棱角社区 – Telegram

棱角社区

#漏洞北京致远G6政务协同系统V6.1SP1 反射性xss漏洞 CVE-2020-20545

https://note.youdao.com/ynoteshare1/index.html?id=29f908204968a79233c1c0c80a59f8ff&type=note

54 views15:59

棱角社区

#工具文件下载命令快捷生成器,单文件版
https://github.com/r0eXpeR/File-Download-Generator

GitHub

r0eXpeR/File-Download-Generator

文件下载命令快捷生成器,单文件版. Contribute to r0eXpeR/File-Download-Generator development by creating an account on GitHub.

59 views16:01

棱角社区

#漏洞漏洞分析 | WP Super Cache远程代码执行漏洞分析
https://mp.weixin.qq.com/s/5hu4QiVAi8vLX31SyZ8AxQ

Weixin Official Accounts Platform

漏洞分析 | WP Super Cache远程代码执行漏洞分析

笔者发现管理后台再向缓存配置文件写入数据时过滤不严谨导致可以植入恶意代码，进而导致远程代码执行。

59 views16:04

棱角社区

#漏洞 VMware vRealize Operations Manager API SSRF漏洞 (CVE-2021-21975)
https://github.com/projectdiscovery/nuclei-templates/blob/master/cves/2021/CVE-2021-21975.yaml

GitHub

projectdiscovery/nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities. - projectdiscovery/nuclei-templates

61 views08:53

棱角社区

#漏洞 VMWare-vRealize-SSRF CVE-2021-21975.py
https://github.com/Henry4E36/VMWare-vRealize-SSRF/blob/main/CVE-2021-21975.py

GitHub

Henry4E36/VMWare-vRealize-SSRF

VMWare vRealize SSRF-CVE-2021-21975. Contribute to Henry4E36/VMWare-vRealize-SSRF development by creating an account on GitHub.

62 views16:18

棱角社区

#漏洞 POC for CVE-2021-24098, a Denial Of Service bug in condrv.sys.
https://github.com/waleedassar/CVE-2021-24098

GitHub

GitHub - waleedassar/CVE-2021-24098: POC for CVE-2021-24098

POC for CVE-2021-24098. Contribute to waleedassar/CVE-2021-24098 development by creating an account on GitHub.

61 views13:03

棱角社区

#漏洞 Janet v1.1 REPL Sandbox Bypass
https://anee.me/janet-v1-1-repl-sandbox-bypass-f8bbe141a4f1

Medium

Janet v1.1 REPL Sandbox Bypass

Janet is a functional and imperative programming language. The entire language (core library, interpreter, compiler, assembler, PEG) is…

61 views14:57

棱角社区

#漏洞 FastAdmin最新RCE漏洞复现
https://mp.weixin.qq.com/s/otrH75ZjCHBQbRB7g5DdWg

Weixin Official Accounts Platform

FastAdmin最新RCE漏洞复现

0x00 前言前几天FastAdmin爆出存在低权限用户有条件RCE的漏洞，比较奇怪的是好像一直没有什么人复

55 views02:36

棱角社区

#漏洞 mongo-express中的远程代码执行-CVE-2020-24391
https://securitylab.github.com/advisories/GHSL-2020-131-mongo-express/

GitHub Security Lab

GHSL-2020-131: Remote Code Execution in mongo-express - CVE-2020-24391

Mongo-express uses safer-eval to validate user supplied javascript. Unfortunately safer-eval sandboxing capabilities are easily bypassed leading to RCE in the context of the node server.

61 views04:38

棱角社区

#漏洞 Jellyfin 任意文件读取（CVE-2021-21402）
https://securitylab.github.com/advisories/GHSL-2021-050-jellyfin/

GitHub Security Lab

GHSL-2021-050: Unauthenticated arbitrary file read in Jellyfin - CVE-2021-21402

Jellyfin allows unauthenticated arbitrary file read.

