlackHat EU]", "https://mp.weixin.qq.com/s/NESkaHThfNlTmA-zV2vgfQ": "深入DirtyPipe（CVE-2022-0847）：从内核到利用全解析", "https://mp.weixin.qq.com/s/0ED1GHRtViNjD_7FoiLLTQ": "Fidelity充电桩AI量化理财系统存在前台任意文件上传漏洞", "https://mp.weixin.qq.com/s/4wpHbE28_Y2APBgmByXZJA": "【edu实战】记⼀次⼩程序泄露16 W+敏感信息，接管18000+账号的漏洞挖掘", "https://mp.weixin.qq.com/s/lo78rWLUs2Q0sJNONpOUSg": "漏洞复现 | Sangfor 运维管理系统任意文件上传漏洞", "https://mp.weixin.qq.com/s/5uHhl2LMTM84fMCx2m62KA": "CNNVD | 关于Apache Struts安全漏洞的通报", "https://mp.weixin.qq.com/s/4CJS8kU_z3hueNuh7QR4sw": "【已复现】Appsmith Origin 校验不当导致账户接管漏洞(CVE-2026-22794)", "https://mp.weixin.qq.com/s/rzaFtbF5rfwwFrAAJYQF7g": "山石安全能力中心｜微软1月份漏洞补丁日安全通告", "https://mp.weixin.qq.com/s/adFfUTGiyzoWxVbJAsf8Yg": "【安全更新】微软1月安全更新多个产品高危漏洞", "https://mp.weixin.qq.com/s/t7QoWPxUp8USgf_Lrecn7w": "Node.js发布安全更新，修复所有维护版本中的7个漏洞", "https://mp.weixin.qq.com/s/glMqepO7E18m6zpd2AGEZg": "查找摄像头漏洞，黑客只需要一步", "https://mp.weixin.qq.com/s/7AvMuFD5SYFbiu-D3hgDgg": "漏洞验证效率翻倍：从碎片化工具链到一体化工作流", "https://mp.weixin.qq.com/s/aPaFNFqlkpXP8aPiCup2wA": "AdonisJS 任意文件写(CVE-2026-21440) 漏洞复现", "https://mp.weixin.qq.com/s/f0yAso4qbjUZCvnduP8cSQ": "信息安全漏洞周报（2026年第2期）", "https://mp.weixin.qq.com/s/6S_SvGnZoUPOXYC9TOmT0Q": "【已复现】OpenCode 命令执行漏洞(CVE-2026-22812)", "https://mp.weixin.qq.com/s/TLmcZCSNqvaijwaNYbA2hA": "灵脉IAST 5.4 | AI漏洞治理 X 业务逻辑漏洞检测", "https://mp.weixin.qq.com/s/RTCyP7zQZt8lHEXp1jXVMg": "src|暴力破解漏洞", "https://mp.weixin.qq.com/s/qk4dy5IGDzkumxnbjXk67g": "OpenSSH 严重漏洞可导致 Moxa 以太网交换机易受RCE攻击", "https://mp.weixin.qq.com/s/esEKHdsK3auQq7EuHPxF1w": "WiFiSRC全新版本正式上线！新年漏洞征集活动同步开启", "https://mp.weixin.qq.com/s/JlNLec35e11XNh0grjYaeA": "【漏洞通告】微软1月多个安全漏洞", "https://mp.weixin.qq.com/s/SRTnftpUsARhmd4XQQziyA": "微软紧急修复DWM组件0-Day信息泄露漏洞（CVE-2026-20805）", "https://mp.weixin.qq.com/s/x8lMF2ne5hmBCTBuO30a-g": "2026-01微软漏洞通告", "https://mp.weixin.qq.com/s/T6-eMbMq9V19BvgNcGfHKw": "智能工业网关：私有协议解析中的栈溢出漏洞深度剖析", "https://mp.weixin.qq.com/s/ThpBkW6ebOXaQUUbjp9fhg": "Nessus插件开发实战：从零开始编写高效漏洞扫描脚本", "https://mp.weixin.qq.com/s/5V8rdB4RbWBZ5RHAtvH8sg": "预警丨防范MongoDB数据库内存泄露高危漏洞", "https://mp.weixin.qq.com/s/eWJKz3VTyWpqdvvIgxpw4Q": "【WordPress专题07】一文搞懂 如何对WordPress进行漏洞探测", "https://mp.weixin.qq.com/s/2rdlLLOe1SSFhQTNU3b7DQ": "微软2026年1月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s/uyorC2UfWcrlTbxumui8jg": "周五20点直播 | 想挖IoT漏洞？这个Tenda 0day案例你不能错过", "https://mp.weixin.qq.com/s/kWa5wNnZz0m982iImR81GA": "【高危漏洞预警】Appsmith Origin验证漏洞(CVE-2026-22794)", "https://mp.weixin.qq.com/s/yyE_wt9dhdhoEACiZ5tITQ": "CNNVD关于Apache Struts安全漏洞的通报", "https://mp.weixin.qq.com/s/g3SgjJUU9JCvTkkfqdUeIQ": "[跟着静师傅学代码审计]九垠赢商业管理系统0day-文件上传和任意文件下载", "https://mp.weixin.qq.com/s/QnyzSIVUuNWYE15IivvDkA": "关键的FortiSIEM漏洞允许攻击者通过TCP数据包执行任意命令", "https://mp.weixin.qq.com/s/03Zc3udyUEiDBIV-A1YhYQ": "【安全圈】微软桌面窗口管理器0Day漏洞遭野外利用", "https://mp.weixin.qq.com/s/rn3OQz6cN9KsXLmWrxem7w": "灵脉IAST 5.4 | AI漏洞治理 X 业务逻辑漏洞检测", "https://mp.weixin.qq.com/s/-qCpu0uhR87pQ_sGUm7smA": "【已复现】OpenCode 命令执行漏洞(CVE-2026-22812)", "https://mp.weixin.qq.com/s/oDKOs6Ee-y5Yjf344oginQ": "从低空到太空：中科数测研究院发现空间通信核心漏洞——直指 NASA 航天加密体系底层安全", "https://mp.weixin.qq.com/s/kF0D21R7rvIFKCqRdbIg9w": "【漏洞通告】Apache Struts XML外部实体注入漏洞（CVE-2025-68493）", "https://mp.weixin.qq.com/s/6gsTRGJNV0Cz1JSMF_u4_Q": "利用不安全的模板格式化在 LangSmith Playground 中实现远程代码执行", "https://mp.weixin.qq.com/s/ldpVaQBuEvmu9wqtJ79xLA": "Struts2 XXE漏洞（CVE-2025-68493）分析及复现", "https://mp.weixin.qq.com/s/OuRt_afnVoQ21XrCIabGYQ": "高危漏洞威胁情报合集 (2026-01-14）", "https://mp.weixin.qq.com/s/urblBuPWzhxefl75bq_Cpw": "【接口漏洞第六章第一节】你以为前端参数可控就安全了？聊聊服务器端参数污染", "https://mp.weixin.qq.com/s/6IlwHMux-32N_F-zk-pc4A": "致命的波塞冬核漏洞", "https://mp.weixin.qq.com/s/vSN5ZYJ6fmravzD3_-kX_Q": "Edusrc 垂直越权通杀漏洞实战 & 985证书站实战案例", "https://mp.weixin.qq.com/s/TMW0L3YuO0zn41uJjcI8ng": "企业SRC赏金漏洞挖掘实战-多个奖励条件绕过漏洞", "https://mp.weixin.qq.com/s/yUzINvq_nFsWHmkDDNcJcA": "1day | Apache Struts XML外部实体注入漏洞(CVE-2025-68493)", "https://mp.weixin.qq.com/s/O25H79ucdyy02eK-c_Qg9w": "漏洞预警 | jsPDF路径遍历漏洞", "https://mp.weixin.qq.com/s/Dpxr8JtdfDxf70JF528Hww": "关于 VulnHunter -AI 漏洞猎人v6.0 版本发布推迟", "https://mp.weixin.qq.com/s/38xOy1EufX7O3hyaPnYpcw": "恶意数据被“合法保存”的那一刻，漏洞已经注定：二次 SQL 注入实战解析", "https://mp.weixin.qq.com/s/V-fZw5b5HRE8wgW45cSyLA": "漏洞预警 | 金和OA