文章预览
Tencent Security Xuanwu Lab Daily News • Microsoft Urges Windows Admins to Patch Microsoft Message Queuing RCE Flaw: https://gbhackers.com/microsoft-message-queuing-rce-flaw/ ・ 微软披露了两个关键的远程代码执行漏洞，分别位于Microsoft Message Queuing和Windows Wi-Fi Driver。 – SecTodayBot • CVE-2024-29824 Deep Dive: Ivanti EPM SQL Injection Remote Code Execution Vulnerability: https://www.horizon3.ai/attack-research/attack-blogs/cve-2024-29824-deep-dive-ivanti-epm-sql-injection-remote-code-execution-vulnerability/ ・ 揭示了Ivanti Endpoint Manager中的SQL注入漏洞，提供了利用该漏洞的POC – SecTodayBot • MagicDot: Exploiting Windows Paths for Rootkit Power: https://meterpreter.org/magicdot-exploiting-windows-paths-for-rootkit-power/ ・ MagicDot是一个Python软件包，实现了类似rootkit的技术，包括利用DOT-to-NT路径转换已知问题的漏洞。 – SecTodayBot • Zoom Sessi
………………………………
