0x01 漏洞说明MessageSolution企业邮件归档管理系统 EEA是北京易讯思达科技开发有限公司开

Fast browser-based network discovery module. Contribute to serain/netmap.js development by creating an account on GitHub.

Software for fuzzing, used on web application pentestings. - NESCAU-UFLA/FuzzingTool

A Swagger API Exploit. Contribute to lijiejie/swagger-exp development by creating an account on GitHub.

一、环境搭建

Vulnerability in Adobe ColdFusion which is improper input
validation which leads to arbitrary code execution.
Signed-off-by: Dave Walker (Daviey) email@daviey.com

🐱‍💻 👍 Google Chrome - File System Access API - vulnerabilities reported by Maciej Pulikowski | Total Bug Bounty Reward: $5.000 | CVE-2021-21123 and 5 more... - Puliczek/CVE-2021-21123-PoC-Google-Ch...

MobileIron MDM exposes account enumeration and SFA to unauthenticated attacks. This analysis details how to mitigate this vulnerability.

0x00. TL;DRntopng 是一套开源的网络流量监控工具，提供基于 Web 界面的实时网络流量监控。支持跨平台，包括 Windows、Linux 以及 MacOS。ntopng 使用 C++ 语言开发，其绝大部分 Web 逻辑使用 lua 开发。 在针对 ntopng 的源码进行审计的过程中，笔者发现了 ntopng 存在多个漏洞，包括一个权限绕过漏洞、一个 SSRF 漏洞和多个其他安全问题，接着组合利用这些问题成功实现了部分版本的命令执行利用和管理员 Cookie 伪造。 比较有趣的是，利用的过程涉及到…

A fuzzing tool for email sender spoofing attack. 👻 - GitHub - mo-xiaoxi/ESpoofing: A fuzzing tool for email sender spoofing attack. 👻

作者：cheery@QAX-ATEAM && n0thing@QAX-ATEAM

CVE-2021-1732 is a 0-Day vulnerability exploited by the BITTER APT organization in one operation which was disclosed in February this year[1][2][3]. This vulnerability exploits a user mode callback opportunity in win32kfull module to break the normal execution…

师傅们，0day来啦~\x0a蓝凌OA EKP 后台SQL注入漏洞 CNVD-2021-01363

Intro The OAuth2 authorization protocol has been under fire for the past ten years. You've probably already heard about plenty of "return_uri" tricks, token leakages, CSRF-style attacks on clients, an

POC for CVE-2021-26871(Maybe). Contribute to robotMD5/CVE-2021-26871_POC development by creating an account on GitHub.