Niu Zhi

Results 13 issues of Niu Zhi

CMS log leak Current login user name and User permission information。 ![image](https://user-images.githubusercontent.com/33443724/91814052-26344300-ec66-11ea-85b1-a3cf3a9c484b.png)

Location:cms后台登陆,系统设置->用户管理->添加用户->登录名 ![image](https://user-images.githubusercontent.com/33443724/91813216-ee78cb80-ec64-11ea-9923-c4922149172a.png) POC:登录名:alert("hack123") ![image](https://user-images.githubusercontent.com/33443724/91813528-6fd05e00-ec65-11ea-9a67-8ea3a218cfb2.png) 后台代码未进行输入过滤: @RequestMapping(value = "insert/") @ResponseBody public ResponseMsg insertUser(User user){ user.setPassword(MD5Util.getMD5(user.getPassword())); return userService.insertUser(user); }

Hello, I'm reading the source code of joern now, but need a lot of questions, can you provide me how to implement the source code architecture of joern? Or joern's...

1.file: cms/cmscontrib/AddAdmin.py function:add_admin Log information disclosure username and password ![image](https://user-images.githubusercontent.com/33443724/90230650-72048100-de4c-11ea-9aa3-6f7b1eb62e2e.png)

bug
cli

Hello, I run "docker exec -it bblfshd bblfshctl parse /run/media/tarpit-c-master/python.py" command,ast not output,why? ![image](https://user-images.githubusercontent.com/33443724/101332772-b65ed580-38b0-11eb-8270-4a9eff564d6b.png)

Hi: I am using kubebuilder to develop webhooks to monitor the behavior of pods. The documents I refer to are the following linked documents(https://medium.com/trendyol-tech/getting-started-to-write-your-first-kubernetes-admission-webhook-part-2-48d0b0b1780e), and the final deployment is successful,...

lifecycle/rotten

ccbr tool join in opa ecosystem update code file: docs/website/data/integerations.yaml Author:Niu Zhi

waiting-for-response

Hello author, I am very interested in the stateright project, especially its model checker, and I have also tried it. I personally think that Rust is easier to use than...

Hello, I am using progressbar to build an application. At the same time, I have also introduced the kotlin-compiler package into my project. When using ProgressBar to build the terminal,...

jline

Consult how pgo packages the application into a jar file. what command to use。thanks