Aggregator

小白如何快速从0-1上手自动化渗透测试挖src赏金

深入分析dll劫持技术：利用系统 DLL 搜索顺序缺陷，通过路径优先级实现恶意代码持久化加载。包括共有dll和私有dll的劫持

A vulnerability was found in keras-team Keras up to 3.10/3.11/3.12.0 and classified as critical. Affected is the function filter_safe_tarinfos of the file keras/src/utils/file_utils.py. Executing a manipulation can lead to path traversal. This vulnerability is handled as CVE-2026-12482. The attack can be executed remotely. There is not any exploit available.

A vulnerability has been found in Apache Kylin up to 5.0.3 and classified as critical. This impacts an unknown function of the component Job Handler. Performing a manipulation results in improper authorization. This vulnerability is known as CVE-2026-62393. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.

A vulnerability, which was classified as critical, was found in Apache Kylin up to 5.0.3. This affects an unknown function of the component Async Query API. Such manipulation leads to os command injection. This vulnerability is traded as CVE-2026-62392. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Apache Kylin up to 5.0.3. The impacted element is an unknown function of the component Catalog Cache Refresh API. This manipulation causes sql injection. This vulnerability appears as CVE-2026-62390. The attack may be initiated remotely. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability classified as critical was found in Apollo. The affected element is an unknown function. The manipulation results in improper authentication. This vulnerability is reported as CVE-2026-59955. The attack can be launched remotely. No exploit exists.

A vulnerability classified as critical has been found in Apollo. Impacted is an unknown function of the component Id parser. The manipulation of the argument appId leads to improper authentication. This vulnerability is documented as CVE-2026-59954. The attack can be initiated remotely. There is not any exploit available.

A vulnerability described as critical has been identified in Apache Doris up to 3.0.x. This issue affects some unknown processing of the component Frontend HTTP API. Executing a manipulation can lead to improper authentication. This vulnerability is registered as CVE-2026-58319. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is recommended.

A vulnerability marked as critical has been reported in Nice Simple and Nice Shopping Cart Script 1.0. This vulnerability affects unknown code of the file /admin/userproductdeletequery.php. Performing a manipulation of the argument user_id results in sql injection. This vulnerability is cataloged as CVE-2026-15703. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability labeled as critical has been found in tamagui up to 2.3.0. This affects the function updateConfig of the file code/core/web/src/config.ts. Such manipulation leads to improperly controlled modification of object prototype attributes. This vulnerability is listed as CVE-2026-15702. The attack may be performed from remote. In addition, an exploit is available. The affected component should be upgraded.

A vulnerability identified as critical has been detected in Totolink NR1800X 9.1.0u.6279_B20210910. Affected by this issue is the function Form_Logout of the file /formLogout.htm of the component lighttpd. This manipulation of the argument Host causes stack-based buffer overflow. This vulnerability is tracked as CVE-2026-15701. The attack is possible to be carried out remotely. Moreover, an exploit is present.

A vulnerability categorized as critical has been discovered in DedeCMS 5.7.118. Affected by this vulnerability is the function ExtractFile of the file include/zip.class.php of the component Album Publishing Feature. The manipulation of the argument filename results in path traversal. This vulnerability is identified as CVE-2026-15700. The attack can be executed remotely. Additionally, an exploit exists.

GEO my WordPress 是一款拥有 60,000+ 安装量的 WordPress 地理位置插件，支持按地理位置搜索、筛选和展示文章/用户。2026 年 6 月，该插件 ≤ 4.5.5 版本被披露存在一个 CVSS 9.3 的严重漏洞（CVE-2026-52715），其 `gmw_get_locations_within_boundaries_sql()` 函数将用户控制的 URL 参数直

seek 是 DeepSeek-first 的本地终端 Agent，通过间接提示词注入可能导致写入WebShell、任意文件读取等危害

记一次 Rust 免杀 Loader 的折腾过程0x00 起因之前一直在用 Go 写 loader，千机那个项目搞了好几版，效果越来越差。最离谱的是有一次改了几个字符串重新编译，360 直接秒杀，连行为检测都没走到就被 QVM 静态干了。翻了一下 virustotal 上面 Go 编译的样本，发现只要是 Go 写的，不管功能多简单，360 基本都标红。原因也简单——Go 的 runtime 太大了

本文复盘 Hack The Box 靶机 Jarmis 的完整渗透过程：从 nmap 扫描与 JARM 指纹识别入手，分析 API 行为、模糊查询与恶意指纹数据库，逐步发现 Fetch Jarm 功能背后的服务端请求特征。随后利用重定向验证 SSRF，借助 Gopher 构造原始 HTTP POST 请求，最终打通内网 OMI 服务的 CVE-2021-38647 认证绕过漏洞，以 root 权限

VulnHuntr 深度拆解,从源码切入分析工具优缺点及改进方案

A vulnerability was found in spencermountain compromise up to 14.15.1. It has been rated as critical. Affected is the function nlp.extend of the file src/API/extend.js of the component Public Root API. The manipulation of the argument plugin leads to improperly controlled modification of object prototype attributes. This vulnerability is referenced as CVE-2026-15699. Remote exploitation of the attack is possible. Furthermore, an exploit is available. Applying a patch is the recommended action to fix this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

A vulnerability was found in kofrasa mingo up to 7.2.1. It has been declared as critical. This impacts the function update/updateOne/updateMany of the component Update API. Executing a manipulation of the argument Set can lead to improperly controlled modification of object prototype attributes. The identification of this vulnerability is CVE-2026-15698. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.