Tencent Security Xuanwu Lab Daily News
•
GitHub - bsauce/kernel_exploit_factory: Linux kernel CVE exploit analysis report and relative debug environment. You don't need to compile Linux kernel and configure your environment anymore.:
https://github.com/bsauce/kernel_exploit_factory//
・
Linux 内核多个漏洞的 Exploit 与 Writeup
–
Jett
•
GHSL-2020-205: Remote Code Execution in Apache Struts 2 - S2-061 - CVE-2020-17530:
https://github.co/2W9jOod
・
Apache Struts 2 CVE-2020-17530 RCE 漏洞分析
–
Jett
•
2092 - Qualcomm Adreno GPU PID reuse leads to shared mapping leak - project-zero:
https://bugs.chromium.org/p/project-zero/issues/detail?id=2092
・
Issue 2092: Qualcomm Adreno GPU PID reuse leads to shared mapping leak
–
Jett
•
Vulnerabilities in McAfee ePolicy Orchestrator:
https://swarm.ptsecurity.com/vulnerabilities-in-mcafee-epolicy-orchestrator/
・
Vulnerabilities in McAfee ePolicy Orchestrator
–
Jett
•
Dark Halo Leverages SolarWinds Compromise to Breach Organizations | Volexity:
https://www.volexity.com/blog/2020/12/14/dark-halo-leverages-solarwinds-compromise-to-breach-organizations/
・
Volexity 对 SolarWinds 供应链攻击事件的分析
–
Jett
•
About the security content of iOS 14.3 and iPadOS 14.3 - Apple Support:
https://support.apple.com/en-us/HT212003
・
Apple 发布 iOS、iPadOS、macOS 版本更新
–
Jett
•
[
Virtualization
]
Page Fault Injection in Virtual Machines: Accessing Swapped-Out Pages from HVMI:
https://hvmi.github.io/blog/2020/12/14/pfinjection.html
・
Page Fault Injection in Virtual Machines: Accessing Swapped-Out Pages from HVMI
–
Jett
•
[
Tools
]
[PDF] https://i.blackhat.com/eu-20/Wednesday/eu-20-LimitedResults-Debug-Resurrection-On-nRF52-Series.pdf:
https://i.blackhat.com/eu-20/Wednesday/eu-20-LimitedResults-Debug-Resurrection-On-nRF52-Series.pdf
・
Debug Resurrection on nRF52 Series
–
Jett
•
GHSL-2020-192, GHSL-2020-196: File existence disclosure in aptdeamon - CVE-2020-16128:
https://github.co/37QVtJc
・
Ubuntu aptdeamon CVE-2020-16128 文件存在性检查信息泄露漏洞
–
Jett
•
[
Windows, Tools
]
Kerberos Bronze Bit Attack (CVE-2020-17049) Scenarios to Potentially Compromise Active Directory:
https://www.hub.trimarcsecurity.com/post/leveraging-the-kerberos-bronze-bit-attack-cve-2020-17049-scenarios-to-compromise-active-directory
・
Kerberos Bronze Bit Attack (CVE-2020-17049) Scenarios to Potentially Compromise Active Directory
–
Jett
* 查看或搜索历史推送内容请访问：
https://sec.today
* 新浪微博账号：腾讯玄武实验室
https://weibo.com/xuanwulab
