Hack All Sec 的博客Jan AFR/AFD vulnerability
IntroduceJan is an open source alternative to ChatGPT that runs 100% offline on your computer. Multiple engine support (llama.cpp, TensorRT-LLM).Vendor of the product(s)Official websiteGitHubVulnerabi
Jan Arbitrary File Upload vulnerability
IntroduceJan is an open source alternative to ChatGPT that runs 100% offline on your computer. Multiple engine support (llama.cpp, TensorRT-LLM).Vendor of the product(s)Official websiteGitHubVulnerabi
Hillstone Next Generation FireWall XSS(CVE-2023-46964)
Discoverer：NHPTIntroduceThe next generation firewall of Shanshi Network Technology is an intrusion prevention technology based on deep application, protocol detection, and attack principle analysis. I
Zentao Authorized XSS Vulnerability(CVE-2023-46491)
ZentaoPMS IntroduceZentaoPMS (Zen Project Management System) is an open source project management and collaboration tool designed to help teams better plan, track, and complete projects. It is a profe
禅道后台命令注入漏洞（CVE-2023-44827）
来自团队成员的投稿之前在做禅道企业版测试时，发现一个很有意思的点，奈何客户环境不允许， 所以回去之后使用官方友好的“一键安装包”浅试一下：项目下载地址：https://www.zentao.net/dl/zentao/biz8.7/ZenTaoPMS-biz8.7-zbox_amd64.tar.gz漏洞描述Zentaopms 企业版和旗舰版存在后台命令注入漏洞，允许恶意用户执行 shell 脚本。