latest minecraft version java nameの検索結果1 - 6 件 / 6件

• あとで読む

  【2020年】CTF Web問題の攻撃手法まとめ - こんとろーるしーこんとろーるぶい

  • 245 users
  • graneed.hatenablog.com
  • テクノロジー
  • 2021/08/09

  はじめに 対象イベント 読み方、使い方 Remote Code Execution(RCE) 親ディレクトリ指定によるopen_basedirのバイパス PHP-FPMのTCPソケット接続によるopen_basedirとdisable_functionsのバイパス JavaのRuntime.execでシェルを実行 Cross-Site Scripting(XSS) nginx環境でHTTPステータスコードが操作できる場合にCSPヘッダーを無効化 GoogleのClosureLibraryサニタイザーのXSS脆弱性 WebのProxy機能を介したService Workerの登録 括弧を使わないXSS /記号を使用せずに遷移先URLを指定 SOME(Same Origin Method Execution)を利用してdocument.writeを順次実行 SQL Injection MySQ

  • CTF
  • あとで読む
  • security
  • セキュリティ
  • php

  
• あとで読む

  Log4Shell: RCE 0-day exploit found in log4j, a popular Java logging package | LunaTrace

  • 197 users
  • www.lunasec.io
  • テクノロジー
  • 2021/12/10

  Originally Posted @ December 9th & Last Updated @ August 1st, 3:30pm PDT Fixing Log4Shell? Claim a free vulnerability scan on our dedicated security platform and generate a detailed report in minutes. What is it?​On Thursday, December 9th a 0-day exploit in the popular Java logging library log4j (version 2), called Log4Shell, was discovered that results in Remote Code Execution (RCE) simply by log

  • security
  • java
  • log4j
  • セキュリティ
  • あとで読む
  • logging
  • 未分類
  • 技術

  
• あとで読む

  Guidance for preventing, detecting, and hunting for exploitation of the Log4j 2 vulnerability | Microsoft Security Blog

  • 7 users
  • www.microsoft.com
  • テクノロジー
  • 2021/12/12

  January 10, 2022 recap – The Log4j vulnerabilities represent a complex and high-risk situation for companies across the globe. This open-source component is widely used across many suppliers’ software and services. By nature of Log4j being a component, the vulnerabilities affect not only applications that use vulnerable libraries, but also any services that use these applications, so customers may

  • microsoft
  • security
  • 北朝鮮
  • セキュリティ
  • 中国
  • あとで読む

  
• あとで読む

  Tech Solvency: The Story So Far: CVE-2021-44228 (Log4Shell log4j vulnerability).

  • 6 users
  • www.techsolvency.com
  • テクノロジー
  • 2021/12/14

  Log4Shell log4j vulnerability (CVE-2021-44228 / CVE-2021-45046) - cheat-sheet reference guide Last updated: $Date: 2022/02/08 23:26:16 $ UTC - best effort, validate all for your environment/model before use, unofficial sources may be wrong by @TychoTithonus (Royce Williams), standing on the shoulders of many giants Send updates or suggestions (please include category / context / public (or support

  • Security
• あとで読む

  GitHub - taishi-i/awesome-ChatGPT-repositories: A curated list of resources dedicated to open source GitHub repositories related to ChatGPT and OpenAI API

  • 3 users
  • github.com/taishi-i
  • テクノロジー
  • 2023/04/03

  awesome-chatgpt-api - Curated list of apps and tools that not only use the new ChatGPT API, but also allow users to configure their own API keys, enabling free and on-demand usage of their own quota. awesome-chatgpt-prompts - This repo includes ChatGPT prompt curation to use ChatGPT better. awesome-chatgpt - Curated list of awesome tools, demos, docs for ChatGPT and GPT-3 awesome-totally-open-chat

  
• あとで読む

  Django for Startup Founders: A better software architecture for SaaS startups and consumer apps

  • 3 users
  • alexkrupp.typepad.com
  • テクノロジー
  • 2021/06/24

  In an ideal world, startups would be easy. We'd run our idea by some potential customers, build the product, and then immediately ride that sweet exponential growth curve off into early retirement. Of course it doesn't actually work like that. Not even a little. In real life, even startups that go on to become billion-dollar companies typically go through phases like: Having little or no growth fo