链接列表 投稿链接
RSS订阅
Malicious extensions circumvent Google’s remote code ban
5651
Web安全
软件安全
在spring-aop中挖掘新反序列化gadget-chain
7095
Web安全
Exploitation Walkthrough and Techniques - Ivanti Connect Secure RCE (CVE-2025-0282)
7485
Web安全
漏洞分析
微软身份漏洞-未授权强制解绑任意微软账户邮箱（全球微软账户邮箱或受影响)
7352
Web安全
How an obscure PHP footgun led to RCE in Craft CMS
6622
Web安全
漏洞分析
SpringMVC的URI解析和权限绕过
7394
Web安全
Bypassing WAFs with the phantom $Version cookie
5126
Web安全
Databricks JDBC Attack via JAAS
4997
Web安全
Exploit
Using YouTube to steal your files Ʊ lyra's epic blog
5062
Web安全
Apache Struts2 文件上传逻辑绕过(CVE-2024-53677)(S2-067)
5317
Web安全
漏洞分析
Diving deep into Jetbrains TeamCity Part 2 - Analysing CVE-2024-24942 leading to unauthenticated Path Traversal
6185
Web安全
漏洞分析
Remote Code Execution with Spring Properties
6582
Web安全
Chrome扩展攻击指南
6513
Web安全
Exploiting File Writes in Hardened Node.js Environments
5211
Web安全
软件安全
Introducing lightyear: a new way to dump PHP files
3883
Web安全