[每日信息流] 2023-06-05

[chainreactorbot]

每日安全资讯（2023-06-05）

• SecWiki News
  • [ ] SecWiki News 2023-06-04 Review
• Sploitus.com Exploits RSS Feed
  • [ ] File Manager Advanced Shortcode 2.3.2 - Unauthenticated Remote Code Execution (RCE) exploit
  • [ ] STARFACE 7.3.0.10 - Authentication with Password Hash Possible exploit
  • [ ] Enrollment System Project v1.0 - SQL Injection Authentication Bypass (SQLI) exploit
  • [ ] Total CMS 1.7.4 - Remote Code Execution (RCE) exploit
  • [ ] Barebones CMS v2.0.2 - Stored Cross-Site Scripting (XSS) (Authenticated) exploit
  • [ ] MotoCMS Version 3.4.3 - SQL Injection exploit
  • [ ] Exploit for Cleartext Transmission of Sensitive Information in Keepass exploit
  • [ ] Exploit for Vulnerability in Microsoft exploit
• unSafe.sh - 不安全
  • [ ] Captain’s Log: May 2023
  • [ ] need help ID'ing this. comes from a cheap gopro 3 knockoff with an LCD screen the size of the camera that i sadly dont have any info on. When searching "MAYK89" google gives nothing and baidu gives me LoL clips lmao
  • [ ] MAAD-AF - MAAD Attack Framework - An Attack Tool For Simple, Fast And Effective Security Testing Of M365 And Azure AD
  • [ ] Red Hat 企业发行版将不再支持 LibreOffice
  • [ ] AMD EPYC Rome 芯片会在连续运行 1044 天后崩溃
  • [ ] Reverse engineer a scale to make it smart
  • [ ] 'Wireshark for Android Binder' - tool for reverse engineering and intercepting/ parsing Android Binder messages
  • [ ] Scrivener 3 – 专业写作软件，特价 5 折
  • [ ] photoprism+rclone搭建
  • [ ] 又一届 Swift 学生挑战赛，我们和今年的获奖学生们聊了聊
  • [ ] HTML Preview – 一个适用于 GitHub & BitBucket 的 .HTML 预览工具
  • [ ] 大多数勒索软件活动源自三条常见的初始攻击途径
  • [ ] 起底GoldenJackal APT组织
  • [ ] [webapps] File Manager Advanced Shortcode 2.3.2 - Unauthenticated Remote Code Execution (RCE)
  • [ ] [webapps] MotoCMS Version 3.4.3 - SQL Injection
  • [ ] [webapps] STARFACE 7.3.0.10 - Authentication with Password Hash Possible
  • [ ] [webapps] Barebones CMS v2.0.2 - Stored Cross-Site Scripting (XSS) (Authenticated)
• Twitter @Nicolas Krassas
  • [ ] MAAD-AF - MAAD Attack Framework - An Attack Tool For Simple, Fast And Effective Security Testing Of M365 And Azure AD http://www.kitploit.com/2023/06/...
  • [ ] Atomic Wallet hacks lead to over $35 million in crypto stolen https://www.bleepingcomputer.com/news/security/atomic-wallet-hacks-lead-to-over-35-milli...
  • [ ] Unpacking Shellcode with Ghidra Emulator https://www.reddit.com/r/netsec/comments/140je86/unpacking_shellcode_with_ghidra_emulator/
  • [ ] Hackers hijack legitimate sites to host credit card stealer scripts https://www.bleepingcomputer.com/news/security/hackers-hijack-legitimate-sites-to-...
  • [ ] RT Matthew Green: Here come the privacy coin bans. https://www.theblock.co/post/232751/binance-privacy-coins-delisting-europe
  • [ ] Xplain hack impacted the Swiss cantonal police and Fedpol https://securityaffairs.com/147047/data-breach/fedpol-swiss-police-cyber-attack.html
  • [ ] Over 2.5M individuals impacted by Harvard Pilgrim Health Care ransomware attack https://www.scmagazine.com/brief/ransomware/over-2-5m-individuals-impa...
  • [ ] RT John Hammond: CVE-2023-34362: We haven't figured out how it's moved in wwwroot just yet, but we've just about got the attack chain where we perform...
  • [ ] RT RussianPanda 🐼 🇺🇦: An interesting bundle that: ➡️ Drops Xen Manager password recovery ➡️ Drops Golang password extractor (https://gith...
