| 2019-03-20 | Discovering a zero day and getting code execution on Mozilla's AWS Network | re4lity | 2272 | |
| 2019-03-18 | OUTLOOK.COM 存储型XSS漏洞挖掘 | mimblewimble | 3192 | |
| 2019-03-18 | Markdown协作平台HackMD的蠕虫型XSS | BaCde | 3291 | |
| 2019-03-13 | 劫持 Chrome 会话以绕过多因素认证 | mimblewimble | 2153 | |
| 2019-03-13 | 利用WebSocket跨站劫持（CSWH）漏洞接管帐户 | BaCde | 2076 | |
| 2019-03-12 | Attack Spring Boot Actuator via jolokia Part 1 | re4lity | 3673 | |
| 2019-03-12 | Metinfo利用sql注入快速getshell | BaCde | 3178 | |
| 2019-03-12 | Escalating SSRF to RCE | re4lity | 1950 | |
| 2019-03-12 | XSS in Limited Input Formats | re4lity | 2108 | |
| 2019-03-12 | Inserting arbitrary files into Google Earth Projects Archives | re4lity | 1979 | |
| 2019-03-12 | NAVEX->Precise and Scalable Exploit Generation for Dynamic Web Applications | re4lity | 3210 | |
| 2019-03-12 | .NET高级代码审计（第二课） Json.Net反序列化漏洞 | re4lity | 2661 | |
| 2019-03-11 | 绕过 WAF 的 XSS 检测机制研究 | mimblewimble | 2420 | |
