Contribute to waleedassar/CVE-2021-1656 development by creating an account on GitHub.

FOFA： app=

TL;DR Find out how a vulnerability in DD-WRT allows an unauthenticated attacker to overflow an internal buffer used by UPNP and trigger a code execution vulnerability. Vulnerability Summary DD-WRT is “is Linux-based firmware for wireless routers and access…

文件下载命令快捷生成器,单文件版. Contribute to r0eXpeR/File-Download-Generator development by creating an account on GitHub.

笔者发现管理后台再向缓存配置文件写入数据时过滤不严谨导致可以植入恶意代码，进而导致远程代码执行。

Community curated list of templates for the nuclei engine to find security vulnerabilities. - projectdiscovery/nuclei-templates

VMWare vRealize SSRF-CVE-2021-21975. Contribute to Henry4E36/VMWare-vRealize-SSRF development by creating an account on GitHub.

POC for CVE-2021-24098. Contribute to waleedassar/CVE-2021-24098 development by creating an account on GitHub.

Janet is a functional and imperative programming language. The entire language (core library, interpreter, compiler, assembler, PEG) is…

0x00 前言前几天FastAdmin爆出存在低权限用户有条件RCE的漏洞，比较奇怪的是好像一直没有什么人复

Mongo-express uses safer-eval to validate user supplied javascript. Unfortunately safer-eval sandboxing capabilities are easily bypassed leading to RCE in the context of the node server.

Jellyfin allows unauthenticated arbitrary file read.

Zero-Click Zip TL;DR

Eeyes(棱眼)-快速筛选真实IP并整理为C段. Contribute to EdgeSecurityTeam/Eeyes development by creating an account on GitHub.