[每日信息流] 2026-03-09 #1172
Description
每日安全资讯（2026-03-09）
- SecWiki News
- CXSECURITY Database RSS Feed - CXSecurity.com
- PluckCMS 4.7.10 Unrestricted File Upload
- Python-Multipart < 0.0.22 - Path Traversal / Arbitrary File Write (CVE-2026-24486)
- WeGIA < = 3.6.4 Unauthenticated Admin Authentication Bypass
- NocoDB < = 0.301.2 User Enumeration via Password Reset Endpoint
- Craft CMS 4.x & 5.x RCE via Blocklist Bypass
- pac4j-jwt < 4.5.9, < 5.7.9, < 6.3.3 JwtAuthenticator Authentication Bypass via JWE-wrapped PlainJWT
- AirPlay Dual‑Mode Discovery Scanner for Flipper Zero ESP32 WiFi Dev Board
- Der Flounder
- Recent Commits to cve:main
- Zdziarski
- Private Feed for M09Ic
- ClevCode
- Didier Stevens
- Malwarebytes
- Reverse Engineering
- GhostWeaver - a malware that lives up to its name
- [Update] I know I've shared LCSAJdump before, but v1.1.2 just mapped the entire x86_64 libc graph in <10s. It's now faster than ROPgadget while finding JOPs/Shadow Gadgets they physically miss.
- I need help in Wana see the source code or the things used in app like can we see ?? I have recently came to know that it's possible with using JADX please help we to how to see code is it possible
- 黑海洋Wiki | AI机器人硬件开发 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台
- 奇客Solidot–传递最新科技情报
- 威努特安全网络
- 丁爸 情报分析师的工具箱
- 黑鸟
- 吾爱破解论坛
- 皮相
- 青衣十三楼飞花堂
- 电子物证
- 极客公园
- 非尝咸鱼贩
- 火绒安全
- 复旦白泽战队
- 安全圈
- 安全行者老霍
- 自在安全
- Over Security - Cybersecurity news aggregator
- How AI Assistants are Moving the Security Goalposts
- EU court adviser says banks must immediately refund phishing victims
- Hackers abuse .arpa DNS and ipv6 to evade phishing defenses
- Ransomware Group Securotrop Claims Breach of Universal Mailing Service, Says 490GB of Data Stolen
- Women in Cybersecurity Reveal the Skills That Built Their Confidence
- Top 50 Women Leaders in Cybersecurity to Watch in 2026
- cavallette
- bellingcat
- The Register - Security
- Security Affairs
- Your Open Hacker Community
- Social Engineering
- Krebs on Security
- Dark Space Blogspot
- Information Security
- Technical Information Security Content & Discussion
- netsecstudents: Subreddit for students studying Network Security and its related subjects
- Free Workshop: Understanding IAM (Identity & Access Management)
- OpenShell——An open-source reverse shell management server written in Go.
- Beginner cybersecurity learner – what networking topics should I study?
- New rental home network
- Soon to be Ex-marketing technology bloke looking to enter cyber sec, Would love if i could request some aid in a project i'm working on for my CV
- Built a self-hosted subdomain monitoring tool for bug bounty
- Sto provando a spiegare come funziona davvero Internet: feedback tecnico benvenuto
- Blackhat Library: Hacking techniques and research