360CERT - 每日安全简报 (2020-03-23)

<<Previous Next>>

漏洞 Vulnerability

多款D-Link路由器存在命令执行漏洞

https://www.cnvd.org.cn/flaw/show/CNVD-2020-15533

安全工具 Security Tools

Astra-REST API的自动化安全测试

https://www.kitploit.com/2020/03/astra-automated-security-testing-for.html

安全报告 Security Report

悬赏提示-开放重定向升级为XSS！！

https://medium.com/bugbountywriteup/bounty-tip-open-redirection-escalated-further-into-an-xss-edec8e3abe78

发现隐藏的网络

https://medium.com/bugbountywriteup/discovering-the-hidden-web-638a947361ad

任意文件读取漏洞的曲折历程

https://www.freebuf.com/articles/web/229648.html

安全事件 Security Incident

Google解决了Chrome中严重的错误

https://securityaffairs.co/wordpress/100164/security/google-chrome-bugs.html

安全研究 Security Research

新的Mirai变型目标是Zyxel网络连接存储设备

https://unit42.paloaltonetworks.com/new-mirai-variant-mukashi/

WordPress ThemeREX Addons 插件安全漏洞深度分析

https://paper.seebug.org/1151/

Django CVE-2020-9402 Geo SQL注入分析

https://xz.aliyun.com/t/7403

CVE-2020-10189/Zoho ManageEngine Desktop Central 10反序列化远程代码执行

https://xz.aliyun.com/t/7404

<<Previous Next>>