61 views04:38

棱角社区

#漏洞 Zero click vulnerability in Apple’s macOS Mail
https://mikko-kenttala.medium.com/zero-click-vulnerability-in-apples-macos-mail-59e0c14b106c

Medium

Zero click vulnerability in Apple’s macOS Mail

Zero-Click Zip TL;DR

64 views15:15

棱角社区

#漏洞金和OA C6 后台越权敏感文件遍历漏洞 (没啥用的0day~)
https://mp.weixin.qq.com/s/90HM3LqODBN35iqRBRE1HA

Weixin Official Accounts Platform

金和OA C6 后台越权敏感文件遍历漏洞 (没啥用的0day~)

67 views16:10

棱角社区

#bountytip Beyond SQLi: Obfuscate and Bypass
https://www.exploit-db.com/papers/17934

Exploit Database

Beyond SQLi: Obfuscate and Bypass

72 views04:49

棱角社区

#漏洞银澎云计算好视通视频会议系统任意文件下载
https://mp.weixin.qq.com/s/F-M21PT0xn9QOuwoC8llKA

Weixin Official Accounts Platform

银澎云计算好视通视频会议系统任意文件下载(0day来啦~)

66 views02:18

棱角社区

#工具 Eeyes(棱眼)-快速筛选真实IP并整理为C段
https://github.com/EdgeSecurityTeam/Eeyes

GitHub

GitHub - EdgeSecurityTeam/Eeyes: Eeyes(棱眼)-快速筛选真实IP并整理为C段

Eeyes(棱眼)-快速筛选真实IP并整理为C段. Contribute to EdgeSecurityTeam/Eeyes development by creating an account on GitHub.

68 views05:39

棱角社区

#漏洞锐捷Smartweb管理系统密码信息泄露漏洞 CNVD-2021-17369
https://mp.weixin.qq.com/s/EICYTqRWDRB8OfXKHxCBfQ

Weixin Official Accounts Platform

锐捷Smartweb管理系统密码信息泄露漏洞 CNVD-2021-17369

70 views06:37

棱角社区

#漏洞 Mark Text Markdown 编辑器RCE（CVE-2021-29996）
https://github.com/marktext/marktext/issues/2548

GitHub

XSS vulnerability could result in RCE - CVE-2021-29996 · Issue #2548 · marktext/marktext

Description Cross Site Scripting (XSS) vulnerability that could result in Remote Code Execution (RCE). CVE-2021-29996 was assigned for this issue. Steps to reproduce Create a .md file that contains...

68 views12:28

棱角社区

#bountytip I Built a TV That Plays All of Your Private YouTube Videos
https://bugs.xdavidhu.me/google/2021/04/05/i-built-a-tv-that-plays-all-of-your-private-youtube-videos/

bugs.xdavidhu.me

I Built a TV That Plays All of Your Private YouTube Videos

David Schütz's bug bounty writeups

69 views13:04

棱角社区

#漏洞 WordPress插件Tutor LMS SQL注入漏洞（CVE-2021-24186）
https://wpscan.com/vulnerability/5f5c0c6c-6f76-4366-b590-0aab557f8c60

69 views07:50

棱角社区

#漏洞 WordPress WP Super Cache 插件 < 1.7.2 RCE（CVE-2021-24209）
https://wpscan.com/vulnerability/733d8a02-0d44-4b78-bbb2-37e447acd2f3

WPScan

WP Super Cache < 1.7.2 - Authenticated Remote Code Execution (RCE)

See details on WP Super Cache < 1.7.2 - Authenticated Remote Code Execution (RCE) CVE 2021-24209. View the latest Plugin Vulnerabilities on WPScan.

70 views07:50

棱角社区

#漏洞 WordPress Elementor Page Builder Plus插件身份验证绕过（CVE-2021-24175）
https://wpscan.com/vulnerability/c311feef-7041-4c21-9525-132b9bd32f89

71 views11:50

About

Blog

Apps

Platform