SQL注入漏洞", "https://mp.weixin.qq.com/s/pFh0cr075M0AfeYlbEkAYQ": "记一次SRC支付漏洞实战", "https://mp.weixin.qq.com/s/xHuk0jOWdU8x_0Tk6hVO5w": "Letta 代码执行漏洞 (CVE-2025-51482)", "https://mp.weixin.qq.com/s/eS-FvpSFjOHKXe3N3f1XOw": "命令注入警报：LoadMaster 和 MOVEit WAF 存在高危漏洞", "https://mp.weixin.qq.com/s/JxRtiE-sFNOEXTVr2o4ynw": "漏洞预警 | 东胜物流软件文件删除漏洞", "https://mp.weixin.qq.com/s/oD29J03OgvSV7eJXFoU1BA": "VPN漏洞频发，威努特零信任如何守护企业数字边界？", "https://mp.weixin.qq.com/s/_mydGg7gIcMOzo0sCTAmzg": "Struts2 XXE漏洞（CVE-2025-68493）分析及复现", "https://mp.weixin.qq.com/s/XQQk-7TPy-CcbFdreanKRw": "漏洞预警 | 金和OA SQL注入漏洞", "https://mp.weixin.qq.com/s/3d0a67AFBIlhNvHPlA8aKA": "微软桌面窗口管理器零日漏洞已被利用", "https://mp.weixin.qq.com/s/DqbvIy7T2ta_He_iujhk_Q": "漏洞预警 | 天锐绿盾审批系统信息泄露漏洞", "https://mp.weixin.qq.com/s/hnKUnmJfbbmtbzeNKPAw2A": "漏洞预警 | Langflow身份验证缺失漏洞", "https://mp.weixin.qq.com/s/-KOr55KBNLuRIL4DOKFLFg": "【玄域】Web∕App靶场 | 面试题库 | 实战漏洞报告 | 体系化学习", "https://mp.weixin.qq.com/s/0FhKQ3o-o0FO13nF1MTuIA": "Shiro漏洞利用工具，更新V0.2！", "https://mp.weixin.qq.com/s/eqjUxhBJpfyiGuN9nL5-8g": "漏洞挖掘实战系列（第11期）：漏洞挖掘思维模型 从“没思路”到“稳定挖洞”的完整方法论", "https://mp.weixin.qq.com/s/m7oXfnmFDXr5LQQ0PLjtDQ": "Edusrc 垂直越权通杀漏洞实战 & 985证书站实战案例", "https://mp.weixin.qq.com/s/eVA8QMlPBfaOKb_l5vuyug": "CVE-2025-55182 漏洞检测与利用工具（GUI版）", "https://mp.weixin.qq.com/s/fYbsIINfX9bWrHt3cCy09Q": "【漏洞检测POC】Apache Struts XML外部实体注入漏洞（CVE-2025-68493）", "https://mp.weixin.qq.com/s/lkj2G5HhYyv7-vTiq4A-pA": "【成功复现】Apache Struts XML外部实体注入漏洞(CVE-2025-68493)", "https://mp.weixin.qq.com/s/RLPkb1Uk3h1UoqdPJYxElg": "nuclei POC辅助编写（管理）工具 -- nucssist（1月12日更新）", "https://mp.weixin.qq.com/s/fF6zvYGfgxgXeDBq-bGxtA": "深度强化学习求解虚拟网络映射（Energy efcient resource allocation based on virtual  network embedding for IoT data generation）", "https://mp.weixin.qq.com/s/b44MRFIwb-RbU4fs_2wLeQ": "CVE-2025-64155：Fortinet FortiSIEM 远程 Root 漏洞已存在三年", "https://mp.weixin.qq.com/s/1ZorRKtuEcDa58ZGJULtEw": "CVE-2025-53136 通过竞争条件泄露内核信息", "https://mp.weixin.qq.com/s/xDIpyd0ukxkrhOpOUHYb-Q": "微软桌面窗口管理器0Day漏洞遭野外利用", "https://mp.weixin.qq.com/s/EUrm-RAXteMpR7WgMH4jfg": "Apache Struts XML外部实体注入漏洞复现(CVE-2025-68493)", "https://mp.weixin.qq.com/s/X9dsHKCPfrR0ZxgW28Bkyw": "关于防范MongoDB数据库内存泄露高危漏洞的风险提示；AI安全工具选型指南：企业为何放弃新兴厂商，转投行业巨头？| 牛览", "https://mp.weixin.qq.com/s/Zq4GNRjWh2TOEa1-3lbsNQ": "若依(RuoYi)框架漏洞战争手册", "https://mp.weixin.qq.com/s/aQPGjD_lgc2yeiRvlh21tQ": "src | 奇怪的任意用户重置密码组合拳漏洞", "https://mp.weixin.qq.com/s/NLxdfT9NogTJAfwukKUN0g": "CVE-2026-21858 因不当的 Webhook 请求处理而易受未认证文件访问", "https://mp.weixin.qq.com/s/FRaqBhIadnr7GcY6btWQQA": "TsojanScan-Plus：基于原 Burp 漏洞插件重磅二开，新增多漏洞扫描与权限绕过检测", "https://mp.weixin.qq.com/s/0DQyyxO7cbELzJXbxF4A2g": "Apache Struts XWork XML外部实体注入漏洞CVE-2025-68493 附POC", "https://mp.weixin.qq.com/s/6uySS-_s-aqoFkX_j7WD7A": "【1】深入解析CVE-2025-38352：Android内核漏洞实战分析与PoC", "https://mp.weixin.qq.com/s/aExQGs2gTUkNPVldS9DJqw": "奇安信发布智能网联汽车云平台漏洞报告：九成存漏洞，超七成涉高危风险", "https://mp.weixin.qq.com/s/_qP0F-OWAtX5fs5wBq813Q": "【已复现含payload】Apache Struts XML外部实体注入漏洞(CVE-2025-68493)", "https://mp.weixin.qq.com/s/t6Drg3nMdUZ-L0Oxp019Lw": "高危漏洞威胁情报合集 (2026-01-15）", "https://mp.weixin.qq.com/s/Rc9TkUvxsM7arEZH0xVGwg": "【高危漏洞预警】React Router目录遍历漏洞CVE-2025-61686", "https://mp.weixin.qq.com/s/TRJ79gWpK6ySL8eWSCNlfQ": "0117.我是如何发现 Google 表单漏洞的（重复内部漏洞 - 已修复）", "https://mp.weixin.qq.com/s/UCWuVh9FyPK4UuHDSnQyTw": "Microsoft SQL Server 存在允许攻击者通过网络提升权限漏洞", "https://mp.weixin.qq.com/s/xWXN5qkbYcqzD1CiJw4ZRA": "【接口漏洞第六章第二节】参数污染漏洞挖掘详解：“截断”与“注入”实操手册", "https://mp.weixin.qq.com/s/P7LUgCXPzvgAqnkbVvtwCQ": "Palo Alto Networks 紧急修复高危漏洞，攻击者可致防火墙瘫痪", "https://mp.weixin.qq.com/s/NpWOsqNUORqxRr2mbrBPVg": "【安全圈】Apache Struts 2曝高危漏洞：攻击者可窃取敏感数据", "https://mp.weixin.qq.com/s/El2tuGXioev1OLnh4UAY-g": "【高危漏洞预警】OpenCode AI编码代理未认证HTTP服务器漏洞(CVE-2026-22812)", "https://mp.weixin.qq.com/s/D77FQsOSjOrpWw_iM5ULQQ": "CVE-2026-22688 - 腾讯WeKnora MCP Stdio 命令注入漏洞", "https://mp.weixin.qq.com/s/sDNw3Z-HFEu-uqUVotJxAQ": "CVE-2025-68613 n8n 表达式沙箱逃逸导致远程代码执行漏洞", "https://mp.weixin.qq.com/s/gMApo9A53g1cyOsjEY_3ng": "新款Shiro漏洞利用工具- Y5neKO", "https://mp.weixin.qq.com/s/D6QOwnZyGCABOHqgwoeS0g": "好靶场-n8n-CVE-2026-21858+CVE-2025-68613", "https://mp.weixin.qq.com/s/l8NjnTC6d97KOval3n3Ddg": "[跟着静师傅学代码审计-全网首发]用友U9 