| 2018-03-13 | uxss-db: Universal Cross-site Scripting DB [+ other browser vulnerabilities] | ourren | 1828 | |
| 2018-03-13 | MongoDB_AutoDump: 快速探测未授权MongoDB数据库结构 | ourren | 2339 | |
| 2018-03-13 | 从S2-052补丁分析Xstream反序列化漏洞修复方案 | 格格 | 5216 | |
| 2018-03-12 | 在CI中实现持续Web安全扫描 | ourren | 1677 | |
| 2018-03-12 | 敏信审计系列之DWR开发框架 | 4sec | 8743 | |
| 2018-03-12 | 知识图谱系列（1）基础知识简介 | re4lity | 4163 | |
| 2018-03-12 | Web日志安全分析系统实践 | myndtt | 6166 | |
| 2018-03-11 | PHP SSRF Techniques - How to bypass filter_var(), preg_match() and parse_url() | re4lity | 5138 | |
| 2018-03-11 | How I found a $5,000 Google Maps XSS (by fiddling with Protobuf) | re4lity | 2260 | |
| 2018-03-11 | Getting any Facebook user's friend list and partial payment card details | re4lity | 2842 | |
| 2018-03-11 | EasySNS_V1.6远程图片本地化导致Getshell | Bypass | 6587 | |
| 2018-03-11 | ThinkSNS_V4 后台任意文件下载导致Getshell | Bypass | 6603 | |
| 2018-03-10 | TOMCAT安全测试概要 | ourren | 1997 | |
