腾讯玄武实验室安全动态推送(Tencent Xuanwu Lab Security Daily News)

腾讯玄武实验室安全动态推送

Tencent Xuanwu Lab Security Daily News

Binni Shah @binitamshah

[ Operating System ] Exploiting Memory Corruption Vulnerabilities on the FreeRTOS Operating System : https://archive.org/details/Exploiting_Memory_Corruption #shmoocon

"FreeRTOS 操作系统内存破坏漏洞的利用，视频: https://t.co/qfWply5ilF "
TROOPERS Conference @WEareTROOPERS

[ Popular Software ] Java and Command Line Injections in Windows http://codewhitesec.blogspot.com/2016/02/java-and-command-line-injections-in-windows.html https://t.co/o5deFbKVol

"为了避免命令行参数解析出问题，Java 建议使用 ProcessBuilder 创建进程。但是在 Windows 环境下，由于命令行参数解析规则不一致，仍然存在命令行注入的问题。 Blog： https://t.co/z6S0JOVmgG https://t.co/o5deFbKVol"