-
# 每日安全资讯（2023-07-19）
- HackerOne Hacker Activity
- [ ] [RDoc::MethodAttr is vulnerable to Regular Expression Denial of Service (ReDoS)](https://hackerone.com/reports/1378706)
- [ ] [Arbitrary fil…
-
# 每日安全资讯（2023-07-09）
- HackerOne Hacker Activity
- [ ] [RCE via npm misconfig -- installing internal libraries from the public registry](https://hackerone.com/reports/1374507)
- SecWiki News
- [ …
-
# 每日安全资讯（2023-08-06）
- 90Sec - 最新话题
- [ ] [这可能是缅甸诈骗网站网段](https://forum.90sec.com/t/topic/2285)
- HackerOne Hacker Activity
- [ ] [Waketime Payment Gateway Vulnerability](https://hackerone.com/rep…
-
# 每日安全资讯（2023-08-12）
- HackerOne Hacker Activity
- [ ] [fs.mkdtemp() and fs.mkdtempSync() are missing getValidatedPath() checks.](https://hackerone.com/reports/2037887)
- [ ] [Permission model by…
-
# 每日安全资讯（2023-06-02）
- HackerOne Hacker Activity
- [ ] [Any one can view collaborater email address via path /reports//participants](https://hackerone.com/reports/1918362)
- 先知安全技术社区
- [ ] [bypas…
-
**Describe the bug**
In Google Collab, error encountered towards the end of the pip install of collected packages
```
Installing collected packages: sgmllib3k, sentencepiece, phonenumbers, mmh3, ur…
samqi updated
10 months ago
-
# 每日安全资讯（2023-08-15）
- HackerOne Hacker Activity
- [ ] [HTML injection on newsroom.snap.com/* via search?q=1](https://hackerone.com/reports/2018615)
- [ ] [Path traversal allows tricking the Talk…
-
# 每日安全资讯（2023-06-06）
- SecWiki News
- [ ] [SecWiki News 2023-06-05 Review](http://www.sec-wiki.com/?2023-06-05)
- HackerOne Hacker Activity
- [ ] [DOS via cache poisoning on [developer.mozilla.or…
-
One of our most common points of feedback received from site owners when we probed them on additional data integrations was the desire to showcase open positions on their sites.
Currently we lack any…
-
# 每日安全资讯（2023-06-30）
- paper - Last paper
- [ ] [GeoServer SQL 注入漏洞分析（CVE-2023-25157）](https://paper.seebug.org/2087/)
- Sploitus.com Exploits RSS Feed
- [ ] [Exploit for Code Injection in Vmware…