by Mitja Kolsek, the 0patch Team March 2021 Windows Updates included fixes for seven vulnerabilities in Windows DNS Server, two of which w...

Automatically spawn a reverse shell fully interactive for Linux or Windows victim - nodauf/Girsh

Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.

Contribute to waleedassar/CVE-2021-1656 development by creating an account on GitHub.

FOFA： app=

TL;DR Find out how a vulnerability in DD-WRT allows an unauthenticated attacker to overflow an internal buffer used by UPNP and trigger a code execution vulnerability. Vulnerability Summary DD-WRT is “is Linux-based firmware for wireless routers and access…

文件下载命令快捷生成器,单文件版. Contribute to r0eXpeR/File-Download-Generator development by creating an account on GitHub.

笔者发现管理后台再向缓存配置文件写入数据时过滤不严谨导致可以植入恶意代码，进而导致远程代码执行。

Community curated list of templates for the nuclei engine to find security vulnerabilities. - projectdiscovery/nuclei-templates

VMWare vRealize SSRF-CVE-2021-21975. Contribute to Henry4E36/VMWare-vRealize-SSRF development by creating an account on GitHub.

POC for CVE-2021-24098. Contribute to waleedassar/CVE-2021-24098 development by creating an account on GitHub.

Janet is a functional and imperative programming language. The entire language (core library, interpreter, compiler, assembler, PEG) is…

0x00 前言前几天FastAdmin爆出存在低权限用户有条件RCE的漏洞，比较奇怪的是好像一直没有什么人复

Mongo-express uses safer-eval to validate user supplied javascript. Unfortunately safer-eval sandboxing capabilities are easily bypassed leading to RCE in the context of the node server.

Jellyfin allows unauthenticated arbitrary file read.

Zero-Click Zip TL;DR