AiRedTeam - 我当黑客那几年(AiRedTeam) (Page 55)

Exploit for CVE-2024-12912 exploit

Stop Manual Triaging, Start Agentic Fixing

📡 Checkmarx · 2026-04-07 Stop Manual Triaging, Start Agentic Fixing Stop Manual Triaging, Start Agentic Fixing ← Blog Stop Manual Triaging, Start Agentic Fixing Why execution, not detection, is now the defining AppSec challenge. Rebecca Spiegel April 7, 2026 8 min. read Most security leaders are not struggling because they lack visibility. They

安全情报

RSAC 2026 Marked a Turning Point for AppSec. The Reason – Agentic Security

📡 Checkmarx · 2026-03-26 RSAC 2026 Marked a Turning Point for AppSec. The Reason – Agentic Security RSAC 2026 Marked a Turning Point for AppSec. The Reason – Agentic Security ← Blog RSAC 2026 Marked a Turning Point for AppSec. The Reason – Agentic Security Eran Kinsbruner March 26, 2026 7 min. read RSAC 2026 Marked

安全情报

Why Vulnerability Detection Doesn’t Scale

📡 Checkmarx · 2026-03-25 Why Vulnerability Detection Doesn’t Scale Why Vulnerability Detection Doesn’t Scale ← Blog Why Vulnerability Detection Doesn’t Scale The execution gap that is quietly breaking modern AppSec programs. Rebecca Spiegel March 25, 2026 8 min. read Most AppSec teams are not failing to detect risk. They’re

安全情报

Attackability: Why Context, Not Reachability, Should Drive Remediation

📡 Acunetix · 2026-03-24 Attackability: Why Context, Not Reachability, Should Drive Remediation Attackability: Why Context, Not Reachability, Should Drive Remediation ← Blog Attackability: Why Context, Not Reachability, Should Drive Remediation Reachability is not exploitability. Modern software development requires more than execution analysis. Rebecca Spiegel March 24, 2026 5 min. read For years, reachability

安全情报

Today's Odd Web Requests, (Wed, Apr 29th)

📡 SANS ISC · 2026-04-29 Today's Odd Web Requests, (Wed, Apr 29th) Today's Odd Web Requests Today, two different "new" requests hit our honeypots. Both appear to be recon requests and not associated with specific vulnerabilities. But as always, please let me know if you have

安全情报

Bad Bot Report 2026: The Internet Is No Longer Human and It’s Changing How Business Works

📡 Tenable Blog · 2026-04-29 Bad Bot Report 2026: The Internet Is No Longer Human and It’s Changing How Business Works As you were browsing something about your browser made us think you were a bot. There are a few reasons this might happen: You're a power user moving

安全情报

Danger of Libredtail [Guest Diary], (Wed, Apr 29th)

📡 Krebs on Security · 2026-04-30 Danger of Libredtail [Guest Diary], (Wed, Apr 29th) CVE-2024-4577 Danger of Libredtail [Guest Diary] Published: 2026-04-29. Last Updated: 2026-04-30 00:07:03 UTC byJames Roberts, SANS.edu BACS Student (Version: 1) [This is a Guest Diary by James Roberts, an ISC intern

安全情报

Imperva Customers Protected Against CVE-2026-41940 in cPanel & WHM

📡 Tenable Blog · 2026-04-30 Imperva Customers Protected Against CVE-2026-41940 in cPanel & WHM CVE-2026-41940 As you were browsing something about your browser made us think you were a bot. There are a few reasons this might happen: You're a power user moving through this website with super-human speed. You&

安全情报

SSL.com rotates their root certificate today, (Tue, May 5th)

📡 SANS ISC · 2026-05-05 SSL.com rotates their root certificate today, (Tue, May 5th) SSL.com rotates their root certificate today I just got an email from SSL.com last night, they are rotating out their root certificate today (May 5,2026). This is normal, business as usual stuff for a