  • [ ] RT Vess: 1. Go to http://notepad.link - a site for taking anonymous notes on-line. 2. Search for "password" in the search bar. 3. Profit?
• Recent Commits to cve:main
  • [ ] Update Sun Jun 4 00:12:01 UTC 2023
• 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
  • [ ] 大多数勒索软件活动源自三条常见的初始攻击途径
  • [ ] 起底GoldenJackal APT组织
• Security Boulevard
  • [ ] BSidesSF 2023 – Arthur Loris – FAIR STRIDE – Building Business Relevant Threat Models
  • [ ] Strengthening The Canadian Financial Sector’s Cybersecurity
  • [ ] Dancho Danchev’s OSINT and Threat Intelligence Training Video Demonstration in Bulgarian – Part One
  • [ ] Dancho Danchev’s OSINT and Threat Intelligence Training Video Demonstration in Bulgarian – Part Two
• Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
  • [ ] Dancho Danchev's OSINT Introduction Training Video Demonstration in Bulgarian - Part Three
  • [ ] Dancho Danchev's OSINT Introduction Training Video Demonstration in Bulgarian - Part Two
  • [ ] Dancho Danchev's OSINT Introduction Training Video Demonstration in Bulgarian - Part One
  • [ ] Dancho Danchev's OSINT and Threat Intelligence Training Video Demonstration in Bulgarian - Part Two
  • [ ] Dancho Danchev's OSINT and Threat Intelligence Training Video Demonstration in Bulgarian - Part One
• Reverse Engineering
  • [ ] 'Wireshark for Android Binder' - tool for reverse engineering and intercepting/ parsing Android Binder messages
  • [ ] need help ID'ing this. comes from a cheap gopro 3 knockoff with an LCD screen the size of the camera that i sadly dont have any info on. When searching "MAYK89" google gives nothing and baidu gives me LoL clips lmao
  • [ ] Reverse engineer a scale to make it smart
• SAP Blogs
  • [ ] Pricing in SAP S/4HANA Cloud for Service
  • [ ] Safeguarding SAP Landscapes: Unleashing the Power of SAP Enterprise Threat Detection (ETD) – An Introduction
  • [ ] Automate the posting of Payments received from Emails into SAP
  • [ ] SAUG Conference Brisbane 2023
• Exploit-DB.com RSS Feed
  • [ ] [webapps] File Manager Advanced Shortcode 2.3.2 - Unauthenticated Remote Code Execution (RCE)
  • [ ] [webapps] MotoCMS Version 3.4.3 - SQL Injection
  • [ ] [webapps] STARFACE 7.3.0.10 - Authentication with Password Hash Possible
  • [ ] [webapps] Barebones CMS v2.0.2 - Stored Cross-Site Scripting (XSS) (Authenticated)
  • [ ] [webapps] Enrollment System Project v1.0 - SQL Injection Authentication Bypass (SQLI)
  • [ ] [webapps] Total CMS 1.7.4 - Remote Code Execution (RCE)
• • [ ] Captain’s Log: May 2023
• Akkuman 的博客
  • [ ] photoprism+rclone搭建
• 奇客Solidot–传递最新科技情报
  • [ ] Red Hat 企业发行版将不再支持 LibreOffice
  • [ ] AMD EPYC Rome 芯片会在连续运行 1044 天后崩溃
• 安全分析与研究
  • [ ] 研究多态恶意软件，探讨网络安全与AI
• KitPloit - PenTest & Hacking Tools
  • [ ] MAAD-AF - MAAD Attack Framework - An Attack Tool For Simple, Fast And Effective Security Testing Of M365 And Azure AD
• 安全研究GoSSIP
  • [ ] 【周末分享】Pwn.college 连载来啦 33-34集
• Private Feed for M09Ic
  • [ ] uknowsec starred secur30nly/go-self-delete
  • [ ] uknowsec starred wavvs/nanorobeus
  • [ ] PeiQi0 starred pen4uin/jMemshellGenerator
  • [ ] WangYihang starred psy0rz/zfs_autobackup
  • [ ] zema1 started following crazymanarmy
  • [ ] zema1 starred pen4uin/jMemshellGenerator
  • [ ] WangYihang starred bahamas10/zfs-prune-snapshots
  • [ ] WangYihang starred JavaScriptDude/zfslib
• 安全圈
