利用 PEP 517 构建后端钩子在 Python 依赖安装期执行任意代码
利用 PEP 517 构建后端钩子在 Python 依赖安装期执行任意代码
今日共收录 877 条安全情报,包含 71 个 CVE,468 篇安全通告,以及 78 篇研究论文。
← 返回归档列表利用 PEP 517 构建后端钩子在 Python 依赖安装期执行任意代码
当反向代理成了跳板:Varnish VCL 注入与 SSRF 内网穿透实战
[分享][原创][分享]frida和js之间需要转换的数据
[原创]基于浏览器脚本与中间人拦截的瑞数“异步”解决方案
[原创]Intel 酷睿 CPU Management Engine 固件研究与分析逆向 (二) 实战DCI链接与ME解锁尝试
[原创]win11 26H1 下MmGetVirtualForPhysical的变化
herdr Agent主导:自动化逆向5款安卓检测器,内核级绕过实战
[原创]某品牌电动牙刷小程序"越权控制"逆向
Progress Software has told ShareFile customers to shut down the Windows servers running their Storage Zone Controllers,
Unknown threat actors compromised the Injective Labs SDK project's GitHub repository and leveraged it to publish a malic
[原创]IDA 字符串通用去混淆插件
防得最狠的地方往往最不值钱--xx总结
Wireshark release 4.6.7 fixes 12 vulnerabilities and 16 bugs.
The jscrambler npm package was compromised, and simply installing its 8.14.0 release runs an infostealer on your machine
Cybersecurity researchers have disclosed details of sustained cyber espionage activity against several Pakistani law enf
Zimbra is urging customers to apply updates to address a critical security vulnerability impacting the Classic Web Clien
Multiple campaigns are using ghost accounts to map GitHub organizations, including their repositories and members. The p