作者：cheery@QAX-ATEAM && n0thing@QAX-ATEAM

CVE-2021-1732 is a 0-Day vulnerability exploited by the BITTER APT organization in one operation which was disclosed in February this year[1][2][3]. This vulnerability exploits a user mode callback opportunity in win32kfull module to break the normal execution…

师傅们，0day来啦~\x0a蓝凌OA EKP 后台SQL注入漏洞 CNVD-2021-01363

Intro The OAuth2 authorization protocol has been under fire for the past ten years. You've probably already heard about plenty of "return_uri" tricks, token leakages, CSRF-style attacks on clients, an

POC for CVE-2021-26871(Maybe). Contribute to robotMD5/CVE-2021-26871_POC development by creating an account on GitHub.

OSINT tool to get information from a Github and Gitlab profile and find user's email addresses leaked on commits. - GONZOsint/gitrecon

Mybb associate CVE-2021-27890 & CVE-2021-27889 to RCE poc - GitHub - xiaopan233/Mybb-XSS_SQL_RCE-POC: Mybb associate CVE-2021-27890 & CVE-2021-27889 to RCE poc

HackerOne report #962604 by muthu_prakash on 2020-08-19, assigned to @kaunghtet:

On December 22, 2020, our Threat Intelligence team responsibly disclosed a vulnerability in Facebook for WordPress, formerly known as Official Facebook Pixel, a WordPress plugin installed on over 500,000 sites. This flaw made it possible for unauthenticated…

近期，奇安信威胁情报中心在日常的样本运营中，捕获了多例实战攻防演习样本。样本主要以“薪酬调整”、“局处级干部进修”等话题为诱饵。部分样本仅有红雨滴高对抗沙箱能够触发完整的行为，甚至号称业界最强的anyrun沙箱也无能为力。

CVE-2021-3449 OpenSSL denial-of-service exploit 👨🏻‍💻 - riptl/cve-2021-3449

Collection of useful features in Burp Suite Application

🐱‍💻 👍 Google Chrome - File System Access API - vulnerabilities reported by Maciej Pulikowski | Total Bug Bounty Reward: $5.000 | CVE-2021-21123 and 5 more... - Puliczek/CVE-2021-21123-PoC-Google-Ch...

Product: McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 Type: OWASP Top Ten 2013 Category A10 - Unvalidated Redirects and Forwards Summary: Unvali...

Several months ago I submitted what appeared to be a security flaw to CloudFalre’s bugbounty program. According to them, this is not a…

Master FFUF for web fuzzing: brute-force directories, optimize wordlists, and compare performance with other tools.

Contribute to smriti548/CVE development by creating an account on GitHub.