漏洞

漏洞

78 篇文章

笔记

笔记

1 篇文章

其他

其他

3 篇文章

Xiaomi MiWiFi RD18 1.0.91: xqsmarthome.lua guest_tunnelSmartControllerRequest OS Command Injection (Authenticated, Root RCE)
2026-11-05 2026-11-06 9 字 1 分钟

Xiaomi MiWiFi RD18 1.0.91: xqsmarthome.lua guest_tunnelSmartControllerRequest OS Command Injection (Authenticated, Root RCE)

This content is encrypted, please enter the password to view.
Xiaomi RAX3000M (RD15) 1.0.87: sysapi macfilterctl rulename Lua Code Injection (Authenticated, Root RCE)
2026-11-05 2026-11-06 9 字 1 分钟

Xiaomi RAX3000M (RD15) 1.0.87: sysapi macfilterctl rulename Lua Code Injection (Authenticated, Root RCE)

This content is encrypted, please enter the password to view.
Tenda CH7 V21.5.2.12: Kylin goform/ate Factory Test Interface OS Command Injection (Authenticated, Root RCE)
2026-11-05 2026-11-06 9 字 1 分钟

Tenda CH7 V21.5.2.12: Kylin goform/ate Factory Test Interface OS Command Injection (Authenticated, Root RCE)

This content is encrypted, please enter the password to view.
B-LINK X26 (AC12) V1.0.1: lighttpd.cgi Blink Management API Unauthenticated OS Command Injection (Pre-Auth, Root RCE)
2026-11-05 2026-11-06 9 字 1 分钟

B-LINK X26 (AC12) V1.0.1: lighttpd.cgi Blink Management API Unauthenticated OS Command Injection (Pre-Auth, Root RCE)

This content is encrypted, please enter the password to view.
Alpine Linux alpine-virt 3.24.1: tiny-cloud NoCloud CIDATA Seed Volume Arbitrary Script Execution (Pre-Auth, Boot-time Root RCE)
2026-11-05 2026-11-06 9 字 1 分钟

Alpine Linux alpine-virt 3.24.1: tiny-cloud NoCloud CIDATA Seed Volume Arbitrary Script Execution (Pre-Auth, Boot-time Root RCE)

This content is encrypted, please enter the password to view.
Tenda G3 V3.0: httpd umountUSBPartition OS Command Injection (Authenticated, Root RCE)
2026-11-05 2026-11-06 9 字 1 分钟

Tenda G3 V3.0: httpd umountUSBPartition OS Command Injection (Authenticated, Root RCE)

This content is encrypted, please enter the password to view.
Tenda W18E V2.0: httpd WAN-Diagnosis Ping Hostname OS Command Injection (Unauthenticated, Root RCE)
2026-11-05 2026-11-06 9 字 1 分钟

Tenda W18E V2.0: httpd WAN-Diagnosis Ping Hostname OS Command Injection (Unauthenticated, Root RCE)

This content is encrypted, please enter the password to view.
TP-Link TL-XDR6010 V2.0: dms VPN IPsec ip-pool name OS Command Injection (Authenticated, Root RCE)
2026-11-05 2026-11-06 9 字 1 分钟

TP-Link TL-XDR6010 V2.0: dms VPN IPsec ip-pool name OS Command Injection (Authenticated, Root RCE)

This content is encrypted, please enter the password to view.
TP-LINK TL-R470GP-AC V8.0: wol.lua wol_wake OS Command Injection (Authenticated, Root RCE)
2026-11-05 2026-11-06 9 字 1 分钟

TP-LINK TL-R470GP-AC V8.0: wol.lua wol_wake OS Command Injection (Authenticated, Root RCE)

This content is encrypted, please enter the password to view.
PySack Nuitka 加密 + PyInstaller 打包的全链路源码保护方案
2026-09-24 2026-09-24 2.7k 字 13 分钟

PySack Nuitka 加密 + PyInstaller 打包的全链路源码保护方案

起因需求： 加密 AetherAgent 项目代码 背景： Nuitka本地编译OOM，PyArmor有文件对象大小、函数数量etc限制，网上看到有项目jmpy，但项目年久失修.. 启发：Python打包EXE防破解实战：PyInstaller+Nuitka双保险配置指南 （项目开发全程由AI完成，我仅提供完善思路及优化需求） 概述PySack 是一个 Python 源码保护工具链，它将 Nuitka 的编译加密能力与 PyInstaller 的打包分发能力串联为一条完整流水线。开发者执行一条命令，即可将纯 Python 项目转换为加密的独立可执行文件。 仓库地址： github.com&#x