漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for rpcbind to fix the vulnerability. Affected OS: Fedora 25 漏洞危害 Successful exploitation allows attacker to compromise the system. 解决方案 Fedora has issued updated packages to fix this vulnerability. Up…

漏洞类别：CGI 漏洞等级： 漏洞信息 Advantech WebAccess HMI/SCADA is an application used for monitoring and controlling industrial processes. A stack based buffer overflow vulnerability exists while handling certain files that triggers long string arguments to functions. Affe…

漏洞类别：Local 漏洞等级： 漏洞信息 Firefox is a free and open-source web browser developed for Windows, OS X, and Linux, with a mobile version for Android. A use-after-free can occur during Buffer11 API calls within the ANGLE graphics library, used for WebGL content. This …

点赞数：0 漏洞类别：Information gathering 漏洞等级： 漏洞信息 Cisco IMC (Integrated Management Controller) is installed on the host. QID Detection Logic (Authenticated): This QID reviews the Cisco IMC version via "show cimc detail ". The QID is posted if Cisco IMC version is fo…

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for wireshark to fix the vulnerability. Affected OS: Fedora 25 漏洞危害 解决方案 Fedora has issued updated packages to fix this vulnerability. Updates can be installed using the yum utility, which can be downl…

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for yara to fix the vulnerability. Affected OS: Fedora 24 Fedora 25 漏洞危害 This vulnerability can also be used to cause a limited denial of service in the form of interruptions in resource availability. …

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for qemu to fix the vulnerability. Affected OS: Fedora 24 漏洞危害 This vulnerability can also be used to cause a limited denial of service in the form of interruptions in resource availability. 解决方案 Fedor…

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for icu to fix the vulnerability. Affected OS: Fedora 24 漏洞危害 This vulnerability can also be used to cause a limited denial of service in the form of interruptions in resource availability. 解决方案 Fedora…

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for weechat to fix the vulnerability. Affected OS: Fedora 24 Fedora 25 漏洞危害 This vulnerability can also be used to cause a limited denial of service in the form of interruptions in resource availabilit…

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for elfutils to fix the vulnerability. Affected OS: Fedora 25 漏洞危害 This vulnerability can also be used to cause a limited denial of service in the form of interruptions in resource availability. 解决方案 F…

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for tnef to fix the vulnerability. Affected OS: Fedora 24 Fedora 25 漏洞危害 This vulnerability could be exploited to gain partial access to sensitive information. Malicious users could also use this vulne…

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for libnl3 to fix the vulnerability. Affected OS: Fedora 24 漏洞危害 This vulnerability could be exploited to gain complete access to sensitive information. Malicious users could also use this vulnerabilit…

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for community-mysql to fix the vulnerability. Affected OS: Fedora 25 Fedora 24 漏洞危害 This vulnerability could be exploited to gain partial access to sensitive information. Additionally this vulnerabilit…

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for bouncycastle to fix the vulnerability. Affected OS: Fedora 24 漏洞危害 This vulnerability could be exploited to gain partial access to sensitive information. 解决方案 Fedora has issued updated packages to …

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for drupal8 to fix the vulnerability. Affected OS: Fedora 24 Fedora 25 漏洞危害 This vulnerability could be exploited to gain partial access to sensitive information. Malicious users could also use this vu…

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for libreoffice to fix the vulnerability. Affected OS: Fedora 24 漏洞危害 This vulnerability could be exploited to gain partial access to sensitive information. Malicious users could also use this vulnerab…

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for log4j to fix the vulnerability. Affected OS: Fedora 24 漏洞危害 This vulnerability could be exploited to gain partial access to sensitive information. Malicious users could also use this vulnerability …

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for roundcubemail to fix the vulnerability. Affected OS: Fedora 25 Fedora 24 漏洞危害 This vulnerability could be exploited to gain partial access to sensitive information. Malicious users could also use t…

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for batik to fix the vulnerability. Affected OS: Fedora 25 Fedora 24 漏洞危害 This vulnerability could be exploited to gain complete access to sensitive information. 解决方案 Fedora has issued updated packages…

E安全5月16日讯 窃取并公开美国国家安全局(简称：NSA)网络武器库的“影子经纪人”（Shadow Brokers）黑客组织刚刚宣称：将从今年6月开始，逐月出售包括浏览器、路由器、手机漏洞及相关工具、新的攻击行动disk（和此次传播勒索蠕虫病毒的Windows武器库一样，包括NSA支持的Windows 10网络攻击武器），还有更多的SWIFT供应商和央行入侵数据，以及针对中国、俄罗斯、伊朗和朝鲜的导弹和核弹计划的内部网络数据。 就在昨天晚间，某宣称代表影子经纪人的人士在Steemit网站上发布了一条新消息。根据这…

传送门 【权威报告】WanaCrypt0r勒索蠕虫完全分析报告 一、 事件时间线 1) 2017年5月12日 Malware Tech在twitter上发布了一条通过SMB传播的勒索软件WannaCrypt，之后相关kill switch url被注册监管，之后该twitter作者编写了文章“How to Accidentally Stop a Global Cyber Attacks”，在该文章中记录了他是如何第一时间注意到这次攻击事件，并迅速做出相应的过程。 2) 2017年5月12日 360发布紧急通告，对一…

本文作者：李勤 2017-05-16 10:43 导语：5月16日上午，雷锋网编辑从朋友圈看到，一位名为“雷锋”的网络安全圈人士称：卧槽，今天腾讯抽风了，大批量黑客QQ群、技术群、开发群，各种交流群封了一大片！！！ 5月16日上午，雷锋网编辑从朋友圈看到，一位名为“雷锋”的网络安全圈人士称：卧槽，今天腾讯抽风了，大批量黑客QQ群、技术群、开发群，各种交流群封了一大片！！！ 随后，引发多人评论。 【该截图由安全圈人士“雷锋”提供】 雷锋网编辑随后展开了调查，发现果然很多黑客QQ群被封禁，只是，不仅是黑客QQ群。 从截…

漏洞类别：Security Policy 漏洞等级： 漏洞信息 Apache Tomcat software is a web server. Support for Apache Tomcat 6.0.x ended on December, 31 2016. No further bug fixes, enhancements, security updates or technical support is available for this version. 漏洞危害 The system is at h…

漏洞类别：Cisco 漏洞等级： 漏洞信息 A vulnerability in the web framework of Cisco UCS Central Software could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to improper input validation. QID Detection L…

漏洞类别：Information gathering 漏洞等级： 漏洞信息 Cisco UCS (Unified Computing System) Central Software is installed on the host. QID Detection Logic (Authenticated): This QID reviews the Cisco UCS central version via "show version". The QID is posted if Cisco UCS central…