V6.6企业版多组织企业互联网应用平台命令执行+SQL+反序列化", "https://mp.weixin.qq.com/s/7BenYewwA8iPYwNxYoSI8Q": "【漏洞通告】Fortinet FortiSIEM phMonitor服务命令注入漏洞(CVE-2025-64155)", "https://mp.weixin.qq.com/s/Emdlk-rzUIlwcDgiBHixwQ": "【已复现】OpenCode 远程代码执行漏洞(CVE-2026-22812)安全风险通告", "https://mp.weixin.qq.com/s/Q5i060kLY4LYTw4GB2NKag": "Spring CLI 存在允许攻击者在用户系统上执行命令漏洞", "https://mp.weixin.qq.com/s/-JJmGsL98vozGSsTsNjzeA": "【已复现】React Router 未授权路径遍历漏洞 (CVE-2025-61686)：伪造 Cookie 即可实现任意文件写入", "https://mp.weixin.qq.com/s/b5MKtI8-KE8XnrTRcakwNg": "【安全圈】微软Copilot曝一键式漏洞：攻击者可悄无声息窃取敏感数据", "https://mp.weixin.qq.com/s/ovrVymMdg6P-TJ-kdQnXUw": "奇安信发布智能网联汽车云平台漏洞报告：九成存漏洞，超七成涉高危风险", "https://mp.weixin.qq.com/s/DV2FAygAM4WNVBGqQA_cAQ": "一键化渗透神器，集成20+工具，子域收集、指纹探测、漏洞扫描全搞定！", "https://mp.weixin.qq.com/s/AhppWF4s8JcKkQBzAySbyw": "在线阅读版：《智能网联汽车云平台漏洞分析报告》全文", "https://mp.weixin.qq.com/s/2RZSyd8jifzLyt3GN3HTgA": "天价Android 0day漏洞+POC演示，宣称通杀Android12–16", "https://mp.weixin.qq.com/s/xa1X4R2umUfyvAhf-5XJCQ": "智能网联汽车云平台漏洞分析报告（2025）", "https://mp.weixin.qq.com/s/LJElChbwKhLiE8PdB3zP2Q": "Nacos系列漏洞：风险点与综合利用工具详解", "https://mp.weixin.qq.com/s/mIg6N3wObuep42k4jYlRmA": "【逻辑漏洞】 从应用场景看金融安全— 逻辑为王", "https://mp.weixin.qq.com/s/9hj1H4U6bT4iKFSUV3xTpg": "【漏洞复现】Apache Struts S2-069 XXE漏洞 CVE-2025-68493", "https://mp.weixin.qq.com/s/velZeusv0yDgOI_rFbonpg": "致远OA rce", "https://mp.weixin.qq.com/s/brVPs4QPTMNF4RWtr6ROaQ": "信息安全漏洞周报【第056期】", "https://mp.weixin.qq.com/s/zorOAGoejzYgGjbkQ6oEkA": "shiro反序列化漏洞综合利用,包含（回显执行命令注入内存马）", "https://mp.weixin.qq.com/s/Ylq1fBNXvgtO-7UM10bVng": "【已复现】OpenCode 远程代码执行漏洞(CVE-2026-22812)", "https://mp.weixin.qq.com/s/5nVJwmjV2hKM1G0UUSz4Pw": "React2Shell 图形化漏洞检测利用工具", "https://mp.weixin.qq.com/s/dgwBqMrpBt1VcDjS_r_lxQ": "网安实验干货每日分享XSS跨站脚本-DOM型XSS漏洞挖掘1-0116", "https://mp.weixin.qq.com/s/rkbZdimyIlDEXVVKQiEiPg": "HPE Aruba漏洞致敏感信息遭未授权访问", "https://mp.weixin.qq.com/s/bLbQxfopQOWPcYWK1-u_Mg": "用友NC存在反序列漏洞", "https://mp.weixin.qq.com/s/ImO213-xjBIXInTn5GHI6A": "从PhpmyAdmin getshell到某CMS后台SQL注入漏洞", "https://mp.weixin.qq.com/s/PiYjB2IBUgLYwCVHs5M99w": "2026高危端口漏洞", "https://mp.weixin.qq.com/s/5dSPARFn1uwmuD8s-t_Z-A": "能信安：漏洞通告", "https://mp.weixin.qq.com/s/xWhzRjzUYmoCUZyawBlE3w": "【漏洞复现】致远OA wpsAssistServlet 任意文件上传漏洞", "https://mp.weixin.qq.com/s/ETpsLUR_6oj9Tfo5BDAjfg": "【已复现】FortiClientEMS SQL 注入漏洞可导致远程代码执行(CVE-2025-59922)", "https://mp.weixin.qq.com/s/PZ8ZvUO4_Zee84flXO3v6Q": "【已复现】全程云OA QCHMS.asmx SQL Injection", "https://mp.weixin.qq.com/s/uub9l6ACfdQ8qSYF6Nz0DA": "CVE-2026-20824漏洞：Windows远程协助存在安全功能绕过风险", "https://mp.weixin.qq.com/s/Do8CX__aKjtOPZbpVADeww": "威胁组织利用信息窃取器窃取企业云凭证，多因素认证缺失成最大安全漏洞", "https://mp.weixin.qq.com/s/3QOLtuqu0jX5YbmiAFRSPA": "SOC342 — CVE-2025-53770 SharePoint ToolShell 身份绕过与远程代码执行", "https://mp.weixin.qq.com/s/-LnxpwYw6Lz4ayZ1yywn1A": "致远OA wpsAssistServlet 任意文件上传漏洞(CVE-2025-34040)", "https://mp.weixin.qq.com/s/5j6wHqjHmWvrEh888ybYjQ": "外卖平台惨遭黑手！系 Salesforce 系统数据泄露蝴蝶效应", "https://mp.weixin.qq.com/s/r-i-YsG7aByjODbvz8mQjQ": "漏洞复现 | 大华ICC智能物联管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s/yE0DPZQkxpMrn-dY1IwROQ": "Apache Struts XWork XML漏洞CVE-2025-68493 poc及脚本", "https://mp.weixin.qq.com/s/lVfChUZIiaiW82dSJhh3KA": "你想拥有一个自己开发的漏洞靶场吗？", "https://mp.weixin.qq.com/s/wUIhnvYbUIO9B2lT0En5OQ": "Cisco 0-day RCE 安全邮件网关漏洞在野外被利用", "https://mp.weixin.qq.com/s/Kyl7XigvyllXXe5qcu4jbg": "安全热点周报：微软修复 2026 年 DWM 中首个信息泄露零日漏洞", "https://mp.weixin.qq.com/s/Onp-0m-Z47peRh7zz_OGhg": "漏洞挖掘实战系列（第12期）：业务逻辑漏洞挖掘 从“会技术”到“能挖真实漏洞”的关键一步", "https://mp.weixin.qq.com/s/fH2llcfoXD7qtsjXnIUAZg": "Windows远程协助漏洞可绕过安全防护机制", "https://mp.weixin.qq.com/s/M-R_ZaDuPCirHuX2Q7XVGQ": "【漏洞通告】opencode-ai 未认证 HTTP 服务导致任意命令执行漏洞(CVE-2026-22812)", "https://mp.weixin.qq.com/s/R6Z77S_ZfQDVuiKc28ODqA": "从 XSS 到 RCE：Electron 应用中的真实攻击链", "https://mp.weixin.qq.com/s/8cPfjKDIv--UxX-zRRRb8w": "绿盟漏洞情报（2026-01-16）", "https://mp.weixin.qq.com/s/yZEf4aY3Rh7ycxSOz2acjg": "“零点击”数据泄露：企业级AI Gemini Enterprise漏洞如何让AI成为企业安全新威胁", "https://mp.weixin.qq.com/s/_wwFv0e3Ny7aygxs09AZ8w": "【AI漏洞】重磅！微软Copilot存在“Reprompt”攻击", "https://mp.weixin.qq.com/s/PD1mfrZ9G5VBKJA3MtsLyQ": "今晚20点直播 | 想挖IoT漏洞？