P3TERX ZONE
-
1
AdGuard Home 自建 DNS 防污染、去广告教程 #2 - 优化增强设置详解
-
2
群晖 NAS Docker 进阶教程 - 部署全能下载工具 Aria2 Pro
-
3
HE Tunnel Broker 教程：IPv4 VPS 服务器免费添加公网 IPv6 地址
-
4
Debian Linux VPS 服务器 WireGuard 安装教程
-
5
Cloudflare WARP 教程：给 VPS 额外添加“原生” IPv4/IPv6 双栈网络出口
-
6
CU VIP 是什么？AS4837、AS9929 线路 VPS 哪个好？
-
7
Cloudflare WARP 一键安装脚本 使用教程
-
8
Cloudflare WARP 脚本已知问题和解决方法
-
9
为什么 WARP 解锁 Netflix 失效了？
-
10
2026年国外高性价比便宜 VPS 推荐(稳定、好用、免费体验)
CXSECURITY Database
-
1
CubeCart 6.7.4 Stored XSS
-
2
PodcastGenerator 3.2.9 Stored XSS
-
3
Nmap 7.99 Extension Header Integer Underflow
-
4
Oracle 26ai Histogram Dictionary Vulnerability [CVE-2025-53051]
-
5
Automotive Shop Management System 1.0 Multiple SQLi
-
6
Kestra OSS Authentication Bypass Remote Code Execution v1.3.20
-
7
Food-Ordering-1.0 by Kato James Kalimba | LFI
-
8
Food-Ordering-1.0 by Kato James Kalimba | LFI
-
9
PhylumEDI - Session Stored XSS to Open Redirect with CSRF
-
10
CubeCart 6.7.4 SQL injection
PHP Bugs
-
1
Weblate: Translation discovery crashes on crafted filenames (regex substitution injection)
-
2
Weblate: wlc: Project-wide download fails part-way and leaves stale archives on disk; filesystem errors surface as raw Python tracebacks.
-
3
Weblate: Incomplete VCS metadata exclusion: `.svn` / `.bzr` bypass CVE-2026-61792 due to missing `VCS_METADATA_DIRS` entries.
-
4
Basecamp: A third-party Basecamp OAuth token mints a full launchpad web session through GET /my/login_option
-
5
Basecamp: Cross-account webhook takeover: PUT and DELETE on /<account>/webhooks/<id>.json reach another account's webhook
-
6
Basecamp: launchpad.37signals.com OAuth AS issues victim-bound credential to unverified attacker redirect → full CIA triad on Basecamp API
-
7
WordPress: wordpress.org/openverse/: unauthenticated open redirect — `str_replace()`'s 4th arg is a count, not a limit; bypasses WordPress.org SSO allow-list
-
8
WordPress: CampTix [camptix_private]: the view token is derived from the requester's own IP, so naming any attendee's e-mail unlocks the gated content
-
9
Monero: Monero IPv6 /128 tracking bypasses per-IP limit, enables remote OOM
-
10
[$1026] Vercel: Revoked deployment collaborator regains access to private comments after active collaborator interaction
老罗的Android之旅
-
1
Chromium网页滑动和捏合手势处理过程分析
-
2
Chromium分发输入事件给WebKit处理的过程分析
-
3
Chromium视频标签<video>简要介绍和学习计划
-
4
Chromium为视频标签<video>创建播放器的过程分析
-
5
Chromium为视频标签<video>渲染视频画面的过程分析
-
6
Chromium为视频标签<video>全屏播放的过程分析
-
7
Chromium扩展（Extension）机制简要介绍和学习计划
-
8
Chromium扩展（Extension）加载过程分析
-
9
Chromium扩展（Extension）的页面（Page）加载过程分析
-
10
Chromium扩展（Extension）的Content Script加载过程分析
I hack, therefore I am
-
1
Linux/x86 Execve Python Interpreter with a Python Program Passed in as String Shellcode
-
2
Decoderless Shellcode Encoding
-
3
Modulation and Data Loss Prevention (DLP) Solutions
-
4
Automated Static Malware Analysis with Pythonect
-
5
Fuzzing Like A Boss with Pythonect
-
6
Scraping LinkedIn Public Profiles for Fun and Profit
-
7
Password Policy: You Are Doing It Wrong (When 2^56 Becomes 2^42)
-
8
Hackersh 0.1 Release Announcement
-
9
Pythonect Has New Graphs, Documentation, Tutorial, and More!
-
10
I See Your True ECHO_REQUEST Patterns (Pinging Data Away)
The Fuzzing Project
-
1
Use after free in my_login() function of DBD::mysql (Perl module)
-
2
Fun with Bignums: Crashing MatrixSSL and more
-
3
Multiple vulnerabilities in RPM – and a rant
-
4
Out of bounds heap bugs in glib, heap buffer overflow in gnome-session
-
5
Update on MatrixSSL miscalculation (CVE-2016-8671, incomplete fix for CVE-2016-6887)
-
6
Fuzzing Irssi with Perl Scripts
-
7
htpasswDoS: Local Denial of Service via Apache httpd password hashes
-
8
Diving into Control Flow Integrity
-
9
exiv2: multiple memory safety issues
-
10
Six year old PDF loop bug affects most major implementations
Cатсн²² (in)sесuяitу / ChrisJohn
-
1
[DeepSec 2014] Advanced Powershell Threat: Lethal Client Side Attacks using Powershell
-
2
All good things must come to an end
-
3
Taking out the Eurotrash
-
4
[LHS Microcast] Interview w/ Jen Ellis
-
5
[LHS Microcast] DeepSec 2015
-
6
[DeepSec 2015] Can societies manage the SIGINT monster?
-
7
[DeepSec 2015] Hacking Cookies in Modern Web Applications and Browsers
-
8
[DeepSec 2015]How to Break XML Encryption – Automatically
-
9
[DeepSec 2015] File Format Fuzzing in Android – Giving a Stagefright to the Android Installer
-
10
[DeepSec 2015]50 Shades of WAF
Black-Hole’s Blog
-
1
A 6.47 MB JS String Occupied 15.4 MB of Memory
-
2
XSS principles, dissected
-
3
Automated CSRF detection
-
4
Automated CSRF detection (part 2)
-
5
Notes on bypassing WAFs (Web Application Firewalls)
-
6
How to log in to Thunder under Debian
-
7
Browser plugin attack vectors
-
8
Company Wi-Fi security
-
9
Automated XSS intranet invasion
-
10
Some ideas based on URLProtocol attacks
w00tsec
-
1
Hello world
-
2
SIMET Box Firmware Analysis: Embedded Device Hacking & Forensics
-
3
Analyzing and Running binaries from Firmware Images - Part 1
-
4
Unpacking Firmware Images from Cable Modems
-
5
Binwally: Directory tree diff tool using Fuzzy Hashing
-
6
Analyzing Malware for Embedded Devices: TheMoon Worm
-
7
Wildcard DNS, Content Poisoning, XSS and Certificate Pinning
-
8
Foxit PDF Reader Stored XSS
-
9
Hacking Asus RT-AC66U and Preparing for SOHOpelesslyBroken CTF
-
10
Scan the Internet & Screenshot All the Things
