每日安全动态推送(2-14)

Tencent Security Xuanwu Lab Daily News

• [Vulnerability] GitHub - 0xf4n9x/CVE-2023-0669: CVE-2023-0669 GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object.:

   ・ GoAnywhere MFT反序列化漏洞（CVE-2023-0669）利用工具 – 

• Shadowsocks 重定向攻击:

   ・ 复现和分析2020年发现的Shadowsocks 重定向漏洞，利用已知明文攻击可能造成中间人攻击 – 

• Vulns1002 04 UAF 🥷CVE-2020-29661🏇☎️ 03 Exploit:

   ・ Linux tty子系统UAF漏洞（CVE-2020-29661）详情与利用思路 – 

• Firefly: a smart black-box fuzzer for web applications testing - Global Bug Bounty Platform:

   ・ Web 应用黑盒模糊测试工具 Firefly – 

• [Malware] Phylum Discovers Revived Crypto Wallet Address Replacement Attack:

   ・ 替换剪贴板中钱包地址的恶意软件再次活跃，使用了新的混淆方法。 – 

• mast1c0re: Introduction – Exploiting the PS4 and PS5 through a game save:

   ・ PS4和PS5上的漏洞利用过程：修改游戏存档文件，利用栈溢出漏洞实现shellcode执行，利用越界写漏洞逃逸emulator。 – 

• Helping secure BNB Chain through responsible disclosure:

   ・ BNB Beacon Chain 无限铸币漏洞 – 

* 查看或搜索历史推送内容请访问：

* 新浪微博账号：腾讯玄武实验室