[每日信息流] 2023-06-18

[chainreactorbot]

每日安全资讯（2023-06-18）

• SecWiki News
  • [ ] SecWiki News 2023-06-17 Review
• Recent Commits to cve:main
  • [ ] Update Sat Jun 17 00:13:57 UTC 2023
• Security Boulevard
  • [ ] BSidesSF 2023 – Hannah Zhao – Scraping After HiQ Labs V. LinkedIn
• CXSECURITY Database RSS Feed - CXSecurity.com
  • [ ] Cross-Platform Malicious Javascript DoS attack
  • [ ] Total CMS 1.7.4 Shell Upload
  • [ ] QuickJob Portal 6.1 Cross Site Scripting
  • [ ] WordPress Abandoned Cart Lite For WooCommerce 5.14.2 Authentication Bypass
  • [ ] Buffer Overflow in TP-Link Archer AX10(EU)_V1.2_230220
• ArthurChiao's Blog
  • [ ] GPU Prices Quick Reference
• unSafe.sh - 不安全
  • [ ] 欧盟投票要求智能手机电池可替换
  • [ ] Reverse Engineering: iOS App Extraction & Analysis
  • [ ] curl user survey 2023 analysis
  • [ ] GeoServer & GeoTools SQL Injection (CVE-2023-25157 & CVE-2023-25158)
  • [ ] Firefly - Black Box Fuzzer For Web Applications
  • [ ] Update: zipdump.py Version 0.0.26
  • [ ] harbian-audit v0.7 发布，支持 Debian 12
  • [ ] 众包工人用 AI 做数据标注等零工
  • [ ] 第三届数字安全大会正式召开，震撼来袭！
  • [ ] 风险驱动 第三届数字安全大会正式召开
  • [ ] 参加第三届数字安全大会，探索数字安全的无限可能！
  • [ ] Reddit CEO 向马斯克学习
  • [ ] 一日一技 | 两种方法让你也能安全体验 macOS Sonoma
  • [ ] 【联盟动态】首届北京数字安全峰会成功举办
  • [ ] 超过 60,000 个 Android 应用程序在设备上悄悄安装恶意软件
  • [ ] 年中盘点：2023年最重大的5起数据泄露&勒索软件攻击
  • [ ] 开创“AI+”办会先河，ISC 2023早鸟票618开抢！
  • [ ] Celebrating Fathers of SentinelOne
  • [ ] Celebrating Juneteenth at SentinelOne
• 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
  • [ ] 第三届数字安全大会正式召开，震撼来袭！
  • [ ] 【联盟动态】首届北京数字安全峰会成功举办
  • [ ] 超过 60,000 个 Android 应用程序在设备上悄悄安装恶意软件
  • [ ] 年中盘点：2023年最重大的5起数据泄露&勒索软件攻击
  • [ ] 开创“AI+”办会先河，ISC 2023早鸟票618开抢！
• Sec-News 安全文摘
  • [ ] Finding Vulnerabilities in Nuxt 3
  • [ ] GeoServer & GeoTools SQL Injection (CVE-2023-25157 & CVE-2023-25158)
• Sploitus.com Exploits RSS Feed
  • [ ] projectSend r1605 - CSV injection Vulnerability exploit
  • [ ] Online Thesis Archiving System v1.0 - Multiple SQL injection Vulnerability exploit
  • [ ] WordPress Abandoned Cart Lite For WooCommerce 5.14.2 Authentication Bypass Exploit exploit
  • [ ] projectSend r1605 - Stored XSS Vulnerability exploit
  • [ ] PyLoad 0.5.0 - Pre-auth Remote Code Execution Exploit exploit
  • [ ] Monstra 3.0.4 - Stored Cross-Site Scripting Vulnerability exploit
  • [ ] TP-Link Archer AX10(EU)_V1.2_230220 Buffer Overflow Vulnerability exploit
  • [ ] Symmetricom SyncServer Unauthenticated Remote Command Execution Exploit exploit
  • [ ] Textpattern CMS v4.8.8 - Stored Cross-Site Scripting (Authenticated) Vulnerability exploit
  • [ ] Online Art gallery project 1.0 - Arbitrary File Upload (Unauthenticated) Exploit exploit
  • [ ] Xoops CMS 2.5.10 - Stored Cross-Site Scripting (Authenticated) Vulnerability exploit
  • [ ] Exploit for Code Injection in Realtimelogic Fuguhub exploit
  • [ ] Exploit for CVE-2023-25610 exploit
  • [ ] Exploit for Cross-site Scripting in Advancedcustomfields Advanced Custom Fields exploit
• Twitter @Nicolas Krassas
  • [ ] Escalate your SSRF vulnerabilities on Modern Cloud Environments. surf allows you to filter a list of hosts, returning a list of viable SSRF candidat...
  • [ ] HTB: Escape https://0xdf.gitlab.io/2023/06/17/htb-escape.html
  • [ ] BackupOperatorToolkit - The BackupOperatorToolkit Contains Different Techniques Allowing You To Escalate From Backup Operator To Domain Admin http://w...