这个Tenda 0day案例你不能错过", "https://mp.weixin.qq.com/s/UOwZCl-WxvefyRv76t9Z6g": "北京大学 | ContractTinker：基于大语言模型的真实场景智能合约漏洞修复系统", "https://mp.weixin.qq.com/s/P3sWlLs3xrR_bVkO24Kreg": "【附POC及复现环境】Appsmith任意用户密码重置漏洞（CVE-2026-22794）", "https://mp.weixin.qq.com/s/3PMdID0xfTN7iyYRYF9Eug": "OA渗透测试的思维盲区：从漏洞猎人到系统拆解师", "https://mp.weixin.qq.com/s/XV5recnrGHolaTpSJvvJ9g": "人工智能重要漏洞通报（2026年第一期）", "https://mp.weixin.qq.com/s/iH1BrFH9L5jdui29ygz2dw": "【漏洞预警】Fortinet FortiClientEMS SQL注入漏洞CVE-2025-59922", "https://mp.weixin.qq.com/s/HTvxV0A0eZvqEmkCupdRaQ": "美国网络安全和基础设施安全局 (CISA) 命令联邦政府修复 Gogs 远程代码执行漏洞，该 0 day 漏洞已被攻击利用", "https://mp.weixin.qq.com/s/5ghBCECoOHZv98lVUnqD1w": "Android Pixel 9 的零点击漏洞利用链全解析：从发送杜比音频解码到内核提权", "https://mp.weixin.qq.com/s/U69lTph4yYBA2wgfgdFYWA": "密码重置漏洞挖掘指南：从原理到实战的完整路径", "https://mp.weixin.qq.com/s/kcSQCa7NWb2LAnq_7MVPsg": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s/TCoaB2A1Dr59aT9ghWRpSA": "【接口漏洞第六章第三节】隐藏在“&”和“#”背后的秘密：我是如何通过参数污染接管管理员账户的", "https://mp.weixin.qq.com/s/B_Y-QOlz09Y5HEtTG-qO8Q": "OpenCode 远程代码执行高危漏洞", "https://mp.weixin.qq.com/s/QnOXeovju8knRcmjUF6hrw": "漏洞复现 | 安科瑞环保用电监管云平台 UploadNewsImg 接口存在文件上传漏洞", "https://mp.weixin.qq.com/s/IirghiQAjQD92d6nowDvxg": "【工具推荐】通达OA漏洞综合利用工具", "https://mp.weixin.qq.com/s/zVTgKjhE09G-8ztTqXy7CA": "国家漏洞库通报Apache漏洞、西班牙能源巨头1TB数据泄露|一周特辑", "https://mp.weixin.qq.com/s/vgqgGHdxw62OlYArhXhB5Q": "RondoDox 僵尸网络在攻击浪潮中针对 HPE OneView 漏洞", "https://mp.weixin.qq.com/s/cnaokGTQ0-W0jUZmni8cCg": "漏洞挖掘实战系列（第13期）：业务逻辑漏洞实战 登录∕支付∕密码重置全解析", "https://mp.weixin.qq.com/s/pNQkwcoOj_dfd22yFJF6lg": "Strix AI驱动的漏洞动态验证能力分析", "https://mp.weixin.qq.com/s/gc6jKK2QuKkiTzHMXsTVTw": "实战中XSS漏洞的挖掘与利用", "https://mp.weixin.qq.com/s/NpYdCE1VqK3Zi25a6RmmMg": "【2】CVE-2025-38352 – 在不打内核补丁的情况下扩展竞争窗口", "https://mp.weixin.qq.com/s/FvjY4VXy2RnktgEzPnrw1A": "通过 AppleKeyStore 引发的 SEP 固件崩溃 - iOS∕macOS 26.x 内核漏洞", "https://mp.weixin.qq.com/s/lO-S_Z5Ih_18k1bR7AUbGw": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s/2uPMY1aXcPbL3m4AH9VtfQ": "CNNVD | 人工智能重要漏洞通报（2026年第一期）", "https://mp.weixin.qq.com/s/3XKSfJTB5yR4XVMLDtw4vg": "渗透测试利器・供应链组件投毒隐患：DNSLog 与 Webhook 平台盘点（无回显漏洞数据外带指南）", "https://mp.weixin.qq.com/s/0WmG2ZUgx8ffmH9g9m_bqA": "【安全圈】男子利用购物平台漏洞窃取用户信息并骗取佣金1878万被判刑", "https://mp.weixin.qq.com/s/OiGevLf5PhkUGZcrDq0ekQ": "【安全圈】AMD Zen 1~5全系CPU曝出StackWarp漏洞", "https://mp.weixin.qq.com/s/rzd1vTKvrVuCpUprR1lwlQ": "Firefox 147发布时修复了16个允许任意代码执行的漏洞", "https://mp.weixin.qq.com/s/11LMAoJ_Vp6swU0esKDMNg": "【接口漏洞第六章第四节】绕过前端限制：浅析REST路径中的服务器端参数污染漏洞", "https://mp.weixin.qq.com/s/mIRWVqNzCk7yoY2bIkLsdQ": "漏洞科普——React Server Components 拒绝服务漏洞（CVE-2025-67779）", "https://mp.weixin.qq.com/s/1LiBtZ-aiY8MLknS81AWRA": "【转载】复盘2025：在WAF的缝隙里开出花来（附EDU通杀0DayPOC）", "https://mp.weixin.qq.com/s/PlmmAvhgmIgFQbdcKkbnrQ": "一次从0到1的逻辑漏洞挖掘之旅", "https://mp.weixin.qq.com/s/9vO2mNzI0F2qonYIsnGV7w": "【代码审计】CVE-2025-46836", "https://mp.weixin.qq.com/s/7oGpjbtH1DhNqt70HwO5PQ": "漏洞复现 | 用友U8Cloud IPFxxFileService 任意文件上传漏洞", "https://mp.weixin.qq.com/s/_nOsFiJOiTwF7Z0A02J0fQ": "【工具分享】MPET (Multi-Protocol Exploitation Toolkit)一款专业的多协议安全测试工具", "https://mp.weixin.qq.com/s/Pv8z7N78Y2dc1PqmQZhieA": "仿真商城漏洞靶场已上线", "https://mp.weixin.qq.com/s/ALKYJ1dxxrpYBL1vKIQ1Zg": "漏洞挖掘实战系列（第14期）：高级SQL注入技巧 WAF绕过+盲注优化+实战案例", "https://mp.weixin.qq.com/s/cFUhkXB_MrB9RX4A6o7bQw": "复盘2025：在WAF的缝隙里开出花来（附EDU通杀0DayPOC）", "https://mp.weixin.qq.com/s/m5fSAgiQPKUgZL0jJD1PJA": "Google Vertex AI漏洞允许低权限用户提升至服务代理角色", "https://mp.weixin.qq.com/s/tzaUxgo2KUBbzKs2UAxAQA": "高危漏洞威胁情报 (2026-01-16）| n8n 任意文件读取漏洞", "https://mp.weixin.qq.com/s/VOCvpGZ4jjSDEZLpkYP5dw": "危险的零点击漏洞", "https://mp.weixin.qq.com/s/zzVML-pKM5_WtGCvqxW_OQ": "美特CRM sendmail.jsp 任意文件上传漏洞", "https://mp.weixin.qq.com/s/KvDgDOWlGNPWV1pKBxaPTQ": "漏洞赏金高达 200 万+RMB 的 0-click 账户接管 MXSS", "https://mp.weixin.qq.com/s/dBHILYO09dGFDcJjxnY7bg": "【接口漏洞第七章第一节】解码vs编码：那个让安全工程师彻夜难眠的JSON处理细节", "https://mp.weixin.qq.com/s/_YiFTKHk_VV9J6DfSL3Qtg": "CVSS满分漏洞：CVE-2025-55182复现，补丁包已发布请尽快升级。", "https://mp.weixin.qq.com/s/hkBcoChdedipM_-fxlnRgw": "第二周战报 | 常态化漏洞挖掘演习", "https://mp.weixin.qq.com/s/_BzHeKPHh9YSZFvwgkVH3Q": "接管AWS核心代码库：供应链劫持漏洞CodeBreach剖析", "https://mp.weixin.qq.com/s/nTfr30OIeCQwgTIcQcplvg": "cve_2025_55182批量漏洞的检测+利用脚本", "https://mp.weixin.qq.com/s/ONPHvG-8sRZOvjC-xn0gFg": "CyberStrikeAI新增fofa_search