J0o1ey

Zfaka Backend RCE(All version)

2

in the background file upload, Zfaka only has one JS check in \public\res\layui\lay\modules\upload.js there is no filtering for the file extension, and there is only one front-end JS verification, So...

In zfaka version 1.4.3, /application./modules/product/admin/Controllers/product/imgurlajax.php involed a SQL injection Vuln Found the following paragraph  PDO is the default configuration, and stack injection is immediately thought of After testing, the...

[BUG]感谢作者分享，发现脚本无法正常使用

4

在TamperMonkey中加载脚本后 devtools console中提示如下信息  请问如何解决

Dockerfile install wrong

1

Thereis a bug in dockerfile,Result in this error Is there any solution to solve it?

Can CodeQL add support for YAML configuration files parse on java lib?

1

During the process of auditing a Java project using CodeQL I discovered that Spring Boot 3 uses YAML as its configuration file format. However, it seems that the CodeQL Java...