棱角社区
@EdgeSecurity
83 subscribers
12 photos
444 links
网络安全事件推送.
Download Telegram
About
Blog
Apps
Platform
Join
棱角社区
83 subscribers
棱角社区
#漏洞 Jenkins插件中的多个漏洞

https://seclists.org/oss-sec/2021/q1/275
https://groups.google.com/g/jenkinsci-advisories?pli=1
seclists.org
oss-sec: Multiple vulnerabilities in Jenkins plugins
56 views
棱角社区
#漏洞 Wifi迷你间谍1080P高清安全IP摄像机多个漏洞
https://xn--sb-lka.org/cve/INSMA.txt
53 views
棱角社区
#漏洞 北京致远G6政务协同系统V6.1SP1 反射性xss漏洞 CVE-2020-20545

https://note.youdao.com/ynoteshare1/index.html?id=29f908204968a79233c1c0c80a59f8ff&type=note
54 views
棱角社区
#工具 文件下载命令快捷生成器,单文件版
https://github.com/r0eXpeR/File-Download-Generator
GitHub
r0eXpeR/File-Download-Generator
文件下载命令快捷生成器,单文件版. Contribute to r0eXpeR/File-Download-Generator development by creating an account on GitHub.
59 views
棱角社区
#漏洞 漏洞分析 | WP Super Cache远程代码执行漏洞分析
https://mp.weixin.qq.com/s/5hu4QiVAi8vLX31SyZ8AxQ
Weixin Official Accounts Platform
漏洞分析 | WP Super Cache远程代码执行漏洞分析
笔者发现管理后台再向缓存配置文件写入数据时过滤不严谨导致可以植入恶意代码，进而导致远程代码执行。
59 views
棱角社区
#漏洞 VMware vRealize Operations Manager API SSRF漏洞 (CVE-2021-21975)
https://github.com/projectdiscovery/nuclei-templates/blob/master/cves/2021/CVE-2021-21975.yaml
GitHub
projectdiscovery/nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities. - projectdiscovery/nuclei-templates
61 views
棱角社区
#漏洞 VMWare-vRealize-SSRF CVE-2021-21975.py
https://github.com/Henry4E36/VMWare-vRealize-SSRF/blob/main/CVE-2021-21975.py
GitHub
Henry4E36/VMWare-vRealize-SSRF
VMWare vRealize SSRF-CVE-2021-21975. Contribute to Henry4E36/VMWare-vRealize-SSRF development by creating an account on GitHub.
62 views
棱角社区
#漏洞 POC for CVE-2021-24098, a Denial Of Service bug in condrv.sys.
https://github.com/waleedassar/CVE-2021-24098
GitHub
GitHub - waleedassar/CVE-2021-24098: POC for CVE-2021-24098
POC for CVE-2021-24098. Contribute to waleedassar/CVE-2021-24098 development by creating an account on GitHub.
61 views
棱角社区
#漏洞 Janet v1.1 REPL Sandbox Bypass
https://anee.me/janet-v1-1-repl-sandbox-bypass-f8bbe141a4f1
Medium
Janet v1.1 REPL Sandbox Bypass
Janet is a functional and imperative programming language. The entire language (core library, interpreter, compiler, assembler, PEG) is…
61 views
棱角社区
#漏洞 FastAdmin最新RCE漏洞复现
https://mp.weixin.qq.com/s/otrH75ZjCHBQbRB7g5DdWg
Weixin Official Accounts Platform
FastAdmin最新RCE漏洞复现
0x00 前言前几天FastAdmin爆出存在低权限用户有条件RCE的漏洞，比较奇怪的是好像一直没有什么人复
55 views
棱角社区
#漏洞 mongo-express中的远程代码执行-CVE-2020-24391
https://securitylab.github.com/advisories/GHSL-2020-131-mongo-express/
GitHub Security Lab
GHSL-2020-131: Remote Code Execution in mongo-express - CVE-2020-24391
Mongo-express uses safer-eval to validate user supplied javascript. Unfortunately safer-eval sandboxing capabilities are easily bypassed leading to RCE in the context of the node server.
61 views
棱角社区
#漏洞 Jellyfin 任意文件读取（CVE-2021-21402）
https://securitylab.github.com/advisories/GHSL-2021-050-jellyfin/
GitHub Security Lab
GHSL-2021-050: Unauthenticated arbitrary file read in Jellyfin - CVE-2021-21402
Jellyfin allows unauthenticated arbitrary file read.
61 views
棱角社区
#漏洞 Zero click vulnerability in Apple’s macOS Mail
https://mikko-kenttala.medium.com/zero-click-vulnerability-in-apples-macos-mail-59e0c14b106c
Medium
Zero click vulnerability in Apple’s macOS Mail
Zero-Click Zip TL;DR
64 views
棱角社区
#漏洞 金和OA C6 后台越权敏感文件遍历漏洞 (没啥用的0day~)
https://mp.weixin.qq.com/s/90HM3LqODBN35iqRBRE1HA
Weixin Official Accounts Platform
金和OA C6 后台越权敏感文件遍历漏洞 (没啥用的0day~)
67 views
棱角社区
#bountytip Beyond SQLi: Obfuscate and Bypass
https://www.exploit-db.com/papers/17934
Exploit Database
Beyond SQLi: Obfuscate and Bypass
72 views
棱角社区
#漏洞 银澎云计算 好视通视频会议系统 任意文件下载
https://mp.weixin.qq.com/s/F-M21PT0xn9QOuwoC8llKA
Weixin Official Accounts Platform
银澎云计算 好视通视频会议系统 任意文件下载(0day来啦~)
66 views
棱角社区
#工具 Eeyes(棱眼)-快速筛选真实IP并整理为C段
https://github.com/EdgeSecurityTeam/Eeyes
GitHub
GitHub - EdgeSecurityTeam/Eeyes: Eeyes(棱眼)-快速筛选真实IP并整理为C段
Eeyes(棱眼)-快速筛选真实IP并整理为C段. Contribute to EdgeSecurityTeam/Eeyes development by creating an account on GitHub.
68 views
棱角社区
#漏洞 锐捷Smartweb管理系统 密码信息泄露漏洞 CNVD-2021-17369
https://mp.weixin.qq.com/s/EICYTqRWDRB8OfXKHxCBfQ
Weixin Official Accounts Platform
锐捷Smartweb管理系统 密码信息泄露漏洞 CNVD-2021-17369
70 views
棱角社区
#漏洞 Mark Text Markdown 编辑器RCE（CVE-2021-29996）
https://github.com/marktext/marktext/issues/2548
GitHub
XSS vulnerability could result in RCE - CVE-2021-29996 · Issue #2548 · marktext/marktext
Description Cross Site Scripting (XSS) vulnerability that could result in Remote Code Execution (RCE). CVE-2021-29996 was assigned for this issue. Steps to reproduce Create a .md file that contains...
68 views
棱角社区
#bountytip I Built a TV That Plays All of Your Private YouTube Videos
https://bugs.xdavidhu.me/google/2021/04/05/i-built-a-tv-that-plays-all-of-your-private-youtube-videos/
bugs.xdavidhu.me
I Built a TV That Plays All of Your Private YouTube Videos
David Schütz's bug bounty writeups
69 views
棱角社区
#漏洞 WordPress插件Tutor LMS SQL注入漏洞（CVE-2021-24186）
https://wpscan.com/vulnerability/5f5c0c6c-6f76-4366-b590-0aab557f8c60
69 views