每日攻防资讯简报[Mar.4th]

0x00漏洞1.SaltStack API漏洞(CVE-2021-3197，CVE-2021-25281和CVE-2021-25282)https://dozer.nz/posts/saltapi-vulns 2.SIGRed的RCE漏洞（CVE-2020-1350）https://www.graplsecurity.com/post/anatomy-of-an-exploit-rce-with-cve-2020-1350-sigredhttps://github.com/chompie1337/SIGRed_RCE_PoC 3.可用于逃逸Android设备上的Chromium沙箱RenderFrameHostImpl UAF漏洞https://microsoftedge.github.io/edgevr/posts/yet-another-uaf/ 4.NMap脚本，检查vCenter Server RCE 漏洞CVE-2021-21972https://github.com/GuayoyoLabs/CVE-2021-21972 5.VMware View Planner RCE漏洞（CVE-2021-21978）https://www.vmware.com/security/advisories/VMSA-2021-0003.html0x01恶意代码1.黑客组织Hafnium利用0Day Exploit 攻击Exchange Servershttps://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers/ 2.在野发现的对多个Microsoft Exchange漏洞的利用https://www.vol ………………………………