  • [ ] Millions of Oregon, Louisiana state IDs stolen in MOVEit breach https://www.bleepingcomputer.com/news/security/millions-of-oregon-louisiana-state-ids-...
  • [ ] Western Digital boots outdated NAS devices off of My Cloud https://www.bleepingcomputer.com/news/security/western-digital-boots-outdated-nas-devices-o...
  • [ ] Killnet Threatens Imminent SWIFT, World Banking Attacks https://www.darkreading.com/risk/killnet-threatens-imminent-swift-world-banking-attacks
  • [ ] Windows 11 KB5027231 also breaks Chrome for Cisco, WatchGuard EDR users https://www.bleepingcomputer.com/news/microsoft/windows-11-kb5027231-also-brea...
  • [ ] Intel To Start Shipping A Quantum Processor https://packetstormsecurity.com/news/view/34728/Intel-To-Start-Shipping-A-Quantum-Processor.html
  • [ ] Oil and gas giant Shell is another victim of Clop ransomware attacks https://securityaffairs.com/147545/cyber-crime/shell-clop-ransomware-attacks.html
  • [ ] ChamelDoH: New Linux Backdoor Utilizing DNS-over-HTTPS Tunneling for Covert CnC https://thehackernews.com/2023/06/chameldoh-new-linux-backdoor-utilizi...
  • [ ] Third MOVEit bug fixed a day after PoC exploit made public https://go.theregister.com/feed/www.theregister.com/2023/06/16/third_moveit_bug_fixed/
  • [ ] CVE-2023-2847: Local privilege escalation vulnerability in ESET products https://securityonline.info/cve-2023-2847-local-privilege-escalation-vulnerab...
  • [ ] RT John Hammond: cl0p ransomware gang looks to have actually listed file downloads for the Shell oil company. None of the other named victims have dow...
• SAP Blogs
  • [ ] My experience of the first SAP Code Jam in Dallas
  • [ ] SAP INSIDE TRACK EVENT – Sep 17Th(Sunday) – (10AM-1 PM) Brookfield Wisconsin -USA
  • [ ] CPI-Convert Flat File to XML with Field Fixed Lengths | Groovy
  • [ ] SAP Cloud Identity Access Governance (IAG) integration with Identity Authentication Service (IAS)
  • [ ] Harmonized Serial Number Profile Configuration In Embedded EWM
  • [ ] Co-Active Coaching meets Theory U
  • [ ] Item category determination in SAP S/4HANA Cloud
  • [ ] Frequently used APPs in SAP Business Network Global Track and Trace and its user manual and FAQs
• Didier Stevens
  • [ ] Update: zipdump.py Version 0.0.26
• Malware-Traffic-Analysis.net - Blog Entries
  • [ ] 2023-06-16 - 30 days of Formbook: Day 12, Friday 2023-06-16 - "TFGP" (ISC diary)
• Reverse Engineering
  • [ ] Reverse Engineering: iOS App Extraction & Analysis
• FreeBuf网络安全行业门户
  • [ ] 参加第三届数字安全大会，探索数字安全的无限可能！
• daniel.haxx.se
  • [ ] curl user survey 2023 analysis
• 安全牛
  • [ ] 风险驱动 第三届数字安全大会正式召开
• Private Feed for M09Ic
  • [ ] niudaii starred iiiusky/alicloud-tools
  • [ ] panjf2000 starred chroma-core/chroma
  • [ ] panjf2000 starred qdrant/qdrant
  • [ ] panjf2000 starred milvus-io/milvus
  • [ ] Safe3 forked Safe3/tetragon from cilium/tetragon
  • [ ] Safe3 forked Safe3/KubeArmor from kubearmor/KubeArmor
  • [ ] Safe3 forked Safe3/tracee from aquasecurity/tracee
  • [ ] spf13 started following cespare
  • [ ] spf13 starred cespare/xxhash
  • [ ] WangYihang starred refinedev/refine
  • [ ] FunnyWolf released v1.5.30 20230617 at FunnyWolf/Viper
  • [ ] phith0n starred quasilyte/phpgrep
  • [ ] phith0n starred VKCOM/php-parser
  • [ ] phith0n starred z7zmey/php-parser
  • [ ] FunnyWolf forked FunnyWolf/Stealerium from Stealerium/Stealerium
  • [ ] Ak74-577 started following g3tsyst3m
