每日安全动态推送(9-6)

文章预览

Tencent Security Xuanwu Lab Daily News •  Zero Day Initiative — Exploiting Exchange PowerShell After ProxyNotShell: Part 1 - MultiValuedProperty: https://www.zerodayinitiative.com/blog/2024/9/4/exploiting-exchange-powershell-after-proxynotshell-part-1-multivaluedproperty    ・   披露了关于Microsoft Exchange的新漏洞信息，包括CVE-2022-41040、CVE-2022-41082、CVE-2023-21529和CVE-2023-32031，详细分析了漏洞的根本原因，并介绍了漏洞的利用和对微软补丁的绕过。  –  SecTodayBot •  CVE-2024-20017 (CVSS 9.8): Zero-Click Exploit Discovered in Popular Wi-Fi Chipsets, PoC Published: https://securityonline.info/cve-2024-20017-cvss-9-8-zero-click-exploit-discovered-in-popular-wi-fi-chipsets-poc-published/    ・   关于流行Wi-Fi芯片组中的关键漏洞CVE-2024-20017的详细信息，包括漏洞的根本原因和潜在的远程代码执行。  –  SecTodayBot •  Amoco: tool for analysing binaries: https://meterpreter.org/a ………………………………