Intro Link to heading This is a rather old vulnerability I found in TeamViewer back in 2020, and reported it through VCP/iDefense. TeamViewer fixed the vulnerability last November, but somehow I missed it, and became aware of it only recently. Their advisory…

目录0x01 写在前面微擎 CMS 在 2.0 版本的时候悄咪咪修复了一处 SQL 注入漏洞：该处的注入漏洞网上没有出现过分析文章，因此本文就来分析一下该处 SQL 注入的利用。0x02 影响版...

0x00 事情的由来昨天看到Dubbo公布了几个新的CVE，一个没有Credit的中危 CVE-2021-25641，一个有Credit（Github Security Lab）的低危 CVE-2021-30181，其中CVE-2021-30181漏洞邮件标题为“RCE on customers via Script route poisoning (Nashorn script injectio

Join the journey into Plone CMS that lead us to discover an authenticated RCE vulnerability

PoC for CVE-2021-28476 a guest-to-host "Hyper-V Remote Code Execution Vulnerability" in vmswitch.sys. - 0vercl0k/CVE-2021-28476

QNAP MusicStation and MalwareRemover pre-installed official apps are affected by an arbitrary file upload and a command injection, leading to pre-auth remote root command execution.

SwordBytes researchers have identified an Unauthenticated Remote Code Execution (RCE) vulnerability in Overwolf’s Client Application by abusing a Reflected Cross-Site Scripting (XSS) issue present in the “overwolfstore://” URL handler. This vulnerability…

poc收录,poc悬赏,漏洞收录,poc,漏洞

废话不多讲，老外对补丁的分析，具体补丁的分析和漏洞点可以看这篇文章 https://attackerkb.com/topics/X85GKjaVER/cve-2021-21985 这个漏洞主要是对Spring 管理的bean进行相关的方法对象操作，但是这里不同的是，操作的bean在内存中基本上都是一个对象，这样就可以通过多次方法调用来实现伪链式调用。 Vcenter 开启Debug端口，可以直

SecIN是启明星辰云众可信旗下的信息安全技术社区。社区理念：共享·链接，与每一个志同道合的人；纯粹·安全，听自己愿意听见的声音；协作·发展，是信息安全生态的力量。

0x01. TL; DR事情要从 Skay 的 SSRF 漏洞（CVE-2021-27905）说起。正巧后续的工作中遇到了 Solr，我就接着这个漏洞进行了进一步的分析。漏洞原因是在于 Solr 主从复制（Replication）时，可以传入任意 URL，而 Solr 会针对此 URL 进行请求。 说起主从复制，那么对于 Redis 主从复制漏洞比较熟悉的人会知道，可以利用主从复制的功能实现任意文件写入，那么 Solr 是否会存在这个问题呢？通过进一步的分析，我发现这个漏洞岂止于 SSRF，简直就是 Redis…

一、漏洞详情EasyGBS是由TSINGSEE开发一款国标视频云平台。EasyGBS<=1.4.9版本的平台存在未授权访问漏洞，攻击者可以直接访问平台的API接口文档，从而获取系统的API接口造成信息泄露。二、影响版本EasyGBS <= 1.4.9三、漏洞利用1、默认口令：easygbs/easygbs # 管理员权限guest2020/guest2014&2020 # 游客权限2、API接口文档：/apidoc/#api-device3

By Aleksandar Nikolich.


Executive summary

Cisco Talos recently discovered multiple vulnerabilities in macOS’s implementation of SMB server. An adversary could exploit these vulnerabilities to carry out a variety of malicious actions, including revealing…

In May of 2021, Microsoft released a patch to correct CVE-2021-31181 – a remote code execution bug in the supported versions of Microsoft SharePoint Server. This bug was reported to the ZDI program by an anonymous researcher and is also known as ZDI-21…

In this post we will examine a vulnerability in the WebAssembly subsystem of JavaScriptCore, the JavaScript engine used in WebKit and Apple Safari. The issue...

## Summary:
Activity `com.mattermost.share.ShareActivity` is is exported and is designed to allow file sharing from third party application to mattermost android app.
```
<activity...

Writeup for a cross-site scripting bug I found in the AWS Console.

VMware官方发布了VMware vCenter Server远程代码执行漏洞的风险通告，该漏洞是由360 Noah Lab的安全研究员Ricter Z发现的。