3月23日技术类安全热点

国产电纸书Bambook破解笔记

http://www.droidsec.cn/%E5%9B%BD%E4%BA%A7%E7%94%B5%E7%BA%B8%E4%B9%A6bambook%E7%A0%B4%E8%A7%A3%E7%AC%94%E8%AE%B0/

 

WPHunter：Wordpress漏洞扫描器v0.1测试版

https://www.reddit.com/r/netsec/comments/867xmp/wphunter_a_wordpress_vulnerability_scanner_v01/

 

GhostMiner: Cryptomining Malware Goes Fileless

https://blog.minerva-labs.com/ghostminer-cryptomining-malware-goes-fileless

 

Yahoo Small Business – SQL注入漏洞

https://cxsecurity.com/issue/WLB-2018030186

 

[CVE-2018-3741] rails-html-sanitizer中的XSS漏洞

http://seclists.org/oss-sec/2018/q1/262

 

ModSecurity WAF 3.0 for Nginx – Denial of Service

https://www.securityfocus.com/archive/1/541886

 

CVE-2018-8822 Linux 内核多内存损坏漏洞

https://www.securityfocus.com/bid/103476