MCP，自然语言一键搞定靶场发现与漏洞利用", "https://mp.weixin.qq.com/s/eRwnSXNc8nlmOL4Bdn13BQ": "【吃瓜】前男友在某音给女生发约不约是挖漏洞", "https://mp.weixin.qq.com/s/_LqBdT3qaRFzrLYTYUuFpA": "GoBruteforcer僵尸网络新攻势：利用AI生成配置漏洞 瞄准加密货币数据库", "https://mp.weixin.qq.com/s/91BfPYXaxNAC7dh7tddfrg": "Android Pixel 9 的零点击漏洞利用链全解析：从发送杜比音频解码到内核提权", "https://mp.weixin.qq.com/s/IFOTAPxGY6qp66wdFzsKmQ": "漏洞复现 | 泛微e-office dept.wsdl.php 接口存在SQL注入漏洞", "https://mp.weixin.qq.com/s/Hz-zG8YNml4qciVgSVQ2RA": "XXE到Chrome RCE：一次完整的不出网利用实践", "https://mp.weixin.qq.com/s/0mBWLZCuN03TD9zkn_xgrQ": "JShunter | JS 文件终端分析神器 —— 一键提取接口、硬编码密钥与潜在漏洞", "https://mp.weixin.qq.com/s/bmbysdduL2DvagRUJL_vvA": "重塑传统自动化漏洞挖掘的Multi-Agent框架攻防一体化实践", "https://mp.weixin.qq.com/s/x8JBunixigLfS8qVIWR34w": "好靶场-n8n-CVE-2026-21858+CVE-2025-68613", "https://mp.weixin.qq.com/s/J9VVptuaR0MJG1GazP50uA": "来货拉拉SRC，提交任意有效漏洞可得新春礼盒~", "https://mp.weixin.qq.com/s/qqV3bGCkArGJ8xuUOoxkaQ": "漏洞复现 | React Router 未授权路径遍历(CVE-2025-61686)导致任意文件操作漏洞", "https://mp.weixin.qq.com/s/gstdV6rGuKppjiQevwQV0Q": "神农SRC 漏洞挖掘实战课：从 0 到 1 成为赏金猎人", "https://mp.weixin.qq.com/s/8GBueh4NQih0PotdDgWBtQ": "用友NC pkevalset接口存在SQL注入漏洞", "https://mp.weixin.qq.com/s/LVr7_70UBsTxjb67hlS6yw": "短信发送功能点漏洞挖掘", "https://mp.weixin.qq.com/s/ZwxH6FjBYojNeziqjzlzXg": "CVE-2026-0695：ConnectWise PSA 2026.1 中修复了高危 XSS 漏洞", "https://mp.weixin.qq.com/s/3PjV7WIAM1C7Yu7cSLqUcA": "学习干货 | 新手必练！真实复现DMZ区攻防场景与排查思路（附开源环境）", "https://mp.weixin.qq.com/s/gja_iKShxxkPKqOZcZVWEA": "【首发复现】Windows Telephony 服务权限提升漏洞（CVE-2026-20931）", "https://mp.weixin.qq.com/s/yYqal6LytHFRzNX3uROFDA": "漏洞挖掘实战系列（第15期）：文件上传绕过全攻略 前端∕后端∕中间件 全场景实战", "https://mp.weixin.qq.com/s/FyzAVvP2d4GqQY0HovzXKA": "森鑫炬水务企业综合运营平台 Instance∕Get 任意文件读取漏洞", "https://mp.weixin.qq.com/s/iin6FnCBls6Og7NxGDcVMg": "黑客目前正利用 Fortinet FortiSIEM 的严重漏洞发起攻击", "https://mp.weixin.qq.com/s/ddILckBmvEjbFRB5U5TvRA": "虚假 Malwarebytes 活动利用 DLL 侧载漏洞植入信息窃取程序", "https://mp.weixin.qq.com/s/RYCEQYwBD6lnJAg_awvkAg": "Apache ActiveMQ Jolokia 后台 RCE (CVE-2022-41678) 漏洞说明", "https://mp.weixin.qq.com/s/w6W91_wpq2ChPGDE7Sa6vg": "知名心理健康服务平台存在SQL注入 - 0day", "https://mp.weixin.qq.com/s/P1wN63buKdNji9qQ8t1kSQ": "AI 辅助逆向之旅：如何从TP-Link摄像头中挖掘漏洞", "https://mp.weixin.qq.com/s/_GK9VRe22Fx2HZ0vH49tpQ": "最新知识库和漏洞库推荐", "https://mp.weixin.qq.com/s/uEv6-WUzjwrPq_rs_PpiiA": "网安实验干货每日分享XSS跨站脚本-DOM型XSS漏洞挖掘2-0119", "https://mp.weixin.qq.com/s/_0LPA70VR76K_MVtCjNLDg": "【已复现】OpenCode 远程代码执行漏洞(CVE-2026-22812)", "https://mp.weixin.qq.com/s/T3vtmueTfcA52xyb5GfI6A": "近期0day+POC|Windows RCE 0day漏洞利用|最后一个宣称通杀Android12–16", "https://mp.weixin.qq.com/s/HApRIpx4CTwGU12DIqvGMg": "Windows SMB 客户端漏洞使攻击者能够控制 Active Directory", "https://mp.weixin.qq.com/s/MSOPSB2DZ06wA26_u6EvYg": "【玄域】web∕app靶场-新增加验证码缺陷&密码重置靶场 | 新增3份实战漏洞报告", "https://mp.weixin.qq.com/s/bLqzhkbXphjnraVR320nKQ": "历时数十年的漏洞与新堆损坏问题，Linux系统关键glibc漏洞曝光", "https://mp.weixin.qq.com/s/czIlh7tQrNqXTdayQqbe1A": "Windows SMB 客户端漏洞使攻击者拥有 Active Directory", "https://mp.weixin.qq.com/s/ILs6qgUtG55kwOuN5LwYOA": "xxl-job 越权漏洞", "https://mp.weixin.qq.com/s/5G4ZzkBBqgNghbSdO6udhg": "工信部网络安全威胁和漏洞信息共享平台发布高危漏洞风险提示", "https://mp.weixin.qq.com/s/irc5ZXTDoJvkAbBURKMwAw": "【接口漏洞第七章第二节】服务器端参数污染漏洞综述：从原理、检测到手动验证指南", "https://mp.weixin.qq.com/s/wm4nZKidPnrlfrCrL3mEHg": "CNNVD：人工智能重要漏洞通报（2026年第一期）", "https://mp.weixin.qq.com/s/WPuHZF38dJqPPssvnhLu9Q": "谷歌蓝牙漏洞危及数亿音频设备", "https://mp.weixin.qq.com/s/vHyPpvfDS2fnXcF-n7z-qw": "横跨数十年的漏洞与新型堆破坏：glibc 重大安全缺陷曝光", "https://mp.weixin.qq.com/s/gdwjni_xpqT1VPO9xmPr-A": "CNVD漏洞周报2026年第2期", "https://mp.weixin.qq.com/s/eKDUqh53is62L0GmJ6GRoQ": "【40万POC？？？】小场面，看纽克如何拿捏海量POC场景", "https://mp.weixin.qq.com/s/cwNoi8Ad_rCeOuNyD9_VrA": "【漏洞通告】n8n Python 任务执行器沙箱逃逸导致任意代码执行漏洞(CVE-2026-0863)", "https://mp.weixin.qq.com/s/REXQt-uAdwXPzL12TSu_zw": "上周关注度较高的产品安全漏洞(20260112-20260118)", "https://mp.weixin.qq.com/s/KNCcrFOVj_guhGClQ0L15Q": "【安全圈】Deno 曝出高危漏洞（CVE-2026-22863 和 CVE-2026-22864）可导致密钥泄露与任意代码执行", "https://mp.weixin.qq.com/s/HGfePvNmp1BseCZuwrmg8A": "Deno曝出高危漏洞可导致密钥泄露与任意代码执行", "https://mp.weixin.qq.com/s/7T6A0ZDwpu5GfVkvYUPPuw": "【已复现】n8n 沙箱逃逸导致远程代码执行漏洞(CVE-2026-0863)", "https://mp.weixin.qq.com/s/2rCGeQa4s1MwvLnhtpZGXg": "严重的FortiSIEM漏洞已遭利用", "https://mp.weixin.qq.com/s/AYAqm-EsqYeR8l20S4ndPg": "苹果督促用户更新 iPhone 至 iOS 26.2，以修复遭黑客利用的 WebKit 安全漏洞", "https://mp.weixin.qq.com/s/IXC4ipNSzJ9A-hZCluGBYA": "浙江宇视视频管理系统setNatConfig命令执行漏洞", "https://mp.weixin.qq.com/s/ceYfAtd_8nK_R5owDQtV9Q": "Langflow远程代码执行漏洞（CVE-2025-3248）", "https://mp.weixin.qq.com/s/NOQTXLMpKN92wMrcHjteMQ": "【安全资讯】谷歌 Project Zero 披露 Pixel 9 严重 0-click 漏洞利用链！