漏洞

漏洞

78 篇文章

笔记

笔记

1 篇文章

其他

其他

3 篇文章

FirmAudit2：从解包到 CNVD 交付，固件漏洞审计流水线
2026-09-24 2026-09-24 8.2k 字 33 分钟

FirmAudit2：从解包到 CNVD 交付，固件漏洞审计流水线

一、项目出发背景做固件审计的师傅大概都被这几件事磨过： 工具不缺，binwalk、FirmAE、radare2、QEMU 都在，可它们之间那段路全靠人肉走； 让大模型去跑命令，我心里发虚——它一句 apt install 就能把我环境搞乱； 它说”这里有个命令注入”，自己复现利用失败，转头追问AI，AI：是我的错误…； 真挖到了洞，后面还得手抄复现步骤、整理证据、套 CNVD 模板，一晚上又没了。 所以有了 FirmAudit2：让Agent去查，同时把”结论可信”这件事本身变成一个工程问题——过程可回放、字段可校验、产物可核对。 三层约束设计： 1. 过程约束：漏洞资料按段落逐段引导填
YiFang CMS ≤ 2.0.5: SQL Identifier Injection in L_Admin_article::removeBackslashes() (Authenticated, Full Database Takeover)
2026-09-19 2026-09-20 9 字 1 分钟

YiFang CMS ≤ 2.0.5: SQL Identifier Injection in L_Admin_article::removeBackslashes() (Authenticated, Full Database Takeover)

This content is encrypted, please enter the password to view.
Tenda W18E V2.0 httpd: Unauthenticated OS Command Injection in the Packet-Capture Diagnostic Feature (Root RCE)
2026-09-19 2026-09-20 9 字 1 分钟

Tenda W18E V2.0 httpd: Unauthenticated OS Command Injection in the Packet-Capture Diagnostic Feature (Root RCE)

This content is encrypted, please enter the password to view.
Tenda CP3 V3.0 noodles Daemon: Unauthenticated File Download-and-Execute Backdoor on TCP/1300 (Root RCE)
2026-09-19 2026-09-20 9 字 1 分钟

Tenda CP3 V3.0 noodles Daemon: Unauthenticated File Download-and-Execute Backdoor on TCP/1300 (Root RCE)

This content is encrypted, please enter the password to view.
DedeCMS sys_sql_query.php Prepared Statement Bypass for WebShell Writing & Remote Code Execution Vulnerability Audit Report
2026-07-04 2026-07-04 9 字 1 分钟

DedeCMS sys_sql_query.php Prepared Statement Bypass for WebShell Writing & Remote Code Execution Vulnerability Audit Report

This content is encrypted, please enter the password to view.
DedeCMS sys_sql_query.php Slow Query Log WebShell Writing & Remote Code Execution Vulnerability Audit Report
2026-07-04 2026-07-04 9 字 1 分钟

DedeCMS sys_sql_query.php Slow Query Log WebShell Writing & Remote Code Execution Vulnerability Audit Report

This content is encrypted, please enter the password to view.
DedeCMS File Manager Regular Expression Bypass Remote Code Execution Vulnerability Audit Report
2026-07-04 2026-07-04 9 字 1 分钟

DedeCMS File Manager Regular Expression Bypass Remote Code Execution Vulnerability Audit Report

This content is encrypted, please enter the password to view.
QCMS tableField_Action Backend SQL Injection Vulnerability White-box Audit Report
2026-07-04 2026-07-04 9 字 1 分钟

QCMS tableField_Action Backend SQL Injection Vulnerability White-box Audit Report

This content is encrypted, please enter the password to view.
Z0Scan架构解析：从指纹到二级参数解析的实践
2025-11-28 2026-07-04 762 字 3 分钟

Z0Scan架构解析：从指纹到二级参数解析的实践

星河虽存永夜，与你便是长明。
Z0Scan设计与实现：通用插件与分布式扫描新思路
2025-11-28 2026-07-04 1.2k 字 5 分钟

Z0Scan设计与实现：通用插件与分布式扫描新思路

解铃还须系铃人