| 2018-12-27 | Detecting Use of SandboxEscaper’s “MsiAdvertiseProduct” 0-day PoC | tolive | 2202 | |
| 2018-12-27 | unpacking-grey-energy-malware | tolive | 1829 | |
| 2018-12-27 | empirecms最新版(v7.5)后台多处getshell分析 | ph0en1xer | 1902 | |
| 2018-12-27 | 利用Web应用中隐藏的文件夹和文件获取敏感信息 | ph0en1xer | 2062 | |
| 2018-12-27 | Übersicht的远程命令执行漏洞和能接管Spotify的漏洞--关于本地web服务的安全 | ph0en1xer | 2019 | |
| 2018-12-27 | XIAO CMS审计 | ph0en1xer | 1917 | |
| 2018-12-26 | Nuxeo 认证绕过和RCE漏洞（CVE-2018-16341)分析 | 4sec | 2663 | |
| 2018-12-26 | macro-malware-again | tolive | 1629 | |
| 2018-12-26 | rwctf2018-magic-tunnel | tolive | 2117 | |
| 2018-12-26 | #DFIR: "UserNotPresent", When does Windows understand that the user is not prese | tolive | 1961 | |
| 2018-12-24 | PrestaShop 后台远程代码执行漏洞分析 (CVE-2018-19126) | iss_ss | 5009 | |
| 2018-12-21 | 第九届SWPUCTF官方writeup | rest | 3252 | |
| 2018-12-15 | phpMyAdmin 4.8.0~4.8.3 Transformation 任意文件包含漏洞 | ambulong | 6933 | |
