Aggregator

本文记录了 HackTheBox Spooktrol 靶机的一次完整渗透过程。攻击从 Web 服务中的目录穿越漏洞开始，通过任意文件读取获取 implant 可执行文件，并结合流量分析、Caido 代理劫持、Match & Replace 自动替换、Ghidra 静态逆向与 GDB 动态调试，逐步还原 implant 与 C2 Server 之间的任务通信机制。随后，利用文件上传能力写入 SSH

通过接口未授权获取管理员权限 利用管理员权限登陆后台 通过接口进行任意文件读取和sql注入

A vulnerability was found in Courier IMAP. It has been declared as critical. This vulnerability affects the function alloc_search_key of the file searchinfo.C of the component Search Command Parser. The manipulation results in uncontrolled recursion. This vulnerability is reported as CVE-2026-67194. The attack can be launched remotely. No exploit exists. It is best practice to apply a patch to resolve this issue.

7 个月，503 个测试用例，13 个检测插件，一个完全自研的 Web 漏洞扫描器。这篇文章不讲虚的，拆开聊聊 OOB 盲检测的三个后端设计（为什么做了 DNSLog + Interactsh + 自建 CallbackServer 三套）、API 挖掘的两阶段思路（Swagger 解析 + 路径 Fuzzing）、以及那个把我逼疯之后重写的差异引擎（加权打分 + 自动清洗，专门治动态页面误报）。

一道非常精简有质量的题目，牵扯了很多web的考点

A vulnerability was found in Zitadel up to 2.71.19/3.4.10/4.15.0. It has been classified as critical. This affects an unknown part of the file internal/command/user_v2_email.go/internal/command/user_v2_phone.go/internal/command/user_v2_human.go of the component Email/Phone Self-Management API. The manipulation leads to permission issues. This vulnerability is documented as CVE-2026-54693. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is recommended.

详细总结了多种模板引擎

A vulnerability was found in termux proot-distro up to 5.1.5 and classified as problematic. Affected by this issue is some unknown functionality. Executing a manipulation can lead to path traversal. This vulnerability is registered as CVE-2026-54727. The attack needs to be launched locally. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability has been found in Linux Kernel and classified as very critical. Affected by this vulnerability is the function posix_cpu_timer_del of the component posix-cpu-timers. Performing a manipulation results in use after free. This vulnerability is cataloged as CVE-2026-64560. It is possible to initiate the attack remotely. There is no exploit available. To fix this issue, it is recommended to deploy a patch.

A vulnerability, which was classified as very critical, was found in kube-logging logging-operator up to 6.5.99. Affected is the function FluentRender of the file pkg/sdk/logging/model/render/fluent.go of the component Fluentd configuration renderer. Such manipulation of the argument record_transformer.records leads to os command injection. This vulnerability is listed as CVE-2026-54680. The attack may be performed from remote. There is no available exploit. You should upgrade the affected component.

A forum user posting as cozypandas has published what they describe as the full customer database of IPRO, an eDiscovery platform used by law firms, corporations, and government agencies to manage data for litigation.

New research shows how security scanners embedded in the software supply chain can be attacked to serve as a foothold for downstream attacks.

Магазины не закроют свои двери даже после полного обрыва связи.

A vulnerability, which was classified as critical, has been found in Black Duck Coverity Connect up to 2026.3.0. This impacts an unknown function. This manipulation causes sql injection. This vulnerability is tracked as CVE-2026-8339. The attack is possible to be carried out remotely. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability classified as very critical was found in Linux Kernel up to 6.12.96/6.18.39/7.1.4. This affects the function PKEY_VERIFYPROTK of the component s390/pkey. The manipulation results in buffer overflow. This vulnerability is identified as CVE-2026-64559. The attack is only possible with local access. There is not any exploit available. Upgrading the affected component is advised.

AI-generated phishing campaigns are rapidly evolving beyond traditional malware delivery, shifting the battleground directly into the web browser where attackers can hijack active sessions, bypass multi-factor authentication (MFA), and evade conventional endpoint security controls. This emerging threat model is forcing security operations centers (SOCs) to rethink how phishing attacks are detected, investigated, and contained, as […]

The post AI-Generated Phishing No Longer Needs Malware: It Can Steal Your Session Inside the Browser appeared first on Cyber Security News.

A vulnerability classified as critical has been found in ClickHouse Server up to 26.3.9.8. The impacted element is the function create dictionaries of the component Create Dictionaries. The manipulation leads to sql injection. This vulnerability is referenced as CVE-2026-51992. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability described as problematic has been identified in Systerel S2OPC up to 1.x. The affected element is an unknown function of the component CycloneCrypto. Executing a manipulation can lead to improper certificate validation. The identification of this vulnerability is CVE-2026-18257. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability marked as problematic has been reported in Red Hat Quay. Impacted is an unknown function. Performing a manipulation results in improper privilege management. This vulnerability was named CVE-2026-18255. The attack may be initiated remotely. There is no available exploit.

A vulnerability labeled as problematic has been found in Infor Global HR 11.24.10.01.33. This issue affects some unknown processing of the component Employee Compensation View. Such manipulation leads to improper control of resource identifiers. This vulnerability is uniquely identified as CVE-2025-60931. The attack can be launched remotely. No exploit exists.