[分享]ollydbg的继任者Z0Bdbg
[分享]ollydbg的继任者Z0Bdbg
2026-08-09 归档
今日共收录 815 条安全情报，包含 75 个 CVE，398 篇安全通告，以及 81 篇研究论文。
← 返回归档列表GOT/PLT 惰性绑定与 setuid 程序导入函数劫持
GOT/PLT 惰性绑定与 setuid 程序导入函数劫持
[原创]D3CTF 2026 d3llvm.apk 反调试定位与加密 SO的Dump
[原创]D3CTF 2026 d3llvm.apk 反调试定位与加密 SO的Dump
[原创]编译Redmi10x 5G Kernelsu
[原创]编译Redmi10x 5G Kernelsu
[原创]hitcon-2017-babyfirst-revenge （看雪ctf版）writeup
[原创]hitcon-2017-babyfirst-revenge （看雪ctf版）writeup
Living off the coding agent: Two tales of tunnels and LaunchAgents
Agent-parented reverse tunnels and LaunchAgents can expose a local admin app to the internet. Endpoint still needs to tr
Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer
A cluster of nearly 800 malicious packages has been published to the npm registry as part of a new campaign designed to
Directus 文件导入 SSRF：官方只修了一半，剩下 4 个盲区
Directus 文件导入 SSRF：官方只修了一半，剩下 4 个盲区
【AI安全】Agent 执行时间窗风险：TOCTOU 点击劫持分析
【AI安全】Agent 执行时间窗风险：TOCTOU 点击劫持分析
[分享]VMProtect3.5.1 x32Dbg插件AntiVmp v1.1发布
[分享]VMProtect3.5.1 x32Dbg插件AntiVmp v1.1发布
[原创]一串反引号，十层突破：n1ctf-2018-easy_harder_php 从备份泄露到 MySQL 提权读 flag
[原创]一串反引号，十层突破：n1ctf-2018-easy_harder_php 从备份泄露到 MySQL 提权读 flag
Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers
Attacker-controlled instructions can make Atlassian's Rovo assistant collect Jira or Confluence data that a signed-in us
Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication
Metabase has warned that a maximum-severity security flaw impacting its business intelligence and data visualization sof
N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist
N-able has released a fresh round of hotfixes for N‑central as part of its investigation into ongoing exploitation of a
Critical One-Click Vulnerability in Atlassian’s Rovo AI Exposed Enterprise Data
The RovoBlast attack method identified by Varonis researchers could have been exploited to steal Confluence, Jira and Sh