每日安全动态推送(7-24)

正文

请到「今天看啥」查看全文

• Type confusion attacks in ProseMirror editors:
https://blog.calif.io/p/type-confusion-attacks-in-prosemirror

・ ProseMirror编辑器中的类型混淆漏洞导致的存储型跨站脚本攻击 – SecTodayBot

• JNDI Injection Remote Code Execution via Path Manipulation in MemoryUserDatabaseFactory:
https://srcincite.io/blog/2024/07/21/jndi-injection-rce-via-path-manipulation-in-memoryuserdatabasefactory.html

・ 介绍了一种通过JNDI注入实现远程代码执行的新向量 – SecTodayBot

请到「今天看啥」查看全文