360CERT - 每日安全简报 (2020-08-12)

<<Previous Next>>

漏洞 Vulnerability

2020-08 补丁日: 微软多个产品高危漏洞安全风险通告

https://cert.360.cn/warning/detail?id=f2569a9474c545a3a107e7cc3935c768

CVE-2020-11976:Apache Wicket 信息泄露漏洞

https://seclists.org/oss-sec/2020/q3/109

Adobe修补了Acrobat和Reader中的11个严重漏洞

https://www.securityweek.com/adobe-patches-11-critical-vulnerabilities-acrobat-and-reader

Google Chrome浏览器漏洞使数十亿用户遭受数据被盗风险

https://www.freebuf.com/news/246300.html

安全研究 Security Research

基于脚本的恶意软件:Internet Explorer攻击的新趋势

https://unit42.paloaltonetworks.com/script-based-malware/

探索Adobe Sandbox - IPC Internals

http://dronesec.pw/blog/2020/08/07/digging-the-adobe-sandbox-internals/

Windows Print Spooler(CVE-2020-1048)补丁绕过

https://www.thezdi.com/blog/2020/8/11/windows-print-spooler-patch-bypass-re-enables-persistent-backdoor

Hacking Zoom：揭示Zoom中的安全漏洞

https://mazinahmed.net/blog/hacking-zoom/

CVE-2020-14644 weblogic iiop反序列化漏洞分析

https://cert.360.cn/report/detail?id=b747e983cd8f70a9eb315c2c7b38fe24

记一次VMware的崩溃调试分析过程

https://mp.weixin.qq.com/s/ODmXAZKz5JVitjzXpUdz9g

Shiro-550 PoC 编写日记

https://mp.weixin.qq.com/s/0cUNkce3ZiUBW6xhF0ODcA

内网横向移动：Kerberos认证与(哈希)票据传递攻击

https://mp.weixin.qq.com/s/n4jdN5bf5YniXCAR0SMr7Q

<<Previous Next>>