https://www.epochtimes.com.tw/n291507/%E5%8F%B0%E4%B8%AD%E8%B3%87%E5%AE%89%E5%8D%B1%E6%A9%9F-%E9%80%BE%E5%8D%83%E4%B8%AD%E8%A3%BD%E7%9B%A3%E8%A6%96%E5%99%A8%E8%97%8F%E6%A0%A1%E5%9C%92.html
被行政院與國安會列入禁止採購黑名單的｢海康威視｣，日前在台中市區多處地下道現形後，引發市民不安與關注。台中市議員黃守達日前發函市府要求各局處全面盤點、結果揭曉，警察局回覆重要路口無架設中製監視器，交通局、建設局表示已全數汰換為台製監視器，但還有1,599支藏在34所學校裡。
https://www.ithome.com.tw/news/132927
Apple發出官方聲明，反駁Google日前揭露iOS一系列漏洞時，稱這些漏洞被用來發動有史以來針對iPhone用戶最大規模攻擊的說法，Apple表示，使用這些漏洞進行的攻擊複雜且狹隘，並經過調查，駭客主要發動攻擊的時間僅有2個月，非Google所暗示的2年。
https://ithome.com.tw/news/132935
Exim維護團隊在接獲研究人員的安全通報後，於9月初釋出4.92.2版以修補漏洞，提醒用戶應盡快捨棄4.92.1以前的舊版軟體並完成更新
https://www.ithome.com.tw/news/132949
在開源測試框架中嵌入這個針對舊版Windows遠端桌面服務缺陷所打造的攻擊程式，固然可能遭駭客利用，但Metasploit管理方Rapid7認為，此舉對防禦方來說是利大於弊
| Code | Meaning | Example |
|---|---|---|
%a | Weekday as locale’s abbreviated name. | Mon |
%A | Weekday as locale’s full name. | Monday |
%w | Weekday as a decimal number, where 0 is Sunday and 6 is Saturday. | 1 |
%d | Day of the month as a zero-padded decimal number. | 30 |
%-d | Day of the month as a decimal number. (Platform specific) | 30 |
%b | Month as locale’s abbreviated name. | Sep |
%B | Month as locale’s full name. | September |
%m | Month as a zero-padded decimal number. | 09 |
%-m | Month as a decimal number. (Platform specific) | 9 |
%y | Year without century as a zero-padded decimal number. | 13 |
%Y | Year with century as a decimal number. | 2013 |
%H | Hour (24-hour clock) as a zero-padded decimal number. | 07 |
%-H | Hour (24-hour clock) as a decimal number. (Platform specific) | 7 |
%I | Hour (12-hour clock) as a zero-padded decimal number. | 07 |
%-I | Hour (12-hour clock) as a decimal number. (Platform specific) | 7 |
%p | Locale’s equivalent of either AM or PM. | AM |
%M | Minute as a zero-padded decimal number. | 06 |
%-M | Minute as a decimal number. (Platform specific) | 6 |
%S | Second as a zero-padded decimal number. | 05 |
%-S | Second as a decimal number. (Platform specific) | 5 |
%f | Microsecond as a decimal number, zero-padded on the left. | 000000 |
%z | UTC offset in the form +HHMM or -HHMM (empty string if the the object is naive). | |
%Z | Time zone name (empty string if the object is naive). | |
%j | Day of the year as a zero-padded decimal number. | 273 |
%-j | Day of the year as a decimal number. (Platform specific) | 273 |
%U | Week number of the year (Sunday as the first day of the week) as a zero padded decimal number. All days in a new year preceding the first Sunday are considered to be in week 0. | 39 |
%W | Week number of the year (Monday as the first day of the week) as a decimal number. All days in a new year preceding the first Monday are considered to be in week 0. | 39 |
%c | Locale’s appropriate date and time representation. | Mon Sep 30 07:06:05 2013 |
%x | Locale’s appropriate date representation. | 09/30/13 |
%X | Locale’s appropriate time representation. | 07:06:05 |
%% | A literal '%' character. | % |
MySQL <= 5.7.14 Remote Root Code Execution / Privilege Escalation (0day)
5.6.32
5.5.51
MySQL clones are also affected, including:
MariaDB
PerconaDB
但底下的III. INTRODUCTION寫了
The vulnerability affects all MySQL servers in default configuration in all version branches (5.7, 5.6, and 5.5) including the latest versions, and could be exploited by both local and remote attackers. Both the authenticated access to MySQL database (via network connection or web interfaces such as phpMyAdmin) and SQL Injection could be used as exploitation vectors.