  • [ ] Ak74-577 starred g3tsyst3m/elevationstation
  • [ ] Y4er starred zizifn/edgetunnel
  • [ ] PeiQi0 starred chaitin/safeline
  • [ ] Mr-xn starred vercel-labs/ai-chatbot
  • [ ] Safe3 forked Safe3/ipset-blacklist from trick77/ipset-blacklist
  • [ ] Safe3 forked Safe3/santa from google/santa
  • [ ] Ak74-577 starred mandiant/ADFSpoof
  • [ ] geohot starred mathoudebine/turing-smart-screen-python
  • [ ] WAY29 starred hegelsu/SuWar3Tools
  • [ ] PeiQi0 starred chushuai/wscan
  • [ ] FunnyWolf starred Accenture/Spartacus
• 奇客Solidot–传递最新科技情报
  • [ ] 欧盟投票要求智能手机电池可替换
  • [ ] harbian-audit v0.7 发布，支持 Debian 12
  • [ ] 众包工人用 AI 做数据标注等零工
  • [ ] Reddit CEO 向马斯克学习
• 赵武的自留地
  • [ ] 技术创业成功的最短路径
• 看雪学苑
  • [ ] Arm裸机程序分析
  • [ ] 多个安全岗位！荣耀终端欢迎您的加入
  • [ ] 别催！618宠粉福利来咯
• 奇安信 CERT
  • [ ] 【已复现】金蝶云星空远程代码执行漏洞安全风险通告
• 渗透测试网络安全
  • [ ] 【工具篇】漏洞扫描-最新版Invicti v23.6.0.40861
  • [ ] 云原生安全工具合集
• 丁爸 情报分析师的工具箱
  • [ ] 【网络安全】高级可持续威胁攻击（APT）资料（1）
• 数世咨询
  • [ ] 风险驱动 第三届数字安全大会正式召开！
  • [ ] 数世咨询：《中国数字安全百强报告(2023)》正式发布
• 皮相
  • [ ] 《人类清除计划》和《莫斯科在广播》
• 奇安信威胁情报中心
  • [ ] 每周高级威胁情报解读(2023.06.08~06.15)
  • [ ] 每周高级威胁情报解读(2023.06.01~06.08)
• 安全圈
  • [ ] 【安全圈】年中盘点：2023 年最重大的 5 起数据泄露 & 勒索软件攻击
  • [ ] 【安全圈】美网络安全公司称中国黑客侵入数百个网络？外交部回应来了
  • [ ] 【安全圈】“AI 换脸”技术被滥用，揭示网络安全骗局的冰山一角
  • [ ] 【安全圈】遭黑客攻击，美国数百万人信息泄露！
• KitPloit - PenTest & Hacking Tools
  • [ ] Firefly - Black Box Fuzzer For Web Applications
• 乐枕迭代日志
  • [ ] AI+安全运营
• Over Security - Cybersecurity news aggregator
  • [ ] US govt offers $10 million bounty for info on Clop ransomware
  • [ ] SMS delivery reports can be used to infer recipient's location
  • [ ] Windows 11 'Win32 app isolation' security feature now in preview
  • [ ] Guerre di Rete - AI Act, l'Europarlamento tiene
• 关注安全技术
  • [ ] 云渗透案例剖析 ｜ 阿里云PostgreSQL漏洞技术细节
• 极客公园
  • [ ] 重读《刷新》：微软「拨乱反正」的关键几步
  • [ ] Meta 计划大模型开源，允许商用；极兔提交 IPO 申请，去年营收 73 亿美元；6 月初全球气温破纪录 | 极客早知道
• Arturo Di Corinto
  • [ ] Come i servizi segreti stanno cambiando il mondo
• The Hacker News
  • [ ] From Cryptojacking to DDoS Attacks: Diicot Expands Tactics with Cayosin Botnet
• TorrentFreak
  • [ ] Sky ‘Free NOW TV’ Security Hole Exposed For Months, Researcher Claims
• Security Affairs
  • [ ] Law enforcement shutdown a long-standing DDoS-for-hire service
• Information Security
  • [ ] Question about an event
  • [ ] Ethical Hacking - Build 7 Python Attack & Defense Tools
• Computer Forensics
  • [ ] Shift-Deleting a File
  • [ ] Where are most of the jobs?
  • [ ] Some Volatility plugins don't work
• Social Engineering
  • [ ] Climate activist faces 10 years in jail for a fake letter ‘canceling’ an oil industry conference
  • [ ] What unexpected favors are good for building rapport?
  • [ ] does anyone have an invite link to Joe Gray's SE Discord?
• SANS Internet Storm Center, InfoCON: green
  • [ ] Formbook from Possible ModiLoader (DBatLoader) , (Sat, Jun 17th)
• Technical Information Security Content & Discussion
  • [ ] harbian-audit v0.7 releases: security audit and hardening for Debian 12
  • [ ] Reverse Engineering: iOS App Extraction & Analysis
• Blackhat Library: Hacking techniques and research
  • [ ] Docker Vulnerabilities Part Two | Escaping Docker Containers Shell
• Deep Web
  • [ ] Mickey Mouse Goes To Ukraine (short)
• KitPloit - PenTest Tools!
  • [ ] Firefly - Black Box Fuzzer For Web Applications

[github-actions[bot]]

This issue was closed because it has been inactive for 14 days since being marked as stale.