发送音频文件无需交互即可内核提权控制手机", "https://mp.weixin.qq.com/s/Fd3WRAO6All-iKD-kHZZLA": "CNNVD：人工智能重要漏洞通报（2026年第一期）", "https://mp.weixin.qq.com/s/4xs9nkJAsy4HXQ3jCnUZDA": "【高危漏洞预警】Windows电话服务权限提升漏洞CVE-2026-20931", "https://mp.weixin.qq.com/s/L9iCIbEwjAwmyJUXDvUi9w": "【安全圈】苹果督促用户更新 iPhone 高危漏洞", "https://mp.weixin.qq.com/s/d-F4N_YfiGcQ9gjWcRJLog": "【安全圈】全球恶意广告劫持DNS漏洞，日均欺诈百万用户", "https://mp.weixin.qq.com/s/TU8ffnKzKjnOioP4T1Sh_Q": "Glibc 修复高危堆损坏和已存在数十年的信息泄露漏洞", "https://mp.weixin.qq.com/s/sf5k0lXTB3opsp-acSnp8A": "0day漏洞利用合集", "https://mp.weixin.qq.com/s/nflXSF9y7FE0A5n-uHQOHg": "吃瓜现场：前男友用抖音小号约妹，借口竟说在“挖漏洞”？", "https://mp.weixin.qq.com/s/iVj33mTkm1ItEVdExKEprg": "新型 Kerberos 中继攻击利用 DNS CNAME 绕过缓解措施——POC已发布", "https://mp.weixin.qq.com/s/VoDsZmLIKNTLajTPcBi6ZQ": "流量之眼 - 智能被动漏洞扫描平台", "https://mp.weixin.qq.com/s/j_T9iaGY1oq46mSnvK_rOg": "CVE-2026-23745：node-tar 任意文件覆盖", "https://mp.weixin.qq.com/s/IPLwLwa5yhI1srijYff9fQ": "工业警报：AVEVA 软件中存在严重远程代码执行漏洞，CVSS 评级为 10", "https://mp.weixin.qq.com/s/yl_z9z5lORQ0UCt66ltn4A": "Windows SMB 客户端漏洞使组织面临 Active Directory 完全被攻破的风险", "https://mp.weixin.qq.com/s/yoODAYM6m3H1jjMrmThJYA": "Langflow RCE(CVE-2025-3248)", "https://mp.weixin.qq.com/s/h5HuV1AVYZzPmw5WKUpVxw": "Azure RCE漏洞剖析：单一VM沦陷可致整个租户失守", "https://mp.weixin.qq.com/s/lXSKSNtqKNoRvtRrYFHkOA": "此仓库包含针对易受攻击的 Windows 驱动程序的概念验证 (PoC)", "https://mp.weixin.qq.com/s/AnbKnyQkt7sz51zyxTOUiw": "AI自动化代码审计RCE", "https://mp.weixin.qq.com/s/Fl0BlLmiB0SSoqCCxGklFA": "【漏洞复现】Apache Struts S2-069 XXE漏洞 CVE-2025-68493", "https://mp.weixin.qq.com/s/L5Wok7BVFSCgPrg7_InoVg": "【漏洞复现】大华ICC智能物联管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s/y8wYnzM8gR2OvgoM8esnLg": "CVE-2025-60188 Atarim 插件身份验证绕过漏洞", "https://mp.weixin.qq.com/s/IY_4_bIm9DwuipQDiikF1w": "严重程度最高的 Ni8mare 漏洞影响近 60,000 个 n8n 实例", "https://mp.weixin.qq.com/s/5ze4qDmKflvfq5UYnS2JVg": "漏洞情报(已验证) | 深科特LEAN MES系统FileSync.ashx 存在文件读取漏洞", "https://mp.weixin.qq.com/s/z5nDgsjvuL9qP2eMJEdCJw": "泛微e-office dept sql注入漏洞", "https://mp.weixin.qq.com/s/KpOgJqpQC0WpffV2EGj8mw": "漏洞预警 | Apache Struts XXE漏洞", "https://mp.weixin.qq.com/s/2uOAkz5LnPDd-puFfxc2hg": "中国人民公安大学：浅析车联网漏洞挖掘技术", "https://mp.weixin.qq.com/s/52AoQONvgN2nyDVOsfhjtw": "从资产发现到漏洞利用：一款工具搞定渗透测试全流程", "https://mp.weixin.qq.com/s/rslChRVzWdVeTRVkjQN4Tg": "Pixel 9 零点击漏洞利用链可破坏内核", "https://mp.weixin.qq.com/s/id7weKXxCKScue77LcgcHw": "漏洞复现 | 安科瑞环保用电监管云平台 uploadAttachment任意文件上漏洞", "https://mp.weixin.qq.com/s/SkYyUTxHMC2kYYBYoQrL9g": "漏洞预警 | 孚盟云SQL注入漏洞", "https://mp.weixin.qq.com/s/PoY5WKNoLMfdL5GrkGTOZA": "「吃瓜」前男友抖音小号约妹，借口：我在挖漏洞？", "https://mp.weixin.qq.com/s/cif79qvGRPaK6r43oN3TBw": "漏洞预警 | 金和OA SQL注入漏洞", "https://mp.weixin.qq.com/s/nfqg9uJ0yNqTKFZF1xLZfw": "美国首次公开承认对委内瑞拉使用网络武器：几分钟内关闭并恢复电网供电；2026年1月12-18日CNVD漏洞态势研判报告 | 牛览", "https://mp.weixin.qq.com/s/M1TgMzlXZm7PkALEek8ECg": "Fortinet安全监控系统曝高危漏洞遭积极利用，企业核心威胁感知能力面临失效风险", "https://mp.weixin.qq.com/s/mN4xDSfcapBu2WmfiszgWg": "IM即时通讯系统 fileupload.php 任意文件上传漏洞", "https://mp.weixin.qq.com/s/WqpB99Co-UGRm_LkwHaaRA": "从 XSS 到 RCE：Electron 应用中的真实攻击链", "https://mp.weixin.qq.com/s/TVEryh5WJUyEAYNDtGh_8g": "Jeecg-boot常见漏洞汇总（一）", "https://mp.weixin.qq.com/s/X0b_Wk19h3QlI_OyIr_Q4A": "漏洞验证-帆软 FineReport export∕excel远程代码执行", "https://mp.weixin.qq.com/s/eo4h4_1cX-lXZ_T1zBZX4g": "【漏洞分析】Keras 路径遍历漏洞（CVE-2025-12638）", "https://mp.weixin.qq.com/s/7lWgs_TCUzunvEqFzj6UJw": "漏洞挖掘实战系列（第16期）：SSRF高级利用 攻击内网+云服务+Redis全解析", "https://mp.weixin.qq.com/s/lnkJYBVafFhfPdGyUSI4Cg": "Langflow远程代码执行漏洞（CVE-2025-3248）", "https://mp.weixin.qq.com/s/z2wbPCa9XDALojaG_I3DFg": "0120.