| 2018-09-22 | JavaEE论坛2.0审计记录 | ch1st | 5450 | |
| 2018-09-21 | Hijack the Google Login flow (Bug Bounty Submission) | re4lity | 2595 | |
| 2018-09-21 | 传真机攻击面研究 | re4lity | 5755 | |
| 2018-09-21 | CAT基于Java开发的实时应用监控平台，包括实时应用监控，业务监控 | re4lity | 6132 | |
| 2018-09-21 | AFL-based Java fuzzers and the Java Security Manager | re4lity | 2244 | |
| 2018-09-21 | NUUO摄像头最新高危漏洞预警(CVE-2018-1149) | BaCde | 4241 | |
| 2018-09-19 | JavaMelody组件XXE漏洞解析 | re4lity | 5033 | |
| 2018-09-19 | When EL Injection meets Java Deserialization | re4lity | 2654 | |
| 2018-09-19 | Intercepting and Modifying responses with Chrome via the Devtools Protocol | re4lity | 2564 | |
| 2018-09-19 | A Tale of Two Bugs · Our Machinery | re4lity | 1933 | |
| 2018-09-19 | XSS Vulnerabilities in Multiple iFrame Busters Affecting Top Tier Sites | re4lity | 2318 | |
| 2018-09-19 | Peekaboo Critical Vulnerability in NUUO Network Video Recorder | re4lity | 1660 | |
| 2018-09-19 | Cheatsheet - Flask & Jinja2 SSTI | re4lity | 2848 | |
