The nail group monitors the CVE information of Github
Monitor CVE-2022 related information in Github through nail group to realize robot message push.
1, Database information
Create the mysql database cvemonitor and import the sql file into the database. The sql statement is as follows:
SET NAMES utf8mb4;
SET FOREIGN_KEY_CHECKS = 0;
-- ----------------------------
-- Table structure for git ...
Posted by twsowerby on Wed, 09 Feb 2022 22:09:55 +0100
Analysis of fastjason deserialization series vulnerabilities
1, Basic introduction
Fastjason is Alibaba's open source library for parsing and packaging JSON format data. Java objects can be serialized into JSON strings, and JSON strings can be deserialized into Java objects.
When the deserialized object type and property information are specified, the setter method will be automatically executed. Speci ...
Posted by cmaclennan on Sat, 18 Dec 2021 18:23:57 +0100
CVE-2012-0391 S2-008 reproduction
0X00 introduction
The butterfly died on the road and thought hidden by the cloud. Some people work hard and will forget in a few years. Some people are always by their side, whether they live or die--- Liu shisan by Zhang Jiajia
Liu, thirteen. Stay, lose?
Cheng Shuang, in pairs.
Two generations are finally separated, and one mind becomes doubl ...
Posted by shivani.shm on Thu, 02 Dec 2021 05:08:47 +0100
Cve-2019-9081 -- replay of deserialization vulnerability in laravel 5.7
Catalogue
Introduction:
Environment deployment:
analysis:
Reference article:
Introduction:
Like yii, Laravel is also a concise and elegant PHP web development framework (PHP Web Framework).
No suitable trigger point was found in the laravel framework, so the cms for secondary development based on the laravel v5.7 framework need ...
Posted by myys on Tue, 28 Sep 2021 08:24:21 +0200