  • [ ] 【安全圈】“黑客”入侵后台9天内盗充百万 警方打掉3人犯罪团伙
  • [ ] 【安全圈】非法保留儿童信息还监视用户！亚马逊侵犯用户隐私被罚三千万
  • [ ] 【安全圈】18岁黑客入侵博彩网站6万个账户并从中窃取60万美元
  • [ ] 【安全圈】北欧航空公司网站遭黑客攻击
• 云鼎实验室
  • [ ] 每周云安全资讯-2023年第23周
• 极客公园
  • [ ] 马斯克、米哈游投资的脑机，却被女主播拿来打「老头环」
  • [ ] LeCun、吴恩达怒斥「AI 无人机误杀」炒作；华为盘古 Chat只给 B 端客户；迪士尼：乐园落户武汉是假新闻 | 极客早知道
• 看雪学苑
  • [ ] CobaltStrike分析-beacon 解析
  • [ ] 快速对接中阶技能！看雪安卓高级研修班（月薪一万计划）
• 落水轩
  • [ ] BH ASIA 2023内鬼数据安全解决方案
• 软件安全与逆向分析
  • [ ] 安卓系统上 eBPF 开发的一些建议
• Twitter @Octagon Networks
  • [ ] Can you find the flag by exploiting a vulnerability? 10$ for first solver! 💢 http://octagon.net/chal/1.php https://t.co/HRUBLtWEod
• 钱塘门外的互联网散修
  • [ ] 推荐一本很特别的书
• 娜璋AI安全之家
  • [ ] [AI安全论文] 30.李沐老师视频学习——3.研究的艺术·讲好故事和论点
• 情报分析师
  • [ ] “半人马”作战将如何改变战争（附万页人工智能在军事中的作用相关资料）
  • [ ] 9个令人着迷的人脸搜索引擎
• 0x00sec - The Home of the Hacker - Top topics
  • [ ] SOCKS5 Proxies with locations
• Over Security - Cybersecurity news aggregator
  • [ ] Windows 11 Moment 3 hands on, here's everything new
  • [ ] Atomic Wallet hacks lead to over $35 million in crypto stolen
  • [ ] Evasive NoEscape Ransomware Uses Reflective DLL Injection
  • [ ] Large Spanish bank confirms ransomware attack
  • [ ] New Magecart-Style Campaign Abusing Legitimate Websites to Attack Others | Akamai
  • [ ] Hackers hijack legitimate sites to host credit card stealer scripts
  • [ ] CISA orders govt agencies to patch MOVEit bug used for data theft
  • [ ] Air-gapped Data Exfiltration: lab e p-o-c
• cavallette
  • [ ] 5x1000xAI
• LockBoxx
  • [ ] Fake Strike Plate Magnets
• Il Disinformatico
  • [ ] To Whom It May Concern: I’m in the Raidforums/Breached user database
  • [ ] Chi c’è nello spazio? Aggiornamento 2023/06/04
• Blackhat Library: Hacking techniques and research
  • [ ] Telegram question
  • [ ] Do you know about blackarch linux & setup of blackarch linux on gCP(Google Cloud Platform), Checkout this blog Post.
• Social Engineering
  • [ ] What kind of suspicions are good for confirming in others?
• TorrentFreak
  • [ ] High Prices Make Textbook ‘Piracy’ Acceptable to Most Students
• KitPloit - PenTest Tools!
  • [ ] MAAD-AF - MAAD Attack Framework - An Attack Tool For Simple, Fast And Effective Security Testing Of M365 And Azure AD
• Computer Forensics
  • [ ] encase help!
  • [ ] Help me learn about our new FRED
• 吴鲁加
  • [ ] 来自 37signals 的一些信号
• Security Affairs
  • [ ] Security Affairs newsletter Round 422 by Pierluigi Paganini – International edition
  • [ ] Xplain hack impacted the Swiss cantonal police and Fedpol
  • [ ] Zyxel published guidance for protecting devices from ongoing attacks
• Information Security
  • [ ] Regulations
• netsecstudents: Subreddit for students studying Network Security and its related subjects
  • [ ] Failed my first OSCP EXAM attempt, but it wasn't too bad! - learn on my mistakes
  • [ ] Help a noob out. Looking for someone to elevate my cyber security skills(something that i wont get to learn in textbooks).
  • [ ] Carrer and certifications
  • [ ] GCIH Practice Exam
• Your Hacking Tutorial by Zempirians
  • [ ] Not Hacking But Live Kali USB
• Technical Information Security Content & Discussion
  • [ ] Operation Triangulation: iOS devices targeted with previously unknown malware
  • [ ] Unpacking Shellcode with Ghidra Emulator

[github-actions[bot]]

This issue was closed because it has been inactive for 14 days since being marked as stale.