我是如何发现 MCP 服务器中一个罕见漏洞的——漏洞赏金计划", "https://mp.weixin.qq.com/s/HsAwrkMW1j-uXjJcTEGKaw": "【高危漏洞预警】n8n Python沙箱绕过漏洞CVE-2026-0863", "https://mp.weixin.qq.com/s/PjIKdLDFSlbgtngWkkxSKg": "【3】CVE-2025-38352 - Chronomaly 漏洞利用挖掘揭秘", "https://mp.weixin.qq.com/s/iJxKvofjWIF_RF9Mxz13Rg": "神农SRC 漏洞挖掘实战课：从 0 到 1 成为赏金猎人", "https://mp.weixin.qq.com/s/gqF_w3ieZZQIBavX73qCNQ": "男子利用购物平台漏洞窃取用户信息并骗取佣金1878万被判刑", "https://mp.weixin.qq.com/s/QFUmL0wD5RRrbcGHiNw3bA": "ASP.NET ViewState反序列化漏洞介绍", "https://mp.weixin.qq.com/s/0HIsZ-1s-e1RwACm5S9PQg": "谷歌 Gemini 提示注入漏洞可用于暴露私有日历数据", "https://mp.weixin.qq.com/s/wBRO68S7gC8b7eyRQanQdQ": "【已复现】GnuPG任意文件写漏洞", "https://mp.weixin.qq.com/s/nFqIpnmjGciYWWsoCqNbzw": "我是如何在 Ruby 应用中发现一个依赖混淆漏洞并最终导致 RCE 的", "https://mp.weixin.qq.com/s/42sGaV-VRo1B2ri9xABgYw": "Apache bRPC存在关键远程命令注入漏洞，影响1.15.0前所有平台版本", "https://mp.weixin.qq.com/s/KCGwiwMQOESKFRD5ee8o6g": "Livewire Filemanager 漏洞导致web 应用易受RCE攻击", "https://mp.weixin.qq.com/s/_uW8aze4RYFzrxVAkw1B8w": "日均欺诈百万用户，DNS漏洞沦为恶意广告温床？", "https://mp.weixin.qq.com/s/aHJ1oDTdTj8UHvpHoQWiqQ": "JWT漏洞原理、攻击、防御全解析", "https://mp.weixin.qq.com/s/pJYpYZbEvTfK6iPdwR8fgg": "Cloudflare WAF存在高危0day漏洞", "https://mp.weixin.qq.com/s/J_s-jJlO-4VTOoZXbfDqkQ": "从资产发现到漏洞利用：一款工具搞定渗透测试全流程", "https://mp.weixin.qq.com/s/3Ag5JRTOkrt1cEBqENrGHA": "VulnHunter - AI 漏洞猎人v6.0 专业级漏洞扫描与渗透测试工具", "https://mp.weixin.qq.com/s/cXYcHI4IGqKKj1kfuT0a5g": "最新知识库和漏洞库推荐", "https://mp.weixin.qq.com/s/RUypCGbGbqyRgEdAup-IMQ": "诗歌竟成AI安全漏洞；朝鲜远程渗透计划年牟利6亿美元 | 2025网安行业优质播客精选集⑭", "https://mp.weixin.qq.com/s/KEVUeGPbhR3FJoeETnneLw": "新型Kerberos中继攻击利用DNS CNAME记录绕过防护措施，PoC已发布", "https://mp.weixin.qq.com/s/U4OsAdecfnVFUDrqs0tl2A": "Src--支付漏洞实战", "https://mp.weixin.qq.com/s/DuVSYgVFLRYerPuu4ZKsQA": "某环保用电监管平台任意文件上传漏洞", "https://mp.weixin.qq.com/s/f0QCqqDHavilKnQx9cTRNA": "【接口漏洞第八章第一节】挖洞前必修课：一文读懂GraphQL API核心概念", "https://mp.weixin.qq.com/s/yyB_uac5NaT8JxsJJQkNhg": "雷神众测漏洞周报2026.1.12-2026.1.18", "https://mp.weixin.qq.com/s/QKRTVKRmEa1Vp-dTs29eqA": "CVE-2025-61686 React Router∕Remix Run 路径遍历漏洞代码分析", "https://mp.weixin.qq.com/s/T9h433xLkgawItlPxzSDxg": "全球恶意广告劫持DNS漏洞，日均欺诈百万用户", "https://mp.weixin.qq.com/s/VQj7Bnes28GLq9mclxLCpQ": "满10人开班：系统0day安全——车联网安全入门（第8期）", "https://mp.weixin.qq.com/s/6jPm01eFstPD9PoKgPnXvw": "新型Kerberos中继攻击利用DNS CNAME记录绕过防护措施 - PoC已发布", "https://mp.weixin.qq.com/s/gkvY_aG8zNbA8m1yc_Eqcw": "DudeSuite 漏洞播报 全网漏洞早知道【20260120】", "https://mp.weixin.qq.com/s/qvfvhWt0gYesQ7G7fF-I2g": "【玄域】web∕app靶场-新增2个验证码缺陷&密码重置漏洞靶场", "https://mp.weixin.qq.com/s/G0Qb0TnBHugPfBp5XjFeMQ": "灵脉IAST 5.4 升级，AI漏洞治理 X 业务逻辑漏洞检测重磅上线", "https://mp.weixin.qq.com/s/tPk20E0aI9aQeeWIdS1hHw": "流量之眼 - 智能被动漏洞扫描平台", "https://mp.weixin.qq.com/s/n33dKB1d9Lh9OdyoO3Nwag": "WEB漏洞扫描器（新增企业版）Invicti-Professional-V26.10.0（自动化爬虫扫描漏洞）更新", "https://mp.weixin.qq.com/s/cPMFl-eQdH4AnUvKjbCKSA": "东胜物流软件GetPrintInfo接口存在敏感信息泄露漏洞 附POC", "https://mp.weixin.qq.com/s/oV5VMLh5jrnmhSMJgkWcig": "NETGEAR 路由器环境模拟与漏洞分析", "https://mp.weixin.qq.com/s/B3Or_U8bsirv2ncZlyMe5A": "Fortinet漏洞、RedLine Clipjack、NTLM破解、Copilot攻击热门事件", "https://mp.weixin.qq.com/s/qF1TAKWiTC11SS3kGaefkw": "工具推荐 | Swagger API漏洞自动化填充参数利用工具", "https://mp.weixin.qq.com/s/iYyM2y6ucPgfs1PTs6Fpcw": "Cloudflare曝零日漏洞：攻击者可借证书验证路径绕过WAF访问任意源站", "https://mp.weixin.qq.com/s/wXYL-QvkaZHnKKfDxUUOgQ": "DeepAudit——代码漏洞挖掘多智能体ai系统", "https://mp.weixin.qq.com/s/LdVOZQlsZNxV9N-ejmYjkw": "大小写即漏洞：sqli-labs 第 27 ∕ 27a 关通关全解析", "https://mp.weixin.qq.com/s/EoNFdD_FYBgna9jGi1Qxew": "DeepAudit——代码漏洞挖掘多智能体ai系统", "https://mp.weixin.qq.com/s/W05-fdErYbJVg6rHPWR2cA": "CVE-2025-60188 Atarim 插件身份验证绕过漏洞", "https://mp.weixin.qq.com/s/bmCWNdDkgoL9vw_w5ezfzw": "漏洞预警 | 东胜物流软件任意文件上传漏洞", "https://mp.weixin.qq.com/s/DuZr2YjuGRdzfmwHkNZqQQ": "漏洞情报(已验证) | 中成科信票务管理系统 SaleProduct.ashx SQL注入漏洞", "https://mp.weixin.qq.com/s/bTwiDDF_e5AOHVLrwkQTCQ": "CVE-2026-0629：TP-Link VIGI漏洞允许攻击者重置管理员密码", "https://mp.weixin.qq.com/s/xEUHkMqbdsvrSjMOvj1FgQ": "SweetBabyScan，一款轻量级内网资产探测漏洞扫描工具", "https://mp.weixin.qq.com/s/AnQSGEY_O2v53cjdIq57Dw": "复现（CVE-2026-21440）@adonisjs∕bodyparser路径遍历漏洞利用", "https://mp.weixin.qq.com/s/F8RsqiH_3AhDzXy3yt1Tyg": "网安实验干货每日分享XSS漏洞分类-0121", "https://mp.weixin.qq.com/s/JlNw3RDiA3tNYT44DhISDw": "漏洞预警 | 金和OA SQL注入漏洞", "https://mp.weixin.qq.com/s/zNwv0w0gMmhgaWLA4bgpdw": "一文解析 .NET 分布式事务组件反序列化漏洞", "https://mp.weixin.qq.com/s/2TCqGHaMP-cSwueyZYYZlg": "Cloudflare修复了ACME验证漏洞，该漏洞允许绕过WAF访问源服务器", "https://mp.weixin.qq.com/s/N-C4nOQ9FdPpdmw9teY_OA": "ImageMagick 安全警报 (CVE-2026-23876)：“XBM”图像上传触发大规模堆溢出", "https://mp.weixin.qq.com/s/vtypoVflLaesW0nsnY48zw": "【红队】一款专业的多协议漏洞利用与攻击模拟平台", "https://mp.weixin.qq.com/s/4QUyKEmv1qfm9lLQEcJUUg": "CVE-2026-21440 AdonisJS框架的关键路径遍历漏洞", "https://mp.weixin.qq.com/s/E3hZnLfIjpqKSjoVCXJ14w": "Redis远程代码执行漏洞曝光：研究人员详细描述了官方容器中针对“简单”堆栈溢出的漏洞利用方法", "https://mp.weixin.qq.com/s/x2G8z7_PAQ0ASGxFEsSK_Q": "漏洞预警 | ComfyUI-Manager远程代码执行漏洞", "https://mp.weixin.qq.com/s/ijrV5xSRx6a2CzFUrlw_CA": "当 Stack Engine 背叛了 CPU：详解 AMD 最新硬件级漏洞 StackWarp", "https://mp.weixin.qq.com/s/ZfCZJU4lZrZg8BJFdl343w": "ShiroExploit_通过另类手法实现Shiro一把梭", "https://mp.weixin.qq.com/s/1iy0aoBNc0b3dvMC1AzjUg": "流量之眼 - 智能被动漏洞扫描平台", "https://mp.weixin.qq.com/s/wZUjoI-UknD3klfEYeNcLg": "【40万POC？？？】