blog.csdn

反序列化漏洞原理与实战防御：从Java到PHP/Python的通用攻防解析

本文深入剖析反序列化漏洞的本质原理，涵盖Java、PHP、Python三大语言的共性机制与差异攻击面。重点揭示漏洞根因在于反序列化过程中的信任误判，而非序列化本身；详解Gadget链构造逻辑（如CC链、JNDI注入、Tomcat EL绕过）；提出根本性防御策略——禁用不可信输入反序列化，并构建输入过滤、类白 ...
Security Boulevard

Podcast: Flax Typhoon Ran on 1,300 Scripts and a 12-Year-Old Bug Nobody Patched

Flax Typhoon Ran on 1,300 Scripts and a 12-Year-Old Bug Nobody Patched The Cyber Resilience Brief: Integrity Tech and ...
Security Boulevard

Microsoft’s October 2026 Patch Tuesday addresses 1407 CVEs (CVE-2026-96951)

Critical1337Important0Moderate1LowMicrosoft addresses 1407 CVEs in the tenth Patch Tuesday of 2026, marking the second consecutive month to reset the bar as the largest Patch Tuesday release. This ...
GitHub

CHANGELOG.md

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more - trivy/CHANGELOG.md at main · aquasecurity/trivy ...