9月17日每日安全热点 - Adobe发布针对Media Encoder的安全更新

360安全客 安全资讯 64959 4

漏洞 Vulnerability
CVE-2020-16875: Microsoft Exchange远程代码执行漏洞通告
https://cert.360.cn/warning/detail?id=1a9e6197b193654c78c1ef1ca3ef090d
CVE-2020-13948: Apache Superset 远程代码执行
https://seclists.org/oss-sec/2020/q3/175
Adobe发布针对Media Encoder的安全更新
https://www.zdnet.com/article/adobe-out-of-band-patch-released-to-tackle-media-encoder-vulnerabilities/#ftag=RSSbaffb68
安全研究 Security Research
Hyper-V DoS 漏洞分析（CVE-2020-0890 ）
https://www.anquanke.com/post/id/217525
干漏洞悬赏的四年
https://blog.assetnote.io/2020/09/15/hacking-on-bug-bounties-for-four-years/
图解内存匿名反向映射reverse mapping
https://mp.weixin.qq.com/s/0BhYDU98d-xi7HAbjUPW4w
PSV-2020-0211-Netgear-R8300-UPnP栈溢出漏洞分析
https://www.anquanke.com/post/id/217606
安全事件 Security Incident
新的MrbMiner恶意软件已感染了数千个MSSQL数据库
https://www.zdnet.com/article/new-mrbminer-malware-has-infected-thousands-of-mssql-databases/#ftag=RSSbaffb68
安全工具 Security Tools
AES Finder – 在运行进程中查找AES密钥的程序
https://www.kitploit.com/2020/09/aes-finder-utility-to-find-aes-keys-in.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+PentestTools+%28PenTest+Tools%29
（完）