Aggregator

windows PPTP协议代码实现

vulntarget-h靶场渗透

windows PPTP协议通道分析

Windows凭证钓鱼方式面面观

web-pwn-详细入门

安卓逆向——Frida的基础用法（上）

快速查找内网主机外连的工具：SharpNetCheck

木马反制与隐藏技巧

逆向工程中的动态调试

io利用之house of orange

伪装主流会议软件 -- "银狐”样本分析及检测规则、思路分享

EDR监测遭遇滑铁卢？无驱动技术让你轻松突破EDR！

威胁情报作战三部曲 -- 你存在，在我们的攻击画像里

针对一个JAVA套CS马的详细分析

DLL侧加载技术分析以及如何进行武器化

某框架路由渗透

量大管饱的Fscan源码详细分析

DIR-820 CVE-2022-26258漏洞复现

A vulnerability, which was classified as problematic, was found in xiaohe4966 TpMeCMS 1.3.3.2. Affected is an unknown function of the file /h.php/general/config?ref=addtabs of the component Basic Configuration Handler. The manipulation of the argument Site Name/Beian/Contact address/copyright/technical support leads to cross site scripting. This vulnerability is traded as CVE-2024-7900. It is possible to launch the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability, which was classified as critical, has been found in InnoCMS 0.3.1. This issue affects some unknown processing of the file /panel/pages/1/edit of the component Backend. The manipulation leads to code injection. The identification of this vulnerability is CVE-2024-7899. The attack may be initiated remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.