小场面，看纽克如何拿捏海量POC场景", "https://mp.weixin.qq.com/s/VH4Gvt_pAy3ik0Yfm-6ADw": "【全网首发】2025 0∕1∕N Day漏洞清单（超长版）", "https://mp.weixin.qq.com/s/HOMtm3b2Kh9FqN2LkKd8Uw": "可访问全球任意主机：Cloudflare WAF 0-day漏洞剖析", "https://mp.weixin.qq.com/s/eJU8djVlEW2tnxBksnOdvA": "Cloudflare WAF 零日漏洞：可访问全球任何主机", "https://mp.weixin.qq.com/s/8tpfLLv56fawojZBhnBjvw": "全是高危漏洞？CVSS 4.0 落地指南想帮安全团队挤挤漏洞的水分", "https://mp.weixin.qq.com/s/5oo7b9TJ20ojauenFrfXJw": "Oracle 2026年1月补丁日多产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s/htPJk0Hp4LLl20Is3pf1lg": "旭帆易云视信息科技有限公司 EasyCVR getbaseconfig 信息泄露漏洞(CVE-2025-1595)", "https://mp.weixin.qq.com/s/Kx71tqWUczeSAZB90SLN_w": "教育类SRC漏洞挖掘场景分析", "https://mp.weixin.qq.com/s/sFLHzWAJCCq4d1zxm6Ftbg": "研究显示：GPT-5.2可稳定量产零日漏洞利用", "https://mp.weixin.qq.com/s/4zDilvWzK5g7sogY6YkyPg": "iOS 和 iPadOS 的新漏洞使数百万部 iPhone 面临风险", "https://mp.weixin.qq.com/s/zkp3wzgK9iyxmUedLokYlA": "Cloudflare WAF绕过漏洞：全球任意主机访问", "https://mp.weixin.qq.com/s/wFstbaEeKmaRvN9xGB719Q": "漏洞挖掘实战系列（第17期）：反序列化漏洞全解析 PHP∕Java∕Python 三大语言实战", "https://mp.weixin.qq.com/s/zMXlRyesyjnBQiyOK-piUA": "漏洞复现 | React(next.js)存在远程命令执行漏洞（CVE-2025-55182）", "https://mp.weixin.qq.com/s/9fWdC9ymTn3mgtfDI924zQ": "【吃瓜】新年第一个“0day”", "https://mp.weixin.qq.com/s/IbNUWk8P-JOlZdpkdABb3A": "【绕过Bypass】实战waf绕过(文末有edu通杀0day)", "https://mp.weixin.qq.com/s/zT70DLu9h_8-ndCR17SV0w": "微软Copilot AI漏洞争议：安全边界还是已知局限？", "https://mp.weixin.qq.com/s/YJEdNT3MEJyoMNj0G5J2_w": "信息安全漏洞周报（2026年第3期）", "https://mp.weixin.qq.com/s/j1U3OQOI2SatYWq-DZ7qvQ": "UC浏览器一键内存损坏漏洞：利用V8补丁间隙漏洞窃取您的数据", "https://mp.weixin.qq.com/s/mk6LGeOENGoO9jn1iyPdlQ": "zero-day点击远程漏洞攻击链 - 可绕过 iOS 加密信任（已在 iOS 18.4.1 中修复）", "https://mp.weixin.qq.com/s/_igxxjZSKKPSR5u-qqZ4IQ": "智能⻔锁蓝⽛通信模块整数溢出漏洞分析", "https://mp.weixin.qq.com/s/RxXDkelQg8xYN2fcfy0UDw": "[0day]某erp系统存在任意文件上传漏洞", "https://mp.weixin.qq.com/s/zq_XzOyIH9YExeY_nUyhjA": "CNVD漏洞周报2026年第2期", "https://mp.weixin.qq.com/s/HP-e-6eddmzEtr6U3EnaMA": "分享多个EDUSRC&企业SRC中、高危漏洞（已修复）", "https://mp.weixin.qq.com/s/ekoxDuejXY8oCm3uEynu1w": "0121.我如何将存储型 XSS 漏洞转化为账户接管：利用 WebSocket 驱动的应用程序", "https://mp.weixin.qq.com/s/PA5EhntsCyWfQT2kTE1yNA": "【已复现】多款 Linux telnetd服务中招，仅需一个参数即可远程获取 Root 权限，GNU Inetutils telnetd 远程认证绕过漏洞(CVE-2026-24061)", "https://mp.weixin.qq.com/s/olUhcDJP3u5yK85_jZN02w": "百款AI应用集体“裸奔”：云端漏洞引发数据灾难", "https://mp.weixin.qq.com/s/kS6rZDDpz0f6xl5aW1_3BA": "Cloudflare 零日漏洞：可绕过 WAF 访问全球任意后端主机", "https://mp.weixin.qq.com/s/kkLsRsc_IrP8gkmfUe-BBg": "【已复现】GNU InetUtils telnetd 远程身份认证绕过漏洞(QVD-2026-4408)安全风险通告", "https://mp.weixin.qq.com/s/cdWpY8JO9e1cYQ3r-RIVpg": "Redis 远程代码执行漏洞曝光：官方容器现“老式”栈溢出高危风险", "https://mp.weixin.qq.com/s/t4F-x2ojV5-ZhTTH_UoHgQ": "记某edusrc的任意用户密码重置漏洞挖掘", "https://mp.weixin.qq.com/s/ctgdyhvNmaIlnJIMeyWLdw": "东⽅通(TongWeb)应⽤服务器 EJB 反序列化远程代码执⾏漏洞", "https://mp.weixin.qq.com/s/DDpmajusKV6Ul7kCDd7aSw": "WordPress插件AdvancedCustomFields:Extended曝高危漏洞", "https://mp.weixin.qq.com/s/cLkmlGSUgnQHKX-S_grqCA": "【接口漏洞第八章第二节】挖掘GraphQL漏洞第一步：高效发现端口的三大实战技巧", "https://mp.weixin.qq.com/s/6qGhmaD7lpwa1c9xJq66GA": "Cloudflare 0Day漏洞可绕过防护直接访问任意主机服务器", "https://mp.weixin.qq.com/s/Do2tOGIiFqA3vpNX6jwG6A": "Windows SMB客户端漏洞可导致攻击者掌控Active Directory环境", "https://mp.weixin.qq.com/s/TgnsahDlk47F73-kVEg0-w": "Anthropic MCP Git 服务器漏洞可用于访问文件和执行代码", "https://mp.weixin.qq.com/s/P-zBho0S5gxUgX8CVjTVMw": "Cloudflare 修复可绕过 WAF 访问源服务器的 ACM 验证漏洞", "https://mp.weixin.qq.com/s/dhbggM7euhNdc_AHz3sjww": "【安全圈】WordPress 插件漏洞导致 10 万余个网站面临权限提升攻击风险", "https://mp.weixin.qq.com/s/4F2tY7AP-Qyi5Tak7lPVeg": "未来已来：漏洞挖掘智能体VulnAgent 发现两个Suricata 高危漏洞，并获官方致谢!", "https://mp.weixin.qq.com/s/G5gYUhFb9FpBIsyA8-WWiA": "Anthropic官方Git MCP服务器曝链式漏洞，可致文件访问与代码执行" }