| 2019-03-20 | Discovering a zero day and getting code execution on Mozilla's AWS Network | re4lity | 2147 | |
| 2019-03-18 | OUTLOOK.COM 存储型XSS漏洞挖掘 | mimblewimble | 3126 | |
| 2019-03-18 | Markdown协作平台HackMD的蠕虫型XSS | BaCde | 3129 | |
| 2019-03-13 | 劫持 Chrome 会话以绕过多因素认证 | mimblewimble | 2079 | |
| 2019-03-13 | 利用WebSocket跨站劫持（CSWH）漏洞接管帐户 | BaCde | 2012 | |
| 2019-03-12 | Attack Spring Boot Actuator via jolokia Part 1 | re4lity | 3491 | |
| 2019-03-12 | Metinfo利用sql注入快速getshell | BaCde | 3030 | |
| 2019-03-12 | Escalating SSRF to RCE | re4lity | 1866 | |
| 2019-03-12 | XSS in Limited Input Formats | re4lity | 2035 | |
| 2019-03-12 | Inserting arbitrary files into Google Earth Projects Archives | re4lity | 1846 | |
| 2019-03-12 | NAVEX->Precise and Scalable Exploit Generation for Dynamic Web Applications | re4lity | 3108 | |
| 2019-03-12 | .NET高级代码审计（第二课） Json.Net反序列化漏洞 | re4lity | 2561 | |
| 2019-03-11 | 绕过 WAF 的 XSS 检测机制研究 | mimblewimble | 2314 | |
