白帽训练营，对Zone里面的文章进行主题分类，用于白帽子们的入门和提高。 文字来源于- 火线 Zone-云安全社区，安全小天地只做文章分享，如有侵权，请联系站长删除

漏洞标题 CVE-2023-30150: PrestaShop leocustomajax 1.0 & 1.0.0 - SQL Injection 漏洞描述 PrestaShop leocustomajax 1.0 and 1.0.0 are vulnerable to SQL Injection via modules/leocus...

漏洞标题 CVE-2022-37061: FLIR AX8 1.46.16 - Remote Command Injection 漏洞描述 FLIR AX8 version 1.46.16 and below is susceptible to an unauthenticated remote command injection vulne...

漏洞标题 CVE-2025-29085: Vipshop Saturn Console <= 3.5.1 - SQL Injection via ClusterKey Component 漏洞描述 SQL injection vulnerability in vipshop Saturn v.3.5.1 and before allow...

漏洞标题 Apache OFBiz CVE-2021-29200 不安全的反序列化漏洞 漏洞描述 Apache OFBiz存在不安全的反序列化漏洞，此漏洞是缺乏校验导致的。 PoC代码 暂无

漏洞标题 (CVE-2018-25114) osCommerce Online Merchant 2.3.4.1 远程代码执行漏洞 漏洞描述 (CVE-2018-25114) osCommerce Online Merchant 2.3.4.1 远程代码执行漏洞 PoC代码 暂无

这篇文章主要介绍了区分Linux硬链接与软链接，帮助大家更好的理解和学习Linux，感兴趣的朋友可以了解下 在Linux中，连接文件有两种，一种类似于Windows的快捷方式，可以让你快速地链接到目标文...

这篇文章主要介绍了解决Mac下 docker 无法 ping 通宿主机的问题，具有很好的参考价值，希望对大家有所帮助。一起跟随小编过来看看吧 解决方案 抛弃docker for mac自带的linux虚拟机（尽管轻量，...

漏洞标题 CVE-2022-24181: PKP Open Journal Systems 2.4.8-3.3 - Cross-Site Scripting 漏洞描述 PKP Open Journal Systems 2.4.8 to 3.3 contains a cross-site scripting vulnerability whic...

漏洞标题 CVE-2025-49844: Redis Lua Parser < 8.2.2 - Use After Free 漏洞描述 Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an ...

漏洞标题 CVE-2008-4668: Joomla! Image Browser 0.1.5 rc2 - Local File Inclusion 漏洞描述 Joomla! Image Browser 0.1.5 rc2 is susceptible to local file inclusion via com_imagebrowser ...

漏洞报告 Mattermost 错误配置导致的账户劫持 http://hackerone.com/reports/1114347 Zomato fr1.vpn.zomans.com 子域名劫持 http://hackerone.com/reports/1182864 Basecamp Basecamp子域名劫...

漏洞标题 CVE-2008-1059: WordPress Sniplets 1.1.2 - Local File Inclusion 漏洞描述 PHP remote file inclusion vulnerability in modules/syntax_highlight.php in the Sniplets 1.1.2 and 1...

漏洞标题 CVE-2021-31324: CentOS Web Panel - OS Command Injection 漏洞描述 The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection vulnerability lea...

漏洞标题 CVE-2025-6851: WordPress Broken Link Notifier < 1.3.1 - Unauthenticated SSRF 漏洞描述 The Broken Link Notifier plugin for WordPress is vulnerable to Server-Side Request...

漏洞标题 CVE-2024-21887: Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) - Command Injection 漏洞描述 A command injection vulnerability in web components of ...