#cybersecurity | hacker | Unpatched Windows Zero-Day flaws exploited, Microsoft says | National Cyber Security

This security advisory describes one low risk vulnerability. 1) Cross-site scripting Severity: Low CVSSv3: 5.3...

近日，360-CERT监测到微软公司发布了一份编号ADV200006 的紧急漏洞通告，通告表示有在野攻击行动使用了位于Adobe Type Manager Library中的两个远程代码执行0Day漏洞，由于漏洞严重发布该通告指导用户在补丁发布前规避风险。 最近整理PHP文件包含漏洞姿势的时候，发现一些比较好用的姿势关于本地文件包含漏洞可以利用临时文件包含恶意代码拿到Webshell的一些奇技淫巧，于是打算详细整理一下。 继Cerberus木马利用“新型冠状病毒肺炎”热点分发恶意程序之后，Anubis臭名远昭的银行木马首次利用文件名为covid-19的应用程序进行传播。 …. Source link

Chinese hacker collective APT41, which is often suspected to have links to the nation’s governing...

#Exploit Title : archive.org XSS #Date : 2020/3/29 #Exploit Author : AmirAli Sadeghi Tamiz #Tested...

################################################################### # Exploit Title : WordPress Randy Peterman Murph StatTraq 1.1 SQL Injection #...

#!/usr/bin/python # Exploit Title: FreeCommander XE 2020 – Pathname Buffer Overflow (SEH) # Version:...

Packet Storm Security note – Finding one of two: codeBeamer – Stored...

One of Arkansas’ most notorious murderers returned to the scene of his crime 24 years...