链接列表 投稿链接
RSS订阅
Stealing HttpOnly cookies with the cookie sandwich technique
6389
Web安全
Malicious extensions circumvent Google’s remote code ban
5771
Web安全
软件安全
在spring-aop中挖掘新反序列化gadget-chain
7198
Web安全
Exploitation Walkthrough and Techniques - Ivanti Connect Secure RCE (CVE-2025-0282)
7604
Web安全
漏洞分析
微软身份漏洞-未授权强制解绑任意微软账户邮箱（全球微软账户邮箱或受影响)
7428
Web安全
How an obscure PHP footgun led to RCE in Craft CMS
6784
Web安全
漏洞分析
SpringMVC的URI解析和权限绕过
7516
Web安全
Bypassing WAFs with the phantom $Version cookie
5254
Web安全
Databricks JDBC Attack via JAAS
5129
Web安全
Exploit
Using YouTube to steal your files Ʊ lyra's epic blog
5179
Web安全
Apache Struts2 文件上传逻辑绕过(CVE-2024-53677)(S2-067)
5514
Web安全
漏洞分析
Diving deep into Jetbrains TeamCity Part 2 - Analysing CVE-2024-24942 leading to unauthenticated Path Traversal
6308
Web安全
漏洞分析
Remote Code Execution with Spring Properties
6712
Web安全
Chrome扩展攻击指南
6673
Web安全
Exploiting File Writes in Hardened Node.js Environments
5333
Web安全
软件安全