SecurityExplained

Security Explained SecurityExplained 是继之前的学习挑战系列 Learn365 之后推出的新系列。SecurityExplained 系列旨在以多种形式创作信息内容并与社区分享，以促进知识的创造与学习。以下是 SecurityExplained 系列计划开展的各种活动与形式： 1. 发布推文，讲解有趣的网络安全内容 2. 关于各种工具/技术/攻击的博客/教程/操作指南 3. 安全讨论空间/交流会 4. 每月思维导图/基于思维导图的不同攻击/技术讲解 5. 我的渗透测试方法论详解 6. 赠品活动与社区互动 7. 用于维护...

openSUSE Security Advisory (SUSE-SU-2024:3614-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gcore Thwarts Massive 650 Gbps DDoS Attack on Free Plan Client

At the beginning of January, Gcore faced an incident involving several L3/L4 DDoS attacks with a peak volume of 650 Gbps. Attackers exploited over 2000 servers belonging to one of the top three cloud providers worldwide and targeted a client who was using a free CDN plan. However, due to Gcore's...

h1-ctf: [H1-2006 2020] Includes 1 free content discovery

Summary Got it! Thanks guys for going through the trouble to make these. Best regards @nahamsec @adamtlangley @B3nac for hosting and @hackingfish @zonkism and @clos for peer support to make it. Writeup to follow, but let's have the flag first! F859962 Impact Participating in CTFs can cause...

Cubic CMS多个安全漏洞

Cubic CMS是一款内容管理系统。 由于/login.usuario没有正确过滤传递的'login'和'pass' POST参数的用户输入，允许远程攻击者注入或操纵SQL查询。 0 Cubic CMS 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.cubicfactory.com/ I. BACKGROUND ------------------------- "CUBIC CMS" is a non-free content management system for websites and portals o...