Eeyes(棱眼)-快速筛选真实IP并整理为C段. Contribute to EdgeSecurityTeam/Eeyes development by creating an account on GitHub.

Description Cross Site Scripting (XSS) vulnerability that could result in Remote Code Execution (RCE). CVE-2021-29996 was assigned for this issue. Steps to reproduce Create a .md file that contains...

David Schütz's bug bounty writeups

See details on WP Super Cache < 1.7.2 - Authenticated Remote Code Execution (RCE) CVE 2021-24209. View the latest Plugin Vulnerabilities on WPScan.

The Tempfile argument of `basename` can use `../` without escaping.
Therefore, directory traversal may occur and unintended files may be generated.


#### create file...

Proof of concept for CVE-2021-24086, a NULL dereference in tcpip.sys triggered remotely. - 0vercl0k/CVE-2021-24086

This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

虽然打厚码，但是好兄弟们依旧知道我在说什么。至于这个是不是你们说的0day/1day

During the time of 2020, I was preparing for a certification called OSWE. The path has been long and with curves, because sometimes we…

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

CVE-2021-26708 is assigned to five race condition bugs in the virtual socket implementation of the Linux kernel. I discovered and fixed them in January 2021. In this article I describe how to exploit them for local privilege escalation on Fedora 33 Server…

提交个漏洞

By default, domain joined Windows workstations allow access to the network selection UI from the lock screen.

An attacker with physical access to a locked device with WiFi capabilities (such as a laptop or a workstation) can abuse this functionality to force…