altEr

There is a deserialization vulnerability that can cause RCE

1

The author sets a fixed key in the com.kalvin.kvf.common.shiro.ShiroConfig file and uses this key to encrypt the rememberMe parameter in the cookie. This situation can cause a deserialization attack with...

用户新增共识能否使用go语言

2

FISCO BCOS的共识机制是可插拔的，那么用户可以将其他共识移植到FISCO BCOS上。由于其他区块链上的共识大多使用go语言编写，但是FISCO BCOS大部分都是使用C++开发的，请问能否使用go编写共识，然后移植到FISCO BCOS上呢？

This project has file upload function. The corresponding code for this function is located in com.liuyanzhao.sens.web.controller.admin#upload ``` @PostMapping(value = "/upload", produces = {"application/json;charset=UTF-8"}) @ResponseBody @SystemLog(description = "上传文件", type = LogTypeEnum.ATTACHMENT)...

This project has file upload function. The corresponding code for this function is located in com.liuyanzhao.sens.web.controller.admin#upload ``` @PostMapping(value = "/upload", produces = {"application/json;charset=UTF-8"}) @ResponseBody @SystemLog(description = "上传文件", type = LogTypeEnum.ATTACHMENT)...

This project allows for user registration. Audit the source code of registered users, the code location is com.liuyanzhao.sens.web.controller.admin#getRegister The getRegister() method calls the userService.insert() method. The insert() method calls the...

This project allows admin users or authors to publish articles with the corresponding code location at com.liuyanzhao.sens.web.controller.admin#pushPost. After audit, it can be found that when the user is an administrator...

This project allows new users to register. New users are only allowed to post articles and need to be reviewed by an administrator. This function is implemented in the project...

The author has set a fixed key in the com.hope.shiro.config.ShiroConfig under the hope-admin package and uses this key to encrypt the rememberMe parameter in the cookie. This situation can lead...