每日安全动态推送(2-10)

Tencent Security Xuanwu Lab Daily News

• bi0sCTF/2022 at main · teambi0s/bi0sCTF · GitHub:

   ・ bi0sCTF 2022 Offical source code && env && sol – 

• priv.pub:

   ・ DiceCTF 2023 - seaside && vinaigrette offical writeup – 

• CVE-2023-25136 OpenSSH Pre-Auth Double Free Writeup & PoC:

   ・ OpenSSH CVE-2023-25136的漏洞细节和POC – 

• [Tools] NewsPenguin, a Previously Unknown Threat Actor, Targets Pakistan with Advanced Espionage Tool:

   ・ NewsPenguin:针对巴基斯坦的新组织使用的植入插件分析 – 

• [原创]CUDA Program Intro and Reverse-软件逆向-看雪论坛-安全社区|安全招聘|bbs.pediy.com:

   ・ CUDA Program Intro and Reverse – 

• [Vulnerability] CVE-2023-24813 (CVSS score of 10): RCE Flaw in Dompdf Project:

   ・ Dompdf 项目中存在反序列化导致的 RCE 漏洞，该漏洞是因为 CVE-2023-23924 修复不完整导致可以绕过补丁进行攻击。 – 

• DiceCTF 2023 writeups:

   ・ DiceCTF 2023 - geminiblog && jnotes && impossible-xss offical writeup  – 

• OpenSSL Security Advisory:

   ・ OpenSSL的多个漏洞简报 – 

• GitHub - dicegang/dicectf-2023-challenges: All challenges from DiceCTF 2023:

   ・ DiceCTF 2023 Offical sourcecode && env && sol – 

• [Browser] Adobe and Microsoft Bring Industry-Leading Acrobat PDF Experience to 1.4 Billion Windows Users through Microsoft Edge:

   ・ 从 2023 年 3 月开始，Microsoft Edge中将原生嵌入 Acrobat PDF 组件。 – 

• Isn't C++ fun? : ProgrammerHumor:

   ・ 编译器优化导致未定义行为的meme – 

• DiceCTF 2023 Writeups:

   ・ DiceCTF 2022 - recursive-csp && unfinished && jwtjail && chess.rs offical writeup  – 

• MISC｜西湖论剑·2022中国杭州网络安全技能大赛初赛官方Write Up:

   ・ MISC｜西湖论剑·2022中国杭州网络安全技能大赛初赛官方Write Up – 

• [Tools, Crypto] FilelessPELoader:

   ・ 可远程导入加密PE文件到内存中解密并运行，实现无文件加载 – 

* 查看或搜索历史推送内容请访问：

* 新浪微博账号：腾讯玄武实验室