| 2018-09-24 | Discovering GraphQL endpoints and SQLi vulnerabilities | ourren | 1478 | |
| 2018-09-23 | 智能合约审计现状总结 | ourren | 2198 | |
| 2018-09-21 | Hijack the Google Login flow (Bug Bounty Submission) | re4lity | 2702 | |
| 2018-09-21 | 传真机攻击面研究 | re4lity | 6113 | |
| 2018-09-21 | AFL-based Java fuzzers and the Java Security Manager | re4lity | 2344 | |
| 2018-09-21 | NUUO摄像头最新高危漏洞预警(CVE-2018-1149) | BaCde | 4388 | |
| 2018-09-19 | ⼀个通杀绝⼤多数交易平台的 XSS 0day 漏洞 | ourren | 2727 | |
| 2018-09-19 | JavaMelody组件XXE漏洞解析 | re4lity | 5138 | |
| 2018-09-19 | When EL Injection meets Java Deserialization | re4lity | 2719 | |
| 2018-09-19 | A Tale of Two Bugs · Our Machinery | re4lity | 2001 | |
| 2018-09-19 | XSS Vulnerabilities in Multiple iFrame Busters Affecting Top Tier Sites | re4lity | 2424 | |
| 2018-09-19 | Peekaboo Critical Vulnerability in NUUO Network Video Recorder | re4lity | 1753 | |
| 2018-09-18 | MS08-067利用代码技巧简析 | ourren | 3273 | |
