octopus

octopus copied to clipboard

In `HtxkEmsm/HtxkEmsm-framework/src/main/java/com/htxk/ruoyi/framework/config/ShiroConfig.java` we can find a fixed key and uses this key to encrypt the rememberMe parameter in the cookie. It will cause deserialization vulnerability  I set up a...

lip2eye

[](https://infosecwriteups.com/want-to-take-over-the-java-ecosystem-all-you-need-is-a-mitm-1fc329d898fb) --- This is a security fix for a high severity vulnerability in your [Apache Maven](https://maven.apache.org/) `pom.xml` file(s). The build files indicate that this project is resolving dependencies over HTTP...

JLLeitschuh

注册页的跳转是#，我应该改成上面才能跳转过去注册，还有数据里面的账号密码是统一的吗，是多少呀

MZY888

无法登录

2

数据库密码是加密的怎么办

guugvjojggii

00:04:35.577 [restartedMain] INFO o.a.c.c.AprLifecycleListener - [log,173] - The APR based Apache Tomcat Native library which allows optimal performance in production environments was not found on the java.library.path: [/Users/jonathan/Library/Java/Extensions:/Library/Java/Extensions:/Network/Library/Java/Extensions:/System/Library/Java/Extensions:/usr/lib/java:.] 00:04:35.617 [restartedMain]...

laisx