安全情报

Vimeo confirms breach via third-party vendor impacts 119K users

📡 Security Affairs · 2026-05-05 Vimeo confirms breach via third-party vendor impacts 119K users Vimeo confirmed a data breach after the ShinyHunters gang stole personal information of 119,000 users in April 2026. According to Have I Been Pwned, the attackers accessed user data through a compromise at Anodot, a third‑party

安全情报

Malicious Ad for Homebrew Leads to MacSync Stealer, (Fri, May 1st)

📡 SANS ISC · 2026-05-01 Malicious Ad for Homebrew Leads to MacSync Stealer, (Fri, May 1st) Malicious Ad for Homebrew Leads to MacSync Stealer Introduction As macbooks and mac minis become more popular, we're seeing more campaigns targeting these macOS hosts. Malicious ads have popped up in search results that

安全情报

DShield Honeypot Update, (Mon, May 4th)

📡 SANS ISC · 2026-05-04 DShield Honeypot Update, (Mon, May 4th) DShield Honeypot Update This week, I will release a few updates to our DShield honeypot. The update should happen automatically if you have "automatic updates" enabled on your system. There will be two major changes: Compatibility with Ubuntu 26.

安全情报

Article #4387

📡 Security Blog · Article #4387 Cleartext Passwords in MS Edge? In 2026? Yup, that is for real. For me, this started with a post in X at hxxps://x.com/intcyberdigest/status/2051406295828250963?s=61 , which highlighted research by @L1v1ng0ffTh3L4N that found exactly this issue. Edge stores all of your browser

安全情报

CVE-2026-44681 - Authlib OIDC Implicit/Hybrid Authorization Vulnerable to Open Redirect

📡 GitHub-Advisory · 2026-05-13 CVE-2026-44681 - Authlib OIDC Implicit/Hybrid Authorization Vulnerable to Open Redirect CVE-2026-44681 GHSA-r95x-qfjj-fjj2 MEDIUM pip/authlib CVE: CVE-2026-44681 Summary An unauthenticated open redirect in Authlib's OpenIDImplicitGrant and OpenIDHybridGrant authorization endpoint lets a remote attacker cause the authorization server to issue an HTTP 302 to an attacker-chosen

漏洞分析

CVE-2026-8260 (CVSS 8.8) - A vulnerability was found in D-Link DCS-935L up to 1.10.01. The impacted element

漏洞分析

K8s安全警报：云身份窃取成APT新宠，282%攻击增长背后的暗流

CVE-2025-55182 是 React Server 19.0.0~19.2.0 中的严重远程代码执行漏洞，攻击者可利用该漏洞在 Kubernetes 容器内执行任意命令，窃取凭证并横向移动。了解漏洞原理、攻击场景及修复建议。

每日简报

📡 每日漏洞情报简报 2026-05-12

📡 每日漏洞情报简报 — 2026-05-12 📊 共 10 篇 | 🔴 高危 0 | 🆔 CVE 0 📋 漏洞分类汇总其他 (10) * NCSC launches SilentGlass, a plug-in device to secure HDMI and DisplayPort links— * Medtronic discloses security incident after ShinyHunters claimed theft of 9M+ records— * Chinese spy posed as researcher in spear-phishing campaign targeting NASA to steal defense software— * LINKEDIN

漏洞分析

CVE-2021-47940 (CVSS 9.8) - WordPress Plugin Download From Files version 1.48 and earlier contains an arbitr

漏洞分析

CVE-2021-47936 (CVSS 9.8) - OpenCATS 0.9.4 contains a remote code execution vulnerability that allows unauth

漏洞分析

CVE-2021-47933 (CVSS 9.8) - WordPress MStore API 2.0.6 contains an arbitrary file upload vulnerability that

漏洞分析

CVE-2021-47932 (CVSS 9.8) - WordPress TheCartPress 1.5.3.6 contains an unauthenticated privilege escalation

漏洞分析

CVE-2021-47923 (CVSS 9.8) - OpenCart 3.0.3.8 contains a session fixation vulnerability that allows attackers

漏洞分析

Exploit for CVE-2026-36980 exploit

漏洞分析