| 2018-09-19 | hide-and-seek-tracking-nso-groups-pegasus-spyware-to-operations-in-45-countries | tolive | 2409 | |
| 2018-09-19 | Web安全实战系列：文件包含漏洞 | walk | 9443 | |
| 2018-09-19 | JavaMelody组件XXE漏洞解析 | re4lity | 4898 | |
| 2018-09-19 | When EL Injection meets Java Deserialization | re4lity | 2570 | |
| 2018-09-19 | Intercepting and Modifying responses with Chrome via the Devtools Protocol | re4lity | 2494 | |
| 2018-09-19 | A Tale of Two Bugs · Our Machinery | re4lity | 1901 | |
| 2018-09-19 | XSS Vulnerabilities in Multiple iFrame Busters Affecting Top Tier Sites | re4lity | 2227 | |
| 2018-09-19 | Peekaboo Critical Vulnerability in NUUO Network Video Recorder | re4lity | 1575 | |
| 2018-09-19 | Cheatsheet - Flask & Jinja2 SSTI | re4lity | 2738 | |
| 2018-09-19 | hack the box - web题解 | 梁小武 | 5857 | |
| 2018-09-19 | indictment-of-north-korean-regime-backed-programmer | tolive | 6475 | |
| 2018-09-19 | lynis插件编写：从入门到放弃 | 梁小武 | 4747 | |
| 2018-09-19 | 基于Redis未授权访问的挖矿蠕虫分析 | 冷漠 | 4824 | |
